Pulled from GitHub Releases

Changelog

Every release of netclaw-dev/netclaw. Pick a version from the sidebar — this page rebuilds whenever a new release is published.

v0.25.0

Netclaw 0.25.0

0.25.0 (2026-07-18)

This stable release concludes the 0.25.0 beta cycle (five beta releases from 0.25.0-beta.1 through beta.5) and adds a round of final polish focused on installation, CLI reliability, and daemon shutdown robustness.

Features

  • Automated shell PATH integration for installers — Unix and Windows installers now automatically update the user's shell profile or PATH registry on install. Unix installers detect the active shell (bash, zsh, fish) and source a self-guarding ~/.netclaw/env script from the correct RC file with duplicate prevention. Windows installers modify the User-scope PATH and broadcast WM_SETTINGCHANGE. Use --skip-shell (-SkipShell on Windows) to opt out (#1687)
  • Timestamped HMAC verification for webhooks — Webhook routes now verify request timestamps alongside HMAC signatures to prevent replay attacks, with configurable HMAC algorithm support (#1660)
  • TSV support in content scanner — Added text/tab-separated-values as a recognized MIME type, allowing TSV files to be scanned and processed by the content pipeline (#1645)
  • Preserve Git working context across sessions and subagents — A bounded, audience-aware Git working-context snapshot (branch, worktree, repository, upstream, changed files) now stays current in the system prompt, and coding subagents inherit recent-file/project context so parent sessions merge back only confirmed successful child edits. Measured 20% → 100% success rate on a linked-worktree coding eval (#1630)
  • User-written AGENTS.md for application-specific agent guidance — Operators can now author ~/.netclaw/identity/AGENTS.md, layered after NetClaw's embedded operating core and inherited by sub-agents, to give the running agent deployment-specific mission and workflow guidance. Seeded with a minimal scaffold during init without overwriting existing guidance (#1622)
  • Discord DM reminder delivery — Reminders can now be delivered to Discord DMs via improved DiscordReminderTargetResolver (#1609)
  • Named model configuration & provider runtime validation — New NamedModelConfiguration and ProviderRuntimeValidation types, config schema updates, and CLI wizard improvements for provider/model setup (#1610)
  • SkillServer native sub-agent sync — Optional native manifest sidecar sync for server-managed sub-agents, keeping RFC skill sync primary while downloading verified native artifacts when available. Local sub-agent files load before server-feed files so user-authored definitions always win (#1539)
  • GitHub Enterprise Copilot support — Authenticate GitHub Copilot tokens against GHE instances and route requests to the correct data residency endpoint (#1509, #1512, #1555)
  • Slack native processing status — Real-time processing indicators in Slack instead of generic "working" messages (#1524)
  • Reminder failure visibility — Operators can now see when reminders fail or are skipped (#1503)
  • Degraded startup mode — Daemon starts with a "no valid model" banner when no provider is configured, instead of failing host startup (#1540)
  • Synced skill resources via shell — Skill resources synced from the cloud can now execute via shell commands (#1551)
  • DwarfStar (ds4) provider support — New openai-compatible backend strategy supporting DwarfStar models (#1349)
  • Inherit embedded AGENTS.md for sub-agents — Sub-agents now inherit the parent session's embedded operating rules from AGENTS.md (#1490)
  • Show advertised skill count for remote skill servers — The Skill Sources config screen now displays how many skills each remote server advertises (#1452)

Bug Fixes

  • MCP arguments shown in approval prompts — Fixed: approval prompts now display full MCP tool arguments for better operator context (#1689)
  • CLI reports unresolved model references cleanly — Fixed: CLI no longer crashes with opaque errors when a model reference cannot be resolved (#1680)
  • CLI handles model migration errors without crashing — Fixed: model migration validation errors are now reported gracefully instead of crashing the CLI (#1678)
  • CLI rejects numeric model modalities — Fixed: model modality values are now validated as strings, rejecting numeric input (#1677)
  • Daemon-stop session drain bounded — Fixed: netclaw daemon stop now properly bounds the session drain timeout, preventing hangs on interactive-tool-paused sessions and giving the CLI adequate headroom (#1673)
  • Reminders rescan definitions before startup alerts — Fixed: startup alerts now fire only after reminder definitions are fully loaded, preventing missed or duplicate reminders on restart (#1653)
  • OpenAI client 2.12 compatibility — Fixed: updated OpenAI provider plugin to work with OpenAI client 2.12+ changes (#1654)
  • Attachment path guidance — Fixed: authoritative attachment path guidance now points to the correct session media directory (#1686)
  • Windows actor checks made deterministic — Fixed: Windows actor lifecycle tests were non-deterministic (#1661)
  • Ollama smoke test pinned — Fixed: pinned Ollama installer to a specific release for smoke test stability (#1659)
  • VHS process group timeout — Fixed: full VHS process group now times out properly during smoke tests (#1655)
  • Screenshot regression determinism — Fixed: screenshot regression suite now uses pixel comparison with blank/partial retry and Termina seam fixes (#1451)
  • Legacy model environment overrides serialized — Fixed: legacy model environment overrides are now properly serialized (#1656)
  • Subagent token usage tracked — Sub-agent token usage is now properly tracked and reported (#1597)
  • Subagent fail-closed for unattended approvals — Fixed: subagents fail safely when approvals are required but no human is present (#1616)
  • Memory core: curation documents stable — Fixed: memory curation documents were unstable across writes, causing cross-session memory recall issues (#1575)
  • Model set/picker preserves modalities — Fixed: model selection UI now preserves model modalities correctly (#1610)
  • Slack processing status serialization — Fixed: Slack processing status now serializes correctly for all states (#1556)
  • Autonomous sessions can write workspace directory — Fixed: autonomous sessions could not write to the workspace directory (#1498)
  • Reminder duplicate-execution guard — Fixed: Mode A reminder session wedge prevented the duplicate guard from releasing (#1500)
  • Reset stops daemon first — Fixed: netclaw reset now stops the daemon before proceeding and shows a progress screen (#1494)
  • MCP tool errors display cleanly — Fixed: MCP errors now show as attributed messages instead of raw JSON dumps (#1510)
  • TUI: auto-advance the add-skill-server flow — Fixed: skill server probe flow now auto-advances on successful connection (#1458)
  • TUI: auto-start init health checks — Fixed: init health checks now start automatically (#1454)
  • TUI: discoverable Done rows — Added "Done" back-out rows across Security & Access menus and config screens (#1448, #1441)
  • TUI: session browser selection highlight — Fixed: session browser now shows selection highlight (#1531)
  • TUI: identity redo timezone loop — Fixed: identity redo would loop on timezone; also fixed session browser regression (#1518)
  • TUI: flaky host crash during reset — Fixed: thread-unsafe ReactiveProperty access during reset caused crashes (#1525)
  • Subagent terminal result summaries — Fixed: subagent terminal results now display properly (#1519)
  • UTF-8 BOM in skill frontmatter — Fixed: skill scanner now strips UTF-8 BOM before parsing YAML frontmatter (#1583)
  • Block system and external skill mutations — Fixed: skill system now blocks mutations to system and externally-synced skills (#1457)
  • Self-monitoring spawn_agent liveness respected — Fixed: tool pipeline now respects self-monitoring spawn_agent liveness (#1456)

Breaking Changes

  • Removed silent local-ollama fallback — Users without any provider configured will now see a "no valid model" banner instead of an automatic fallback to local Ollama. Explicit provider configuration is now required for full functionality (#1540)

Improvements

  • Tool execution pipeline refactoring — Restructured the session tool execution pipeline with isolated invocation scope, composed execution pipeline, typed sub-agent context isolation, and proper lifecycle cleanup (#1641, #1643, #1644, #1646)
  • Logical skill access and authoritative inventory refresh — Skill loading now resolves through logical skill_load/skill_read_resource access with native > managed-feed > external precedence. Startup, sync, watcher, and skill_manage inventory rebuilds centralized through one live-source refresher (#1634)
  • Session actor decomposed into transient-state handlers — LlmSessionActor decomposed into smaller, focused handlers for improved maintainability and testability (#1496)
  • Log stream partitioned by session — Each session now gets its own session.log while daemon.log remains sparse. Cleaner logs and better observability with OTEL union support (#1499)
  • Memory core redesign — Shared curation evaluator unified across both memory write pipelines so they can never diverge. July 2026 audit: revived curation LLM, balanced prompt, and recall precision re-tune (#1575, #1568)

Security

  • Pinned Microsoft.OpenApi to 2.7.5 — Addresses CVE-2026-49451 (#1543)
  • Suppressed GHSA-2m69-gcr7-jv3q (SQLitePCLRaw CVE-2025-6965) — Temporarily suppressed until upstream patches available. Tracking: dotnet/efcore#38257 (#1444)

Dependency Updates

  • OpenAI SDK — Updated to 2.12 (required for API compatibility) (#1654)
  • Microsoft.Extensions.AI — 10.6.0 → 10.8.0 (#1650)
  • Microsoft.AspNetCore.DataProtection — 10.0.9 → 10.0.10 (#1657)
  • Microsoft.NET.Test.Sdk — 18.7.0 → 18.8.1 (#1651)
  • Mattermost.NET — 5.0.0 → 5.0.3 (#1626)
  • SkillServer — Netclaw.SkillClient 0.4.0-beta.4 → 0.4.0 (stable) (#1638)
  • Anthropic SDK — 12.30.0 → 12.35.1 (#1488, #1561)
  • Akka — Akka.Cluster.Sharding and Akka.Persistence 1.5.69 → 1.5.70 (#1560)
  • Testcontainers — 4.12.0 → 4.13.0 (#1563)
  • YamlDotNet — 18.0.0 → 18.1.0 (#1516)
  • Verify.XunitV3 — 31.19.1 → 31.20.0 (#1446)