v0.26.0-beta.2

Pre-release August 11, 2026

Netclaw 0.26.0-beta.2

0.26.0-beta.2 (2026-08-10)

MCP server prompts as dynamic skills — Prompts exposed by connected MCP servers are now loadable through the skill index, with argument validation and cross-server conflict rejection (#1813)
Native PowerShell on Windows — The daemon now runs Windows shell execution through native PowerShell (7.6 preferred, 5.1 fallback) instead of cross-language emulation, with unified execution, analysis, and approval policy (#1848)

Reminders no longer skipped on capacity — The execution-capacity gate that settled reminders as skipped is removed; reminders now defer instead of silently dropping (#1839)
MCP: dead OAuth connections no longer report Connected forever — Servers with expired OAuth tokens demote to AwaitingAuth with an operator alert instead of wedging the daemon (#1841)
MCP: HTTP protocol fallback header race fixed — The stale MCP protocol-version header is only removed from initialize requests; daemon and CLI now share one HTTP client (#1861)
Daemon working directory preserved — The daemon no longer runs from a temp directory that cleanup could delete out from under it (#1853)
/dev/null approval scope fixed — Safe commands redirecting to /dev/null no longer create a reusable /dev approval scope (#1852)
PowerShell host probe hardened — Slow pwsh cold starts no longer brick daemon startup; the probe retries and falls back to Windows PowerShell 5.1 (#1859)

Shell approval analysis migrated to ShellSyntaxTree — Bash and PowerShell approval decisions now use the ShellSyntaxTree parser with fail-closed unknown syntax (#1835, #1836, #1855)
PowerShell approval repetition reduced — Safe PowerShell command sequences prompt less often (#1837)
Bash hidden-execution approval boundaries pinned — source builtins and nameref-deferred execution now require one-shot approvals (#1838)
PowerShell execution-region approvals improved — Host and body commands must each match approval policy independently (#1857)