Repository navigation
v0.7.0
What's New
🔐 Entra ID Authentication
MsClaw Gateway now supports Microsoft Entra ID (Azure AD) authentication end-to-end. The SignalR hub, OpenResponses endpoint, and chat UI are all protected behind JWT bearer auth. A new CLI-driven login flow (msclaw auth login) replaces the earlier browser-redirect approach — run it once, and the token is cached in ~/.msclaw/config.json for subsequent sessions.
🌐 Dev Tunnel Remote Access
Need to reach your agent from another machine? The gateway can now optionally spin up a persistent dev tunnel at startup, giving you a public URL with authentication baked in. Tunnel access defaults to private (owner-only), and the MSAL redirect URI is dynamically resolved so login works seamlessly through the tunnel.
🏗️ Major Code Health Refactoring
This release includes a significant code quality pass across the entire codebase:
MindPathsshared constants — canonical directory and file names in one place- Process leak fix in
MindReader(properusing, stderr capture, exit code checks) - God-class breakups —
StartCommandsplit into extension methods + banner builder;GatewayHostedServicesplit intoGatewayClientProxy - Session TTL with timer-based reaping added to
SessionPool(2 new tests) - Bounded channel on
SessionEventBridge(500 slots) to prevent unbounded memory growth - Extracted helper methods across
CliLocator,MindScaffold,MindValidator,IdentityLoader, andTunnelManager
📊 By the Numbers
- 146 tests passing (up from 107 in v0.5.4)
- Copilot SDK updated to 0.1.32
Full Changelog: v0.5.4...v0.7.0