Netclaw 0.26.0-beta.1

0.26.0-beta.1 (2026-08-09)

Features

• MCP OAuth surfaced at add time — netclaw mcp auth now runs before permission prompts when adding a server (#1773)
• Mention-required thread replies — Slack, Discord, and Mattermost channels can gate thread replies on an @-mention, with per-channel control (#1783)
• Mention-triggered thread history backfill — Thread history is backfilled when a mention arrives on mention-gated channels (#1798)
• File reads reach as far as the shell — File-read tool permission scope now matches the shell tool's reach (#1770)
• TUI state preserved across navigation — Provider and model pages keep their state when navigating or refreshing (#1804)
• Background job and one-shot reminder cleanup — Completed background job definitions and successful one-shot reminders are pruned automatically (#1821)

Bug Fixes

• Approval prompts: already-granted candidates skipped — Shell candidates with existing grants no longer re-trigger approval (#1830)
• Approval: safe shell stages compose with grants — Pipelines of safe stages now compose correctly with one-time grants (#1828)
• Approval: background job control bypasses prompts — check_background_job and cancellation no longer demand approval (#1817)
• Reminders: failed one-shot executions retained — Failed one-shot reminders retry instead of being dropped, with execution history recorded (#1812)
• Approval: phantom directory scopes removed — Stored approval patterns no longer fabricate fake directory scopes (#1799)
• Approval: quoted free-text operands dropped from stored patterns — Quoted free-text arguments are no longer baked into stored approval patterns (#1815)
• Approval: trailing-slash globs scoped to parent — dir/-style globs are scoped to their parent directory, closing a scope-expansion gap (#1785)
• Approval: immediate-retry bypass seeded per approved scope — Every approved scope now gets the immediate-retry bypass (#1800)
• Sessions: tool-batch wedge fixed — Unanswered tool calls are closed out before the error reply is sent (#1796)
• TUI: stale provider/model state refreshed — Provider and model manager pages no longer show stale data (#1827)
• Security: ToolAccessPolicy fail-closed — Deny-list and protected-path policies are now required; a policy missing them can no longer silently allow blocked commands (#1787)

Dependency Updates

• Bump Termina — 0.16.0 → 0.16.1
• Bump SkiaSharp.NativeAssets.Linux.NoDependencies — 4.151.0 → 4.151.1
• Bump Verify.XunitV3 — 31.20.0 → 31.28.0