stagehand-python@4.2.0a0.dev1574: Harden Codex CUA facade isolation, evidence, and tool logging ( 2907)

Browserbase Stagehand releases published stagehand-python@4.2.0a0.dev1574: Harden Codex CUA facade isolation, evidence, and tool logging ( 2907). This automated release-watch entry was generated from the project's official GitHub release feed and is kept separate from human-reviewed editorial analysis. Release notes: Stack Top-of-stack child of 2906 ( evals/consolidation-17-gemini-cua ). Review against that immediate parent, not main . Summary Port the remaining focused Codex/Stagehand facade hardening from the experimental Codex worktree without replacing the consolidation stack's newer shared runtime. Add opt-in facade JSONL tool logging: request/session IDs, actual arguments/code, paired starts/ends, timing, errors, bounded result previews and browser readiness. Never write logs to MCP stdout; redact known credentials and omit image payloads. Escape Unicode line separators in text tool results, addressing the stream parsing failure observed in the Hostelworld benchmark traces. Share isolated HOME/CODEX HOME creation between the SDK example and evals; do not inherit operator plugins/config/thread context. Preserve file-based auth. Abort unexpected MCP servers, await observation capture, and match…

• Review the official Browserbase Stagehand releases release notes before upgrading.
• Check compatibility, migration, and security notes against your current agent stack.
• Run focused regression tests before production rollout.