What’s new in 0.28.0

A checkbox or radio that a site styles away (a one-pixel input, a box drawn by its label, an input parked off the left edge of the page) now appears in the page map and is pressed where a person presses it: on the box its label draws. A text field under a floating label takes its text instead of being refused as covered.

choose picks in the open list and confirms with Enter, fill_form picks an option the same way, and the result follows the option that landed, not its old number.

A number field shows the value you typed. A field's remembered type no longer carries over from one site to the next, so an e-mail field is not called a password field. A one-time code typed into single-character boxes arrives exactly, and frames without an area no longer use up the frames a read covers.

A token in the page address is censored and reported: a JWT, and an opaque one-time token under a name such as token, emailToken, confirm_string or access_token. Test and state parameters of a sign-in redirect stay readable.

A wait step reads again only after the page has moved. OpenAI models are called through the Responses interface so tools work. An agent sees the trash of whole tables and restores one. The Notify block promises only what it sends: e-mail.

Creating a profile is locked across processes. The wake list no longer offers the automatic Windows sign-in. Code steps do not start before Windows 11 while that case is unmeasured.