Vercel Labs Release Notes

Changelog

Add Select All control to skill picker (#1999)

fix: fail scoped well-known installs instead of falling back to the root index (#1990)

fix: refuse remove --all when specific skills are named (#1964)

fix: don't delete a skill from the same repo pinned to a different ref (#1953)

fix: bypass blob snapshots for explicit refs (#1934)

Fix internal skill filtering for well-known sources (#1921)

fix: exclude internal skills from --skill '*' wildcard (#1909)

feat: add Posit Assistant agent support (#1885)

fix: remove obsolete OpenClaw use warning (#1858)

fix: secure private repository authentication (#1857)

Contributors

@GeorgijGrigoriev,@Osamaali313 @Patrick-Erichsen,@dylanpulver @fenfenxu,@hcjmartin @initred,@quuu @statik

New Features

Named slots for React: Components can declare named slots such as header and footer, while children remains the default slot. Slots are preserved through validation, streaming, nested conversion, code export, playground views, and Devtools navigation (#320). Built from the original contribution by @wotnak in #105

Nested repeats: repeat.statePath now accepts item-relative paths such as { "$item": "employees" }, enabling nested data rendering across React, React Native, React Email, React PDF, Image, Ink, Solid, Svelte, and Vue (#319). Built from the original contribution by @tmchow in #256

Harness chat example: Added a complete Next.js example using the AI SDK 7 harness adapter, agent delegation, sandbox transport, and json-render components (#302)

Bug Fixes

Chained action params: Named onSuccess and onError actions now receive their configured params across core and all renderer bridges (#307)

Consistent optional visibility: Element visible fields now remain optional across Zod 4 versions, while prompts explicitly require children arrays for every element (#299)

Spec validation and autofix: Dangling child references are pruned, malformed visibility conditions are reported, and repeated items can be filtered safely (#300)

Improvements

Release toolchain hardening: The workspace now requires Node.js 24 and pnpm 11, enforces package engine checks, and applies a minimum package release age (#293)

Breaking Changes

Custom renderer bridges that implement the core executeAction callback must now accept an ActionBinding instead of a bare action name. This exposes chained action params to custom integrations at compile time (#307)

Contributors

@ctate

@Railly

@tmchow

@wotnak

New Features

Added persistent session-to-tab binding for shared Chrome sessions. Named sessions connected through --cdp or --auto-connect now remember their CDP target across commands and daemon restarts, and CDP target ids can be used directly as tab references. Start each session with --pin-tab to make the binding strict, so a tab closed externally returns a stable tab_gone error instead of silently adopting a neighboring tab. JSON output includes data.targetId and an optional sanitized data.lastUrl; batch exposes the same recovery data under result (#1589)

Improvements

Added a Remote Agent Browser provider guide covering Vercel authentication, disposable and stable sessions, custom VCR images, snapshots, and live-view URLs (#1648)

Bug Fixes

Fixed parallel sessions sharing one Chrome hijacking each other's tabs. Event-discovered targets no longer steal a pinned session's active tab, re-attach restores the persisted target instead of selecting index 0, and preliminary plus existing-daemon --cdp and --auto-connect paths preserve explicit pin enable and disable. Agent skill guidance now requires a named --session before the first command (#1589)

Fixed agent-browser doctor hanging on Chrome version detection. Windows reads the version from the executable resource table without spawning Chrome; other platforms bound the version subprocess with a deadline, kill, and reap so inherited output handles cannot block forever or leave an orphan browser (#1641)

Contributors

@Railly

@huozhi

@soichisumi

@dandaka

@mvanhorn

Changelog

fix: discover skills nested under two categories (#1866)

fix(update): normalize GitHub shorthand for project deletion checks (#1865)

fix: preserve locked GitHub host during updates (#1837)

Surface skills added upstream to well-known sources during update (#1824)

Make skills update work for well-known installs (incl. skills.sh packs) (#1821)

Preselect all skills when installing a skills.sh pack (#1820)

Add MiniMax Code agent support (#1814)

fix(remove): keep the lock entry while another agent still uses the skill (#1786)

fix(find): show all registry results in non-interactive search (#1748)

fix: store local path sources in lockfile using portable source (#1743)

Contributors

@AndreaCovelli,@IsmaelMartinez @SenseiMarv,@Ygilany @byapparov,@hetaoBackend @mlekhi,@quuu

New Features

Added input priority and per-client delivery settings to the stream server: each WebSocket connection now splits into a reader task and a writer loop, so clicks and keystrokes dispatch to the browser without queueing behind a frame write. Adds a per-client {"type":"config","maxFps":N} cap (1 to 120, 0 uncapped) and opt-in ack pacing via {"type":"config","pacing":"ack"} with {"type":"ack","seq":N}, which keeps one frame in flight so a stalled client never drains a backlog. Both settings can also be declared on the connection URL (?pacing=ack&maxFps=10), the only way to cover the opening frame. Every frame now carries a monotonic seq (#1594)

Added configurable stream encoding: frames were hardcoded to jpeg quality 80 at the session viewport, so frame rate was the only bandwidth lever. AGENT_BROWSER_STREAM_QUALITY, AGENT_BROWSER_STREAM_MAX_WIDTH and AGENT_BROWSER_STREAM_MAX_HEIGHT are read once per daemon and cut bytes without dropping frames: on a busy page at 1280x720, quality 20 takes a frame from 54 KB to 25 KB, and quality 20 at 640x360 takes it to 9 KB, frame rate unchanged in both. Width and height default to the session viewport, so a larger viewport is never downscaled unless both are set (#1626)

Behavior Changes

Frame delivery is now latest-wins. The stream server holds only the newest frame and reads it at send time, so frames produced while an earlier one is still being written are skipped. A client that assumed it received every frame from the WebSocket now receives fewer. Nothing in this repo consumes the stream that way, since record captures through CDP and the dashboard is a viewer, so this affects external consumers only (#1594)

metadata.timestamp now carries a real value. It was always 0, because CDP sends the capture time as a float in seconds and the code read it as an integer. It is now epoch milliseconds, so a client can measure how stale the frame it is drawing is. A client that treated 0 as unknown is unaffected (#1594)

Bug Fixes

Fixed keyboard input over the stream, which worked in none of the three shapes the docs publish: an absent key, code, or text reached CDP as an explicit null, which rejects the whole command, so every key release and every non-printable key was silently dropped, the dashboard's own payloads included (#1594)

Fixed click latency behind mouse movement: input dispatch awaited Chrome's reply before reading the next message, so a click sat one round trip behind every queued mouse move. After a 300-event sweep a click landed 2471ms late; it now lands in 6ms (#1627)

Fixed stream disable returning while a slow client's input reader was still running (#1594)

Contributors

@Railly

@kevingatera

@WebCloud

Bug Fixes

Multi-segment custom TLDs: --tld and PORTLESS_TLD now accept dotted DNS names such as dev.example.com, so local URLs can mirror production structure. validateTld checks per-label DNS rules and the 253-character total limit, overlapping TLDs resolve by longest match, and cert cache filenames stay under the filesystem name limit for long hostnames. (#365)

WebSocket over HTTP/2: Proxy now advertises RFC 8441 extended CONNECT and bridges :protocol websocket streams to an HTTP/1.1 upgrade against the backend, fixing dev server HMR for browsers that negotiate h2 over ALPN. Plain-HTTP upgrades on the TLS port are proxied instead of dropped, and a backend that rejects the handshake or answers with a bad Sec-WebSocket-Accept now gets a 502 instead of a silently destroyed socket. (#363)

Contributors

@Railly

@KingPsychopath

@erichurkman

@sanjevirau

Behavior Changes

The daemon now ships a default idle timeout of 1 hour: after an hour with no commands or dashboard input it saves configured restore state, closes the browser, and exits, so integrations that die without calling close no longer leak the daemon and its Chrome tree indefinitely. Sessions without --restore or another restore key discard transient browser state and open tabs when they shut down. Set AGENT_BROWSER_IDLE_TIMEOUT_MS=0 to restore the old always-persist behavior, or any other value to tune it. Dashboard mouse, keyboard, and touch input reset the timer. The default never closes headed browsers, including Safari and iOS WebDriver sessions, or user-attached browsers that may be in direct human use. Provider-owned cloud browsers remain eligible for cleanup, and an explicitly configured timeout applies to all browsers, as before (#1605)

Bug Fixes

Fixed tab recovery and selection to avoid daemon hangs on Memory Saver-discarded tabs by selecting a live renderer on CDP connect, reviving tabs on switch or after close, treating dialog-blocked tabs as live, preserving refs on rejected operations, and surfacing recovery state across CLI, JSON, and MCP output (#1543)

Fixed a11y selector errors to report invalid CSS selectors cleanly instead of exposing raw browser evaluation stack traces in text and JSON output (#1604)

Contributors

@ctate

@Railly

@joelhooks

@jadenfix

Changelog

test: make warning sanitization coverage Windows-safe (#1755)

fix: honor GH_HOST for GitHub Enterprise shorthand (#1752)

Add Grok Build agent support (#1708)

feat: add Kimchi agent support (#1707)

fix(update): support full-depth skill updates (#1705)

fix: apply claude-code symlink exemption to blob install path (#1608)

fix: clean up upstream-deleted skills whose lock key differs from folder name (#1570)

feat: show skill origin in list output (#1450)

fix: remove missing skills from lock files during update/uninstall (#1357)

fix: warn instead of silently skipping malformed SKILL.md files (#1058) (#1059)

fix(cli): exit 1 on unknown command and honour subcommand --help (#1040)

Contributors

@ADM-NKH,@IsmaelMartinez @Ygilany,@akunzai @fabio-barboza,@jaryalarshita @paymog,@quuu @yearth

Bug Fixes

Fixed find role to match implicit ARIA roles and browser-computed accessible names through the accessibility tree, so semantic elements like <h2> (heading) and <ul> (list) resolve, with case-insensitive substring name matching that mirrors Playwright's getByRole (#1552)

Fixed element-not-found errors to preserve the locator detail (selector, role, name, or index) instead of flattening every miss into one generic message, and aligned the advertised find actions with the set the dispatcher actually accepts (#1553)

Contributors

@Railly

@cooleryu