agent-browser Updates & Release Notes

New Features

Eve extension - Added @agent-browser/eve, an Eve extension that mounts the agent-browser tool set with namespaced browser tools, sandbox bootstrap helpers, docs, examples, CI, and release packaging (#1547)

Security

Hardened domain allowlists by blocking WebRTC bypasses, applying network containment across launch modes, workers, popups, restored state, and reused daemon sessions, rejecting unsafe startup arguments, and adding Chrome regression coverage (#1546)

Bug Fixes

Fixed completed-page waits so load and DOMContentLoaded waits resolve immediately when the current document is already ready, with structured Eve wait timeout handling and focused coverage (#1554)

Contributors

@ctate

@dnukumamras

New Features

WebGPU launch preset - Added --webgpu across the CLI, config, environment, and MCP surfaces, with hardware backends on macOS and Windows, software Vulkan on Linux, automatic Xvfb for displayless headed sessions, and a doctor --webgpu render and screenshot probe (#1529)

Improvements

Added periodic restore-state autosaves while the browser remains open, preserving recent state after a browser window is closed by hand and capturing background page changes while honoring the restore save policy. The interval is configurable with AGENT_BROWSER_AUTOSAVE_INTERVAL_MS (#1509)

Contributors

@ctate

New Features

Restore workflow - Added --restore, --restore-save, restore validation flags, worktree-scoped session id, session info, and --namespace so agent runs can use stable, isolated, automatically restored browser state without managing state files by hand (#1486)

Improvements

Hardened session lifecycle handling with explicit daemon and browser compatibility checks, lifecycle status output, MCP support for restore options, and safer auto-save behavior that avoids overwriting good state after a failed restore or failed validation (#1486)

Bug Fixes

Fixed restore lifecycle edge cases around switching restore keys with a live browser, daemon configuration startup races, launch mode validation, and clearing restore failures after an explicit state load (#1486)

Contributors

@ctate

New Features

• Sandbox package - Added @agent-browser/sandbox with shared, Eve, and Vercel Sandbox helpers, example projects, and docs for running agent-browser in hosted sandbox environments (#1465)

Improvements

• Updated sandbox release flow so the new package stays version-synced with the CLI release and publishes from the correct workspace path (#1465)
• Reflowed documentation prose across the README, docs site, examples, and skills so Markdown and MDX wrap naturally in editors and renderers (#1466)

Contributors

@ctate

New Features

• MCP server - Added agent-browser mcp, a stdio Model Context Protocol server with typed tools, paginated discovery, protocol negotiation, and startup tool profiles. The default core profile keeps context small, while --tools all exposes full CLI parity and composed profiles such as core,network,react are supported (#1454)
• Plugin system - Added out-of-process plugin support over the agent-browser.plugin.v1 stdio protocol, with plugin add/list/show/run, manifest discovery, npm and GitHub refs, credential providers, browser provider plugins, launch mutators, custom command capabilities, config and env registry support, and capability-scoped policy gates (#1452)

Infrastructure

Added context footprint eval coverage for CLI skills, MCP core, and MCP full-profile surfaces, plus MCP parity tests to keep tool behavior aligned with the CLI (#1454)

Contributors

@ctate

Bug Fixes

Fixed click reliability by scrolling off-viewport elements into view before resolving coordinates, handling JavaScript dialogs promptly, recovering mouse state after dialog-opening clicks, and detecting click interception by overlays before dispatching input (#1432, #1434)

Fixed frame-scoped selectors and waits so CSS-selector actions and wait respect the selected iframe, including cross-process iframes, with translated click coordinates (#1432)

Fixed wait timeout handling so the documented 25s default is used, --timeout is honored across wait variants, and long waits receive an appropriate client read budget (#1432)

Fixed agent-facing form commands so find label matches aria-label and aria-labelledby, select errors when no option matches, and type parses --clear and --delay instead of typing them as text (#1432)

Improvements

Cut warm CLI command latency from about 150ms to about 1ms by removing the unconditional daemon settle sleep and retrying once when a stale daemon socket is discovered (#1432)

Extended daemon respawn and retry handling to batch commands so batches recover from a daemon exit after the initial liveness check (#1432)

Infrastructure

Pinned GNU Linux release artifacts to glibc 2.28 with zigbuild, added a release guard for newer GLIBC symbols, and aligned Docker release helpers with the pinned target (#1417)

Contributors

@ctate

@heshamkhaledd