Features
Everything Hover does today.
Modes
- Security testing — install
@hover-dev/securityto route the debug Chrome through a local HTTPS MITM. The agent can list / inspect / replay captured API calls with mutations, probing for IDOR / authz bypass / parameter tampering / missing security headers / PII leakage. Crystallises into Playwright specs that run in CI without the proxy.
Input
- Voice mode — push-to-talk speech input + spoken step narration. 中文 / English autodetect, browser-native, no API keys.
- Record mode ✨ UPDATED (v0.13) — record your own clicks / fills / selects as Playwright steps, with built-in Exists / Says / Equals assertion sub-modes. v0.13 captures the starting URL as
page.gotoso saved Records replay from the right page, and adds an opt-in Reload before recording setting for users who want strict record/replay parity. - Fix prompt — click any element on the page, type what to change, get a precise prompt (source line:col + ancestor chain + Playwright selector) on your clipboard.
Output
- Save as Spec ✨ UPDATED (v0.13) —
__vibe_tests__/<slug>.spec.tsusinggetByRole / getByLabel / getByTestId. Runs in CI without Hover. v0.13 wraps every interaction in a visibility prelude ({ const el = …; await expect(el).toBeVisible(); await el.<action>; }) so UI drift fails in ~3 s withLocator expected to be visibleinstead of a 30 s actionability timeout. - Save as Jira case —
.case.csv, imports straight into Jira / Xray / Zephyr. - Save as Security spec —
__vibe_tests__/<slug>.security.spec.tsusing Playwright'srequestfixture. Crystallises authz / IDOR / parameter-tampering probes into CI-runnable regression specs. Requires@hover-dev/security. - Findings cards — bugs and observations the agent flagged, severity-coloured. First-class output, not buried in narration.
- Structured spec output ✨ NEW — the saved spec grows an architecture:
test.stepstages, popup / new-tabPromise.allpairing, a.hover/<slug>.jsonsidecar, and Page Objects + fixtures lifted from flows repeated across specs (npx hover extract). - Optimize a spec ✨ NEW — an optional, off-by-default AI pass polishes a deterministic draft into a diff-reviewed candidate: adds the assertions the run observed, flags buggy behaviour
// KNOWN BUG, always keeps the original.npx hover optimize <spec>. - Seed library ✨ NEW — teach the optimization pass new patterns by dropping a worked example in
.hover/rules/— no fork, no plugin code.