This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Summary
AI summaryUpdates New since 0.4.0, ref, and opts across a mixed release.
Full changelog
Veil 1.0.0. Real Chrome over raw CDP — no Playwright, no Puppeteer, zero runtime dependencies — now with a complete, stable page API for driving real agent workflows. Passes bot.sannysoft 57/57 and clears Cloudflare's JS challenge.
New since 0.4.0 (10 capabilities)
getCookies()— read cookies (symmetry withsetCookies)waitForSelector(sel, {timeout, visible})— wait for an element, optionally laid-out & visibleselect(ref, value)— drive a native<select>by accessibility reftext(ref)/attribute(ref, name)— read one element without a full snapshot- element & clip screenshots —
screenshot({ref})/{clip}on top of{fullPage} blockResources(types, {urls})/unblockResources()— kill images/fonts/media or URL patterns for speed & stealth (unified with the private-network guard's Fetch handler)pdf(opts)— render the page to a PDF Buffer (headless)setViewport()/setUserAgent()— runtime emulation settersreload()/back()/forward()+goto(url, {waitUntil: "networkidle"})- robustness:
evaluate()/waitFor()now time out instead of hanging;goto()returns{status, ok}so callers can detect 4xx/5xx
33 MCP tools total — every capability is agent-drivable out of the box.
Still the core
Stealth automation layer (webdriver scrubbed, no Runtime.enable tell, human input), accessibility-tree refs (no brittle selectors), native "Sign in with Google" (FedCM) over CDP, and an on-by-default guard that blocks visited sites from port-scanning your localhost/LAN.
111 tests pass · MIT · npm install @achamm/veilbrowser
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Veil
All releases →Related context
Beta — feedback welcome: [email protected]