# [1.12.0](v1.11.2...v1.12.0) (2026-05-26)

### Bug Fixes

* **save-modal:** break circular import to console-crane store ([ab00130](ab00130))
* **save-modal:** refetch bundle options so post-save chip shows title ([25499da](25499da))

### Features

* announce extension presence on dashboard origins for install nudge [#86](https://github.com/codebridger/subturtle-extension-apps/issues/86)exkh0z3 ([69dcf1b](69dcf1b)), closes [#86exkh0z3](https://github.com/codebridger/subturtle-extension-apps/issues/86exkh0z3)
* **console-crane:** practice + flashcard-preview pages, near-translation actions ([224b9da](224b9da))
* **practice-now:** emphasize practiced phrase + cover login flows ([8ff3408](8ff3408))
* **practice-now:** open config to logged-out users + clearer CTAs ([2f09e05](2f09e05))
* **practice-now:** voice session config + dashboard deep-link ([db1a3fc](db1a3fc))
* **save-modal:** chunk highlights, AI advice chat, bundle suggestion ([9954c22](9954c22))
* **save-modal:** in-field bundle chips with dirty-aware save + inline removal ([374cbb4](374cbb4))
* **save-modal:** per-chunk definitions, merged pronunciation, reorder save ([f766040](f766040))
* **saved-phrase:** DB-first lookup, reuse stored translation, no AI re-call ([1315cc8](1315cc8))

Unblocks cloud Claude agents (Claude Code on the Web) from developing on
the extension by adding a username/password login path that doesn't need
Google OAuth, plus a chrome-extension-tester-mcp config so the agent can
load the unpacked extension, drive the popup, and screenshot results.

The new email/password form in LoginView is build-flag gated by
ENABLE_PASSWORD_AUTH. Stable + dev release builds keep it off (form stays
hidden, real users continue to use OAuth); CCW + verify-job builds enable
it. The flow reuses the existing handleTokenLogin path so the JWT lands
in chrome.storage.sync["token"] indistinguishable from an OAuth token —
no downstream consumer (modular-rest client, profile store, translate
service, ConsoleCrane) sees the difference.

Coverage:
- tests/login-password.test.ts + login-password-disabled.test.ts —
  Vitest, form rendering / validation / success+failure paths.
- tests/e2e/password-login.spec.ts — Playwright, end-to-end against
  stubbed /user/login and /verify/token via the existing fixture.

The agent path uses only the MCP; tests/e2e/ stays the testing ground
and the two share no code. CLAUDE.md documents the one-time CCW setup
(network access, env vars, setup script) plus the curl + token-inject
sequence — including the gotcha that the password must be base64-encoded
in the /user/login body since modular-rest's client lib does this
internally and raw curl doesn't.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>