Xagent v0.6.5
New Google Sheets and Notion connectors, Telegram task listing & switching, a Growth Marketing Workforce template, plus security and stability hardening
📅 Released August 9, 2026
🔄 How to update
cd xagent && git pull
docker compose up -d
pip install --upgrade xagent-ai
✅ Highlights
New MCP connectors
Google Sheets and Notion join as built-in connectors, with GA preconfigured on the GA Analyzer template.
Growth Marketing Workforce
A new Growth Marketing Workforce template with type filtering, plus Telegram task listing & switching.
Security & stability hardening
Widget share rate limiting and abuse controls, hardened Computer Use, and many reliability fixes.
🚀 What's New
📲 Telegram task listing & switching
List and switch tasks from within Telegram.
📚 Collapsible sidebar nav groups
Sidebar navigation groups can collapse, with a configurable default state.
📈 Growth Marketing Workforce template
Adds a Growth Marketing Workforce template with type filtering.
📊 Google Sheets connector
Adds a Google Sheets connector.
📉 GA Analyzer preconfigured GA connector
Preconfigures the Google Analytics connector on the GA Analyzer template.
📝 Notion connector
Adds Notion as a built-in remote-MCP connector.
🔒 Hardened Computer Use
Hardens computer-use interactions for safety.
🛡️ Widget share security
Adds widget chat WebSocket rate limiting, 4003 connect-time revocation reporting, and share-path abuse controls (auth, task-create, run quota).
⚡ Concurrent knowledge base search
Searches knowledge base collections concurrently off the event loop.
🧾 Task interaction & lease model
Adds a task interaction request model and a per-acquisition attempt identity on the task lease.
🛠 Stability & Polish
- Preserve Home and Build behavior without route overrides
- Route regional callbacks and deployment clients
- Make the registered execution scope resolver authoritative over snapshots
- Serialize Telegram and Feishu bot sync
- Safely render errors from non-update builder actions
- Retry the Auto model when reasoning is mandatory
- Distinguish transient checkpoint load failures from missing checkpoints
- Reconcile pending delivery rows at turn finalize
- Fail closed without public deployment targets
- Refuse a client-supplied execution scope at the task-create boundary
- Gmail: drop DISTINCT from the trigger lookup over JSON config
- Fail closed when a delegated agent pauses or fails
- Resync cached WebToolConfig with the resolved per-turn execution scope
- Reject compressed OAuth responses when size-capping
- Render real copy in the home route's SSG loading state
- Isolate sandbox ownership per deployment namespace
- Replace flaky wall-clock budgets in Pytest Fast (web) tests
- Skip the agent binding fetch when the user is not in a team
- Require an explicit knowledge base name on creation
- Open chat markdown links in a new tab instead of the widget iframe
- Render generated videos as inline players in chat
- Report taken collection names as 409 conflict, not 403 denial
- Emit offline SQL for the checkpoint anchor migration
- Compact fragmented LanceDB tables after ingestion
- Stage task continuation commands in caller transactions and pin task status semantics
- Anchor the task checkpoint pointer to the exact trace row
- Bump compose images to 0.6.4