Enable media uploads in Instagram direct messages and improve decision server handling

.github/workflows/systray-build.yml

@@ -0,0 +1,82 @@
+name: WebBrain Companion
+
+on:
+  push:
+    branches: [main]
+    tags: ["systray-v*"]
+    paths:
+      - "webbrain-systray/**"
+      - ".github/workflows/systray-build.yml"
+  pull_request:
+    paths:
+      - "webbrain-systray/**"
+      - ".github/workflows/systray-build.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: webbrain-systray
+    env:
+      CGO_ENABLED: "0"
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: webbrain-systray/go.mod
+          cache-dependency-path: webbrain-systray/go.sum
+
+      - name: Vet and test
+        run: |
+          go vet ./...
+          go test ./...
+
+      - name: Install NSIS (Windows installer)
+        run: sudo apt-get update -qq && sudo apt-get install -y -qq nsis
+
+      - name: Install rcodesign (ad-hoc signs the macOS app on Linux)
+        run: |
+          curl -fsSL -o "$RUNNER_TEMP/rcodesign.tar.gz" \
+            "https://github.com/indygreg/apple-platform-rs/releases/download/apple-codesign%2F0.29.0/apple-codesign-0.29.0-x86_64-unknown-linux-musl.tar.gz"
+          tar -xzf "$RUNNER_TEMP/rcodesign.tar.gz" -C "$RUNNER_TEMP"
+          echo "RCODESIGN=$RUNNER_TEMP/apple-codesign-0.29.0-x86_64-unknown-linux-musl/rcodesign" >> "$GITHUB_ENV"
+
+      - name: Build packages
+        run: |
+          if [[ "$GITHUB_REF" == refs/tags/systray-v* ]]; then
+            export VERSION="${GITHUB_REF_NAME#systray-v}"
+          else
+            export VERSION="0.0.0-${GITHUB_SHA::7}"
+          fi
+          bash ./scripts/build.sh
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: webbrain-companion
+          path: webbrain-systray/dist/*
+          if-no-files-found: error
+
+  release:
+    if: startsWith(github.ref, 'refs/tags/systray-v')
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: webbrain-companion
+          path: dist
+
+      - name: Draft a GitHub release with the packages
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "$GITHUB_REF_NAME" dist/* --repo "$GITHUB_REPOSITORY" \
+            --draft --title "WebBrain Companion ${GITHUB_REF_NAME#systray-v}" --generate-notes

CHANGELOG.md

@@ -6,17 +6,28 @@ This changelog was generated from the repository Git history and release tags. V
 
 ## [Unreleased]
 
+## [42.4.0] - 2026-10-24
+
 ### Added
+- Cookie banners: Act and Dev runs decline cookie-consent banners automatically before the model looks at the page, so a banner no longer costs a step and the agent no longer accepts tracking to get past one. It uses DuckDuckGo's autoconsent rules, bundled locally (MPL-2.0) with a documented regular-expression security patch with no network requests, plus WebBrain's own rules for banners those miss (Efilli sites such as n11.com, migros.com.tr, teknosa.com and koton.com; hepsiburada.com; mediamarkt.com.tr) and autoconsent's reject-only heuristic for cookie popups no rule knows, with a WebBrain rule that does the same for Turkish banners until the heuristic reads Turkish. Settings → Advanced → **Cookie banners** can also turn it on for every website, or off. It never runs in CAPTCHA or bot-challenge frames, and banners it has no rule for still get the existing prompt guidance. See `docs/cookie-banners.md`.
 - Compass VLD Tiny v5, a new in-browser model for Chrome: one 2.2 GB WebGPU download that chats, reads screenshots and answers WebBrain's quick decision questions on your device, with no network once it is downloaded. It is WebBrain's fine-tune of MiniCPM-V-4.7-1B and the new default local model: the first-install guide's **Download local models** button downloads it, instead of D1 and Ternary Bonsai 2 2B Vision, and Apocalypse Mode's Text Model card and Providers → WebGPU list it first. Once, on the first start after the update, a WebGPU provider that was never set up moves to it when Compass Tiny v2.1, the previous default, was never downloaded on that device. Its files are fetched at a fixed revision and each is checked against a pinned size and SHA-256 before it is used; a dropped connection retries that file. Compass Tiny v2.1 and Ternary Bonsai 2 2B Vision stay available.
+- WebBrain Companion: a separate desktop app for using your existing model subscriptions or a local model from WebBrain. Its provider card connects to the app on this computer without an API key; load and select a model, save, and test the connection before activating it. The Providers page includes setup guidance and a download link. See `docs/providers-and-models.md` and `webbrain-systray/README.md`.
+- Longer generated videos with an OpenRouter video model: WebBrain can split a request into scenes, generate the clips and join compatible clips into one MP4 without re-encoding. It checks the requested clip length, shape and resolution against the model's supported options before generation. Videos are limited to 120 seconds and 24 clips; a request estimated above that length asks whether to make the shorter version before generating anything, and an unattended run generates nothing. Clips that cannot be joined safely stay available in order, and WebBrain reports the actual length and clip count.
 
 ### Changed
+- The side panel's model menu now calls the standard managed provider **Compass Light** and the larger tier **Compass**. The Providers page calls the managed card **WebBrain Compass**, puts it and Companion first, and labels Companion **Your Existing Subscription** with setup guidance in your language. The subscription summary appears while its card is collapsed.
 - Decision models, Auto (Chrome): once Compass VLD Tiny v5 is downloaded, it checks whether tasks and scheduled runs are finished, before a downloaded D1 and in place of WebBrain Cloud's decision model, which still answers what a request asks for. While you chat with another in-browser model, or another in-browser model reads screenshots for a chat model that cannot see them, it leaves those checks to a downloaded D1, or else to your chat model, because loading it would unload the model you are using. As with D1, a "finished" from it is confirmed by the chat model. On d1's synthetic test, through the extension, it answered 120 of 126 questions correctly and called none of the 48 unfinished views finished; D1 answered 92 and called one finished. **In-browser chat model** under On can be chosen again and uses it. Ternary Bonsai 2 2B Vision no longer answers decisions, and a saved selection of it now uses Compass VLD Tiny v5. Firefox is unchanged.
 - In-browser vision (Chrome): Auto now uses Compass VLD Tiny v5 once it is downloaded, and Ternary Bonsai 2 2B Vision when only that one is. Providers → Vision and Apocalypse Mode's Vision Model card offer Compass VLD Tiny v5 as a choice.
 - Ask with Compass VLD Tiny v5 looks at a screenshot of the page when its own trained readout says the question needs one, in any language, as it did with Ternary Bonsai 2 2B Vision. Short follow-ups such as "And the button?" after an answer from a screenshot look again too.
 - The spinning ring next to "Thinking…" in the side panel is now a small WebBrain brain drawn as a neural circuit: a signal keeps tracing the W, and the brain's outline lights up as it passes. It moves only while WebBrain is working and the panel is visible, follows the light and dark themes, and holds still when your system asks to reduce motion.
 
 ### Fixed
+- Auto now recognizes requests to create images, videos or audio with a configured generative provider and hands them to Act, where those tools are available. It no longer answers a request for the media itself with only a script, storyboard or rendering code. If generation is not configured or the current tier cannot use it, WebBrain explains the setup or tier requirement.
+- Results produced while the side panel is hidden, including a generated video that finishes in another tab, reappear when you return. The hidden panel used to acknowledge run events before saving the chat, so reopening it could lose the result and its preview. Chrome and Firefox.
+- Providers → Decision accepts a local decision server on another machine on your network, such as `http://192.168.1.51:8091`. **Load available models** and **Test** used to stop with "Decision endpoints require HTTPS outside localhost." for any address but this computer's. Private addresses (10.x, 172.16–31.x, 192.168.x, Tailscale's 100.64–127.x, link-local, IPv6 unique-local) and `.local`, `.home.arpa` and `.internal` names now work over plain HTTP; public addresses still need HTTPS. In Chrome, decision requests to such a server go through the same offscreen proxy as chat models on your network. Vision and speech endpoints already accepted these addresses.
+- Act can send a photo or video in an Instagram direct message. Instagram's message box keeps its file input hidden, outside any form, deep in a long conversation, where WebBrain's check that an action still targets what the model saw cannot reach it. Every attachment was refused, even with the exact selector WebBrain itself listed for that input, often right after you had confirmed the recipient on WebBrain's card; the model then sent a link to the picture, or said Instagram blocks attachments. With Strict checks off, an upload to the very input WebBrain listed on that page, named by the selector it gave, now goes through with a note to the model, and the recipient checks still apply. A selector WebBrain did not list is still refused, and so is an input the page re-created after the list under the same selector, until WebBrain lists the page's controls again. When clicking "Add Photo or Video" opens a file chooser, WebBrain now names the input with that same selector, and the Instagram site notes say to attach the file to that input instead of clicking the button, and that a link to a picture is not the picture.
 - Act can attach images and videos to a post on X again. While the post composer is open at x.com/compose/post, the timeline behind it keeps a second, identical file input, and WebBrain's list of the page's controls gave neither input a selector. After the model's first selector matched both, WebBrain refused every later upload until it saw a selector it could not get, so the run ended at its cost limit with nothing attached. The list now gives every file input a selector that matches only that input, scoped to the open dialog where that is what tells them apart, and marks the dialog's input `inDialog`. The X site notes name the dialog's input, and when no selector can single out an input, WebBrain tells the model to report the upload as blocked instead of retrying.
+- Act no longer asks you the same question again when the answer is on the page. Asked to post the same thing on LinkedIn while the X post was open, the planner asked which text and files to use, and after “look at the screen — the same” it asked again: the planner works from your words, the page's address and title and a short summary of the chat, never the page itself or your attachments. That summary held only the last ten messages, tool calls and page observations included, each cut to 300 characters, so the earlier answer that named the post's text and your screenshot file had dropped out of it. It now holds the last ten turns of the conversation without the agent's step-by-step notes, gives the latest answer up to 1,200 characters, and names the files you attached earlier. With the Planner on (Try or Strict), when you have just answered a planner question and the planner wants to ask again, it first takes a second look, told that it cannot see the page while the agent can, and plans the task instead; the plan is then checked against your words. So an answer such as "every five minutes" to a question about a scheduled task, the name of the person to write to, "yes, send it", "don't send it, save a draft" or opening the conversation it asked you to open is planned. It never takes who a message goes to, an account or an amount from the page, and never writes to anyone your request or answer did not name; a schedule follows what you said, including "just do it once". With the Planner off, nothing checks a plan against your words, so it takes no second look at your answer. A planner running Qwen 3, QwQ or DeepSeek R1, which is told not to think so that it answers faster, now thinks before it asks you a first question, and with the Planner on also before asking again, unless reasoning is turned off for that provider. Chrome and Firefox.
 
 ## [42.3.1] - 2026-10-20