Skip to content

RELEASE_NOTES.md

Latest commit

 

History

History
192 lines (156 loc) · 26.6 KB

RELEASE_NOTES.md

File metadata and controls

192 lines (156 loc) · 26.6 KB
Raw

NetClaw Release Notes

0.25.0 (2026-07-18)

This stable release concludes the 0.25.0 beta cycle (five beta releases from 0.25.0-beta.1 through beta.5) and adds a round of final polish focused on installation, CLI reliability, and daemon shutdown robustness.

Features

  • Automated shell PATH integration for installers — Unix and Windows installers now automatically update the user's shell profile or PATH registry on install. Unix installers detect the active shell (bash, zsh, fish) and source a self-guarding ~/.netclaw/env script from the correct RC file with duplicate prevention. Windows installers modify the User-scope PATH and broadcast WM_SETTINGCHANGE. Use --skip-shell (-SkipShell on Windows) to opt out (#1687)
  • Timestamped HMAC verification for webhooks — Webhook routes now verify request timestamps alongside HMAC signatures to prevent replay attacks, with configurable HMAC algorithm support (#1660)
  • TSV support in content scanner — Added text/tab-separated-values as a recognized MIME type, allowing TSV files to be scanned and processed by the content pipeline (#1645)
  • Preserve Git working context across sessions and subagents — A bounded, audience-aware Git working-context snapshot (branch, worktree, repository, upstream, changed files) now stays current in the system prompt, and coding subagents inherit recent-file/project context so parent sessions merge back only confirmed successful child edits. Measured 20% → 100% success rate on a linked-worktree coding eval (#1630)
  • User-written AGENTS.md for application-specific agent guidance — Operators can now author ~/.netclaw/identity/AGENTS.md, layered after NetClaw's embedded operating core and inherited by sub-agents, to give the running agent deployment-specific mission and workflow guidance. Seeded with a minimal scaffold during init without overwriting existing guidance (#1622)
  • Discord DM reminder delivery — Reminders can now be delivered to Discord DMs via improved DiscordReminderTargetResolver (#1609)
  • Named model configuration & provider runtime validation — New NamedModelConfiguration and ProviderRuntimeValidation types, config schema updates, and CLI wizard improvements for provider/model setup (#1610)
  • SkillServer native sub-agent sync — Optional native manifest sidecar sync for server-managed sub-agents, keeping RFC skill sync primary while downloading verified native artifacts when available. Local sub-agent files load before server-feed files so user-authored definitions always win (#1539)
  • GitHub Enterprise Copilot support — Authenticate GitHub Copilot tokens against GHE instances and route requests to the correct data residency endpoint (#1509, #1512, #1555)
  • Slack native processing status — Real-time processing indicators in Slack instead of generic "working" messages (#1524)
  • Reminder failure visibility — Operators can now see when reminders fail or are skipped (#1503)
  • Degraded startup mode — Daemon starts with a "no valid model" banner when no provider is configured, instead of failing host startup (#1540)
  • Synced skill resources via shell — Skill resources synced from the cloud can now execute via shell commands (#1551)
  • DwarfStar (ds4) provider support — New openai-compatible backend strategy supporting DwarfStar models (#1349)
  • Inherit embedded AGENTS.md for sub-agents — Sub-agents now inherit the parent session's embedded operating rules from AGENTS.md (#1490)
  • Show advertised skill count for remote skill servers — The Skill Sources config screen now displays how many skills each remote server advertises (#1452)

Bug Fixes

  • MCP arguments shown in approval prompts — Fixed: approval prompts now display full MCP tool arguments for better operator context (#1689)
  • CLI reports unresolved model references cleanly — Fixed: CLI no longer crashes with opaque errors when a model reference cannot be resolved (#1680)
  • CLI handles model migration errors without crashing — Fixed: model migration validation errors are now reported gracefully instead of crashing the CLI (#1678)
  • CLI rejects numeric model modalities — Fixed: model modality values are now validated as strings, rejecting numeric input (#1677)
  • Daemon-stop session drain bounded — Fixed: netclaw daemon stop now properly bounds the session drain timeout, preventing hangs on interactive-tool-paused sessions and giving the CLI adequate headroom (#1673)
  • Reminders rescan definitions before startup alerts — Fixed: startup alerts now fire only after reminder definitions are fully loaded, preventing missed or duplicate reminders on restart (#1653)
  • OpenAI client 2.12 compatibility — Fixed: updated OpenAI provider plugin to work with OpenAI client 2.12+ changes (#1654)
  • Attachment path guidance — Fixed: authoritative attachment path guidance now points to the correct session media directory (#1686)
  • Windows actor checks made deterministic — Fixed: Windows actor lifecycle tests were non-deterministic (#1661)
  • Ollama smoke test pinned — Fixed: pinned Ollama installer to a specific release for smoke test stability (#1659)
  • VHS process group timeout — Fixed: full VHS process group now times out properly during smoke tests (#1655)
  • Screenshot regression determinism — Fixed: screenshot regression suite now uses pixel comparison with blank/partial retry and Termina seam fixes (#1451)
  • Legacy model environment overrides serialized — Fixed: legacy model environment overrides are now properly serialized (#1656)
  • Subagent token usage tracked — Sub-agent token usage is now properly tracked and reported (#1597)
  • Subagent fail-closed for unattended approvals — Fixed: subagents fail safely when approvals are required but no human is present (#1616)
  • Memory core: curation documents stable — Fixed: memory curation documents were unstable across writes, causing cross-session memory recall issues (#1575)
  • Model set/picker preserves modalities — Fixed: model selection UI now preserves model modalities correctly (#1610)
  • Slack processing status serialization — Fixed: Slack processing status now serializes correctly for all states (#1556)
  • Autonomous sessions can write workspace directory — Fixed: autonomous sessions could not write to the workspace directory (#1498)
  • Reminder duplicate-execution guard — Fixed: Mode A reminder session wedge prevented the duplicate guard from releasing (#1500)
  • Reset stops daemon first — Fixed: netclaw reset now stops the daemon before proceeding and shows a progress screen (#1494)
  • MCP tool errors display cleanly — Fixed: MCP errors now show as attributed messages instead of raw JSON dumps (#1510)
  • TUI: auto-advance the add-skill-server flow — Fixed: skill server probe flow now auto-advances on successful connection (#1458)
  • TUI: auto-start init health checks — Fixed: init health checks now start automatically (#1454)
  • TUI: discoverable Done rows — Added "Done" back-out rows across Security & Access menus and config screens (#1448, #1441)
  • TUI: session browser selection highlight — Fixed: session browser now shows selection highlight (#1531)
  • TUI: identity redo timezone loop — Fixed: identity redo would loop on timezone; also fixed session browser regression (#1518)
  • TUI: flaky host crash during reset — Fixed: thread-unsafe ReactiveProperty access during reset caused crashes (#1525)
  • Subagent terminal result summaries — Fixed: subagent terminal results now display properly (#1519)
  • UTF-8 BOM in skill frontmatter — Fixed: skill scanner now strips UTF-8 BOM before parsing YAML frontmatter (#1583)
  • Block system and external skill mutations — Fixed: skill system now blocks mutations to system and externally-synced skills (#1457)
  • Self-monitoring spawn_agent liveness respected — Fixed: tool pipeline now respects self-monitoring spawn_agent liveness (#1456)

Breaking Changes

  • Removed silent local-ollama fallback — Users without any provider configured will now see a "no valid model" banner instead of an automatic fallback to local Ollama. Explicit provider configuration is now required for full functionality (#1540)

Improvements

  • Tool execution pipeline refactoring — Restructured the session tool execution pipeline with isolated invocation scope, composed execution pipeline, typed sub-agent context isolation, and proper lifecycle cleanup (#1641, #1643, #1644, #1646)
  • Logical skill access and authoritative inventory refresh — Skill loading now resolves through logical skill_load/skill_read_resource access with native > managed-feed > external precedence. Startup, sync, watcher, and skill_manage inventory rebuilds centralized through one live-source refresher (#1634)
  • Session actor decomposed into transient-state handlers — LlmSessionActor decomposed into smaller, focused handlers for improved maintainability and testability (#1496)
  • Log stream partitioned by session — Each session now gets its own session.log while daemon.log remains sparse. Cleaner logs and better observability with OTEL union support (#1499)
  • Memory core redesign — Shared curation evaluator unified across both memory write pipelines so they can never diverge. July 2026 audit: revived curation LLM, balanced prompt, and recall precision re-tune (#1575, #1568)

Security

  • Pinned Microsoft.OpenApi to 2.7.5 — Addresses CVE-2026-49451 (#1543)
  • Suppressed GHSA-2m69-gcr7-jv3q (SQLitePCLRaw CVE-2025-6965) — Temporarily suppressed until upstream patches available. Tracking: dotnet/efcore#38257 (#1444)

Dependency Updates

  • OpenAI SDK — Updated to 2.12 (required for API compatibility) (#1654)
  • Microsoft.Extensions.AI — 10.6.0 → 10.8.0 (#1650)
  • Microsoft.AspNetCore.DataProtection — 10.0.9 → 10.0.10 (#1657)
  • Microsoft.NET.Test.Sdk — 18.7.0 → 18.8.1 (#1651)
  • Mattermost.NET — 5.0.0 → 5.0.3 (#1626)
  • SkillServer — Netclaw.SkillClient 0.4.0-beta.4 → 0.4.0 (stable) (#1638)
  • Anthropic SDK — 12.30.0 → 12.35.1 (#1488, #1561)
  • Akka — Akka.Cluster.Sharding and Akka.Persistence 1.5.69 → 1.5.70 (#1560)
  • Testcontainers — 4.12.0 → 4.13.0 (#1563)
  • YamlDotNet — 18.0.0 → 18.1.0 (#1516)
  • Verify.XunitV3 — 31.19.1 → 31.20.0 (#1446)

0.25.0-beta.5 (2026-07-16)

Features

  • Timestamped HMAC verification for webhooks — Webhook routes now verify request timestamps alongside HMAC signatures to prevent replay attacks, with configurable HMAC algorithm support (#1660)
  • TSV support in content scanner — Added text/tab-separated-values as a recognized MIME type, allowing TSV files to be scanned and processed by the content pipeline (#1645)

Bug Fixes

  • Reminders rescan definitions before startup alerts — Fixed: startup alerts could fire before reminder definitions were fully loaded, causing missed or duplicate reminders on restart (#1653)
  • OpenAI client 2.12 compatibility — Updated OpenAI provider plugin to work with the breaking API change in OpenAI SDK 2.12 (OpenAIClientOptions → ResponsesClientOptions) (#1654)

Improvements

  • Tool execution pipeline refactoring — Restructured the session tool execution pipeline with isolated invocation scope, composed execution pipeline, typed subagent context isolation, and proper lifecycle cleanup. Fixes subagent fatal spawn failures (#1641, #1643, #1644, #1646)

Dependency Updates

  • Bump OpenAI client to 2.12 — Required for compatibility with the updated SDK API (#1654)
  • Bump Microsoft.Extensions.AI — 10.6.0 → 10.8.0 (#1650)
  • Bump Microsoft.AspNetCore.DataProtection — 10.0.9 → 10.0.10 (#1657)
  • Bump Microsoft.NET.Test.Sdk — 18.7.0 → 18.8.1 (#1651)
  • Bump Mattermost.NET — 5.0.0 → 5.0.3 (#1626)

0.25.0-beta.4 (2026-07-14)

Features

  • Preserve Git working context across sessions and subagents — A bounded, audience-aware Git working-context snapshot (branch, worktree, repository, upstream, changed files) now stays current in the system prompt, and coding subagents inherit recent-file/project context so parent sessions merge back only confirmed successful child edits. Measured 20% → 100% success rate on a linked-worktree coding eval (#1630)
  • User-written AGENTS.md for application-specific agent guidance — Operators can now author ~/.netclaw/identity/AGENTS.md, layered after Netclaw's embedded operating core and inherited by sub-agents, to give the running agent deployment-specific mission and workflow guidance. Seeded with a minimal scaffold during init without overwriting existing guidance (#1622)

Bug Fixes

  • Memory curation no longer overwrites existing documents on collision — Fixed: when a curation Create decision targeted an anchor that already had a document, the write silently overwrote the existing title, body, and classification with no history — observed 88 times in 14 days in production, including one case that destroyed an LLM-merged document. Collisions now append the new content under a dated separator instead of overwriting; a verbatim duplicate is skipped as a no-op (#1637)
  • STDIO MCP server arguments no longer rewritten — Fixed: configured STDIO MCP server arguments were being rewritten by the daemon; the daemon now preserves them as configured. Also simplified to one daemon-owned client per configured MCP server, removing Playwright-specific session-scoped process handling (#1636)

Improvements

  • Logical skill access and authoritative inventory refresh — Skill loading now resolves through logical skill_load/skill_read_resource access instead of physical skill-root paths, with native > managed-feed > external precedence. Startup, sync, watcher, and skill_manage inventory rebuilds are now centralized through one live-source refresher publishing atomic registry snapshots (#1634)

Dependency Updates

  • Bump SkillServer to stable — Netclaw.SkillClient 0.4.0-beta.4 → 0.4.0 (stable release) (#1638)

0.25.0-beta.3 (2026-07-12)

Features

  • Discord DM reminder delivery — Reminders can now be delivered to Discord DMs via improved DiscordReminderTargetResolver (#1609)
  • Named model configuration & provider runtime validation — New NamedModelConfiguration and ProviderRuntimeValidation types, config schema updates, and CLI wizard improvements for provider/model setup (#1610)

Bug Fixes

  • Model set/picker preserves hand-set modalities — Re-selecting the same model no longer wipes operator-set InputModalities/OutputModalities and ContextWindow. Added --input-modalities, --output-modalities, --clear-modalities, and --clear-context-window CLI flags (#1610)
  • Slack processing status serialization — Slack processing status updates are now serialized to prevent race conditions during concurrent sends (#1556)
  • Sub-agent token usage tracked in daily stats — Sub-agent LLM calls now record token usage, making them visible in netclaw stats (#1597)
  • Subagents fail closed for unattended approvals — When a subagent requires approval but the session is unattended, it now fails closed instead of proceeding or hanging (#1616)

0.25.0-beta.2 (2026-07-07)

Bug Fixes

  • UTF-8 BOM in skill frontmatter — Fixed: skill scanner now strips UTF-8 BOM (\uFEFF) before parsing YAML frontmatter, and populates SkillName on all SkillScanIssue records so degenerate frontmatter no longer crashes the scan (#1583)
  • Model capability provenance logging — Fixed: daemon now logs effective model capabilities with their provenance source, improving diagnostic visibility for model configuration issues (#1584)

Dependency Updates

  • Bump SkillServer — Netclaw.SkillClient 0.4.0-beta.1 → 0.4.0-beta.3 and adapt to API changes (#1593)

0.25.0-beta.1 (2026-07-05)

Features

  • SkillServer native sub-agent sync — Optional native manifest sidecar sync for server-managed sub-agents, keeping RFC skill sync primary while downloading verified native artifacts when available. Local sub-agent files load before server-feed files so user-authored definitions always win (#1539)

Bug Fixes

  • Systemd shell tool PATH — Fixed: daemon now captures the operator's full PATH into the systemd EnvironmentFile instead of relying on a hardcoded list, so tools like ~/.dotnet/dotnet are visible to the shell tool (#1565)

Memory

  • Shared curation evaluator — Unified curation logic across both memory write pipelines (inline per-session actor and daemon checkpoint-worker) so they can never diverge again (#1575)
  • Memory audit quick wins — July 2026 audit: revived curation LLM, balanced prompt, and recall precision re-tune (#1568)

0.24.4 (2026-07-03)

Bug Fixes

  • Environment-variable-only configuration — Fixed doctor misdiagnosis and OAuth config-file side effect that prevented daemon startup when configuration is supplied entirely via environment variables (#1569)
  • Remote daemon CLI — Fixed: CLI no longer demands a local daemon config file when the daemon is explicitly configured as remote (#1567)

Dependency Updates

  • Bump Anthropic SDK — 12.34.1 → 12.35.1 (#1561)
  • Bump Akka group — Akka.Cluster.Sharding and Akka.Persistence 1.5.69 → 1.5.70 (#1560)

0.24.3 (2026-07-03)

Features

  • GitHub Enterprise Copilot support — Authenticate GitHub Copilot tokens against GHE instances and route requests to the correct data residency endpoint (#1509, #1512, #1555)
  • Slack native processing status — Real-time processing indicators in Slack instead of generic "working" messages (#1524)
  • Reminder failure visibility — Operators can now see when reminders fail or are skipped (#1503)
  • Degraded startup mode — Daemon starts with a "no valid model" banner when no provider is configured, instead of failing host startup. Removed silent local-ollama default (#1540)
  • Synced skill resources via shell — Skill resources synced from the cloud can now execute via shell commands (#1551)

Bug Fixes

  • Autonomous sessions can write workspace directory — Fixed: autonomous sessions could not write to the workspace directory (#1498)
  • Reminder duplicate-execution guard — Fixed: Mode A reminder session wedge prevented the duplicate guard from releasing (#1500)
  • Reset stops daemon first — Fixed: netclaw reset now stops the daemon before proceeding and shows a progress screen (#1494)
  • MCP tool errors display cleanly — Fixed: MCP errors now show as attributed messages instead of raw JSON dumps (#1510)
  • TUI identity redo timezone loop — Fixed: identity redo would loop on timezone; also fixed session browser regression (#1518)
  • Subagent terminal result summaries — Fixed: subagent terminal results not displaying properly (#1519)
  • Flaky host crash during install reset — Fixed: thread-unsafe ReactiveProperty access during reset caused crashes (#1525)
  • Session browser selection highlight — Fixed: session browser didn't show selection highlight in TUI (#1531)
  • Slack active thread status refresh — Fixed: thread status not refreshing during tool loops and buffered messages (#1534)
  • Stable memory handles — Fixed: memory handles were unstable, affecting cross-session memory (#1538)
  • GHE Copilot routing — Fixed: GHE Copilot chat now routes to the token's endpoints.api host instead of hardcoded api.githubcopilot.com (#1555)
  • Security: Microsoft.OpenApi CVE-2026-49451 — Pinned to 2.7.5 to address vulnerability (#1543)

Breaking Changes

  • Removed silent local-ollama fallback — Users without any provider configured will now see a "no valid model" banner instead of an automatic fallback to local Ollama. Explicit provider configuration is now required for full functionality (#1540)

Performance

  • Log stream partitioned by session — Each session now gets its own session.log while daemon.log remains sparse. Cleaner logs and better observability with OTEL union support (#1499)