0.3.0 → 1.2.0 (2026-03-01 → 2026-06-11)

The extension lets contributors submit signals to Hybrid War Tracker from Chrome and Firefox.
Across this range it was rebuilt from scratch (at 1.0.0) on the same WXT + TypeScript + React + Zod
framework, ending as a focused, hardened, submission-only extension.

Starting point (0.3.0): WXT-based extension for Chrome/Firefox on the new /v1/ submission API,
with install_id tracking, anonymous submissions, and a first-install welcome page.

Added / Improved

• Signal vs. Library routing — submissions go to the right destination by content type.
• Direct one-click submit with per-tab badge feedback and a Terms-of-Service gate.
• Popular-tag suggestions from /v1/tags, comma-paste tag entry, and tag chips.
• Redesigned popup, dedicated settings page, sticky save bar with an unsaved-changes guard.
• Onboarding with pseudonym flow, ToS v3, and accurate privacy/AMO disclosures.
• Notes field wired to user_annotations.notes.
• Vitest unit tests added alongside Playwright E2E.

Changed

• Rebuilt from scratch on the same WXT + TS + React + Zod stack (1.0.0) as a much smaller codebase.
• Dependencies modernized: TypeScript 6, Zod 4, React 19 (from TS 5.7 / Zod 3).
• Single-source version; per-build provenance tokens (getBuildMeta).
• Terminology: "Queued" → "Submitted".

Removed

• In-browser archive capture — MHTML/WACZ capture, full-page screenshots, the bulk-archive page,
  offline queue, and submission history. Archiving moved server-side.
• The legacy needs_archive submission path.

Security & Hardening

• CSP default-src lockdown, submit URL allowlist, credentials: omit on every fetch (no cookie leak).
• Validated submit payloads and popular-tags responses; converged the install_id write race.
• Consent captured before persistence; backend details hidden from user-facing errors.
• CVE/Dependabot fixes (picomatch ReDoS, mermaid XSS, plus ongoing dependency patches).
• Hardened install: pnpm --ignore-scripts, vendored pins, CI deploy gates.

UI/UX fixes
Removed unnecessary scrollbar
Settings page moved to new:tab