Version 2.5 New Features / Changes
Added functionality to create workspaces for use in creating content blockers / focus guard along with
Added a connector so you can use a local AI model to help build workspaces.
Trust and warning UX: split technical risk from trust source. Bundled verified and user-created items show green status, modified bundled/imported show review status, and imported high-risk packs stay red until reviewed. Keep strict warnings in import/audit flows.
Bundled/examples split: classify current built-ins into separate Bundled and Examples tabs, generate artifact hashes in the bundled index, verify bundled artifacts before install/open, and update help copy.
Large resources: store resources once in IndexedDB, reference them from stored workspaces and installed Action Packs, and bundle bytes only on export. Use schema-7 streaming artifacts under existing .workspace/.actionpack extensions with WSPC2/ACTP2 magic, resource manifests, raw resource sections, SHA verification, quota checks, and graceful missing-resource runtime placeholders.
Backups: add a resource-aware backup/export path for unlocked data; exclude resources from Chrome/Firefox sync. When any locked Action Pack exists, disable backup export, backup restore, and full reset UI.
Logging: add Settings default for new Action Packs and per-pack logging toggles. Fresh installs default logging off; migrated existing packs keep logging on to preserve behavior. Run logs and SaveStringToLog entries are skipped when disabled; trace remains separate.
Add V2 schema support for workspaceType: 'data-modifier' | 'content-blocker', WorkspaceGraphSurface, and content-blocker config. Bump the current repo schema by one version and migrate older schema versions, including current metadata.profile === 'content-blocker'.
Data Modifier workspaces keep the current single React Flow surface, Run controls, URL Input Filter, Hotkey controls, current block registry, compile/export behavior, and V1 .urlpack conversion path.
Content Blocker workspaces get three separate drag-and-drop surfaces: Page Load Decision, Recurring Check, and Challenge Page. Type is locked after selection and displayed as a read-only badge.

Version 2.0.5 prioritizes security enhancements.
- Enhanced workspace import validation and migration processes, including the rejection of potentially hazardous keys, the implementation of size and count restrictions, the verification of finite coordinates, the rejection of unsafe trigger-filter configurations, and the removal of unknown source fields following validation.
- Reinforced overlay/hotkey runtime message validation and eliminated reliance on message-provided tab IDs and URLs.
- Introduced trusted-event guards for overlay pointer events and OverlayInput keyboard and mouse capture functionalities.
- Implemented content-script restrictions for page text, raw HTML, and link retrievals.
- Updated security assistance documentation, bundled workspace compatibility metadata, manifests, and package versions.

URL Alchemist 2.0 is a Chrome extension for building browser workflows from visual blocks. Create editable workspaces, compile them into portable binary Action Packs, and run those packs from page input data, hotkeys, context menus, intervals, or visible overlay events

The update was focused entirely on hardening and security.
- Unsafe redirect/output handling: packs can no longer transform a tab into j
avascript:, other non-web schemes, malformed absolute URLs, or file:// when
local files are disabled.
- Import hardening: .urlpack imports are now capped at 1 MB, numeric fields
are validated more strictly, failed imports clear any previously staged
pack, and the staging modal blocks imports that would reuse an installed
pack ID or fail the same regex/hotkey safety checks as the Forge.
- Regex correctness bug: $1-style capture groups now expand correctly for
NTH_OCCURRENCE, BEFORE_PATTERN, and AFTER_PATTERN, not just standard
replacements.
- Hotkey message hardening: background execution now prefers the real sender
tab URL over the message-provided URL to avoid spoofable intra-extension
input.