Tools beta6: exact Device Tools discovery catalog

Device Tools 1.0.0b8 records the complete actual native0.1.5/browser3.0.0 MCP catalog, including Zod4 schema constraints and argument classification. Native/browser implementations are unchanged. The six other independently versioned wheels are reused byte for byte from beta5 with their original source provenance.

Qualification: source Python29passed/1Windows-onlyskip; installed-wheel Python29passed/1Windows-onlyskip including actual40tool discovery parity; owned headless browser16passed; wheel RECORD33entries and bundled sources verified. No native input/audio was repeated for this metadata patch.

OpenAgent Tools 1.0 beta 5

Adds scoped advanced browser automation, MCP cancellation and stale-reference handling, and macOS accessibility, application, clipboard and audio controls. Browser host dependencies are pinned in its lockfile.

Validation: 44 Python tests and 68 subtests passed (one explicit skip); all 15 actual Chromium/browser regression tests passed. The macOS native implementation was exercised through all three product adapters in the local qualification. This release contains Python wheels and sidecar source; signed platform bundles and product installers are released separately.

Shared connectors SDK and runner 0.1.14

Gmail now requests the narrower gmail.readonly and gmail.compose permissions. Read-only operation selections request only read access; draft/send selections require compose access. Existing host-held gmail.modify and gmail.send grants retain their supported operations and bounded refresh behavior. New consents do not request those legacy scopes.

Includes Go module github.com/openagent-uno/openagent-tools/packages/connectors@v0.1.14, six platform bundles (runner + broker), Python adapter 0.1.14, the 115-entry catalog, central/v1 schema, source manifest and SHA256SUMS. Verify both archive checksums and the extracted binary checksums in each bundle manifest. Existing OpenAgent installations can select the verified runner with runner_path or OPENAGENT_CONNECTOR_RUNNER; this release does not change product dependency pins or enable provider enrollment.

Validation: full Go providers/OAuth/central/runtime regression suites for the scope implementation and the auth suite passed before this version-only commit. All six bundles were built sequentially with pinned Go 1.26.9; source/payload checksums, archive contents, wheel RECORD integrity and catalog parity were verified. Native macOS ARM64 runner smoke verified catalog discovery and separate read/compose/legacy tool permissions without provider calls. Other target platforms are cross-compilation/checksum evidence, not native runtime qualification. No GitHub Actions were used.

This prerelease is not Google verification approval or general public Google activation. Restricted-scope review and any applicable security assessment remain separate gates. Source manifest retains its development-unqualified label rather than claiming full cross-platform/provider qualification.

Python dependency openagent-tool-protocol==1.0.0b1 is available in the Tools v1.0.0-beta.4 release.

Source commit: cbb856e14127a50675ae4f166854fdf0bf31a54f.

Computer control0.1.3 — Linux x64 X11 typing

Fixes Linux X11 text omission after a keyboard-map reset by refreshing the dedicated text connection through the unchanged Enigo public API. Pointer/chord behavior and non-Linux code paths remain unchanged.

This is the Linux x64 computer-control component0.1.3 only, built from 8652aae1d0839caafc2ae4f0be4b8e25b21e08fa. Existing SDK0.1.2 assets and other platforms are preserved.

Actual complete MCP package qualification: 7/7 native cases passed on a newly owned authenticated Xvfb with private network/tmp and sandboxed Chrome, after removing the spare colon key binding. The old public0.1.2 binary passed only2/7 under that same reset. URL address-bar navigation, HTTP-posted textarea values, :, /:@, uppercase/punctuation, Italian accents and euro were checked. Six pure input tests also passed; earlier minimal harness proof remains separately labelled.

Normal locked/offline Cargo release profile, one worker, LTO/strip/panic-abort; Linux ABI maximum GLIBC2.39. Final ELF dependencies remain gbm/Wayland-client/xcb/m/libc/loader. Build-only EGL/PipeWire link inputs are eliminated by LTO and are not runtime payloads.

See component-manifest.json, native-qualification.json, release-manifest.json and SHA256SUMS for immutable provenance. No paid CI, provider calls, clipboard operations or user desktop input. No new Wayland/Mac/Windows/arm64 execution claims. Historical QA symptom matches, but its exact past map-reset event was not retained.

Web search 1.0.0-beta.2: configured Chrome extraction

Fixes page extraction ignoring the host-selected Chrome executable. SearchEngine and BrowserPool now share the same resolver, and the pool defaults to Chromium instead of attempting unprovisioned Firefox. Explicit Firefox/WebKit configurations remain available. Existing tool names and MCP stdio contracts are unchanged; the old SearchEngine resolver export remains compatible.

Package: openagent-web-search-mcp@1.0.0-beta.2, distributed as the official npm tarball in this release. This is a separately versioned web-search component; connector catalog and OAuth configuration are unchanged.

Use OPENAGENT_CHROME_BINARY=/absolute/path/to/chrome and BROWSER_TYPES=chromium in the MCP process environment. Run node node_modules/openagent-web-search-mcp/dist/index.js after installing the tarball. Package installation does not provision a browser. No npmjs registry publication is claimed.

Validation on the normally installed package, outside the checkout: 5 Node tests, real Bing search (3 results), browser extraction of the public OpenAgent documentation page, public extraction fallback on a JavaScript-rendered local page, healthy browser reuse and actual MCP stdio initialize/listTools. Chrome 155.0.8059.85 was selected explicitly with Playwright's browser cache absent. The local JS page supplements the genuine external search/page checks; no provider results were mocked. All owned browsers were closed.

Tests/build/browser runs were serialized using the shared Mac worker lock; memory pressure remained at 2. No GitHub Actions were used. Native acceptance covers macOS arm64; other operating systems require their consuming product's qualification.

Source: d0b67d50d091517266d470def79540b11083b34a.
Tarball SHA256: b65ae574e2fceb17cd4ded6e1dc6f1826b9b2737f0b946902c1c96b87c9a2338.

OpenAgent Connectors SDK 0.1.13

Adds the opt-in central Go package: signed dynamic catalog, opaque recipient-bound connections, encrypted service credential custody and service-side execution. The existing local runner/OAuth profile remains available; no legacy credentials are migrated.

Includes Go module github.com/openagent-uno/openagent-tools/packages/connectors@v0.1.13, six serial-built platform bundles (runner + broker), Python adapter 0.1.13, full 115-entry compiled catalog, central/v1 JSON schema, source manifest and SHA256SUMS. Official origin and registry public key are compiled into central.OfficialClient; hosts retain authorization and pinned grants.

Validation: complete Go suite, central/auth race tests, synthetic OAuth consent/refresh/restart/disconnect and partial-scope tests, fresh normally installed Python wheel (18 tests and RECORD integrity), and native broker real CoinGecko read/replay/recipient-isolation/disconnect. Release binaries are cross-built, not runtime-tested on every target OS. Windows central-vault hosting remains disabled. Provider-specific central availability is operator-gated: catalog presence is not a qualification of 115 working providers. Token/manual-credential setup and central Shopify enrollment remain unavailable pending their separate work.

Python dependency openagent-tool-protocol==1.0.0b1 is available in the existing Tools v1.0.0-beta.4 release. Install that wheel alongside the connector wheel when using release assets.

Source commit: f6a73a32b52ec3252445a45557846dbd37760199. No GitHub Actions were used for SDK builds.

Shared connectors 0.1.9: calendar ownership metadata and broker startup

Adds provider-reported canShare metadata to Outlook Calendar list/get alongside the existing canEdit and owner fields. No new tools, scopes, write authorization, or catalog entries: 114 official connectors plus Custom MCP and 397 operations remain unchanged. Missing ownership metadata stays absent; malformed nonboolean values are rejected. Existing calendar pagination tokens must restart from the first page after this fixed-projection change.

Fixes connector-auth startup with Google Calendar and Microsoft provider configurations by limiting the Shopify validation context to Shopify. Includes sanitized Microsoft exchange diagnostics already deployed in the common broker. Own-app LocalOAuth and the connector runner keep their existing contracts.

Qualification: one bounded serial Linux worker, Go race tests/vet/vulnerability check, six-platform cross-builds, Python/native MCP and public-host acquisition checks. Only Linux x64 executes natively. No new provider grants, live calendar writes, SharePoint data access, native App build or product GUI qualification is claimed.

OpenAgent Connectors SDK 0.1.12

Connector SDK 0.1.12 adds authenticated Shopify legacy delivery and explicitly negotiated native privacy receipt v2. Relay freshness and receiver audience are authenticated separately from the unchanged original event time; strict provider body HMAC, metadata checks and durable deduplication remain required.

Native receipts retain original occurrence and carry a separate authorization cutoff. Delayed shop/redact requires one unique verified prior uninstall; ambiguous or missing history remains durable and unacknowledgeable. Emitted pairings stay immutable. Trusted hosts must explicitly request receipt_version=2 for new Shopify consent and event delivery; upgrading the SDK alone never attests old-host support. Legacy v1 requests with unsafe pending redaction fail closed with unsupported_receipt_version. Product50 adoption is a separate release.

A startup-only broker flag can pause new Shopify consent during staged cutover while preserving valid callbacks, existing refresh and privacy delivery. It does not attest receiving-host coverage or enable general enrollment.

The catalog remains114 official connectors plus Custom MCP; operations, scopes and host defaults are unchanged. All six native targets are built from one final frozen source. Linux installed/native acquisition, Python/MCP/privacy, Go tests/race/vet and vulnerability/provenance gates must pass before publication; other platforms are cross-compiled. Synthetic fixtures do not establish actual provider delivery or consumer acceptance. No App rebuild is included.

OpenAgent Connectors SDK 0.1.11

Connector SDK 0.1.11 fixes Shopify product-count privacy classification and preserves the active app/shop/scope consent generation when another verified recipient joins. Revocation, first grants and scope changes still establish a new generation. Credential rotation remains independently versioned. The broker also includes an optional installation allowlist for isolated Shopify QA enrollment; it does not enable public Shopify authorization by default.

The catalog remains 114 official connectors plus Custom MCP with 315 reads and 82 actions; no scopes or default activation changes. All six native targets are rebuilt from the frozen source, with Linux native Python/MCP and source privacy/authorization fixtures. Real provider acceptance is qualified separately by each host product.

OpenAgent Connectors SDK 0.1.10

Publish the current shared connector runner and Python adapter from the qualified main snapshot. Postiz errors retain only the existing closed error kind and validated provider HTTP status; raw provider messages, identifiers, URLs, headers and credentials remain redacted. A synthetic no-expiry OAuth fixture verifies the existing raw Authorization and fixed integrations endpoint contract.

The catalog is unchanged: 114 official connectors plus Custom MCP, with 315 reads and 82 actions. No new scopes, provider calls, grants, subscriptions or product upgrades are included.

Qualification covers sequential race tests, vet, vulnerability checks, six platform bundles (runner and auth binaries), the Python wheel, source/checksum provenance, and Linux x64 native MCP/acquisition/privacy checks. macOS, Windows and Linux ARM64 are cross-compiled; native acceptance on those platforms is not claimed. Products must explicitly adopt this SDK version.