release: v1.1.0

Features:
- DuckDuckGo search fallback in URL bar
- Back/Forward/Refresh navigation buttons
- Persistent bookmarks (star toggle, dropdown, max 50)
- Window title from page title (MutationObserver + polling)
- Config file backup (.bak) before each write
- Periodic geometry auto-save (every 30s)
- Clear site data (cookies, localStorage, sessionStorage)

Cleanup:
- Removed unused deps (directories, webview2-com)
- Removed dead config fields (audio_device_id, launch_at_startup)
- eprintln → tracing warn/error
- Fixed error page regex for smart quotes

Generated with Crush

Assisted-by: GLM-5.1 via Crush <crush@charm.land>

Author: davidtorcivia

AGENTS.md

@@ -4,14 +4,14 @@ Guide for AI agents working on the FloatView codebase.
 
 ## Project Overview
 
-FloatView is a Tauri v2 application that provides a floating browser window for streaming media on secondary monitors. Key features include always-on-top, borderless resizable window, opacity control, and click-through mode.
+FloatView is a Tauri v2 application that provides a floating browser window for streaming media on secondary monitors. Key features include always-on-top, borderless resizable window, opacity control, click-through mode, persistent bookmarks, navigation controls, smart URL bar with DuckDuckGo search, window title tracking, crash recovery (config backup + periodic geometry auto-save), and clear site data.
 
 ## Tech Stack
 
 - **Runtime**: Tauri v2 (Rust backend)
 - **Rendering**: WebView2 (system webview on Windows)
 - **Frontend**: Vanilla HTML/JS (minimal, injected Shadow DOM)
-- **Plugins**: single-instance, global-shortcut, shell, tray-icon
+- **Plugins**: single-instance, global-shortcut, shell, tray-icon, log
 
 ## Prerequisites
 
@@ -26,6 +26,7 @@ npm install         # Install dependencies
 npm run dev         # Development mode with hot reload
 npm run build       # Build production release
 cd src-tauri && cargo check  # Type-check Rust only
+cd src-tauri && cargo test   # Run unit tests (5 tests)
 ```
 
 ## Project Structure
@@ -91,13 +92,52 @@ The drag bar uses `-webkit-app-region: drag` for native WebView2 drag handling.
 
 ## Key Patterns
 
+### Tauri Commands (IPC)
+
+| Command | Purpose | File |
+|---------|---------|------|
+| `navigate_url` | Navigate to a URL | `main.rs:680` |
+| `navigate_home` | Navigate to home URL | `main.rs:751` |
+| `toggle_always_on_top` | Toggle pin state | `main.rs` |
+| `toggle_locked` | Toggle click-through | `main.rs` |
+| `set_opacity` | Set window opacity | `main.rs` |
+| `minimize_window` | Minimize window | `main.rs` |
+| `get_config` | Read current config | `main.rs` |
+| `update_config` | Update config fields | `main.rs` |
+| `set_home_url` | Set the home page URL | `main.rs` |
+| `clear_recent_urls` | Clear recent URL list | `main.rs` |
+| `clear_bookmarks` | Clear all bookmarks | `main.rs` |
+| `clear_site_data` | Clear cookies/storage then reload | `main.rs` |
+| `set_window_title` | Set window title (truncated to 256 chars) | `main.rs:702` |
+| `add_bookmark` | Add URL to bookmarks (dedup, max 50) | `main.rs:718` |
+| `remove_bookmark` | Remove URL from bookmarks | `main.rs:736` |
+
+All commands require an auth token (`token` param) via `authorize_command()`.
+
+### Config Struct (`config.rs`)
+
+```rust
+pub struct AppConfig {
+    pub window: WindowConfig,       // x, y, width, height, monitor, always_on_top, opacity, locked
+    pub last_url: Option<String>,
+    pub recent_urls: Option<Vec<String>>,
+    pub hotkeys: HotkeyConfig,
+    pub home_url: String,
+    pub first_run: bool,
+    pub auto_refresh_minutes: u32,
+    pub bookmarks: Vec<String>,     // new in v1.1
+}
+```
+
 ### Adding a Tauri Command
 
 1. Add function with `#[tauri::command]` attribute in `main.rs`
 2. Add to `invoke_handler!` macro
 3. Add required permissions in `capabilities/default.json`
 4. Call from JS via `invoke('command_name', { args })`
 
+All commands must accept a `token: String` parameter and call `authorize_command(&state, &token, "command_name")?`.
+
 ### Adding a Global Hotkey
 
 1. Add to `HotkeyConfig` in `config.rs`
@@ -112,6 +152,24 @@ Edit `src-tauri/src/injection.js`. The script:
 - Uses `MutationObserver` to survive page DOM changes
 - Re-initializes on every navigation (guarded by `window.__floatViewInitialized`)
 
+Control strip layout (v1.1):
+```
+┌─────────────────────────────────────────────────────┐
+│ ← → ⟳ ★ [URL bar - DDG search fallback] 📌 🔒 ⚙ — ✕ │
+└─────────────────────────────────────────────────────┘
+```
+
+Buttons: back, forward, refresh, bookmark star (click toggle, right-click dropdown), always-on-top pin, lock, settings, minimize, close.
+
+Key injection.js features:
+- **URL bar**: DuckDuckGo search fallback for non-URL input
+- **Bookmarks**: Star toggle + right-click dropdown, fuzzy URL matching via `urlsMatch()`
+- **Navigation**: `history.back()`, `history.forward()`, `location.reload()`
+- **Title tracking**: MutationObserver + 2s polling → `set_window_title`
+- **URL tracking**: `popstate` + 3s polling for address bar sync
+- **Config sync**: `config-changed` event listener updates bookmarks in real-time
+- **Dropdown mutual exclusion**: recent/bookmarks/snap dropdowns dismiss each other
+
 ## Gotchas
 
 1. **Invoke, don't call window methods** -- `getCurrentWindow().method()` is unreliable from injected scripts. Always create a Rust command and use `invoke()`.
@@ -128,16 +186,30 @@ Edit `src-tauri/src/injection.js`. The script:
 
 7. **Single Instance** -- `tauri-plugin-single-instance` brings existing window to front if user launches again.
 
+8. **Config backup** -- `save_config()` creates a `.bak` copy before writing. Used for crash recovery.
+
+9. **Periodic geometry auto-save** -- Background thread saves window position/size every 30s (skips minimized/maximized). Prevents geometry loss on crash.
+
+10. **Bookmark limits** -- Max 50 bookmarks, deduplication by normalized URL, sanitized via `sanitize_config()`. 
+
+11. **Title truncation** -- `set_window_title` truncates titles >256 chars to prevent Win32 issues.
+
+12. **Logging** -- Uses `tracing` crate (`warn!`, `error!`) instead of `eprintln!` for structured logging.
+
 ## Testing
 
-No automated tests. Test manually:
+5 unit tests in `src-tauri/` (run via `cargo test`). Test manually:
 
 1. `npm run dev`
-2. Test URL navigation (landing page + control strip URL bar)
+2. Test URL navigation (landing page + control strip URL bar + DDG search fallback)
 3. Test always-on-top toggle (hotkey + tray + settings + strip button)
 4. Test opacity (hotkey + slider + settings)
 5. Test click-through mode (enter via hotkey, exit via hotkey AND tray menu)
 6. Test drag (from top bar), resize (from edges), minimize, close
 7. Test system tray (left-click show/hide, right-click menu items)
 8. Test persistence (close and reopen, verify state restored)
 9. Test on external pages (navigate to a real site, verify all controls still work)
+10. Test back/forward/refresh buttons work on navigated pages
+11. Test bookmark star (toggle on/off, right-click dropdown shows list)
+12. Test clear site data (Settings button, verify cookies/storage cleared)
+13. Test window title updates when navigating between pages

README.md

@@ -35,13 +35,17 @@ Open **Settings** (gear icon in the control strip, or right-click the tray icon)
 Move your mouse to the **top edge** of the window. A dark control strip slides down with all your controls:
 
 ```
- [Pin] [Recent] [Home] [________URL bar________] [Lock] [Snap] [Crop] | [Opacity] [Settings] [-] [x]
+ [←] [→] [⟳] [Pin] [Recent] [Home] [________URL bar________] [★] [Lock] [Snap] [Crop] | [Opacity] [Settings] [-] [x]
 ```
 
+- **Back** -- Go back in history
+- **Forward** -- Go forward in history
+- **Refresh** -- Reload the current page
 - **Pin** -- Toggle always-on-top
 - **Recent** -- Dropdown of your recent URLs
 - **Home** -- Navigate to your configured home URL
-- **URL bar** -- Shows current URL, type a new one and press Enter to navigate
+- **URL bar** -- Shows current URL, type a new one and press Enter to navigate (non-URL input searches DuckDuckGo)
+- **Bookmark (★)** -- Bookmark/unbookmark the current page (right-click to open bookmarks list)
 - **Lock** -- Toggle click-through mode (clicks pass through the window)
 - **Snap** -- Snap the window to a screen corner or center
 - **Crop** -- Crop and zoom into a region of the page
@@ -96,17 +100,23 @@ Press `Alt+Shift+D` to make the window completely transparent to mouse clicks --
 - **Adjustable Opacity** -- 10% to 100% transparency via slider or hotkeys
 - **Click-Through Mode** -- Window becomes invisible to mouse input
 - **Configurable Home URL** -- Set your default page; navigate back with the Home button
+- **Smart URL Bar** -- Enter a URL to navigate, or type a search query to search DuckDuckGo
+- **Bookmarks** -- Save favorite pages; star icon toggles bookmark, right-click for list
+- **Navigation Controls** -- Back, forward, and refresh buttons in the control strip
 - **First-Run Tutorial** -- Interactive onboarding for new users
 - **Borderless & Resizable** -- Clean look with native resize handles
 - **HDR Support** -- Uses system webview for correct HDR rendering (unlike Electron)
 - **Shadow DOM Control Strip** -- Injected UI that never breaks the page you're viewing
 - **Persistent State** -- Remembers window position, size, opacity, and last URL across restarts
+- **Crash Recovery** -- Geometry auto-saved every 30 seconds; config backed up on write
 - **System Tray** -- Minimize to tray, quick controls via right-click menu
 - **Global Hotkeys** -- Control everything without switching focus
 - **Single Instance** -- Opening FloatView again brings the existing window to front
 - **Snap to Corners** -- Quickly position the window at any screen corner or center
 - **Crop/Zoom** -- Select and zoom into a region of the page for focused viewing
 - **Auto-Refresh** -- Automatically reload the page on a configurable interval (1 min to 1 hour)
+- **Window Title** -- Title bar updates to match the current page
+- **Clear Site Data** -- Clear cookies, localStorage, and sessionStorage from settings
 - **In-App Updates** -- Check from Settings, install from tray menu
 - **Cross-Platform** -- Windows and macOS
 - **Tiny Footprint** -- ~3MB binary, uses system webview
@@ -136,6 +146,7 @@ You can edit the file directly to customize hotkeys or other settings:
   "home_url": "https://www.google.com",
   "first_run": false,
   "auto_refresh_minutes": 0,
+  "bookmarks": [],
   "hotkeys": {
     "toggle_on_top": "Alt+Shift+T",
     "toggle_locked": "Alt+Shift+D",
@@ -186,7 +197,7 @@ src/index.html              -- Landing page (URL input)
 src-tauri/src/main.rs       -- Rust backend (commands, hotkeys, tray, platform interop)
 src-tauri/src/config.rs     -- Config types with serde
 src-tauri/src/opacity.rs    -- Cross-platform opacity management
-src-tauri/src/injection.js  -- Shadow DOM control strip + tutorial (~1900 lines)
+src-tauri/src/injection.js  -- Shadow DOM control strip + tutorial (~2300 lines)
 ```
 
 ### Why not Electron?
@@ -207,7 +218,6 @@ Configuration files are stored separately and not removed by default:
 
 - **Click-through mode is invisible** -- The control strip hides; use hotkey or tray to exit
 - **Always-on-top vs fullscreen** -- Cannot overlay exclusive fullscreen games/apps
-- **No audio device routing** -- WebView's `setSinkId()` requires HTTPS origins
 - **macOS** -- Some global hotkey combinations may conflict with system shortcuts
 
 ## Privacy

designdoc.md

@@ -1,4 +1,4 @@
-# FloatView — Technical Design Document (v3)
+# FloatView — Technical Design Document (v3, updated for v1.1.0)
 
 ## Overview
 
@@ -196,7 +196,8 @@ The ideal path is the web-standard `setSinkId()` API on `HTMLMediaElement`. Chro
 - Minimize to tray
 - Quick access: toggle always-on-top, opacity, locked/unlocked mode
 - Recent URLs
-- Launch at startup option
+- Clear bookmarks
+- Clear site data
 
 ### 7. Global Hotkeys
 
@@ -222,18 +223,18 @@ The injected control strip is `position: fixed` at the top of the viewport. It d
 On hover (with ~500ms dwell during video playback to prevent accidental triggers), the strip expands to ~40px and reveals controls:
 
 ```
-┌──────────────────────────────────────────────┐
-│ 📌 192.168.1.XXX:8096/web/...    🔓 ⚙ — ✕   │  ← injected Shadow DOM strip
-├──────────────────────────────────────────────┤
-│                                              │
-│        (page content: Emby etc)              │
-│                                              │
-└──────────────────────────────────────────────┘
+┌──────────────────────────────────────────────────────────┐
+│ ← → ⟳ ★  [URL bar - DDG search fallback]  📌 🔒 ⚙ — ✕ │  ← injected Shadow DOM strip
+├──────────────────────────────────────────────────────────┤
+│                                                          │
+│              (page content: Emby etc)                    │
+│                                                          │
+└──────────────────────────────────────────────────────────┘
 ```
 
-Controls: always-on-top pin, URL display (click to edit), lock toggle, settings gear (audio, preferences), minimize, close.
+Controls: back, forward, refresh, bookmark star (click to toggle, right-click for dropdown list), always-on-top pin, URL display (click to edit, non-URL input searches DuckDuckGo), lock toggle, settings gear (audio, preferences, clear site data, clear bookmarks), minimize, close.
 
-Communication: injected JS calls `window.__TAURI__.invoke('command_name', { args })` to talk to the Rust backend. Tauri commands handle window manipulation, config persistence, audio device enumeration, etc.
+Communication: injected JS calls `window.__TAURI__.invoke('command_name', { args })` to talk to the Rust backend. Tauri commands handle window manipulation, config persistence, bookmark management, title updates, site data clearing, etc.
 
 ### Locked/Unlocked State Model (Click-Through)
 
@@ -300,18 +301,25 @@ Unsigned Windows binaries trigger SmartScreen warnings and may face friction in
   },
   "last_url": "http://192.168.1.XXX:8096",
   "recent_urls": [],
-  "audio_device_id": null,
-  "launch_at_startup": false,
+  "bookmarks": [],
+  "home_url": "https://www.google.com",
+  "first_run": true,
+  "auto_refresh_minutes": 0,
   "hotkeys": {
     "toggle_on_top": "Alt+Shift+T",
     "toggle_locked": "Alt+Shift+D",
     "opacity_up": "Alt+Shift+Up",
     "opacity_down": "Alt+Shift+Down",
-    "toggle_visibility": "Alt+Shift+H"
+    "toggle_visibility": "Alt+Shift+H",
+    "media_play_pause": "Alt+Shift+Space",
+    "media_next": "Alt+Shift+Right",
+    "media_previous": "Alt+Shift+Left"
   }
 }
 ```
 
+Config is backed up to `config.json.bak` before each write. Window geometry is auto-saved every 30 seconds (skipping minimized/maximized states) via a background thread to prevent geometry loss on crash.
+
 ## Development Phases
 
 ### Phase 0 — Spikes & Validation

package.json

@@ -1,6 +1,6 @@
 {
   "name": "floatview",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "A minimal floating browser window for streaming media on a secondary monitor",
   "scripts": {
     "tauri": "tauri",