This hotfix release prioritizes role handling and trusted-auth reliability, while also rolling up the current main fixes since v0.4.4.
Highlights
- Fixed auth role serialization so request identity roles are consistently serialized as string roles across storage, resource, session, queue, watch, summarizer, and semantic-processing paths. (#2728)
- Improved user-management setup in the CLI config wizard and stabilized Web Studio account selection. (#2721, #2722)
- Simplified VikingBot auth handling and added trusted
auth_modesupport for OpenViking-backed bot flows. (#2769) - Made failed session archives skippable and tuned OpenClaw auto-commit behavior. (#2775)
- Added session-aware recall for Codex/OpenCode integrations and consolidated OpenCode plugin documentation around the single maintained plugin. (#2729, #2540, #2801)
- Hardened storage/session behavior, including queuefs semantic processing for non-directory memory URIs, glob URI scheme preservation, event-summary fallback, memory abstract truncation, and path-lock progress logs. (#2735, #2804, #2806, #2774, #2768)
- Improved CLI and SDK surfaces: clearer CLI validation errors, safer request field emission for older servers, Go SDK
set_tags, and the standalone Python HTTP SDK extraction. (#2762, #2799, #2782, #2736) - Added OpenWebUI and Pi coding-agent integration examples. (#2640, #2314)
Upgrade Notes
- Deploy this release for the role serialization fix if you run authenticated or trusted-mode multi-tenant deployments.
- Python package version is derived from the
v0.4.5tag. - Docker images are published with
v0.4.5andlatesttags by the release workflow.
New Contributors
- @BenSharir made their first contribution in #2754
- @blackdeathdrow made their first contribution in #2745
- @Kashkovsky made their first contribution in #2735
- @hammerhoundai made their first contribution in #2314
Full Changelog: v0.4.4...v0.4.5
Contributors
BenSharir, Kashkovsky, and 2 other contributors