Stagehand 3.7.0 is live.

Use setDomainPolicy() to allowlist or blocklist the domains your agent can visit. Stagehand automatically closes any popup that tries to violate the policy.

await stagehand.context.setDomainPolicy({
  allowedDomains: ["www.browserbase.com"],
});

Read the docs →

Plus:

• New CUA models: google/gemini-3.5-flash and the GPT-5.6 family (sol, luna, terra).

Fixes:

• CUA keypress actions now send key combinations as a single chord.
• Malformed UTF-16 snapshot text is repaired before it reaches model prompts.
• Removed a noisy AI SDK warning logged on every hybrid/DOM agent.execute() call.
• Fixed a crash when passing an MCP Client instance into agent({ integrations }).