Xagent v0.7.0
Task clarification interactions and a local browser runtime, new built-in Chrome and Intercom connectors, expanded HubSpot & Slack, task-lifecycle SSE streaming, plus broad stability and security hardening
๐ Released August 16, 2026
๐ How to update
cd xagent && git pull
docker compose up -d
pip install --upgrade xagent-ai
โ Highlights
New connectors
Built-in Chrome (keyless) and Intercom OAuth, plus expanded HubSpot Marketing Hub and Slack.
Task clarification interactions
Agents raise clarifications mid-task and users reply, with the lifecycle streamed over SSE.
Security & stability hardening
Auth boundaries, answer grounding, MCP fixes, and many reliability improvements.
๐ What's New
๐ค Task clarification interactions
Adds the interaction staging primitive and handoff context manager, typed clarification drafts in the core agent layer, and the task interaction lifecycle service & facade; agents can raise clarifications mid-task and users reply.
๐ Built-in Chrome (keyless) MCP connector
Adds a keyless built-in Chrome connector.
๐ฅ๏ธ Local browser runtime
Adds a local browser runtime for task-runtime browser automation.
๐ก Task lifecycle SSE streaming
Streams task lifecycle events over SSE and surfaces the planning phase from DAG execution events.
๐งพ Task reply API & pending interaction
Exposes the pending interaction and adds the task reply endpoint.
๐ HubSpot connector expanded to Marketing Hub
Adds forms, analytics, emails, and campaigns.
๐ฌ Slack connector expanded
Adds history search, reactions, and file upload.
๐ซ Intercom OAuth connector
Adds an Intercom OAuth connector.
๐ DeepDoc remote parsing
Offloads document parsing to a remote Xinference GPU server.
๐ฅ Team-owned knowledge bases
Team users can create a knowledge base owned by the team.
๐งฉ Task runtime UI extension slots
Adds task-runtime UI extension slots; a new standalone task can pick its execution mode.
๐ Workforce permanent delete & unarchive
Workforce supports permanent delete and unarchive.
๐ Stability & Polish
- Store trace payloads as jsonb and sanitize them on write
- Humanize agent trace event labels for end users
- Remove the assistant avatar icon from chat messages
- Drop redundant metadata from artifact observations
- Make the ShareChatAccessContext exactly-one-entity invariant structural
- Extract an incremental public step projector
- Authorize task Agent identity before SSH resolution
- Accept X-Forwarded-For entries that carry a port
- Gmail: stop best-effort watch provisioning from failing an OAuth callback
- Preserve infrastructure failures at authentication boundaries
- Set no-store Cache-Control on public inline preview responses
- Extend the grounding rule to quantitative data across all final-answer prompts
- Disclose evidence dropped by compaction and allow re-grounding
- Monitor: use a real regex operator in the PostgreSQL JSON guard
- Save knowledge base collection config only after ingest creates documents
- Prefer the task runtime computer tool
- Stop hardcoding zh-CN for browser automation locale
- Resolve concurrent waiting DAG steps deterministically
- Gate image tools on the models' declared abilities
- Import Google Slides from Drive into knowledge bases
- MCP: start the per-server OAuth flow for custom mcp_oauth connectors
- MCP: stop gating connector attach on the editor's own OAuth grant
- MCP: strip all non-tool-name characters from MCP tool names
- MCP: forward structuredContent and read result fields by wire name
- React: reject final_answer that carries an empty answer
- Stream authenticated media via a short-lived per-file ticket
- Narrow the file listing to the current task and stop handing out paths
- Stop unprompted file discovery and unbounded creative regeneration
- Require final deliverable file links
- Close the planning step on dag_execute_end failure
- Bump compose images to 0.6.5