agent-browser Updates & Release Notes

Bug Fixes

Fixed auth vault login to pick usable controls when hidden duplicates exist, and to bind credential entry to the selected field so replaced fields or redirected focus are rejected before submitting (#2014)

Fixed chat mode to allow webmcp, skills, and other top-level browser commands, so the model uses page WebMCP tools instead of falling back to eval (#2015)

Fixed Kernel profiles so KERNEL_PROFILE_NAME sessions send the profile as an object instead of failing with a 400, and added KERNEL_PROFILE_SAVE_CHANGES to opt into saving changes back (#2004)

Fixed Chrome freezing after launch by draining its stderr for the browser's lifetime, so a full log pipe no longer blocks the browser (#2003)

Fixed Browser Use by switching to Cloud V4, which creates, attaches to, and stops the same browser with bounded timeouts (#1879)

Fixed Vercel Sandbox shared memory detection by measuring /dev/shm capacity and adding --disable-dev-shm-usage below 256 MiB, so Chrome no longer terminates renderers on the undersized mount (#1890)

Improvements

Upgraded the eve integration from eve 0.47.3 to 0.57.0, so apps on eve 0.50 and later build again (#1945)

Documentation

Updated the contact sheet example with the loading-flash demo output (#1871)

Contributors

@Railly

@benjamincanac

@boatri

@luxleader

@petehunt

@robertjamesprior

@simonellefsen

@zyz619963502zyz

New Features

Added conditional screenshots with screenshot --if-changed to skip unchanged captures and --threshold <0-1> to tolerate small pixel differences. Screenshot history is scoped to each tab and capture mode, and unchanged captures omit the image path to save tokens (#1813)

Added automatic snapshot deltas with snapshot --delta, which returns a full baseline followed by an unchanged revision or compact structural changes. Use --full to refresh the baseline (#1811)

Added persistent snapshot refs for surviving DOM elements across same-document changes. Replaced elements and navigated pages or iframes invalidate their refs without recycling identifiers (#1812)

Added human-like pointer movement with session --input-mode, per-action --human for clicks and drags, and reproducible curved mouse move paths (#1810)

Added recording presentation tools: --cursor renders an animated pointer and click ripple, while --contact-sheet saves a timestamped PNG summary of visual changes (#1807, #1808)

Added stateful auth vault login with auth login --no-navigate, which fills an already prepared login page after verifying its origin against the credential URL (#1771)

Added WebMCP catalog updates to normal browser responses. Concise, content-bounded summaries appear on initial discovery and catalog changes, while full schemas remain opt-in (#1842)

Improvements

Improved recording frame timing by holding the latest Chrome frame between repaints so the output duration follows the requested frame rate (#1806)

Bug Fixes

Fixed CDP transport recovery and shutdown so malformed transport messages do not strand unrelated commands and failed initialization disconnects cleanly (#1739)

Fixed dropdown label matching to normalize whitespace, including non-breaking spaces, when selecting options by visible label (#1736)

Documentation

Clarified reliable browser wait strategies by recommending page-specific selectors, text, URLs, or JavaScript conditions and reserving networkidle for pages known to become quiet (#1834)

Contributors

@ctate

@Railly

@MauricioAntolin

@mecampbellsoup

@evrenverse

@judegao

@petehunt

New Features

Added higher-quality video recording: record start and record restart now capture the current active page at 30 fps by default, support --fps 1-60, use Page.startScreencast for smoother motion, and preserve wall-clock timing. WebM and MP4 output are documented, and doctor reports the ffmpeg recording dependencies (#1763, #1776, #1778)

Added WebMCP availability output so navigation responses advertise when a page exposes allowed WebMCP tools, including availability metadata for CLI, JSON, and MCP clients (#1760)

Added session setup inheritance for new tabs. Tabs opened with tab new or through page clicks now inherit the active session's headers, credentials, user agent, locale, timezone, geolocation, offline mode, routes, color scheme, and init scripts before their first navigation (#1777)

Bug Fixes

Fixed recording startup validation so missing ffmpeg, extensionless output paths, and invalid recording options fail before browser or recording state changes. Failed replacements preserve the active take, and ffmpeg errors now include useful diagnostics (#1778)

Fixed recording navigation state so URL navigation during recording clears stale element refs, frame scope, and page WebMCP state like normal navigation (#1776)

Contributors

@jamesvclements

@ctate

@Railly

New Features

Added experimental WebMCP support for discovering and invoking tools provided by the current page, including frame-aware tool selection, detached results, cancellation, bounded metadata and output handling, and an opt-in MCP tool profile. WebMCP is enabled by default for locally managed Chrome and can be disabled with --no-webmcp or AGENT_BROWSER_NO_WEBMCP.

Added a WebMCP generation skill that helps agents expose existing page workflows as validated page tools while recording safety constraints, deterministic checks, and fallback behavior.

Improvements

Updated the eve integration to 0.47.3 and raised its compatibility floor to 0.39.1.

Updated brace-expansion dependency resolutions across the project lockfiles.

Bug Fixes

Removed the obsolete Lightpanda session timeout argument so launches use the current supported server options.

Contributors

@ctate

@Railly

@anupamme

@arrufat

Security

Hardened dashboard origin validation and reverse-proxy access with same-origin provenance enforcement that defends against DNS rebinding, form/header smuggling, and cross-origin requests. Reverse-proxied origins now require exact HTTPS allowlisting and generated token authentication, while tokenless IPv4 and IPv6 loopback access remains supported. Dashboard options are validated strictly, and CLI and MCP lifecycle behavior is aligned (#1738)

Bug Fixes

Fixed root remote CDP WebSocket URLs with query strings to insert the required slash before the query while preserving the encoded query (#1735)

Contributors

@ctate

@Railly

Bug Fixes

Fixed Windows ARM64 launcher selection to prefer a native ARM64 executable when present and fall back to the published x64 executable through Windows emulation when it is not (#1725)

Fixed stream URL tracking to emit active main-frame URL updates for full-document, History API, and fragment navigation, while rebinding correctly after active-tab changes and ignoring child-frame or background-tab navigation (#1682)

Fixed snapshot diff element references by resetting ref numbering for each diff, invalidating refs across URL navigations, and preserving the previous refs when a diff fails (#1719)

Improvements

Updated Rust dependencies to rustls-webpki 0.103.13 and quinn-proto 0.11.17 (#1723, #1720)

Contributors

@ctate

@Railly

@Angelmmiguel

@anupamme

@nexxusbruno-ship-it

New Features

Added private proxy CA trust for locally launched Chromium on Linux. Use --ca-cert <path>, AGENT_BROWSER_CA_CERT, or caCert in config and MCP to import a PEM bundle or DER certificate into an isolated NSS trust store without disabling hostname, validity, or unrelated-authority verification. The effective CA persists across commands in a running session, equivalent certificate content reuses Chromium, and --no-ca-cert explicitly clears retained trust. Unsupported launch modes and conflicting CA options return actionable errors (#1669)

Improvements

Added a bundled protected Vercel deployments skill that guides agents through short-lived Trusted Sources OIDC authentication, authorized automation bypasses, and explicit human handoffs for dashboard-only configuration (#1705)

Contributors

@Railly

@ctate

@bilby91

New Features

Added persistent session-to-tab binding for shared Chrome sessions. Named sessions connected through --cdp or --auto-connect now remember their CDP target across commands and daemon restarts, and CDP target ids can be used directly as tab references. Start each session with --pin-tab to make the binding strict, so a tab closed externally returns a stable tab_gone error instead of silently adopting a neighboring tab. JSON output includes data.targetId and an optional sanitized data.lastUrl; batch exposes the same recovery data under result (#1589)

Improvements

Added a Remote Agent Browser provider guide covering Vercel authentication, disposable and stable sessions, custom VCR images, snapshots, and live-view URLs (#1648)

Bug Fixes

Fixed parallel sessions sharing one Chrome hijacking each other's tabs. Event-discovered targets no longer steal a pinned session's active tab, re-attach restores the persisted target instead of selecting index 0, and preliminary plus existing-daemon --cdp and --auto-connect paths preserve explicit pin enable and disable. Agent skill guidance now requires a named --session before the first command (#1589)

Fixed agent-browser doctor hanging on Chrome version detection. Windows reads the version from the executable resource table without spawning Chrome; other platforms bound the version subprocess with a deadline, kill, and reap so inherited output handles cannot block forever or leave an orphan browser (#1641)

Contributors

@Railly

@huozhi

@soichisumi

@dandaka

@mvanhorn

New Features

Added input priority and per-client delivery settings to the stream server: each WebSocket connection now splits into a reader task and a writer loop, so clicks and keystrokes dispatch to the browser without queueing behind a frame write. Adds a per-client {"type":"config","maxFps":N} cap (1 to 120, 0 uncapped) and opt-in ack pacing via {"type":"config","pacing":"ack"} with {"type":"ack","seq":N}, which keeps one frame in flight so a stalled client never drains a backlog. Both settings can also be declared on the connection URL (?pacing=ack&maxFps=10), the only way to cover the opening frame. Every frame now carries a monotonic seq (#1594)

Added configurable stream encoding: frames were hardcoded to jpeg quality 80 at the session viewport, so frame rate was the only bandwidth lever. AGENT_BROWSER_STREAM_QUALITY, AGENT_BROWSER_STREAM_MAX_WIDTH and AGENT_BROWSER_STREAM_MAX_HEIGHT are read once per daemon and cut bytes without dropping frames: on a busy page at 1280x720, quality 20 takes a frame from 54 KB to 25 KB, and quality 20 at 640x360 takes it to 9 KB, frame rate unchanged in both. Width and height default to the session viewport, so a larger viewport is never downscaled unless both are set (#1626)

Behavior Changes

Frame delivery is now latest-wins. The stream server holds only the newest frame and reads it at send time, so frames produced while an earlier one is still being written are skipped. A client that assumed it received every frame from the WebSocket now receives fewer. Nothing in this repo consumes the stream that way, since record captures through CDP and the dashboard is a viewer, so this affects external consumers only (#1594)

metadata.timestamp now carries a real value. It was always 0, because CDP sends the capture time as a float in seconds and the code read it as an integer. It is now epoch milliseconds, so a client can measure how stale the frame it is drawing is. A client that treated 0 as unknown is unaffected (#1594)

Bug Fixes

Fixed keyboard input over the stream, which worked in none of the three shapes the docs publish: an absent key, code, or text reached CDP as an explicit null, which rejects the whole command, so every key release and every non-printable key was silently dropped, the dashboard's own payloads included (#1594)

Fixed click latency behind mouse movement: input dispatch awaited Chrome's reply before reading the next message, so a click sat one round trip behind every queued mouse move. After a 300-event sweep a click landed 2471ms late; it now lands in 6ms (#1627)

Fixed stream disable returning while a slow client's input reader was still running (#1594)

Contributors

@Railly

@kevingatera

@WebCloud

Behavior Changes

The daemon now ships a default idle timeout of 1 hour: after an hour with no commands or dashboard input it saves configured restore state, closes the browser, and exits, so integrations that die without calling close no longer leak the daemon and its Chrome tree indefinitely. Sessions without --restore or another restore key discard transient browser state and open tabs when they shut down. Set AGENT_BROWSER_IDLE_TIMEOUT_MS=0 to restore the old always-persist behavior, or any other value to tune it. Dashboard mouse, keyboard, and touch input reset the timer. The default never closes headed browsers, including Safari and iOS WebDriver sessions, or user-attached browsers that may be in direct human use. Provider-owned cloud browsers remain eligible for cleanup, and an explicitly configured timeout applies to all browsers, as before (#1605)

Bug Fixes

Fixed tab recovery and selection to avoid daemon hangs on Memory Saver-discarded tabs by selecting a live renderer on CDP connect, reviving tabs on switch or after close, treating dialog-blocked tabs as live, preserving refs on rejected operations, and surfacing recovery state across CLI, JSON, and MCP output (#1543)

Fixed a11y selector errors to report invalid CSS selectors cleanly instead of exposing raw browser evaluation stack traces in text and JSON output (#1604)

Contributors

@ctate

@Railly

@joelhooks

@jadenfix

Bug Fixes

Fixed find role to match implicit ARIA roles and browser-computed accessible names through the accessibility tree, so semantic elements like <h2> (heading) and <ul> (list) resolve, with case-insensitive substring name matching that mirrors Playwright's getByRole (#1552)

Fixed element-not-found errors to preserve the locator detail (selector, role, name, or index) instead of flattening every miss into one generic message, and aligned the advertised find actions with the set the dispatcher actually accepts (#1553)

Contributors

@Railly

@cooleryu