ClawMark v1.0.1

[1.0.1] — 2026-03-26

✨ 新增

• Dashboard About 页 + Extension popup 版本信息显示（client/server version + commit + buildTime）
• Extension popup 常驻「Open Settings」入口（登录状态下不再隐藏）

📥 下载

环境	链接
Production	clawmark-v1.0.1-production.zip
Test	clawmark-v1.0.1-test.zip

v0.8.0 — Security hardening + deployment fixes

Changes

Security Hardening

• AES-256-GCM credential encryption at rest
• Multer CVE fix (file upload validation)
• Helmet security headers
• SSRF protection for webhook URLs
• V1 API endpoints now require JWT authentication

Bug Fixes

• Dashboard refresh loop fix (GL#33)
• dispatch_log migration crash on fresh install
• Phase 1 cleanup now runs once via migrations table (GL#34)
• Test suite updated for app_id validation (514/514 pass)

Deployment

• Dual extension builds: test + production configs
• Dashboard deployment docs

⚠️ Breaking Change

V1 endpoints (/api/v1/*) now require JWT authentication. Clients using V1 without auth headers will receive 401.

Downloads

• Test extension: clawmark-v0.8.0-test.zip (→ jessie.coco.site test server)
• Production extension: clawmark-v0.8.0-production.zip (→ api.coco.xyz production server)

v0.7.1

v0.7.1 — Dashboard Extension Conflict Fix

• Fix: exclude Dashboard URLs from content script injection (manifest exclude_matches)
• Fix: runtime guard in inject.js to skip Dashboard pages
• Fix: widen exclude pattern to cover bare Dashboard URLs

v0.7.0 — Dashboard URL fix, CORS support, signout style

Changes since v0.6.9

• fix: Correct dashboard URLs in OPEN_OPTIONS_PAGE handler — was constructing from serverUrl, now uses ClawMarkConfig.DASHBOARD_URL (#29)
• fix: Align all fallback dashboard URLs to /clawmark/dashboard (was /clawmark/dash/)
• fix: Soften signout button from btn-danger to btn-ghost (#31)
• fix: Add CORS support for cross-origin Dashboard access
• docs: Deployment guide updates (CORS section, COCO env config)

Download

• clawmark-v0.7.0.zip

ClawMark v0.6.9

What's New

• GL#27 Dashboard layout: account info → sidebar bottom, connection card promoted to Overview top
• GL#24 Popup GitLab Issue quick-add
• GL#28 README overhaul: GitLab-primary links, new tab structure, adapter examples
• GL#26 Quick Start: data flow diagram + routing rules documentation
• Version badge updated to 0.6.9
• Dead CSS cleanup

Downloads

• clawmark-v0.6.9-test.zip — Test build (localhost server)
• clawmark-v0.6.9-production.zip — Production build (clawmark.coco.xyz server)

Previous Releases

• v0.6.8: Auth system (9 types), OAuth Client ID cleanup, .env removed from git
• v0.6.7: GitLab Issue delivery+auth, popup auth selector, Dashboard 3-tab layout

GitLab Release: https://git.coco.xyz/hxanet/clawmark/-/releases/v0.6.9

v0.6.4

ClawMark v0.6.4

Added

• Data isolation Phase 1+2 (#188): per-user app_id, ownership checks, V1 Deprecated+Sunset 2026-06-01
• Version check + update banner in popup (#2)
• Dashboard Overview global stats + clickable drill-down (#7)

Fixed

• Dispatch graceful degradation for label 403 (#189)
• URL hash persistence — refresh keeps current tab (#9)

Docs

• Data isolation + delivery auth tech design doc
• Release process scripts + templates (#3)

v0.6.2 — Login Refresh Hotfix

Fix

• Prevent Google OAuth popup from re-triggering on every page refresh
• history.replaceState cleans ?login=1 URL param immediately after use
• Auth state check skips OAuth if already logged in

Full Changelog: v0.6.1...v0.6.2

ClawMark v0.6.3

What's New

Phase 1.5 — Annotation Overlay Enhancements

• Draggable + resizable annotation overlay with position memory
• Toolbar overflow menu for additional tools
• Custom tags with localStorage persistence
• Submit progress indicator
• Event listener cleanup to prevent accumulation

Phase 2 — Welcome Page + Badge Count

• Welcome page on first install
• Badge count on browser action icon (auto-updates on tab/page load)

Phase 3 — UX Polish

• Friendly error messages (network/auth/server → human-readable Chinese)
• Indeterminate progress bar during submission
• One-time shortcut tip banner after first annotation
• Site management overhaul: blacklist/whitelist mode toggle, manual site addition, bulk clear with confirmation

Maintenance

• Version bump to 0.6.3

Full Changelog: v0.6.2...v0.6.3

v0.6.1 — UX Overhaul

What's New

Complete UX overhaul of the ClawMark Chrome extension.

Phase 1 — Dashboard + Popup Redesign

• Redesigned popup with delivery destination at top
• New dashboard layout with improved navigation

Phase 1.5 — Annotation Window Overlay

• Draggable/resizable annotation overlay
• Event listener cleanup + resize cap

Phase 2 — Welcome Page + Badge Count

• New welcome/onboarding page
• Badge count on extension icon

Phase 3 — Polish

• Error UX improvements
• Loading progress indicators
• Keyboard shortcut tips
• Site mode toggle

Full Changelog: v0.6.0...v0.6.1

v0.6.0 — Smart Dispatch & Screenshot AI

What's New

Smart Dispatch & Tracking (#115, #93)

• Dispatch badges in side panel — see where each issue was delivered (GitHub, Telegram, etc.)
• Dispatch details — expand to see target type, status, and direct link
• Multi-target dispatch framework — configure delivery to multiple targets simultaneously
• Delivery settings panel in extension popup (#106)

New Adapters (#94, #95)

• Linear, Jira, HxA Connect, Slack, Email adapters

Screenshot AI (#117)

• Gemini Vision-powered screenshot understanding
• AI analyzes screenshots to provide context for issues

UX Improvements (#111)

• Draggable annotation layer for screenshot mode
• Improved screenshot capture workflow

Other

• Fixed extension key for stable CWS identity
• Default server URL updated to api.coco.xyz/clawmark
• 513 tests passing

Install

Download clawmark-v0.6.0.zip, unzip, load in chrome://extensions (developer mode).