Skip to content

Szpont Engine 0.11.0 — browser, research and analytics tools

Choose a tag to compare

View all tags
@dalkedev dalkedev released this 10 Nov 16:08
· 8 commits to main since this release
v0.11.0
bc90a22
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Szpont gains browser, research and analytics tools that can be configured independently for Codex, Claude Code and OpenCode.

New integrations

  • Playwright: optional pinned Microsoft MCP server, isolated headless Chromium, private per-launch output and Chromium sandbox enabled. Includes a real localhost acceptance test for navigation, observed references, typing, clicking, screenshots and concurrent context isolation.
  • Perplexity, Firecrawl and TinyFish: official hosted MCP endpoints, native OAuth or a private API-key file. Firecrawl also offers explicit limited keyless mode.
  • PostHog: server-side read-only access to your own analytics project. This integration adds no tracking SDK or engine telemetry.

API-key mode uses a pinned provider-neutral stdio bridge. Keys stay out of managed configuration, arguments and the whole-agent environment. The bridge fixes vendor destinations, rejects redirects, bounds requests, forwards cancellation and does not replay uncertain calls. OAuth setup records configuration without starting a login or making a service request.

Installation

Start with the integration guide. Playwright requires its separate locked package, browser download and host libraries. Restricted Ubuntu hosts can generate an exact-executable AppArmor policy for administrator review; the engine never disables kernel restrictions or Chromium's sandbox.

The Docker image includes the small API bridge and Codex. It does not include a browser, model accounts or vendor access. Claude Code and OpenCode remain experimental host adapters; supervised goals remain Codex-only.

docker pull ghcr.io/dalkedev/szpont-engine:0.11.0

Published multi-platform image, including SBOM/provenance attestations:

ghcr.io/dalkedev/szpont-engine@sha256:bc52edf3e823a5e1dc5948265ba5b1142255154b561ab05382afbd7bfb53c31d

The release workflow promotes the tested OCI artifacts without rebuilding them.
Tagged release verification and publication passed for both architectures.

Upgrade and validation

Take a private backup and stop/drain active work before an upgrade. Node 26.13.0 LTS or newer 26.x and SQLite 3.54.0 remain required. Schema 6, saved sessions, provider bindings and recovery semantics are unchanged.

All six pre-release checks passed, including Linux browser acceptance and amd64/arm64 offline container tests. Additional independent reviews checked credential isolation, transport deadlines/cancellation, executable ownership and policy injection rejection. Tests use synthetic local fixtures; vendor OAuth, paid APIs and account entitlements require your own separate verification.

Full changelog · Reviewed PR

Assets 2
Loading