vercel-labs/agent-browser v0.39.3 on GitHub

Fixed auth encryption keys being overwritten when the configured key or existing key file is invalid, preserving access to previously saved credentials (#2178)
Fixed project config trust so auto-discovered files cannot set executable paths, browser arguments, or plugins; plugin add now writes the user config by default (#2180)
Fixed MCP access limits so tool arguments cannot override the server's network, file, policy, or host access settings (#2181)
Fixed inspect WebSocket origins so browser connections must come from the local Chrome DevTools origin (#2182)
Fixed stale process cleanup so daemon restarts, close --all, and dashboard shutdown check process identity before sending signals (#2183)
Fixed copied Chrome profiles so their saved preferences mark the copy as cleanly closed, avoiding repeated crash-restore prompts while retaining saved tabs (#2189)
Fixed dashboard chat sessions so commands stay in their thread's session, background turns remain attached to that session, and closed sessions stop their chat (#2190)
Fixed Windows output capture so detached daemons and dashboards do not hold the CLI's output pipes open, and MCP output draining is bounded after child exit (#2160)

Improved CDP startup attachment so connect and --cdp wait up to two seconds for a debugging port that is still refusing connections (#2159)