What's Changed

• fix(v3): set additionalProperties false on nullable act action schema by @miguelg719 in #3150
• fix(v3): honor CAPTCHA awareness options for local attachments by @miguelg719 in #3114
• fix(v3): avoid forced done tool use for newer Claude models by @shubh24 in #3132
• Fix(v3): use XPath as fallback when the page has a shadow root by @akeimach in #3287
• [v3]: rm browse by @seanmcguire12 in #3306
• [v3]: pin patched node version in ci by @seanmcguire12 in #3307
• [chore]: bump node version in SEA binary by @seanmcguire12 in #3312

Full Changelog: https://github.com/browserbase/stagehand/compare/@browserbasehq/stagehand@3.7.3...stagehand-server-v3/v3.7.7

What's Changed

• Version Packages by @github-actions[bot] in #2778
• [V3]: rm docs pkg by @seanmcguire12 in #2830
• [V3]: fix xpath building logic for coordinates inside of iframes by @seanmcguire12 in #2836
• [V3]: bump various transitive deps by @seanmcguire12 in #2842
• [V3]: bump non core transitive deps by @seanmcguire12 in #2845

Full Changelog: stagehand-server-v3/v3.7.5...stagehand-server-v3/v3.7.6

Patch Changes

• #2842 f86e609 Thanks @seanmcguire12! - update the MCP SDK to v1.30 and refresh supporting dependency versions

• #2836 94a0ee4 Thanks @seanmcguire12! - fix cross-frame xpaths building logic for coordinates inside of iframes.

What's Changed

• Contrib/2384 by @miguelg719 in #2385
• chore(release): retarget release automation from main to v3 by @miguelg719 in #2660
• fix(v3): normalize CUA coordinates to actual viewport by @miguelg719 in #2767
• fix(v3): preserve provider for structured output by @miguelg719 in #2775
• Version Packages by @github-actions[bot] in #2662
• fix(server-v3): release useTouch parameter by @miguelg719 in #2711

Full Changelog: https://github.com/browserbase/stagehand/compare/browse@0.9.6...stagehand-server-v3/v3.7.5

Patch Changes

• #2356 04c8ee4 Thanks @Kylejeong2! - Replace raw daemon socket connection errors with a human-readable message that includes the exact browse open command needed to start the session.

• #2361 2a6e20b Thanks @shrey150! - Warn when auto-loading variables from .env and add BROWSE_LOAD_DOTENV to opt out ahead of a future release where this will be off by default.

What's Changed

• feat(evals): group trajectories by run and cross-link Braintrust experiments by @miguelg719 in #2177
• chore(docs): Add docs ownership and review rules by @Kylejeong2 in #2226
• feat(core): support OpenAI Chat Completions via openaiEndpointFormat by @miguelg719 in #2347
• feat(server-v3): expose OpenAI endpoint format by @miguelg719 in #2374

Full Changelog: stagehand-server-v3/v3.7.3...stagehand-server-v3/v3.7.4

What's Changed

• [docs]: add docs for setDomainPolicy by @seanmcguire12 in #2289
• fix: silence AI SDK "system message in messages" warning in act/extract/observe by @shrey150 in #2359
• [STG-2510] fix: source eval browser skill from packages/cli browse SKILL.md by @shrey150 in #2334
• chore(evals): add sonnet-5, gpt-5.6, and grok pricing to braintrust UI publisher by @miguelg719 in #2318
• feat: warn and add opt-out flag for browse CLI .env auto-loading by @shrey150 in #2361
• chore(docs): Replace “LLM model” wording in Stagehand docs by @Kylejeong2 in #2366
• feat(evals): add OdysseysBench agent benchmark by @miguelg719 in #2275
• chore: cut stagehand-server-v3 catchup release by @shrey150 in #2367

Full Changelog: https://github.com/browserbase/stagehand/compare/@browserbasehq/stagehand@3.7.0...stagehand-server-v3/v3.7.3

Minor Changes

• #2283 871ca7e Thanks @seanmcguire12! - add context.setDomainPolicy({ allowedDomains: ["allowed.domain"] }) which allows users to define a set of domains that are accessible to stagehand

• #2274 f31980f Thanks @seanmcguire12! - add context.setDomainPolicy({blockedDomains: ["some.domain"]}) which allows users to define a list of domains that will be blocked by stagehand

Patch Changes

• #2305 cd1daad Thanks @shrey150! - Remove the noisy AI SDK "system message in messages" warning logged on every hybrid/DOM agent.execute() call.

• #2328 d287ff4 Thanks @miguelg719! - Allow modelName "auto" in the constructor and per-primitive model overrides when running through the Stagehand API

• #2294 3938590 Thanks @seanmcguire12! - automatically close popups that violate user defined domain policy

• #2298 892701a Thanks @seanmcguire12! - Fix CUA keypress actions to press key combinations as a single chord.

• #2345 21826c7 Thanks @monadoid! - Repair malformed UTF-16 snapshot text before it reaches model prompts.

• #2306 8dcef1b Thanks @seanmcguire12! - Use the screenshot provider's declared media type when sending CUA image payloads. The setScreenshotProvider callback now returns ScreenshotProviderResult ({ base64, mediaType }) instead of a bare base64 string.

• #2273 93a23d3 Thanks @miguelg719! - Add support for the new google/gemini-3.5-flash computer-use tools model

• #2278 022d68f Thanks @shrey150! - Fix TypeError: Converting circular structure to JSON when creating an agent with MCP integrations that include a Client instance (e.g. a local/stdio server from connectToMCPServer). The agent-creation log serialized the raw integrations array, and a live MCP Client is circular. It now logs a safe descriptor (URL strings kept, client instances summarized) so agent({ integrations: [client] }) works.

• #2288 bb5ffa6 Thanks @seanmcguire12! - clean up cdp session event handlers on target detach

Minor Changes

• #2246 303ab2c Thanks @shrey150! - browse screenshot now writes a file by default instead of printing base64 to stdout. Bare invocations save to screenshot-<yyyymmdd-hhmmss>.<type> in the current directory (with a collision counter instead of overwriting) and print { "saved": "<path>" }. A new --base64 flag preserves the legacy behavior of printing { "base64": "..." } to stdout; it is mutually exclusive with --path. --path behavior is unchanged.

  Note for scripts that parsed the bare-invocation base64 output: pass --base64 to keep the old stdout contract.

Patch Changes

• #2250 8b83bb7 Thanks @shrey150! - Fix browse skills add on Windows and bound the unbounded installer stages.

  • Quote the npx command and arguments when spawning through cmd.exe (shell: true for .cmd/.bat shims), so the default C:\Program Files\nodejs\npx.cmd path and install paths with spaces (e.g. C:\Users\First Last\...) no longer split at the space and fail with "'C:\Program' is not recognized".
  • Kill the npx skills add child after a 180s deadline (SIGTERM, then SIGKILL) and fail with a clear message and a distinct skill_install_timeout telemetry result code instead of hanging forever.
  • Bound the catalog and skill-file fetches with a 10s abort timeout, preserving the existing catalog-unavailable fallback semantics when a fetch hangs.

Minor Changes

• #2178 c49a3fc Thanks @seanmcguire12! - add support for WebMCP

Patch Changes

• #2217 147e310 Thanks @monadoid! - Add Azure OpenAI Microsoft Entra ID model auth support.

• #2231 cf3603d Thanks @miguelg719! - Add claude-fable-5 support: native structured outputs via the @ai-sdk/anthropic bump, adaptive thinking (including the new "xhigh" effort) on the agent path, the API's built-in server-side refusal fallback to claude-opus-4-8, and auto tool choice for the final done call on models that reject forced tool use.

• #2233 8d7d414 Thanks @seanmcguire12! - Normalize URLs in ActCache key derivation by sorting query parameters before hashing. Semantically equivalent URLs that differ only in parameter order (e.g. ?utm_source=email&id=42 vs ?id=42&utm_source=email) now hit the cache instead of silently missing. Fragments and duplicate keys are preserved.

• #2229 fd42e65 Thanks @seanmcguire12! - launch local browser with --enable-features=WebMCPTesting,DevToolsWebMCPSupport by default

• #2220 a64c6b7 Thanks @monadoid! - Fix Stagehand-generated shadow-root XPath resolution so deterministic actions can target elements inside web components.

• #2132 ed3e566 Thanks @miguelg719! - Add canonical verifier evidence normalization for screenshots and text signals without requiring image dependencies in core installs.

• #2133 840aac8 Thanks @miguelg719! - Add the rubric-based verifier engine with normalized public rubric output and bounded failure-step parsing.