Device tools beta17 — confined software browser rendering

Explicit software rendering for GPU-less hosts, official headless shell support across native platforms, and a public macOS host-resource descriptor. Includes the published beta16 local-file URL security fix.

Actual Mac ARM qualification passed for DOM navigation, rendered screenshots, inherited sandbox file denial and private CDP pipes. The wheel was built from the same clean source in CI: https://github.com/openagent-uno/openagent-tools/actions/runs/41702463425

This development prerelease does not qualify a signed standalone application or all physical device capabilities.

Device tools 1.0.0 beta 16 — navigate refuses local-file URLs

Agent in Chrome navigate refuses file:, filesystem:, view-source:, blob:, data: and javascript: URLs, so the browser cannot be used to read files of the host account. A real-Chromium test covers navigate, fetch, location and window.open. Includes beta 15. Development-unqualified prerelease.

Device tools 1.0.0 beta 15 — two live-view frames in flight

--frames-in-flight (default 2) hides one network round trip in the live view without queueing frames. Includes beta 14 flow control. Development-unqualified prerelease.

Device tools 1.0.0 beta 14 — responsive live view

Live view frames are binary JPEG messages sized by --quality/--max-width with end-to-end flow control (frame_ack), so slow links keep one-frame latency instead of queueing. Includes beta 13 profile reliability. 6 session tests (flow control asserted on real Chromium) and 25 browser/relay regressions. Development-unqualified prerelease.

Device tools 1.0.0 beta 13 — persistent profile close and lock recovery

Browser close waits for Chromium to flush cookies and release its profile lock (OPENAGENT_CHROME_CLOSE_GRACE_MS); OPENAGENT_CHROME_PROFILE_EXCLUSIVE clears a SingletonLock left by another host on single-writer profile volumes. Includes beta 12 (interactive session with live view) and beta 11 (authenticated egress). 6 session tests (including two consecutive real Chromium sessions on one profile) and 25 browser/relay regressions. Development-unqualified prerelease.

Device tools 1.0.0 beta 12 — interactive browser session with live view

openagent-browser-session: the dedicated Agent in Chrome browser without a model, with a bearer-authenticated WebSocket live view (screencast out; normalized pointer, wheel, text, special keys, bounded navigation in), popup following and clean close on done/timeout/SIGTERM. Includes 1.0.0b11 authenticated egress. 4 session tests including a real Chromium click/navigation/done cycle, plus relay and browser regressions. Development-unqualified prerelease.

Device tools 1.0.0 beta 11 — authenticated browser egress proxies

Agent in Chrome: OPENAGENT_CHROME_PROXY accepts http/https/socks5 URLs with credentials through a loopback relay (Chrome never sees the credentials); WebRTC limited to proxied UDP. 5 relay tests (HTTP CONNECT with Basic auth, refused credentials, SOCKS5 RFC 1929, port fallback) plus the existing 20 browser regressions; verified against a real Chrome navigation through an authenticated upstream. Development-unqualified prerelease.

MCP server starter 0.2.0

Standalone MCP server starter now maintained in examples/mcp-server. Original Git ancestry and reference tags are preserved. Real MCP stdio initialization, tool discovery and invocation passed.

Web Search 1.0.0-beta.3: bounded browser resource ownership

Concurrent browser extraction could launch multiple Chromium processes while retaining only the last one in the pool. Failed navigations and HTTP fallback errors could also leave contexts open, and a detached batch timer could return while extraction kept running.

This release coalesces browser launches, bounds extraction to two concurrent contexts, drains launches during shutdown, and releases every request context on success and failure. Batch completion now includes owned work and cleanup; HTTP and navigation retain their own timeouts.

Validation: five regressions failed before the fix; all 18 tests pass afterward, including existing redirect/private-address checks. The exact installed Linux archive passed real Chromium tests with 10 concurrent successful extractions, 12 failed navigations, a peak of two contexts, zero residual contexts and zero owned Chrome processes after shutdown. Archive provenance, hashes and detailed qualification are attached. No browser binary is bundled or downloaded during package installation.

Device tools 1.0.0 beta 9 — shared native browser transport

Device-tools b9 owns native browser launch, CDP pipes, explicit host confinement/environment ports, authoritative configured binaries and target readiness. Consumers can adopt the immutable sidecar and dependency lock without source patches. Transport and browser regressions passed with owned Chromium; Windows installed sandbox and signed application acceptance remain separate.