最新版本 v2026.722.0 已发布（2026 年 7 月 22 日）。

查看更新
← 全部版本

v2026.414.0

安全

  • 授权加固 (GHSA-68qg-g8mg-6pr7) — Scoped import, approval, activity, and heartbeat API routes to enforce proper authorization checks. Previously, certain administrative endpoints were accessible without adequate permission verification. All users are strongly encouraged to upgrade. (#3315, #3009, @KhairulA)
  • 例行任务日期变量 — The createBetterAuthInstance function no longer falls back to a hardcoded JWT secret, closing a credential-hygiene gap. (#3124, @cleanunicorn)
  • 日志脱敏 Bearer 令牌 — —服务端日志现脱敏 Bearer 令牌，避免凭证泄露。
  • 依赖升级 — Updated multer to 2.1.1 (HIGH CVEs) and rollup to 4.59.0 (path-traversal CVE). (#2909, @marysomething99-prog)

亮点

  • 多用户访问与邀请 — —完整多用户认证、公司角色与邀请管理。看板用户可创建邀请链接、批准 join request、管理成员角色。邀请流支持已登录用户 auto-accept、分页历史，以及审批视图中 human-readable 请求者身份。
  • 人类用户身份无处不在 — 人类用户现以真实姓名与头像出现在 activity feed、issue 表、assignee 选择器与 @ 提及菜单；轻量 user directory 端点支撑 UI 一致的身份解析。
  • 任务聊天线程 — Replaced the classic comment timeline with a full chat-style thread powered by assistant-ui. Agent run transcripts, chain-of-thought, and user messages render inline as a continuous conversation with polished avatars, action bars, and relative timestamps. (#3079)
  • 外部适配器插件系统 — Third-party adapters can now be installed as npm packages or loaded from local directories. Plugins declare a config schema and an optional UI transcript parser; built-in adapters can be overridden by external ones. Includes Hermes local session management and provider/model display in run details. (#2649, #2650, #2651, #2654, #2655, #2659, @plind-dm)
  • 执行策略 — Issues can carry a review/approval execution policy with multi-stage signoff workflows. Reviewers and approvers are selected per-stage, and Agorid routes the issue through each stage automatically. (#3222)
  • Blocker dependencies — First-class issue blocker relations with automatic wake-on-dependency-resolved. Set blockedByIssueIds on any issue and Agorid wakes the assignee when all blockers reach 完成. (#2797)
  • 独立 MCP server — New @paperclipai/mcp-server package exposing the Agorid API as an MCP tool server, including approval creation. (#2435)

改进

  • 邀请 UX 打磨 — 已登录邀请自动提交、内联鉴权流、分页邀请历史、加入审批中的请求者身份、防止重复加入请求与成员重复邀请。
  • Board approvals — Generic issue-linked board approvals with card styling and visibility improvements in the issue detail sidebar. (#3220)
  • 收件箱父子嵌套 — Parent issues group their children in the inbox Mine view with a toggle button, j/k keyboard traversal across nested items, and collapsible groups. (#2218, @HenkDz)
  • 选择器新增 Claude 模型 — Issues can now be grouped by workspace in the inbox with collapsible mobile groups and shared column controls across inbox and issues lists. (#3356)
  • 收件箱行内子代 live 状态 — Trigram-indexed full-text search across titles, identifiers, descriptions, and comments with debounced input. Comment matches now surface in search results. (#2999)
  • 任务状态图标与颜色 — Sub-issues moved from a separate tab to inline display on the issue detail, with parent-inherited workspace defaults and assignee propagation. (#3355)
  • Issue 间导航 — Faster navigation between issues with scroll reset, prefetch, and detail-view optimizations. (#3542)
  • Scoped 唤醒自动 checkout — Agent harness now automatically checks out the scoped issue on comment-driven wakes, reducing latency for agent heartbeats. (#3538)
  • 文档 revision diff 查看器 — Side-by-side diff viewer for issue document revisions with improved modal layout. (#2792)
  • 侧栏星标资源 — Press ? to open a keyboard shortcut reference dialog; new g i (go to inbox), g c (comment composer), and inbox archive undo shortcuts. (#2772)
  • Bedrock 模型选择 — Claude local adapter now supports AWS Bedrock authentication and model selection. (#3033, #2793, @kimnamu)
  • Codex 快速模式 — Added fast mode support for the Codex local adapter with env probe safeguards. (#3383)
  • 备份改进 — Gzip-compressed backups with tiered daily/weekly/monthly retention and UI controls in Instance Settings. (#3015, @aronprins)
  • GitHub webhook 签名模式 — Added github_hmac and none webhook signing modes with timing-safe HMAC comparison. (#1961, @antonio-mello-ai)
  • 侧栏顺序持久化 — —侧栏项目与公司排序偏好按用户持久化。
  • Issue 编辑器与文档打磨 — Start/stop controls, runtime state reconciliation, runtime service improvements, and workspace branch/folder display in the issue properties sidebar. (#3354)
  • Attachment improvements — Arbitrary file attachments (not just images), drag-and-drop non-image files onto markdown editor, and square-cropped image gallery grid. (#2749)
  • 聊天图片画廊 — —点击聊天消息中的图片打开完整画廊查看器。
  • 去重 pipeline 自动化健康警告 — pipeline 自动化健康警告去重，同一 issue 不会多次上报。（#9090、@cryppadotta）
  • Routine 改进 — Draft routine defaults, run-time overrides, routine title variables, and relaxed project/agent requirements for routines. (#3220)
  • 项目环境变量 — —项目可定义环境变量，并由工作区运行继承。
  • 技能自动启用 — —提及的技能在 heartbeat 运行中自动启用。
  • Comment wake 批处理 — 多条 comment wake 批成单一 inline payload，使 agent heartbeat 更高效。
  • 服务端 adapter pause/resume — Builtin adapter types can now be paused/resumed from the server with overridePaused. (#2542, @plind-dm)
  • 技能斜杠命令自动补全 — —编辑器中技能名自动补全。
  • Worktree reseed 命令 — New CLI command to reseed worktrees from latest repo state. (#3353)

修复

  • 负责人名称溢出 — —修复任务列表中过长负责人名溢出，改为正确截断。
  • 公司告警隔离 — —公司级告警不再出现在个人收件箱。
  • Invite 状态管理 — 修复复用 invite 刷新 pending 状态、分页 invite 历史缓存隔离，以及重载后 invite 流程状态映射。
  • 议题详情稳定性 — Fixed visible refreshes during agent updates, comment post resets, ref update loops, split regressions, and main-pane focus on navigation. (#3355)
  • 收件箱角标 — Badge now correctly counts only unread Mine issues. (#2512, @AllenHyang)
  • 收件箱键盘导航 — Fixed j/k traversal across groups and nesting column alignment. (#2218, @HenkDz)
  • 执行工作区 — 修复 linked worktree 复用、dev runner 隔离、workspace import 回归，以及经 server toolchain 的 workspace preflight。
  • Stale execution lock — Fixed stale execution lock lifecycle with proper executionAgentNameKey clearing. (#2643, @chrisschwer)
  • 智能体 env 绑定 — Fixed cleared agent env bindings not persisting on save. (#3232, @officialasishkumar)
  • Capabilities 字段 — Fixed blank screen when clearing the Capabilities field. (#2442, @sparkeros)
  • 删除技能 — Company skills can now be deleted with an agent usage check. (#2441, @DanielSousa)
  • 键盘快捷键 cheatsheet — Fixed --append-system-prompt-file being sent on resumed Claude sessions and preserved instructions on resume fallback. (#2949, #2936, #2937, @Lempkey)
  • Agent auth JWT — Fixed agent auth to fall back to BETTER_AUTH_SECRET when PAPERCLIP_AGENT_JWT_SECRET is absent. (#2866, @ergonaworks)
  • 输入卡顿 — Fixed typing lag in long comment threads. (#3163)
  • Shimmer 动画 — Fixed shimmer text using invalid hsl() wrapper on oklch colors, loop jitter, and added pause between repeats.
  • 提及选择 — —恢复触控提及选择并修复带空格提及查询。
  • 收件箱归档 — —修复淡出后归档项闪回。
  • 目标描述 — Made goal description area scrollable in create dialog. (#2148, @shoaib050326)
  • Worktree provisioning — Fixed symlink relinking, fallback seeding, dependency hydration, and validated linked worktrees before reuse. (#3354)
  • Node keepAliveTimeout — —反向代理后增大超时，避免 502。
  • Codex tool-use 转录 — —修复 Codex tool-use 转录完成解析。
  • Codex resume 错误 — —将 missing-rollout Codex resume 错误识别为过期会话。
  • Pi 配额耗尽 — Treat Pi quota exhaustion as a failed run. (#2305)
  • 任务标识冲突 — —防止并发创建任务时的标识冲突。
  • OpenClaw CEO 路径 — Fixed $AGENT_HOME references in CEO onboarding instructions to use relative paths. (#3299, @aronprins)
  • Windows 适配器 — Uses cmd.exe for .cmd/.bat wrappers on Windows. (#2662, @wbelt)
  • Markdown 自动格式化 — Fixed autoformat of pasted markdown in inline editor. (#2733, @davison)
  • Paused agent 变暗 — Correctly dim paused agents in list and org chart views; skip dimming on Paused filter tab. (#2397, @HearthCore)
  • 导入角色回退 — Import now reads agent role from frontmatter before defaulting to “agent”. (#2594, @plind-dm)
  • 备份清理 — Clean up orphaned .sql files on compression failure and fix stale startup log.

升级指南

Nine new database migrations (0049–0056) will run automatically on startup. These add:

  • Issue blocker relations table (0049)
  • Project environment variables (0050)
  • Trigram search indexes on issues and comments (0051 — requires pg_trgm extension)
  • Execution policy decision tracking (0052)
  • Non-issue inbox dismissals (0053)
  • Relaxed routine constraints (0054)
  • Heartbeat run process group tracking (0055)
  • User sidebar preferences (0056)

迁移均为增量——不修改或删除既有数据。

pg_trgm extension: Migration 0051 creates the pg_trgm PostgreSQL extension for full-text search. If your database user does not have CREATE EXTENSION privileges, ask your DBA to run CREATE EXTENSION IF NOT EXISTS pg_trgm; before upgrading.

If you use external adapter plugins, note that built-in adapters can now be overridden by external ones. The overriddenBuiltin flag in the adapter API indicates when this is happening.

贡献者

感谢每一位为本版本贡献的人！

@AllenHyang, @antonio-mello-ai, @aronprins, @chrisschwer, @cleanunicorn, @cryppadotta, @DanielSousa, @davison, @ergonaworks, @HearthCore, @HenkDz, @KhairulA, @kimnamu, @Lempkey, @marysomething99-prog, @mvanhorn, @officialasishkumar, @plind-dm, @shoaib050326, @sparkeros, @wbelt