Release · v3.2.0
Super Agent, the execution debugger, and human approvals
Workflows can now plan their own work, pause for a person's approval, and be inspected step by step while they run.
This release lets workflows plan their own work, pause for a person's approval, and be inspected in detail while they run. Agents also get better at reading documents, and we closed several security gaps.
Highlights
Super Agent node
Usually you lay out each step of a workflow yourself. The new Super Agent node is a single step that works out how to break a task down, and hands the pieces to your project's published workflows while it runs, instead of following a sequence you drew by hand. It's available in MagOneAI Studio today.
Why it matters: For tasks where the right steps depend on the situation, one Super Agent can do the planning for you.
Learn more: Super Agent node
Execution debugger
Watch a run live in the new Debugger. At every step you can see the workflow's variables, the shared results agents have stored (the blackboard) and what agents remember.
Why it matters: When a run doesn't do what you expected, you can see exactly where and why.
Learn more: Execution artifacts and the Debugger
Human approvals
Add an approval step to a workflow so it pauses until a person approves, or let an agent request an approval while it runs. Pending approvals appear in MagOneAI Hub for the people assigned.
Why it matters: High-stakes actions, such as sending a contract or making a payment, wait for a person's sign-off.
Learn more: Human task node
Documents, end to end
Agents can now read the charts and diagrams inside PDF and Office files. Scanned documents and slide decks also extract properly.
Learn more: Knowledge bases and RAG
Improvements
- Safer agent memory. What an agent remembers from earlier conversations is now treated as a hint, not as fact, and unverified facts are filtered out. This keeps agents from confidently repeating something wrong. See Memory and variable store.
Security
- Closed request-forgery risks. This kind of attack tricks a platform into making requests to internal systems. We closed these risks in single sign-on setup, webhook delivery and image fetching.
- Signing out takes effect immediately. Access tokens stop working the moment you sign out.