Flocks v2026.7.23

What's Changed

WebUI, Projects & Sessions

• feat(webui): add project-based session management with project creation, rename, deletion, sharing, folder browsing, path synchronization, and collapsible sidebar groups by @xiami762 in #553, #585
• fix(webui): improve chat rendering, absolute-path handling, product-name fallback, statistics access feedback, workflow model selection, unavailable-model errors, and remote interactive prompts by @xiami762, @duguwanglong and @JohnYin-hub in #364, #574, #582, #586, #591, #592, #598

Channels, Skills & Plugins

• feat(channel): add Slack channel support with access controls, inbound media, configuration preflight, and channel session routing by @JohnYin-hub in #581
• fix(plugins,skills): isolate failed plugin changes and restore task context and bundled skill discovery by @duguwanglong and @xiami762 in #564, #597

Workflow & Tools

• feat(workflow): add API-trigger integration status, persist configurable service ports, and provide complete tool context for trigger executions by @duguwanglong in #587, #589, #590
• feat(tool): make failure-based automatic disabling configurable and synchronize its state across tool listings and runtime by @duguwanglong in #577, #595, #605
• fix(workflow): cap HTTP triage LLM concurrency to improve execution stability by @duguwanglong in #573

Device & Security Integrations

• fix(device): support template-based device creation and updates, authentication-state configuration, and enabled-field preservation by @xiami762 in #601, #604
• feat(security): align TDP threat tools, remove the default incident duration limit, and correctly encode SkyEye alarm IP filters by @xiami762 in #567, #572, #584
• fix(device-plugins): repair bundled WAF and EDR integrations and add automatic login, daemon recovery, and token capture for Sangfor EDR by @duguwanglong and @luguili in #578, #593

Providers & Models

• feat(provider): add Kimi K2.7 Code to ThreatBook CN and IO, improve default provider selection and API-key display, and remove deprecated DeepSeek model names by @duguwanglong, @xiami762 and @JohnYin-hub in #566, #568, #579, #583

Runtime, Deployment & Upgrade

• refactor(updater): simplify and harden cross-platform upgrade handoff and timeout recovery by @xiami762 in #571, #608, #612
• fix(runtime): improve Docker service startup, preserve legacy port overrides, reduce noisy warnings, and improve Windows Chrome debugging guidance by @xiami762, @duguwanglong and @JohnYin-hub in #570, #575, #588
• fix(runtime): retry empty transport errors and unblock pending MCP calls when their connection owner exits by @xiami762 in #576, #596

Chinese Release Notes

WebUI、项目与会话

• feat(webui)：新增项目化会话管理，支持项目创建、重命名、删除、分享、目录浏览、路径同步及侧边栏分组折叠 by @xiami762 in #553, #585
• fix(webui)：集中优化聊天内容渲染、绝对路径处理、产品名称回退、统计数据访问反馈、工作流模型同步、模型不可用提示及远程交互提问 by @xiami762, @duguwanglong and @JohnYin-hub in #364, #574, #582, #586, #591, #592, #598

通信渠道、技能与插件

• feat(channel)：新增 Slack 渠道，支持访问控制、入站媒体、配置预检及渠道会话路由 by @JohnYin-hub in #581
• fix(plugins,skills)：隔离并回滚失败的插件变更，恢复任务上下文及内置技能发现 by @duguwanglong and @xiami762 in #564, #597

工作流与工具

• feat(workflow)：新增 API 触发器集成状态、服务端口持久化及完整的触发执行工具上下文 by @duguwanglong in #587, #589, #590
• feat(tool)：支持配置工具失败自动禁用策略，并统一工具列表与运行时状态 by @duguwanglong in #577, #595, #605
• fix(workflow)：限制 HTTP 研判任务的 LLM 并发量，提升执行稳定性 by @duguwanglong in #573

设备与安全集成

• fix(device)：完善基于模板的设备创建和更新，支持认证状态配置并保留 enabled 字段 by @xiami762 in #601, #604
• feat(security)：统一 TDP 威胁工具命名、移除事件查询默认时长限制，并修复 SkyEye 告警 IP 参数编码 by @xiami762 in #567, #572, #584
• fix(device-plugins)：修复内置 WAF 与 EDR 集成，为深信服 EDR 增加自动登录、daemon 恢复及令牌采集 by @duguwanglong and @luguili in #578, #593

Provider 与模型

• feat(provider)：ThreatBook 国内与国际 Provider 新增 Kimi K2.7 Code，优化默认 Provider 选择及 API Key 展示，并移除废弃的 DeepSeek 模型名称 by @duguwanglong, @xiami762 and @JohnYin-hub in #566, #568, #579, #583

运行时、部署与升级

• refactor(updater)：简化并增强跨平台升级交接及超时恢复流程 by @xiami762 in #571, #608, #612
• fix(runtime)：优化 Docker 服务启动与旧版端口兼容，减少无效告警，并完善 Windows Chrome 调试指引 by @xiami762, @duguwanglong and @JohnYin-hub in #570, #575, #588
• fix(runtime)：支持重试空传输异常，并在连接所有者退出时解除挂起的 MCP 调用 by @xiami762 in #576, #596

Flocks v2026.7.15

What's Changed

Channels & Messaging

• feat(email): add a built-in email channel with inbound/outbound messaging, secure credential handling, WebUI configuration, and clearer mail-host validation guidance by @JohnYin-hub in #547 #549 #554
• feat(whatsapp): add the WhatsApp channel and improve bundled CA support, pairing, and LID alias allowlist matching by @JohnYin-hub in #539 #541 #545
• fix(channel): expose extended messaging channels to Rex and improve channel message, IM send, and scheduled-task compatibility by @JohnYin-hub in #551

Browser, Sessions & WebUI

• fix(browser): harden daemon lifecycle, IPC, cleanup, and connection handling, and reuse connected daemons when saving browser state by @xiami762 in #543 #552
• perf(webui): accelerate shared resource loading and improve chat, session, tools, monitoring, routing, and plugin-page responsiveness by @duguwanglong in #535
• fix(session,webui): make TUI-created sessions manageable in WebUI and serve static assets with stable MIME types by @xiami762 and @duguwanglong in #534 #546

SOC & Security Integrations

• feat(soc): upgrade SOC AI processing visuals, dashboard APIs, workflow persistence, and alert-triage presentation by @duguwanglong in #548
• feat(tdp): add real-time threat monitoring and custom rule APIs, and align the OneSig skill with Strategy API v2.5.3 by @xiami762 and @duguwanglong in #533 #550

Reliability, Storage & Docs

• fix(system): improve SQLite recovery for stale handles and unsupported environments, simplify server middleware and supervisor liveness checks, and handle missing Windows netstat output by @stephamie7, @xiami762, and @duguwanglong in #536 #537 #540 #556 #561
• docs: refresh README and service access guidance by @xiami762 in #542

Chinese Release Notes

渠道与消息

• feat(email)：新增内置邮件渠道，支持邮件收发、安全凭据处理、WebUI 配置及更清晰的邮件主机校验提示 by @JohnYin-hub in #547 #549 #554
• feat(whatsapp)：新增 WhatsApp 渠道，并完善内置 CA、配对流程和 LID 别名白名单匹配 by @JohnYin-hub in #539 #541 #545
• fix(channel)：向 Rex 开放更多消息渠道能力，并改善渠道消息、IM 发送和定时任务兼容性 by @JohnYin-hub in #551

Browser、会话与 WebUI

• fix(browser)：强化 daemon 生命周期、IPC、清理和连接管理，保存浏览器状态时复用已连接 daemon by @xiami762 in #543 #552
• perf(webui)：优化共享资源加载，提升聊天、会话、工具、监控、路由和插件页面响应速度 by @duguwanglong in #535
• fix(session,webui)：支持在 WebUI 管理 TUI 创建的会话，并稳定静态资源 MIME 类型 by @xiami762 and @duguwanglong in #534 #546

SOC 与安全集成

• feat(soc)：升级 SOC AI 处理可视化、看板 API、工作流持久化和告警研判展示 by @duguwanglong in #548
• feat(tdp)：新增实时威胁监控与自定义规则 API，并将 OneSig 技能适配至策略 API v2.5.3 by @xiami762 and @duguwanglong in #533 #550

稳定性、存储与文档

• fix(system)：改进 SQLite 旧连接与不支持环境下的恢复处理，简化服务中间件与 supervisor 存活探测，并兼容 Windows netstat 无输出场景 by @stephamie7, @xiami762, and @duguwanglong in #536 #537 #540 #556 #561
• docs：更新 README 与服务访问指引 by @xiami762 in #542

Flocks v2026.7.8

Flocks v2026.7.8 Release Notes

What's Changed

WebUI, FlocksHub & SOC Experience

• feat(hub,soc): add the FlocksHub SOC workspace component, localized workflow names, streamed scenario-suite install progress, and collapsible WebUI navigation groups by @duguwanglong in #517 #526
• fix(soc): support alert time filters and localized labels, apply alert filters in contract queries, improve SOC chart sizing, and clean up workspace uninstall/legacy installs by @duguwanglong in #517 #527
• fix(webui): speed up plugin-backed page loading, ignore the TypeScript baseUrl deprecation warning, and align the home agent count with the agent list by @duguwanglong and @john-yin2333 in #519 #525 #526

Device Integrations & Security Workflows

• feat(device): add Chaitin Dongjian, Muyun API, and SafeLine WAF integrations, including vendor logos and normalized device metadata by @duguwanglong in #512
• feat(device): add Sangfor aTrust v3 zero-trust integration and merge Sangfor zero-trust support into the bundled integrations by @duguwanglong in #524
• feat(edr,skyeye): add Sangfor EDR simulated/browser login support and refine SkyEye/SkyEye Sensor auth-state handling by @luguili in #521
• fix(device): refresh device templates when the page regains focus and hide the aTrust locale-cookie field by @xiami762 and @duguwanglong in #510 #524

CLI, Installer & Upgrade Reliability

• refactor(cli): introduce the service supervisor control plane and process adapters, serve WebUI through the supervised backend, preserve daemon lifecycle compatibility, and improve service status output by @xiami762 in #504
• fix(updater,cli): coordinate supervisor handoff during upgrades, recover failed handoff/start flows, defer restarts safely, clean orphan service ports, and resume services after failed upgrades by @xiami762 in #504
• feat(doctor): add the doctor source-installer repair command, detect current service status, support Windows supervisor control/startup, build WebUI after dependency install, and hand off Windows doctor before install by @xiami762 and @duguwanglong in #507 #529
• test(updater): add the manual WebUI branch upgrade flow and improve Windows upgrade autotest artifact matching/fallback handling by @xiami762 and @stephamie7 in #505 #511

Workflow, Skills, Storage & Security

• feat(workflow): add workflow runtime-config management with a dedicated tool and guide, route config updates through the manager, and make runtime config updates idempotent by @duguwanglong in #517
• feat(skill): support SafeSkill install sources, isolate SafeSkill install home directories, and clean SafeSkill process trees on Windows by @duguwanglong in #509
• fix(storage): recover automatically from corrupt SQLite stores by @xiami762 in #513
• security(workflow): harden webhook-trigger execution against code injection/RCE by @wzg2311 and @duguwanglong in #455

Runtime, Provider & Channel Reliability

• fix(llm): retry incomplete chunked LLM streams to improve long-running provider calls by @xiami762 in #515
• fix(mcp): serialize MCP startup initialization to improve reconnect stability by @duguwanglong in #514
• fix(provider): support max_completion_tokens for OpenAI-compatible providers by @john-yin2333 in #528
• fix(channel): refresh stale channel session bindings and preserve email addresses when stripping mentions by @xiami762 and @duguwanglong in #508 #523

Pro, Branding & Maintenance

• feat(webui,pro): support custom UI branding while preserving Pro default branding by @Jieatgit and @chenjie in #506
• fix(pro): allow Pro downgrade without console sync and report/display the correct core version after downgrade by @Jieatgit, @chenjie, and @stephamie7 in #516 #518
• chore(release): update the project version to v2026.7.8 by @stephamie7 in #530

Chinese Release Notes

WebUI、FlocksHub 与 SOC 体验

• feat(hub,soc)：新增 FlocksHub SOC 工作区组件、工作流名称本地化、场景套件安装进度流式展示，以及 WebUI 可折叠导航分组 by @duguwanglong in #517 #526
• fix(soc)：支持告警时间筛选与本地化标签，在 contract 查询中正确应用告警筛选，并优化 SOC 图表尺寸、工作区卸载和旧版 SOC 工作区清理 by @duguwanglong in #517 #527
• fix(webui)：提升插件页面加载速度，忽略 TypeScript baseUrl 废弃告警，并修复首页 Agent 数量与列表不一致问题 by @duguwanglong and @john-yin2333 in #519 #525 #526

设备集成与安全工作流

• feat(device)：新增长亭 Dongjian、牧云 API、SafeLine WAF 设备集成，包含厂商 Logo 与设备元数据规范化 by @duguwanglong in #512
• feat(device)：新增深信服 aTrust v3 零信任集成，并合入深信服零信任相关内置能力 by @duguwanglong in #524
• feat(edr,skyeye)：新增深信服 EDR 模拟/浏览器登录支持，并优化 SkyEye / SkyEye Sensor 登录态处理 by @luguili in #521
• fix(device)：页面重新聚焦时刷新设备模板，并隐藏 aTrust locale cookie 字段 by @xiami762 and @duguwanglong in #510 #524

CLI、安装与升级可靠性

• refactor(cli)：引入服务 Supervisor 控制平面与进程适配器，通过受管后端提供 WebUI，保留 daemon 生命周期兼容性，并优化服务状态输出 by @xiami762 in #504
• fix(updater,cli)：升级时协调 Supervisor handoff，恢复失败 handoff/start 流程，安全延迟重启，清理孤立服务端口，并在升级失败后恢复服务 by @xiami762 in #504
• feat(doctor)：新增 doctor source-installer repair 命令，检测当前服务状态，支持 Windows Supervisor 控制/启动，依赖安装后构建 WebUI，并在 Windows 安装前转交 doctor 流程 by @xiami762 and @duguwanglong in #507 #529
• test(updater)：新增手动 WebUI 分支升级流程，并优化 Windows 升级自动测试 artifact 匹配与 fallback by @xiami762 and @stephamie7 in #505 #511

工作流、技能、存储与安全

• feat(workflow)：新增工作流运行时配置管理工具与指南，将配置更新统一路由到 manager，并保证运行时配置更新幂等 by @duguwanglong in #517
• feat(skill)：支持 SafeSkill 安装源，隔离 SafeSkill 安装 home 目录，并在 Windows 上清理 SafeSkill 进程树 by @duguwanglong in #509
• fix(storage)：支持从损坏的 SQLite 存储中自动恢复 by @xiami762 in #513
• security(workflow)：加固 webhook trigger 执行，防护代码注入 / RCE 风险 by @wzg2311 and @duguwanglong in #455

运行时、Provider 与渠道可靠性

• fix(llm)：为不完整的 chunked LLM 流增加重试，提升长时间 Provider 调用稳定性 by @xiami762 in #515
• fix(mcp)：串行化 MCP 启动初始化，提升重连稳定性 by @duguwanglong in #514
• fix(provider)：OpenAI-compatible Provider 支持 max_completion_tokens by @john-yin2333 in #528
• fix(channel)：刷新过期渠道会话绑定，并在剥离 mention 时保留邮箱地址 by @xiami762 and @duguwanglong in #508 #523

Pro、品牌与维护

• feat(webui,pro)：支持自定义 UI 品牌，同时保留 Pro 默认品牌 by @Jieatgit and @chenjie in #506
• fix(pro)：允许 Pro 降级时不依赖 console sync，并在降级后正确显示/上报 core 版本 by @Jieatgit, @chenjie, and @stephamie7 in #516 #518
• chore(release)：更新项目版本到 v2026.7.8 by @stephamie7 in #530

Flocks v2026.7.1

Flocks v2026.7.1 Release Notes

What's Changed

WebUI, Workspace & SOC Experience

• feat(webui,soc): add SOC workspace navigation, manifest-driven workspace sections, settings workspace shell, SQLite-backed SOC data, and Pro account layout refinements by @duguwanglong in #487 #490
• feat(workspace): improve workspace file management with system file-manager opening, sortable tables, and richer previews for Markdown, CSV, images, PDFs, and memory files by @Jieatgit in #486

Device Integration & Rex Workbench

• feat(device): guide device onboarding through the Rex workbench and add the device_manage update action by @xiami762 in #482 #498
• fix(device): refresh device status/default credentials, preserve and clear secret fields correctly, and show vendor logos in the device integration list by @xiami762 in #493 #495 #497

Workflow & Storage

• feat(workflow): make filesystem workflow definitions the primary source, default new workflows to explicit edge mappings and vertex-cache dataflow, add schema linting, and reduce execution memory/storage growth by @xiami762 in #492

Session & Runtime Reliability

• fix(session): stabilize cache invalidation during deletes, preserve process group expansion state, and add clipboard fallback support for remote deployments by @duguwanglong and @xiami762 in #485 #488 #489
• fix(runtime): reconnect stale SSH session connections to improve long-running or resumed remote interactions by @xiami762 in #499

Pro, CI & Maintenance

• fix(pro): ship Pro update bug fixes by @stephamie7 in #496
• ci: add Windows upgrade autotest dispatch coverage by @stephamie7 in #484

Chinese Release Notes

WebUI、工作区与 SOC 体验

• feat(webui,soc)：新增 SOC 工作区导航、基于 manifest 的工作区分组、设置工作区壳、SQLite 驱动的 SOC 数据能力，并优化 Pro 账号区布局 by @duguwanglong in #487 #490
• feat(workspace)：增强工作区文件管理，支持在系统文件管理器中打开、表格排序，以及 Markdown、CSV、图片、PDF、memory 文件等更丰富预览 by @Jieatgit in #486

设备集成与 Rex 工作台

• feat(device)：通过 Rex 工作台引导设备接入，并为 device_manage 新增 update 操作 by @xiami762 in #482 #498
• fix(device)：刷新设备状态与默认凭据，修复密钥字段保留/清空逻辑，并在设备集成列表展示厂商 Logo by @xiami762 in #493 #495 #497

工作流与存储

• feat(workflow)：工作流定义改为文件系统优先，新工作流默认使用显式边映射与 vertex-cache 数据流，新增 schema lint，并降低执行内存与存储增长 by @xiami762 in #492

会话与运行时可靠性

• fix(session)：稳定删除时的缓存失效逻辑，保留进程分组展开状态，并为远程部署补充剪贴板 fallback by @duguwanglong and @xiami762 in #485 #488 #489
• fix(runtime)：重连过期 SSH 会话连接，提升长时间运行或恢复远程交互的可靠性 by @xiami762 in #499

Pro、CI 与维护

• fix(pro)：修复 Pro 更新相关问题 by @stephamie7 in #496
• ci：新增 Windows 升级自动测试调度覆盖 by @stephamie7 in #484

Flocks v2026.6.24

What's Changed

WebUI & UX

• fix(webui): default the WebUI to light theme for new users by @xiami762 in #468
• fix(session): refine process folding, question result display, and bash output rendering by @duguwanglong in #470
• feat(task): add Rex-assisted task creation/editing guides and form extraction helpers by @stephamie7 in #481

Device Integration & Rex

• feat(device): add Rex-guided device onboarding with template-aware draft extraction and one-click form fill by @stephamie7 in #471
• fix(device): improve no-device guidance in device context prompts by @stephamie7 in #481

Storage, Task & Workflow

• feat(storage): split workflow KV data and task tables into workflow.db / tasks.db with compatibility routing by @xiami762 in #465
• fix(storage): keep source rows during multi-db migration and harden migration verification by @xiami762 in #474
• fix(task): tolerate legacy task text encoding and migrate old task rows safely by @xiami762 in #463
• fix(workflow): trim workflow execution history by per-workflow index and clean execution indexes on workflow deletion by @xiami762 in #465

Runtime & Windows

• fix(cli): cap service log files before daemon startup by @xiami762 in #462
• fix(cli,updater): tolerate recoverable Windows Node build assertions when WebUI assets are already produced by @xiami762 in #472

Docs, CI & Release

• docs(readme): center README title/tagline and refresh header badges by @xiami762 in #473
• chore(ci): add automatic sync-main-into-dev workflow after main updates by @stephamie7 in #469
• revert(updater): revert temporary Pro update port before release by @stephamie7 in #476
• chore(release): bump project version to v2026.6.24 by @stephamie7 in #477

Chinese Release Notes

WebUI 与体验

• fix(webui)：新用户默认使用浅色主题，减少系统深色模式带来的首次使用不确定性 by @xiami762 in #468
• fix(session)：优化会话过程折叠、问题工具结果展示与 bash 输出渲染，过程信息更清晰 by @duguwanglong in #470
• feat(task)：任务创建/编辑页新增 Rex 辅助引导、案例入口和表单提取能力 by @stephamie7 in #481

设备接入与 Rex

• feat(device)：设备接入新增 Rex 引导模式，可根据用户描述匹配模板、提取草稿并一键回填表单 by @stephamie7 in #471
• fix(device)：无已接入设备时，Rex 与设备上下文会更明确提示用户前往设备接入页面添加设备 by @stephamie7 in #481

存储、任务与工作流

• feat(storage)：将 workflow 与 task 数据拆分到 workflow.db / tasks.db，并保持原 Storage API 路由兼容 by @xiami762 in #465
• fix(storage)：多库迁移时保留源数据并增强迁移校验，降低升级风险 by @xiami762 in #474
• fix(task)：兼容历史任务中的非 UTF-8 文本，旧任务数据迁移更稳 by @xiami762 in #463
• fix(workflow)：工作流执行历史改为按 workflow 索引裁剪，删除工作流时同步清理执行索引与步骤数据 by @xiami762 in #465

运行时与 Windows

• fix(cli)：daemon 启动前限制服务日志文件大小，避免长期运行后日志过大 by @xiami762 in #462
• fix(cli,updater)：Windows 下 WebUI 构建产物已生成但 Node 退出断言时可恢复继续，减少升级/启动失败 by @xiami762 in #472

文档、CI 与发布

• docs(readme)：调整 README 标题、标语与徽章展示 by @xiami762 in #473
• chore(ci)：新增 main 更新后自动同步到 dev 的 GitHub Actions 工作流 by @stephamie7 in #469
• revert(updater)：回滚临时 Pro 更新修复移植，避免带入未准备发布的升级逻辑 by @stephamie7 in #476
• chore(release)：版本更新至 v2026.6.24 by @stephamie7 in #477

Contributors

• @stephamie7
• @xiami762
• @duguwanglong

Flocks v2026.6.18

What's Changed

WebUI & Session UX

• feat(webui,session): add paged session history and earlier-message loading for large conversations by @stephamie7 in #461
• fix(webui,session): use lightweight session-manager list loading, keep optimistic new sessions, and preserve the current list during background refresh failures by @stephamie7 in #461
• fix(webui,session): refine last-selected-session restore behavior and keep valid selected sessions even when they are not in the current sidebar page by @stephamie7 in #461

Session Backend & Performance

• feat(session): add lightweight session list responses plus paged message API with lazy message-part hydration by @stephamie7 in #461
• fix(session): avoid loading every message part when reading recent history, including legacy message-part blobs by @stephamie7 in #461
• fix(session): include file, thinking, compacted, finish, and error metadata consistently in message responses by @stephamie7 in #461

Tooling, Agents & Streaming

• fix(session): record invalid tool-argument parse errors as failed tool parts without executing the registry by @stephamie7 in #461
• fix(delegate_task): stop blanket-denying nested delegate_task / task permissions so delegated agents keep their configured permission model by @stephamie7 in #461
• fix(webui): update streaming fallback polling to use the paged message API and avoid false completion while tools are still running by @stephamie7 in #461

Windows Install & Packaging

• fix(installer): remove previous Windows install directories before copying new files, with clearer retry guidance when files are locked by @stephamie7 in #461
• fix(packaging): remove existing {app}\flocks during Inno Setup install to prevent stale files from surviving upgrades by @stephamie7 in #461
• chore(version): bump Flocks version to v2026.6.18 by @stephamie7 in #461

Chinese Release Notes

WebUI 与会话体验

• feat(webui,session)：会话消息支持分页加载与“加载更早消息”，大历史会话打开更快 by @stephamie7 in #461
• fix(webui,session)：会话侧边栏改为轻量列表接口，支持加载更多，并在后台刷新失败时保留当前列表 by @stephamie7 in #461
• fix(webui,session)：优化上次选中会话恢复逻辑，避免首次进入自动跳回旧会话，同时保留当前分页外但仍有效的会话 by @stephamie7 in #461

会话后端与性能

• feat(session)：新增轻量会话列表响应与分页消息 API，消息 parts 改为按需懒加载 by @stephamie7 in #461
• fix(session)：读取最近消息时不再一次性加载全部历史 parts，并兼容 legacy message parts 存储 by @stephamie7 in #461
• fix(session)：消息接口统一补齐文件、thinking、compacted、finish、error 等字段 by @stephamie7 in #461

工具、Agent 与流式状态

• fix(session)：工具参数解析失败时直接记录为失败的 tool part，不再尝试执行工具注册表 by @stephamie7 in #461
• fix(delegate_task)：移除对子 Agent 的 delegate_task / task 一刀切禁用，保留 Agent 自身权限配置 by @stephamie7 in #461
• fix(webui)：流式完成兜底轮询改用分页消息接口，避免工具仍在运行时误判完成 by @stephamie7 in #461

Windows 安装与打包

• fix(installer)：Windows 安装脚本复制前先清理旧安装目录，并在文件占用时给出明确重试提示 by @stephamie7 in #461
• fix(packaging)：Inno Setup 安装阶段清理旧 {app}\flocks 目录，避免升级残留旧文件 by @stephamie7 in #461
• chore(version)：版本更新至 v2026.6.18 by @stephamie7 in #461

Contributors

• @stephamie7

Flocks v2026.6.17

What's Changed

Workflow & Workbench

• feat(workflow): improve workflow authoring, publishing guidance, editable workflow.md, diff review, and guide actions by @duguwanglong in #425
• feat(workflow): refine publish runtime configuration, API service deletion, trigger cards, and endpoint metadata by @duguwanglong in #434
• feat(webui): add guided Rex capability creation and align entity/workflow workbench UX by @duguwanglong in #436
• fix(workflow): reduce progress storage contention and preserve trigger step logs by @xiami762 in #435
• fix(workflow): improve API service recovery, publish stability, workbench timeout handling, Docker startup, and IntegrationTab build stability by @xiami762, @duguwanglong in #439 #440 #442 #444 #450

Session, Goal & WebUI

• feat(session): add persistent goal mode with model judging, clarification, and verdict handling by @xiami762 in #431
• feat(webui): add WebUI dark mode support by @xiami762 in #430
• fix(session): improve streaming/tool-call state, context usage breakdown, compaction display, disabled-agent checks, and multimodal image paths by @xiami762, @duguwanglong in #418 #427 #429 #433
• feat(session): refine todo tool rendering by @duguwanglong in #416

Device, Tools & Channels

• fix(device): improve refresh sync, draft testing, plugin loading/config defaults, and tool switch semantics by @xiami762 in #410 #437 #441
• feat(device): add 360 FW v5.5 integration by @magicmagicspider in #420
• feat(tool): add high-level IM send message tool and session binding fixes by @xiami762 in #404
• fix(channel): prevent DingTalk stream from blocking the event loop by @xiami762 in #445
• fix(tool): bound SSH connection pool by @xiami762 in #415
• fix(sip): preserve plugin result output by @duguwanglong in #419

Provider, Skills & Docs

• fix(provider): support configured OpenAI-compatible extra_body by @xiami762 in #424
• feat(provider): resolve custom model context/output limits automatically by @xiami762 in #421
• docs(web2cli): reorganize Web2CLI reference guides by @xiami762 in #411
• fix(skill): improve skill install timeout handling and session streaming state by @xiami762 in #418

Updater, CLI, ACP & Security

• feat(acp): support structured ACP command arguments by @JohnYin-hub in #412
• fix(updater): harden Windows venv rotation, restart handoff, dependency sync, and disconnect recovery by @xiami762 in #413 #422 #426 #428
• fix(deps): upgrade LiteLLM for CVE-2026-42271 by @duguwanglong in #443
• fix(cli): constrain Typer below incompatible release by @duguwanglong in #449
• chore(release): bump version to v2026.6.17 by @stephamie7 in #446

Chinese Release Notes

工作流与工作台

• 工作流创建、编辑、发布与配置体验继续增强：支持更顺滑的 workflow.md 编辑、差异审阅、发布指引、运行入口和 API 服务配置。
• 工作流发布链路稳定性提升：优化 API 服务恢复、Docker 发布启动、端口/服务状态处理、Workbench 超时与日志写入竞争。
• 新增 Rex 引导式能力创建体验，并统一 Agent/Workflow 等实体工作台的交互表现。

会话、目标模式与 WebUI

• 新增持久目标模式，支持模型判断目标完成状态、澄清问题、目标清除与结果判定。
• WebUI 新增暗色模式，优化会话流式状态、工具调用展示、上下文用量、压缩分隔与多模态图片路径兼容。
• 增强禁用 Agent 的可用性校验，减少错误调用。

设备、工具与通道

• 设备集成优化刷新同步、草稿测试、插件加载、默认配置和工具开关语义。
• 新增 360 防火墙 v5.5 设备集成。
• 新增高层 IM 发送消息工具，修复通道提问和会话绑定问题。
• 修复钉钉流式推送阻塞事件循环、SSH 连接池过大、SIP 插件结果输出丢失等问题。

Provider、技能与安全

• OpenAI-compatible Provider 支持配置化 extra_body，并自动解析自定义模型上下文/输出限制。
• Web2CLI 文档重组，技能安装超时与会话流式状态更稳定。
• LiteLLM 升级以修复 CVE-2026-42271。
• ACP 命令支持结构化 JSON 参数。

Contributors

• @xiami762
• @duguwanglong
• @JohnYin-hub
• @magicmagicspider
• @stephamie7

Flocks v2026.6.10

What's Changed

Device Integration & FlockHub

• feat(device): unify device plugin intake and improve auto-sync across server, FlockHub, WebUI, atomic-save, and plugin index flows by @xiami762 in #392 #405
• feat(device): add multi-room support, custom device access wizard, credential reveal, and automatic device_id injection for tool tests by @xiami762 and @duguwanglong in #349 #380 #382 #383

Session, Chat & WebUI UX

• feat(session): improve chat/model selectors, concise workflow tool output, context usage display, and standard page layout behavior by @xiami762 and @duguwanglong in #381 #384 #391 #398
• fix(session): stabilize streaming status, persist selected session model, clarify chat status, and recover orphaned running tools after server restart by @xiami762 in #370 #396 #400 #403
• feat(user-defined-pages): add custom page runtime by @Jieatgit in #389

Workflow

• feat(workflow): add trigger integration and improve workflow graph/editor edge UX by @xiami762 in #375 #379
• fix(workflow): reduce default workflow log noise and restore the pre-PR398 workflow experience by @xiami762 and @duguwanglong in #399 #401

Channel & Messaging Integrations

• feat(channel): complete bidirectional file/image support for WeCom, DingTalk, and Telegram, including image previews, DingTalk inbound file detection, plugin instance retention, and session ownership fixes by @xiami762 in #369 #386 #397 #402

Provider, Models & Skills

• fix(provider): correct thinking parameters and default model reasoning to enabled across backend, WebUI, and TUI settings by @xiami762 in #387 #406
• fix(skill,agent): install skills from GitHub blob URLs and unify sub-agent delegation under delegate_task by @xiami762 in #385 #407

Browser, Workspace & System Stability

• fix(system): improve browser doctor guidance, workspace JSONL preview, Files tab load stability, log retention, Windows dependency sync, TDP base_url normalization, and fallback port conflict detection by @xiami762 and @JohnYin-hub in #367 #368 #373 #376 #394 #400

Other

• chore/docs/deps: bump Starlette to >=1.0.1（fix CVE-2026-48710） by @xiami762 in #393

Chinese Release Notes

设备集成与 FlockHub

• feat(device)：统一设备插件导入链路，并增强 server、FlockHub、WebUI、原子保存与插件索引的自动同步能力 by @xiami762 in #392 #405
• feat(device)：新增多房间、自定义设备接入向导、凭据展示，以及工具测试 device_id 自动注入/保留能力 by @xiami762 and @duguwanglong in #349 #380 #382 #383

会话、聊天与 WebUI 体验

• feat(session)：优化聊天/模型选择器、工作流工具输出、上下文用量展示和标准页面布局 by @xiami762 and @duguwanglong in #381 #384 #391 #398
• fix(session)：稳定流式状态，修复会话模型持久化、聊天状态提示和服务重启后的运行中工具恢复 by @xiami762 in #370 #396 #400 #403
• feat(user-defined-pages)：新增自定义页面运行时 by @Jieatgit in #389

工作流

• feat(workflow)：新增触发器集成，并优化工作流图布局与编辑器连线体验 by @xiami762 in #375 #379
• fix(workflow)：降低默认日志噪声，并恢复 PR398 之前的工作流体验 by @xiami762 and @duguwanglong in #399 #401

渠道与消息集成

• feat(channel)：完善企微、钉钉、Telegram 文件/图片双向收发，并修复图片预览、钉钉入站文件识别、插件实例保留和会话归属问题 by @xiami762 in #369 #386 #397 #402

Provider、模型与技能

• fix(provider)：修复 thinking 参数，并在后端、WebUI、TUI 中默认启用模型 reasoning by @xiami762 in #387 #406
• fix(skill,agent)：修复 GitHub blob URL 技能安装，并统一子 agent 委派入口为 delegate_task by @xiami762 in #385 #407

浏览器、工作区与系统稳定性

• fix(system)：改进 browser doctor、JSONL 预览、Files 页加载、日志保留、Windows 依赖同步、TDP base_url 规范化和备用端口冲突检测 by @xiami762 and @JohnYin-hub in #367 #368 #373 #376 #394 #400

其他

• chore/docs/deps：升级 Starlette 到 >=1.0.1（修复CVE-2026-48710） by @xiami762 in #393

Flocks v2026.6.4

What's Changed

Session & Channel

• fix(session,channel): assign channel-created session ownership to local admin, preserve owner on rebind, and restrict legacy ownerless sessions to admins only by @xiami762 in #369

Chinese Release Notes

会话与频道

• fix(session,channel)：频道入站创建/重绑会话时写入本地 admin 归属、重绑保留原 owner；无 owner 的遗留会话仅管理员可读写删，且不再显示「共享」角标 by @xiami762 in #369

Flocks v2026.6.3

What's Changed

WebUI & UX

• feat(webui): Session Agent picker, @mention routing, device-inspector, workflow session cap/navigation, upload guard, and route code-split by @stephamie7, @xiami762 in #357, #337, #338, #318, #322
• fix(provider,webui): OpenAI-compatible Base URL required on create by @JohnYin-hub in #348

Device Integration

• feat(device): 360 WAF, Huorong EDR, Huawei Cloud WAF adapters; tool targeting/discovery labeling; per-device tool isolation and MCP visibility fixes by @magicmagicspider, @duguwanglong, @xiami762 in #343, #362, #329, #339, #323, #325

Browser, web2cli & Skills

• feat(web2cli,skills): planner agent, browser skill migration, multipart/cookie/auth improvements by @xiami762 in #315, #320, #324, #326
• fix(skill): reduce skill watcher inotify usage by @JohnYin-hub in #310

Provider & LLM

• feat(provider,session): minimax-m3 catalog, model limit updates, and context compaction v2 by @duguwanglong in #363, #321

Workflow

• feat(workflow): Kafka ingest, background poller, static inputs merge with messages by @xiami762 in #342, #347, #361
• fix(workflow,kafka): LLM singleton isolation, ingest backpressure, execution storage compaction, syslog trim OOM by @xiami762, @duguwanglong in #316, #353, #354

Session & Channel

• feat/fix(session,channel): input queue, token estimate, part-order placeholder, title sanitization, /clear history, legacy message normalize, IM /new archive, channel /clear, Feishu disconnect surfacing by @stephamie7, @xiami762, @JohnYin-hub in #334, #327–#328, #335, #350, #352, #344, #356

Tools, Storage & Platform

• fix(tool,mcp,storage,logs): HTTP CLOSE_WAIT, MCP env alias, SQLite recovery, log growth cap by @xiami762, @JohnYin-hub in #345, #317, #319, #331
• feat(auth): console license activation and revocation sync by @stephamie7 in #355

Integrations & Docs

• feat(tdp_alert_triage): unified 5-step alert triage prompt by @duguwanglong in #330
• docs(readme): remote access and proxy guidance by @xiami762 in #359

Chinese Release Notes

WebUI 与体验

• feat(webui)：Session Agent 选择、@mention 路由、device-inspector、工作流会话上限/导航、上传校验、路由按需加载 by @stephamie7、@xiami762 in #357、#337、#338、#318、#322
• fix(provider,webui)：OpenAI 兼容 Provider 创建时 Base URL 必填 by @JohnYin-hub in #348

设备集成

• feat(device)：360 WAF、火绒 EDR、华为云 WAF；工具定向/发现标注；按设备工具隔离与 MCP 可见性修复 by @magicmagicspider、@duguwanglong、@xiami762 in #343、#362、#329、#339、#323、#325

浏览器、web2cli 与技能

• feat(web2cli,skills)：planner agent、浏览器技能迁移、multipart/Cookie/鉴权增强 by @xiami762 in #315、#320、#324、#326
• fix(skill)：降低 skill watcher inotify 占用 by @JohnYin-hub in #310

Provider 与模型

• feat(provider,session)：目录新增 minimax-m3、模型上限更新、上下文压缩 v2 by @duguwanglong in #363、#321

工作流

• feat(workflow)：Kafka 摄入、后台轮询、静态 inputs 与消息合并 by @xiami762 in #342、#347、#361
• fix(workflow,kafka)：LLM 单例隔离、摄入背压、执行记录压缩、syslog 裁剪 OOM by @xiami762、@duguwanglong in #316、#353、#354

会话与频道

• feat/fix(session,channel)：输入队列、token 估算、part 顺序占位、标题净化、/clear 清历史、遗留消息兼容、IM /new 归档、频道 /clear、飞书断连提示 by @stephamie7、@xiami762、@JohnYin-hub in #334、#327–#328、#335、#350、#352、#344、#356

工具、存储与平台

• fix(tool,mcp,storage,logs)：HTTP CLOSE_WAIT、MCP env 别名、SQLite 恢复、日志增长上限 by @xiami762、@JohnYin-hub in #345、#317、#319、#331
• feat(auth)：Console 许可证激活与吊销同步 by @stephamie7 in #355

集成与文档

• feat(tdp_alert_triage)：TDP 告警分诊统一五步 prompt by @duguwanglong in #330
• docs(readme)：远程访问与代理配置说明 by @xiami762 in #359