v1.49.0

1.49.0 (2026-03-18)

Feature

• heartbeat: provider/model override + fix cache invalidation (5b349db)
• agents: inject team members into system prompt (1b27fa7)
• ui: refactor agent detail page — 3 tabs, heartbeat UI, compact header (1ae5c76)
• heartbeat: improve prompting, suppression, delivery targets and session cleanup (96cfd1b)
• heartbeat: cron wakeMode, queue-aware scheduling, lightContext (29816db)
• agent heartbeat system — periodic proactive check-ins (#245) (08a2d95)
• Add legacy and Claude Code tool aliases to the system prompt. (06e995c)
• runtime packages UI, pkg-helper, configurable shell deny groups (#244) (843b550)
• teams: delta realtime updates for task list (53fc155)
• teams: add limit param to ListTasks + lightweight get-light endpoint (b231878)
• teams: split dispatched/assigned events + add completed notifications (b735c16)
• tools: auto-deliver write_file results as channel attachments (70f3e1f)
• teams: add client-side pagination to task list view (66de350)
• teams: add multi-select checkboxes and bulk delete to task list (ae3e5ce)
• mcp: lazy-activate deferred tools on direct call in search mode (#235) (99dd363)
• telegram: implement robust message splitting and dynamic HTML retry logic (#236) (1c4dce0)
• teams: member task progress reminder + fix broken progress notifications (97cacfe)
• skills: skill_manage tool + skill_evolve learning loop (#218) (b2a74ba)
• bootstrap: predefined agents keep full system prompt during onboarding (ca44b72)
• teams: granular progress notifications with direct/leader mode (eee79d1)
• teams: implement workspace scope setting (shared vs isolated) (2c5ae04)
• ui: improve kanban UX, fix dialog scroll, remove delegation page (6075d58)
• ui: improve team board with task snapshots and board toolbar (89303f5)
• agent: team workspace resolution for lead/member agents (50a42ad)
• tools: add team workspace context + WorkspaceInterceptor + file tools access (8d7259f)
• teams: improve task dispatch, concurrency, and tool ergonomics (8d6729e)
• traces: improve trace/span UI with timestamps, copy, syntax highlight (0d9906d)
• providers/dashscope: add Qwen 3.5 series support with per-model thinking capability (#215) (a44dbf2)
• teams: add task delete + agent emoji + priority labels in board views (950d5d5)
• agents: display emoji icon from other_config in agent list and detail views (633872c)
• i18n: complete web UI internationalization for en/vi/zh (4736584)
• security: credentialed exec + HTTP RBAC + API key cache (#197) (75c570e)
• anthropic: add model alias resolution and update Chat methods (#204) (23eb42a)
• teams: redesign teams list with card/list toggle, agent emoji, and member enrichment (3cfe315)
• storage: add lazy folder loading, SSE size endpoint, and enhanced file viewer (28fab95)
• web_fetch: increase limit to 60K and save oversized content to temp file (4ec1c5e)
• providers: add ACP provider for external coding agents (#190) (5e2fa39)
• teams: add workspace scope setting UI and deprecate agent links (16d726d)
• channels: add i18n for channel config fields and enable DM streaming by default (06b4eb9)
• teams: team system v2 with bug fixes, workspace scope, versioning, and prompt optimization (#183) (1a42dc9)
• ui: add list view and creator filter to agents page (d2bd270)
• memory: inject KG hint into memory_search results and improve KG tool prompting (7f4f4a2)
• agent: add mid-run message injection for DM and WebSocket (4c7db6e)
• Implement task approval, rejection, and cancellation with new statuses and task filtering capabilities. (2308b25)
• i18n agent presets in setup wizard (#170) (94e7aac)
• teams: add task approval workflow with approve/reject actions (1a4c211)
• expand audit logging via pub/sub event pattern (9115169)
• decouple memory/KG sharing from workspace folder sharing (6eb33f9)
• ui: add back button to setup wizard steps (#163) (6629bdc)
• share memory and KG across users when workspace sharing is enabled (bece452)
• configurable workspace sharing with per-agent DM/group/user controls (25b24eb)
• ui: add agent and channel dropdown filters to traces page (225bd3d)
• setup: add skip setup option with localStorage persistence (050de16)
• setup: add back navigation to onboard wizard (5ab4af4)
• telegram: support custom Bot API server URL (#157) (e5eca5d)
• skills: system skills integration — toggle, dep checking, per-item install (#161) (ace0750)
• add trace export as gzip with recursive sub-trace collection (6185948)
• tools: add tool alias registry for Claude Code skill compatibility (ec34f48)
• ui: multi-skill upload with client-side validation (#149) (c25e770)
• ui: mobile UX improvements for web dashboard (#141) (e9e0a4e)
• add token usage tracking, cost analytics, budget enforcement, wake API, and activity audit trail (#142) (0926d05)
• ui: show webhook URL hint on Lark channel config (bef428c)
• docker: update shared network configuration to specify name and driver (#125) (13a3e25)
• enhance notification settings UI by replacing the checkbox with a Switch component and adding new styling. (4ddbac5)
• mcp: add agent count column and mask sensitive values in form (b7f4082)
• kg: session-based scope picker, dark mode support, inline agent select (9e8e5b7)
• memory: resolve user IDs to contact names in scope labels (5d64866)
• sessions: context usage progress bar with token estimation (fab9028)
• remove Custom Tools sidebar item and Wrench icon. (39b0104)
• agents: contact search insert in file editor for predefined agents (fffdc0b)
• kg: separate Knowledge Graph page, auto-fit zoom, compact layout (bf970c4)
• agents: contact search in instances tab with auto profile creation (4fce731)
• channels: wire contact auto-collector across all channel handlers (23f1957)
• cron: configurable default timezone for cron expressions (#117) (25fd9c9)
• providers: add Ollama local and Ollama Cloud provider support (#113) (d874266)
• contacts: batch resolver API, shared hooks & contact integration across agent UI (f195320)
• contacts: channel contacts table, auto-collector, contacts page & managers tab redesign (c8dc991)
• compaction: configurable provider, model & max_tokens for pending message compaction (1ddd2e5)
• tracing: two-phase spans — show running state before completion (ef720ee)
• channels: pending message compaction — fix provider, wire auto-compact, add global config & UI (3b6bf64)
• ui: add compacting loading state to pending messages (d43f4a4)
• ui: redesign config pages with grouped tabs & visual emphasis (baf6456)
• channels: real LLM compaction for web UI compact endpoint (4df6064)
• channels: real-time agent activity status & intent classification (e593b9c)
• add Z.ai provider support (general API + coding plan) (#102) (e63ff01)
• i18n: add full i18n support for backend and web UI (344e2ac)
• agent: improve system prompt structure for better LLM adherence (e327a88)
• kg: add knowledge graph with LLM extraction, traversal, and graph visualization (63eff18)
• memory: add memory management page with CRUD, search, and indexing (b284f96)
• ui: add tool call details with arguments, results, and thinking display (#92) (a321af8)
• channels: persist pending messages to PostgreSQL with Web UI (5f7ca84)
• zalo: strip markdown from outbound messages for clean plain text (31ba182)
• cron: add detail page, running status, realtime events, and pagination (3c03d1f)
• Clear Zalo personal channel group history after sending messages to the agent. (4b2d49c)
• channels: add Slack channel (#83) (137a986)
• ui: editable session title, detail page spacing, and session list enhancements (2a61562)
• tools: add exec path exemptions and tool arguments in events (d839e03)
• ui: sortable provider chain with drag-and-drop and portal combobox (157d09c)
• tools: add create_audio tool for music and sound effects (6345df3)
• tools: add media provider chain with ordered fallback and retry (5815437)
• add conditional Python 3 and pip installation via ENABLE_PYTHON build argument. (d70e58a)
• ui: render use_skill events distinctly in realtime events panel (454fed1)
• tools: add use_skill marker tool for skill activation observability (5536313)
• channels: unified media pipeline for Discord, Feishu, and WebSocket (62c28e1)
• metadata: add JSONB metadata to sessions, profiles, and pairing (47cc11b)
• tools: add read_audio, read_video, create_video tools and fix system prompt tool filtering (691ddce)
• agents: add self-evolution config and instances management for predefined agents (ea185b3)
• media: persistent media storage, read_document tool, and pipeline refactor (0f2737c)
• storage: add workspace file browser with delete and size display (d9cdbb8)
• skills: add syntax highlighting, CSV tables, responsive layout (85e7198)
• skills: add file browser, version selector, and security hardening (2a4db0d)
• ui: add image lightbox and auto-scroll on send (73e061e)
• skills: add edit modal, drag-and-drop upload, fix frontmatter stripping (c1962e4)
• ws-chat: add HTTP file serving, WS media delivery, and streaming UX improvements (892ee8e)
• cache: add build-tag-gated Redis cache backend (0d3230b)
• ui: require typed confirmation for critical entity deletion (2bebe76)
• mcp: add dynamic tool search and shared connection pool (01e40a9)
• mcp: add test connection, server tools endpoint, and grants UX (0473b9a)
• chat: show tool calls with expandable arguments in message history (8efa34f)
• providers: add Claude CLI provider with MCP bridge (#61) (b2c4d54)
• block-reply: deliver intermediate text during tool iterations with 2-tier config (#55) (faa47ab)
• zalo: add file and image upload/send support (#62) (95885da)
• enhance log tailing with attrs, redaction, ring buffer, level control and persistent UI (e0da99d)
• Implement real-time pending pairing request count and notifications in the UI, backed by WebSocket event broadcasting. (c512773)
• Introduce .repomixignore for repomix-specific exclusions and update .gitignore to include release-manifest.json. (0f44f18)
• Add USER_PREDEFINED.md for predefined agents with token count sidebar (d49596a)
• Add user and chat ID filtering to the events page and store event user/chat IDs. (4e7d55f)
• Deny team_message tool for team leads and update string truncation to handle Unicode characters. (c8cd63d)
• add runKind field to differentiate delegation/announce runs from user-initiated (8862842)
• Introduce a dedicated events page by relocating and restructuring event display components, and enhance agent system prompt and sanitization logic. (85a6379)
• ui: add Realtime Events tab to team detail with structured event cards (9b9e99e)
• teams: per-team progress notifications setting with UI toggle (f426460)
• ws: comprehensive team & delegation WS events with typed payloads (61da687)
• browser: add remote Chrome sidecar support for Docker deployments (#59) (62a6ca9)
• mcp+skills: per-agent registry isolation, skill access filtering, managed skill lifecycle (#57) (78abdec)
• teams: add CancelTask with dependency unblocking and delegation cancellation (4da1162)
• security: add web_fetch domain blocklist, enhance IP scrubbing, enforce delegation scope (b8afe6a)
• add prose-invert class to user-rendered markdown content in MarkdownRenderer. (b35dc56)
• dashboard: redesign overview page with quota usage, recent traces, system info (c7d7c80)
• Implement web fetch domain allowlist policy with UI configuration and dynamic updates, and enhance quota group selection. (bae367b)
• quota: channel quota limiter + per-run tool budget + config UI (ed32e68)
• delegation: grouped progress notification + configurable estimated_duration (d62fd83)
• delegation: proactive progress notification + in-progress task reminder (71da3d7)
• telegram: add draft streaming infrastructure + split dm/group stream config (32f9c99)
• Update README (9b12f0a)
• mid-loop context compaction + team task user scoping (e2debfe)
• Resolve Feishu message mentions by stripping bot mentions and replacing user mentions with names. (ea7f932)
• channels: introduce Zalo Personal channel integration (#32) (0f5dd08)
• restrict /reset command to file writers in Telegram group chats. (15e8f12)
• Mount channel webhook handlers directly on the main gateway. (6e7301e)
• centralize agent skill access filtering within the skill search tool and implement optimistic UI updates for skill grants (18c783d)
• skills: per-agent skill filtering with grant-based access control (#45) (f139708)
• Add Feishu channel configuration options for topic session mode, message limits, and group allowlist, refine existing field descriptions, and create a staging tarball. (8ac0958)
• Add support for sending and receiving media attachments in the Feishu channel. (50c32a4)
• Add tool allow list configuration and enforcement for Telegram channels, allowing per-group/topic tool restrictions. (278a98b)
• Refine tool policies with updated groups and aliases, and enhance credential scrubbing by dynamically detecting and redacting server IPs. (ae89239)
• security: enforce group file writer restrictions + harden exec against env/config leaks (74d85c8)
• add a hint to bot reply bodies indicating full content is in session history for LLM context. (53db516)
• Propagate local key for subagent, delegation, and team messages to enable topic/thread-specific routing and context. (e9ab15b)
• telegram: port forum topic features from TS — per-topic config, DM threads, thread fallback, createForumTopic tool, Web UI (5bd4868)
• channel-isolated workspace, resolvePath fix, create_image workspace, summoner Expertise section, bus Topic constants (6ed62b8)
• Publish pre-built Docker images to GHCR (#23) (51f8b89)
• ui: add LLM provider warning and fix outbound dispatcher startup (#20) (1afe721)
• overhaul team delegation, Telegram resilience, and artifact forwarding (0e75c21)
• Add copy-to-clipboard functionality for trace IDs and refine task list layouts. (857262c)
• add team member management (add/remove) and fix UI issues (56827ae)
• enhance agent tool loop detection sensitivity, add Markdown to HTML conversion for Telegram media captions, and refine trace detail dialog UI styling. (26067d2)
• Add native Gemini image generation support and refine media path stripping in agent output. (45ea0ee)
• security: apply upstream TS OpenClaw security and core engine fixes (73b46c3)
• ui: migrate to TanStack Query, add server-side pagination, and improve error handling (813c602)
• thinking: add per-agent extended thinking with Anthropic, OpenAI, and DashScope support (552ddc0)
• providers: add DashScope and Bailian Coding providers with reasoning_content support (d913f29)
• Implement timezone support for cron schedules, improve cron job patching, and enhance trace visibility for cron-triggered agent runs. (2041b70)
• ignore commands explicitly addressed to other bots in Telegram group chats. (4104420)
• telegram: add speech-to-text transcription for voice/audio messages with audio-aware routing (#14) (eacc481)
• providers: support custom base URL for Anthropic provider (#16) (4c67dff)
• discord: support GOCLAW_DISCORD_TOKEN env var for channel config (#6) (1b1ca22)
• Add tool loop detection, negative context injection, and fix Docker workspace permissions (42263e5)
• Add pairing enforcement, group history, and display name resolution for Discord & WhatsApp channels. (2ee39c8)
• Add thought_signature support for Gemini tool calls, including a compatibility function for old sessions and refactoring OpenAI types. (0844969)
• Implement agent resummoning, add Discord require_mention setting, and streamline agent file templates by removing TOOLS.md and HEARTBEAT.md. (f3d2baa)
• Add support for a wider range of LLM provider types with corresponding UI and backend logic. (197c159)
• introduce InfoLabel, ToolNameSelect, ProviderModelSelect, TagInput, and KeyValueEditor components and integrate them into various configuration pages for enhanced user experience. (4441698)
• Improve agent context management with new compaction settings, session-level context window tracking, and calibrated token estimation for adaptive throttling. (a4325e2)
• Introduce a new upgrade command and enhance built-in tool settings with provider and model configuration. (86d58e1)
• Implement built-in tool management with persistence, API, and UI. (d65d792)
• Implement LLM retry notifications in channels via placeholder updates. (6680885)
• enhance filesystem security with symlink/hardlink protection, implement typing indicators, and improve scheduler queue management for stale requests. (2ac44ce)
• Implement vision capabilities and image generation tools, adding media handling, dedicated configurations, and trace optimization for image data. (d5cc5a7)
• Make prepare-env.sh non-interactive by removing the API key prompt, updating README.md instructions and script output. (112fddb)
• add prepare-env.sh script, update documentation, and refine session scheduling with new lanes and stop commands. (31f7e1e)
• Introduce Docker-based sandboxing with container lifecycle management, execution, pruning, and core sandbox interfaces. (1088ffc)
• Display cached token count in the traces table. (f3ba434)
• Implement agent delegation, quality gates, and a new hooks evaluation system. (6066adc)
• Modularize Telegram commands, introduce new scheduler components, and enhance agent management and Feishu integration. (b365ef5)
• Introduce agent teams, agent linking, and advanced agent orchestration features. (dfd9155)
• Implement standalone gateway mode with file-based agent storage and add path denial capabilities to filesystem tools. (67b19e4)
• Add persistent workspace volumes, improve workspace directory creation robustness, and enhance trace error display. (82efb43)
• Dynamically register/unregister providers in memory and recompute stale cron job next_run_at on startup. (9b0dce2)
• exempt USER.md writes from group permission checks during bootstrap onboarding. (3a85614)
• Improve agent concurrency with per-session summarization locks and message buffering, add adaptive scheduler throttling, and introduce Telegram /stop and /stopall commands. (f5ff96d)
• Implement agent resummoning with UI retry, add provider verification, and introduce created_at timestamps to various tables. (16022d7)
• enhance agent creation UI/UX, improve agent memory configuration, and refine styling across agent components. (4887884)
• Introduce agent summoning flow with a dedicated modal and updated bootstrap process for predefined agents. (08ced25)
• Implement dynamic model selection for agents using a new backend API and a reusable combobox component. (abaaf8f)
• Only send 'Thinking...' placeholder message in Telegram direct messages. (3d63e41)
• Implement useDeferredLoading hook to defer skeleton display across various pages, enhancing perceived loading performance. (4feb8fb)

Bug Fixes

• add database name to postgres healthcheck (#203) (74c9fdd)
• subagent provider routing + api_base fallback (#262) (dc51018)
• feishu: align WebSocket protocol with Lark SDK + fix incorrect UI labels (#263) (b379c3b)
• agents: complete shell deny groups propagation chain (2504095)
• heartbeat: delayed refresh after toggle/update, taller checklist textarea (b818de6)
• heartbeat: delayed refresh after toggle/update for accurate countdown (551184c)
• ui: dark mode white dropdown on language and timezone selects (#255) (b7d8d52)
• ui: hide [System] nudge messages from web chat and session viewer (2141852)
• teams: use OR logic for task search instead of AND (da59377)
• teams: auto-copy media files to team workspace on task creation, scope task_number per chat (c7d0bc1)
• streaming: prevent mid-run stream content loss on Telegram (4fc0726)
• tools: add append mode to write_file, warn about content size limits (48ebcf9)
• teams: include agent display name in task create, list, and announce (5a4c720)
• media: chain provider format, post-write verification, group media history (#206) (120fc2d)
• ui: support comma separator in allowed users field (#205) (796a7ec)
• feishu: response websocket event as success (#110) (827c784)
• security: followup hardening — ILIKE ESCAPE, allowlist logging, shell deny, tests (#251) (ce333c7)
• security: harden SQL injection, MCP prompt injection, sandbox fallback, and file serving (#246) (a7f5acc)
• channels: harden error handling and type safety across Telegram, Zalo, Feishu (#247) (8cbd30f)
• install: bundle migrations in release tarball and install script (#249) (7f19db1)
• telegram: enforce transport policy and SSRF guard for media downloads (d460614)
• tools: prevent duplicate media delivery from write_file (31ff5ee)
• agents: preserve emoji when updating agent config + validate emoji input (517e6c8)
• teams: show task_number in create result and allow search to satisfy gate (6106d3d)
• i18n: keep "workspace" untranslated in Vietnamese locale (de2eca9)
• teams: allow search action to satisfy list-before-create gate (946cbb9)
• teams: deduplicate task notifications and batch with debounce (aeadb20)
• teams: hide progress bar on completed tasks (8c662e7)
• ui: prevent white screen on navigation with ErrorBoundary + chunk retry (32f84f8)
• skills: hide skill_manage from LLM when skill_evolve is off (d205691)
• ui: reorder agent config sections + hide managed keys from Other Config (0dea765)
• ui: add loading spinners and toast feedback to create/update modals (0a78902)
• telegram: default draft_transport to false to prevent reply-deleted artifacts (1b87623)
• pass custom name to DashScopeProvider for correct registry lookup (#228) (365f41f)
• providers: prevent Gemini thought_signature from leaking to other providers and breaking validation (#230) (5c0612a)
• ui: workspace dialog scope filter + remove dead tab files (446feda)
• pairing: fix browser approval stuck + security hardening (b0bd4d6)
• teams: status filter default=all, reduce page size to 30, update WorkspaceDir callers (96898a3)
• security: harden pairing auth — fail-closed, rate-limit, TTL (0b5124a)
• teams: propagate peer_kind and local_key through task dispatch chain (0dc3124)
• providers: correct Anthropic prompt caching + add datetime tool (0857321)
• teams: workspace file view/download, scope filter, storage depth (d5ede64)
• teams: filter empty chat_id scopes to prevent Select crash (#216) (61832d3)
• teams: validate blocked_by terminal state + improve leader orchestration prompt (e138ac7)
• openai: use max_completion_tokens and skip temperature for GPT-5/o-series models (#213) (e5f8a2a)
• storage: fix subtree lazy-loading and preserve workspace media files (8053acf)
• kg: sanitize LLM JSON output before parsing (#167) (6dcac3d)
• agent: prevent team V2 leads from manually creating tasks before spawn (08823c0)
• use resolved workspace dir for StorageHandler in Docker deployments (8ad425f)
• ui: improve markdown renderer styling and code block typography (#184) (1543b7a)
• agent: enrich media:image tags with persisted media IDs for Discord image attachments (#179) (1978616)
• pairing: handle transient DB errors in IsPaired to prevent spurious pair requests (7bde3f2)
• tools: add negative guidance for message tool and disable handoff by default (ddd4565)
• tools: improve workspace path guidance to reduce LLM path guessing (52c5697)
• memory: use per-user workspace for memory path detection and KG extraction (558bdd6)
• channels: add DB fallback for pending messages on RAM cache miss (d7ce93d)
• tools: make MessageTool media path resolution workspace-aware (#169) (b73f66d)
• skills: update skill-creator paths and metadata for GoClaw (#168) (9386071)
• ui: prevent white screen on usage page cross-filtering (23e34ee)
• discord: per-user memory scope in guild channels (#166) (7a4a20b)
• ui: add pointer-events-auto to portal dropdowns inside dialogs (495419b)
• telegram: simplify pairing messages for friendlier UX (a75e977)
• handle DB errors in credential merge to prevent silent data loss (dcf9ec4)
• ui: default agent mode to predefined (#147) (e2f0199)
• media tag enrichment, Gemini file polling, credential merge (#158) (b488ef4)
• read_audio fails when LLM passes literal media:audio as media_id (#156) (7386fc8)
• cron: auto-default deliver=true when job created from channel chat (#155) (b5b40e7)
• complete media provider type routing for Suno and fix dbTypeToMediaType map (7277964)
• resolve media provider type from DB instead of guessing from name (#154) (405a753)
• ui: use llm_call_count for provider/model distribution charts (d6f83af)
• ui: preserve byProvider in tools_config whitelist on save (eefc5ef)
• remove legacy per-agent imageGen/vision override from tools_config (#153) (0592be3)
• respect API base when listing Anthropic models (#151) (44e5d66)
• add debug log when OAuth provider skips direct audio API path (4f36646)
• ui: portal all custom dropdowns to document.body (61e6ff2)
• ui: clear compact spinner when has_summary becomes true (771a653)
• exclude inactive agents from team member listings (b71e8ab)
• invalidate TeamToolManager cache on team create (e596d2b)
• allow OAuth providers in media tool chain (read_audio, read_image, etc.) (#150) (fa5f51e)
• honor per-agent DB settings for restrict, subagents, memory, sandbox (#145) (2fdb791)
• resolve embedding provider from DB registry + per-agent config (#134) (1b99406)
• ui: align usage data contracts, add timezone setting, and fix empty usage page (#146) (73389d2)
• zalo: download CDN media to temp file and handle []byte credentials (#130) (6a51e8d)
• auto-persist cleaned history when orphan tool messages detected (#128) (cd2e407)
• route delegate session keys to correct agent loop (#127) (cc00a6f)
• cron: inject delivery context into cron job system prompt (c5b8860)
• security: disable config leak detection to prevent false positives (ee31387)
• tools: allow read_file to access CLI workspaces directory (#122) (9a0557c)
• security: add identity anchoring for predefined agents against social engineering (33e7582)
• kg: use flex layout for full-height graph rendering (554e551)
• pending-messages: run compaction in background, return 202 Accepted (bec670e)
• compaction: use DB count for threshold check after server restart (06ac35e)
• channels: annotate DM messages with sender identity (#120) (a4f2d02)
• i18n: localize compaction tooltips and add contact insert i18n keys (a3cc993)
• ui: contacts filter button height and chat send button alignment (f073c5d)
• ui: wire allowEmpty for embedding provider select (#112) (2495ff2)
• config: treat GOCLAW_PROVIDER/MODEL env vars as fallback, not override (#119) (456e594)
• compaction: memory flush never triggering due to threshold mismatch (2fed2a5)
• channels: defer media download, fix compaction status & context cancel (9181eeb)
• memory flush UI default should match backend (ON, not OFF) (#115) (99110c4)
• tracing: set trace back to running while announce span is active (004f605)
• agents: team reviewer role, tool prompting, inactive agent filter, link direction & i18n (e201583)
• gateway: scoped group writer prompt for system runs + media forwarding gaps (#104) (5f7f4eb)
• spawn tool not registered when providers configured via database (#103) (885814d)
• i18n: add missing config.json locale files (#108) (7436d6b)
• channels: pending message compaction never triggering (30080f1)
• silent bootstrap file ops + rename channel instance Name to Key (a1db0fb)
• skip sender allowlist check for group messages in HandleMessage (#101) (aba5b42)
• ui: support CLI providers without API key in setup wizard (#81) (08d76bb)
• kg: improve search tool UX and graph layout (bee305b)
• claude-cli: check scanner.Err() and increase stream buffer to 10MB (#96) (9249d9e)
• mcp-bridge: per-session security context + media forwarding (#91) (11bed0c)
• replace crypto.randomUUID() with fallback for older browsers (#93) (4721cf2)
• security: enforce lead-only RBAC on team task create/cancel, broadcast, and auto-create (86ba785)
• cron: deliver agent response instead of raw payload message (08ca343)
• pairing: pass senderID to approve callback for group pairings (1f8bcbb)
• zalo: handle polymorphic content.data field in file upload events (f62f60b)
• use platform type instead of instance name in system prompt + Zalo group routing (#90) (e05a401)
• docker: remove gateway config check, unnecessary anymore (#88) (3f850bc)
• docker: update Makefile and compose for managed mode defaults (#86) (1df0e51)
• tools: remove unsupported duration_seconds param from MiniMax music API (faf66cf)
• tools: correct media provider params and UI fixes (9d0af65)
• tools: correct Veo API, media ref ordering, video tag, and model verify (e1a6801)
• ui: strip outer pre from ReactMarkdown to fix code block styling (7652fe2)
• media: use absolute paths and relative URLs for WS media delivery (a53f3e0)
• ui: fix code block text color in light mode for markdown renderer (1bc5393)
• media: set result.Media on create_image and add MEDIA: fallback in subagent exec (96845d1)
• ui: sync toolStreamRef on tool.result to prevent stale overwrite (e06b441)
• ws-media: plumb subagent media paths through announce to inbound message (56dd8b5)
• delegation: scope sibling counting by origin conversation (c636dde)
• delegation: auto-fail team task when async delegation fails (27f2c0d)
• ws-media: use ContentSuffix to inject images into session before run.completed (9897dd7)
• security: harden web fetch/search against prompt injection and cache poisoning (#80) (b901a82)
• ui: align chat send button and widen team members table (7ea27c4)
• ui: eliminate loading flicker on page refresh (d850467)
• ui: default Telegram reaction level to full (f747133)
• ui: default channel policies to pairing for secure-by-default (13dc762)
• channels: coerce string booleans in channel instance config (6a82381)
• mcp: encrypt headers/env on server update (5176716)
• chat: extract agentId from session key when resuming sessions (009df13)
• channels: fix Zalo personal group pairing bypass and reply thread type (#76) (84113cf)
• summoner: increase single-call timeout to 300s (39e906e)
• ut: remove legacy function TestSeedUserFiles_PredefinedAgent_BootstrapUsesCorrectTemplate (#67) (fadc937)
• add scroll when too many option in select (#66) (3dfdc8c)
• add missing /v1 to anthropic default API base URL (#68) (0bef45e)
• zalo: address PR #62 review findings — security, reliability, modularity (519ecd1)
• ui: set is_default on setup agent creation and unify workspace path (d35046a)
• ui: add missing delete buttons for agents and teams (#63) (1ebbe53)
• summoner: sequential file generation with progress + HTTP timeout (#74) (6041c68)
• ui: add tooltip explaining predefined-only team members (#73) (66b0de0)
• openai: increase SSE scanner buffer to 1MB and remove duplicate error check (#72) (3dcbc72)
• Simplify config leak detection to a single gate, triggering on 3+ distinct internal file name mentions without requiring list patterns. (99cab86)
• delegation: serialize announces per session to prevent stale history reads (64ca26e)
• ui: move refresh buttons back into tab content with useMinLoading (936e958)
• ui: team detail layout fixes, thin scrollbar, and refresh buttons (013a3c0)
• ui: constrain detail page card width and add team task/delegation detail views (851cdb2)
• browser: clear refs on reconnect, add reconnect to ListTabs (6991f9a)
• delegate: periodic progress notifications instead of one-shot 90s timer (4af4c69)
• enforce revoke disconnect, group pairing, and agent disable cascade (1f8c98d)
• route list_files("memory") to DB in managed mode (6d9374a)
• nil guard for QueryTodaySummary, correct remoteAddr comment and UI (b1d2e89)
• dashboard: enrich overview with real stats, client tracking, and IP extraction (#51) (9cb73ac)
• OpenAI-compat SSE streaming drops usage data (tokens always 0) (#52) (ab9f582)
• wire DelegateManager into /stopall to cancel async delegations (1841a70)
• complete reasoning passback + fix stripGarbledToolXML discarding valid content (6c7e325)
• teams: auto-create team task in spawn + remove pendingTasksHint (d0531df)
• OpenAI-compat SSE parsing, scanner error check, reasoning passback, and env var parity (1c9e8db)
• correct cron job delivery to Discord channels (#47) (10361b3)
• chat: show all active agents in chat dropdown (#48) (ca05aba)
• delegation: inject dependency results + guard completed task reuse (9b82128)
• teams: scope ListTasks by userID to prevent cross-group task leaking (361bca3)
• delegation: clear senderID in sync delegation context (9a350ea)
• delegation: notify user on failure before retry + pending tasks hint (e5abdf0)
• web_fetch: increase read limit and add empty content detection (25be8cc)
• delegation: add pending tasks hint when team_task_id not found (dbd317a)
• web_fetch: replace regex HTML parsing with DOM-based extraction (37158af)
• Handle bot commands before enriching content to prevent parsing issues with reply/forward context. (e8c634f)
• bump RequiredSchemaVersion to 8 for team_tasks user_id migration (513cbdf)
• zalo_personal: data races in policy, directory perms, Makefile --no-cache (689235f)
• feishu: mention detection fallback when botOpenID is empty (de28473)
• feishu: group pairing uses group-level ID instead of per-user (7106a74)
• improve spawn tool team_task_id validation and orphan detection (4387f6b)
• store: handle NULL JSONB columns in MCP server scan (#40) (846c217)
• sandbox: rename from openclaw to goclaw for project name consistency (#35) (363838c)
• invalidate ContextFileInterceptor cache on agents.files.set (#29) (8d51376)
• heartbeat: resolve default agent from DB in managed mode (#31) (e8607f9)
• bootstrap: SeedUserFiles should use agent-level USER.md as seed for predefined agents (#30) (ad82c09)
• agents: predefined agents visible in web UI for channel members (#34) (3cbdd8d)
• validate provider API keys during bootstrap using auth-required endpoints (#22) (419935b)
• mcp: use json.RawMessage for JSONB fields to prevent base64 serialization (#25) (b071598)
• Improve text wrapping in trace and span previews by changing break-words to break-all. (2623c65)
• cron: route jobs through scheduler for concurrency control and parallel execution (0655849)
• browser: return MEDIA: path from screenshot instead of truncated base64 (#8) (e76aabb)
• tools: use /images/generations endpoint for Gemini and OpenAI image gen (#9) (370c290)
• Correct provider type seeding and add missing env vars for all channels (7450e70)
• channels: start outbound dispatcher before channel check (#15) (fcaf353)
• memory: update Gemini embedding to gemini-embedding-001 with dimension support (#10) (4db5259)
• Strip bot self-mention in Discord responses and remove AGENTS.md from summoning modal (2f44e86)
• Fold tool results as user messages instead of imitable text pattern (40425d3)
• Drop tool_calls without thought_signature instead of converting to text, fix trace detail word-wrap (ef3c35a)
• Implement Lark bot identity probe and group history for mention detection, fix Discord placeholder chunking. (2e5cf4a)
• spawn: resolve parent agent from context in managed mode (#4) (0105bab)
• mcp: treat "method not found" ping responses as healthy (#1) (406f831)
• send empty objects instead of null for tools_config and other_config when disabled or empty. (99c0d7e)

Performance Improvements

• tools: cache LoadContextFiles + fix task detail dialog UX (fe68bd8)
• kg: sync force layout to eliminate render lag; redesign notifications section (fb309c3)

Documentation

• add SQL safety rules to post-implementation checklist (b6f6af0)
• update references for delegate→team/teammate rename (7b3ac84)
• add Mermaid diagrams to agent evolution docs (9a4a5ef)
• add agent evolution & skill management documentation (8d1c270)
• comprehensive audit and update of all documentation (#231) (037d18f)
• add mobile UI/UX rules to CLAUDE.md (ec11698)
• update README to reflect recent features and fixes (#98) (acf3db7)
• update README project status — move tested features to production, replace custom tools with hooks (d820ac0)
• overhaul documentation for v0.2–v0.5 features (e7939de)
• expand Docker Compose upgrade instructions to detail both simple and explicit upgrade paths. (7613e07)
• add git clone step to Quick Start (90107c7)

Tests

• add GetDefault method to stubAgentStore. (df02ab7)

Code Refactoring

• remove dead delegate code, rename lane/channel to team/teammate (49441f7)
• ui: simplify agent detail page — remove Links, Shares tabs and Other Config section (57754a5)
• remove dead quality gates / hook engine code (4678065)
• teams: batch teammate announce via queue with dedup (baa4bb6)
• teams: slim down task list/detail JSON for model (1ca1e41)
• teams: batch TaskTicker queries + leader notifications (514c5e0)
• tools: remove workspace_read/workspace_write, use file tools for team workspace (27fb900)
• providers: simplify DashScope per-model thinking guard (9468aae)
• teams: move workspace button from header to board toolbar (a1495fc)
• config: centralize hardcoded ~/.goclaw paths via config resolution (84b1b07)
• teams: redesign team detail page with kanban board layout (f236d72)
• teams: v2 system cleanup — remove legacy tools, fix followup, add events API (#210) (9a97440)
• channels: unify tab layout widths and schema-driven group overrides (bc9ebaa)
• agent: consolidate system prompt sections into AGENTS.md template (b6df6c9)
• Simplify runtime package installation hints by removing dynamic detection and providing a static message. (e485549)
• kg: improve extraction prompt with few-shot example and controlled vocabulary (b413328)
• deprecate standalone mode, managed mode is now default (#126) (8ad5805)
• media: migrate builtin tool settings from legacy flat to chain format (b9e9e6e)
• ui: restructure sidebar into 7 groups, keep Nodes/TTS untranslated (d301c64)
• onboard: simplify to DB + keys only, delegate setup to web UI (3187196)
• split gateway, consumer, onboard, and agent loop into smaller files (967f7ae)
• split large Go files into smaller modules for maintainability (e85624c)
• align context key assignments for improved readability (ba479c3)
• tools: migrate read_* tools to provider chain and add media models (01d75ac)
• lint: apply Go best practices across codebase (b62d46e)
• security: fix false positives and deduplicate web security hardening (df684e2)
• summoner: optimistic single-call with 2-call fallback (e6e582e)
• oauth: DB-backed token storage, split codex.go, remove file-based artifacts (#65) (7d744eb)
• keep only Tiểu Hồ, Tiểu La, Mễ Mễ predefined agent presets (a7dcefd)
• remove standalone mode, consolidate to managed-only (PostgreSQL) (#70) (6895e36)
• ui: mobile 375px responsiveness for pages and config sections (07d8b4e)
• ui: mobile responsiveness, toast system, service layer, and modal fixes (4120226)
• split 7 large Go files into smaller files per package (7d211fa)
• dashboard: split overview page into focused components (a9ce649)
• Prioritize timeout error handling and renumber error classification. (2029450)
• add AgentStore.GetDefault() to replace full List scan in heartbeat setup (82ce20a)
• split large Go files (>350 lines) into smaller same-package files (50a90aa)
• merge sql file to repare to public repo (206c825)
• improve dialog form scrolling behavior by making content scroll independently of header and footer. (f71dad0)

Styles

• ui: reduce focus ring width and fix dialog overflow clipping (612d9fa)
• Update --destructive-foreground CSS variable to a new oklch color value. (f7a3360)

Chores

• teams: remove deprecated delegation tools (3f2b6e2)
• add CC BY-NC 4.0 license (b9a1808)
• add ui/simple-saas to .gitignore (853725a)
• Update gitignore to broadly exclude k8s-* directories. (9c59392)
• upgrade Go 1.25 → 1.26 and apply go fix modernizations (bdb60de)
• remove unused code (#78) (af85b0c)

Build

• Add *.tsbuildinfo to gitignore to prevent tracking generated TypeScript build info files. (d332335)
• add dynamic version injection via ldflags and Makefile (a0ef0c2)

CI

• publish Docker images to GHCR and Docker Hub (#237) (9429a7c)
• add CI workflow, Makefile targets, and fix typing keepalive race (#41) (043149b)

enhance

• channel-aware identity line, remove model leak from system prompt (5664135)
• rewrite AGENTS.md for managed mode, add Style section to SOUL.md (5a4d40f)
• enrich agent event payloads and fix card layout (60aec38)
• ui: improve realtime event cards with richer payload rendering (a0f69a6)