Omnesis 0.6.0

Minor Changes

• 3e94207: The gateway reads the dates written in every document's text on every install, without experimental mode or the Brain, and the agents' time queries and Debug → Calendar include them. An all-numeric English date such as "10/07/2026" reads month-first when the gateway's time zone is in the United States, a US territory or the Philippines, and day-first everywhere else, including Canada, Latin America and UTC. A gateway whose time zone is UTC, as a container often is, therefore reads US-style dates day-first: set enrichment.dates.numericDateOrder to month-first or day-first to choose explicitly.

• 2f2680e: Tell Omnesis voice notes can be transcribed by the gateway's transcriber. While a transcriber is assigned and the new inference.dictation.transcribeOnGateway setting is on (the default; Settings → Models → Transcriber, or Settings → Voice in the apps), the iOS and Android apps record Tell Omnesis — including Apple Watch notes — as a voice note: the note is saved at once and the gateway replaces its text with its own transcript when ready. Watch notes wait on the watch until the iPhone receives them, and the watch returns to its face after sending. Omnesis Demo gains its own Apple Watch app.

• 4b975f5: Gmail reads mail more faithfully. A message is dated by its Date header rather than by when Gmail received it, so mail imported from another account sits in the year it was sent. Bodies are decoded in the charset they declare, a "view in browser" or abridged plain-text part gives way to the HTML that carries the message, the date line no longer renders as a heading, Bcc recipients on sent mail join the people graph, automated senders no longer create people, and signature logos are no longer indexed as attachments. A first sync keeps listing the mailbox until Gmail has no more pages, so the oldest mail is no longer left unread, and a message deleted between being listed and being fetched is treated as deleted rather than as an expired history. The changes apply to mail synced after the update; mail already indexed keeps its current form until the source is resynced.

  Shared attachment extraction improves for every source: legacy PowerPoint files are read from their text records instead of their raw bytes, binary noise from old Office files is no longer indexed as text, text attachments honour their declared charset, image file names in URLs are no longer taken for email addresses, and one slow OCR request no longer pauses OCR for every image after it. inference.ocr.requestTimeoutSeconds sets how long a collector waits for one image's OCR.

• 52f8455: New Maildir source. It indexes email that a mail tool keeps on the collector's machine as a Maildir — mbsync, offlineimap or getmail, for example — without Omnesis connecting to the mail server itself, which makes it the way in for accounts whose provider allows only approved mail apps. A message stored in several folders, as Gmail's labels are, is one document tagged with every folder. Folder changes, stars and replies update it without re-reading its attachments, and deleting its last copy removes it. Drafts, spam and trash are skipped. Thunderbird accounts kept in its file-per-message (maildir) store are read too.

• ba922cd: Plaid and Local Files are no longer experimental. Every collector now offers them in + Add source without OMNESIS_EXPERIMENTAL=1, and a collector that already hosts one keeps syncing it with the flag off.

Patch Changes

• 4e47b47: When an agent signs in again and you choose a connection for it to replace, each connection now reads "Access level: …" instead of "Uses …". The line names the access level the connection uses, which can be shared by several connections and is often named after the agent it was first made for, so "Uses OpenClaw" under a Hermes connection read as if Hermes were OpenClaw.
• 19e245b: Update brace-expansion within its existing major versions to fix denial of service vulnerabilities in brace parsing and expansion.
• d25b1d5: On macOS, a collector that dies without a clean exit now always comes back — whether it crashed, was killed by its event-loop watchdog, or was killed outright, for example by the system when memory runs out. launchd can hold back the respawn a LaunchAgent's KeepAlive asks for — it records the restart and waits for something to demand the job — which left the collector down until it was started by hand. Each collector now starts a small guard process beside it that, once the collector's process has ended, waits out the LaunchAgent's throttle interval and asks launchd to start the job again unless it is already running, ended with a clean exit (such as a collector parked for re-pairing), or was stopped with omnesis service stop. Linux is unaffected: systemd restarts a failed collector unit on its own.
• 0aab430: The portal, iOS and Android chat show copy buttons beside inline code values and multiline code blocks in completed assistant answers. The agent formats addresses, phone numbers, identifiers and requested drafts with standard Markdown so older clients can still display them. Copying puts just the value on the clipboard, without its label or Markdown delimiters.
• e3fecd3: The Docker images now ship their dependencies with the repository's patches applied, as source installs always have. Without them, a WhatsApp source running in the collector container let libsignal print whole Signal session records — ratchet private keys and root keys included — to the container's log each time a session was opened, closed or pruned; the images also lacked the Baileys pairing-platform fix and the better-sqlite3-multiple-ciphers type export. The image build now fails when a patch no longer applies, and the runtime smoke checks each patched file in every shipped image.
• 3e94207: If you ran a WhatsApp source in the collector container from an earlier Docker image, that container's logs may contain Signal session records, which include session keys. After updating, rotate or delete the old collector container logs, for example by recreating the container, and remove any copies a log driver or log collector has shipped elsewhere. Source installs are not affected.
• be832f0: A long-running gateway no longer starts refusing every sync page from a source that declares URL patterns, Strava among them, with "must be a supported safe regular expression" until it is restarted. The gateway checks those patterns with a WebAssembly build of RE2 whose memory is fixed at 16 MiB, and every check left a little of it behind until none was left; the dependency is now patched to free it.
• 12f10e4: Gmail: a message whose text is split across several parts, or whose large body Gmail returns by attachment id, is read in full instead of from its first part. A small inline image is kept when its text adds a phone number, an email address or several words the message does not already carry.
• 272d590: Hermes: a scheduled job or other tool call no longer fails with "Omnesis corpus authorization needs repair" when the Hermes gateway renewed the Omnesis credential while the tool still held the previous access token. The adapter now renews from the gateway when the token it picked up from disk has already expired.
• 3e94207: An OpenClaw or Hermes integration no longer has to be approved again because one token refresh was slow. When the gateway took longer to answer a refresh than the integration waited, it still rotated the refresh token, and the integration was left holding a spent one; omnesis connect --refresh then fell back to a new approval. A token refresh now waits up to 55 seconds for the gateway, long enough for the write stall a gateway shows right after a restart, and repeats once a refresh whose answer never arrived — a timeout, a dropped connection or a server error. The gateway answers that repeat with the tokens it already issued for two minutes after rotating them. Concurrent refreshes from the same integration wait correspondingly longer for each other.
• e83263d: Maildir: a message whose Date header lies before 1980 or more than a day in the future is dated by its mail server's Received stamp instead.
• 8ef86a6: Show readable document connections and matching-text copies in iOS and Android search results. Mobile clients request optional graph context only from gateways that advertise support, while older clients and gateways retain ordinary search behavior.
• 3cf5ddb: omnesis connect openclaw works with OpenClaw 2026.9.6 again. That release reports a missing legacy omnesis-bridge plugin in new words, which connect took for a real failure and stopped. When OpenClaw instead finds an omnesis-bridge copy it did not install and refuses to remove it, connect now says how to find and delete that copy before running it again.
• b1f897c: OpenClaw: when the gateway refuses an expired Omnesis access token, the plugin renews it with its refresh token again, including when the gateway's authorization server is on another address than its MCP endpoint. Previously that renewal was refused locally and every expiry fell back to re-issuing the credential with the device's management token.
• 2a0bf0f: When a Strava account runs into the rate limit Strava counts against the API application, the other Strava accounts a collector connects through that application now also show as rate limited, not only the one that hit it. A rate limit counted against one account no longer shows another provider's sources as rate limited because they are signed in with the same account name, such as a mailbox and a note-taking app on one email address. This changes only which sources show as rate limited.
• 19e245b: Add graph-aware agent search with bounded document trails, grouped matching extracted text and readable context. Search v2 is enabled by default; set search.v2.enabled to false to restore legacy behavior. Inspect copy locations, source links and breadcrumbs with `omnesis...