Paperclip v2026.626.0

Released: 2026-06-26

This release lands 122 commits from 17 contributors.

Highlights

• Hermes, now built in (local & remote gateway) - Hermes is a first-class adapter in this release. Hire hermes_local agents that run on your own machine, or hermes_gateway agents that run Hermes remotely through a gateway — no manual plugin install required, with secure onboarding defaults for the gateway URL and API key. External Hermes packages can still override or shadow the built-ins through Adapter manager. (#8543, @cryppadotta)
• Task watchdogs - A first-class watchdog control plane lets you attach automated checks to a task and have Paperclip watch it for you — surfacing watchdog state, outcomes, and outstanding work right in the issue thread instead of leaving you to babysit a long-running agent. (#8339, @cryppadotta)
• Ask work mode - Issues can now run in an "ask" work mode for question-and-answer tasks, so you can point an agent at a question and get an answer back without it spinning up a full execution workflow. (#8334, @cryppadotta)
• Sandbox runtime status, live in your threads - Ephemeral sandbox runtimes now report their status directly in issue threads, and Daytona sandbox leases are reused across runs — so cloud/sandboxed execution is both more visible and faster to spin up. (#8594, #8593, @devinfoley; #8513, @devinfoley)
• Workspace file downloads & external object references - Get work products out of Paperclip: download the files your agents produced straight from the workspace, and reference external objects (links, assets) across issue surfaces so the right context travels with the task. (#8512, #8229, @cryppadotta)

Improvements

• Refreshed onboarding - The onboarding flow has been reworked and the older classic wizard retired, alongside a batch of UI style fixes — so getting a new instance set up is cleaner and the default task UI (work-mode labels, status colors, team-creation copy) is consistent out of the box. (#8628, @cryppadotta)
• Task status icons & colors - Task status now reads at a glance with dedicated icons and colors across the board and issue lists. (#8580, @scotttong; #8376, @tonio-alucema)
• Routine date variables - Routines gain date variable controls, so a recurring routine can parameterize on the run date without hand-editing the prompt each time. (#8655, @cryppadotta)
• Skill category editing - You can now edit skill categories in settings, making it easier to organize an installed skill catalog. (#8615, @cryppadotta)
• Publish Paperclip pages & capsules - A bundled page-publishing skill lets agents publish static HTML pages and asset folders to an approved host, and a bundled capsules skill ships the Paperclip capsule identicon toolkit. (#8664, #8669, @cryppadotta)
• Bounded workspace overview - The workspace overview endpoint is now bounded, dramatically cutting the payload and latency for instances with large workspaces. (#8627, @cryppadotta)
• Streamlined sidebar by default - The streamlined sidebar is now the default layout. (#8496, @devinfoley)
• Sorted workspace routines - Workspace routines are now sorted by name, so the routine list stays predictable. (#8666, @cryppadotta)
• Plugin install targeting - The CLI surfaces the plugin install target host and adds a plugin target command, so you always know which instance a plugin is being installed into. (#8575, @cryppadotta)
• Better workspace selector search - The reusable workspace selector gets improved search, making it quicker to pick the right workspace. (#8597, @cryppadotta)
• Instance-scoped execution environments - Execution environments are now instance-scoped and edited through a dialog, with cleaner copy and a tidier driver dropdown on the Company Environments screen. (#8375, #8391, #8400, #8398, #8329, @cryppadotta)
• Heartbeat preflight budget caps - Heartbeats now respect preflight budget caps, giving you a hard ceiling on what a single wake can spend. (#8347, @levineam)
• Skill mutations gated by permission - Skill create/edit/delete is now gated behind a dedicated skills:create permission, so lower-privileged principals can browse skills without being able to change them. (#8616, @cryppadotta)
• Observable sandbox sync progress - Adapter utilities can now report sandbox sync progress, so long file syncs into a sandbox are no longer a black box. (#8395, @cryppadotta)
• Codex local inherits host login - codex_local agents inherit the host Codex login by default and seed managed auth into isolated homes, so they work without re-authenticating. (#8425, #8403, @cryppadotta)
• Codex local inactivity monitor - The codex_local adapter now monitors output inactivity and prefers the loopback runtime API URL for local agents, improving reliability of long local runs. (#5017, #5102, @neerazz)
• Claude refusal signal - The claude_local adapter emits an errorCode of claude_refusal on a stop_reason refusal, so refusals are handled as a first-class outcome. (#8314, @uky333)
• Claude 4.5 model aliases - claude_local now uses direct 4.5 model aliases. (#3800, @LeonSGP43)
• Agent id header for claude_local - claude_local stamps the agent id via an X-Anthropic-Agent-Id header. (#8322, @zenprocess)
• Cleaner agent config & company copy - The agent config environment selector is cleaner, the company creation copy is refreshed, and the adapter test button only tests (no accidental saves). (#8504, #8653, #8405, @cryppadotta)
• Cheap-model agent config check - Agent configuration checks now test with a cheap model, so validating a config doesn't burn premium tokens. (#8632, @cryppadotta)

Fixes

• Mobile issue chat - Fixed issue-chat spacing on mobile, the mention warning spacing, and horizontal viewport scroll on small screens. (#8493, #8486, #8370, @cryppadotta)
• Scroll position on back/forward - The main content area now restores its scroll position on browser back/forward navigation. (#8636, @devinfoley)
• UI detail regressions - A batch of issue-detail and rich-object regressions are fixed, including generic URL rich-object labels. (#8613, #8662, @cryppadotta)
• Secret ref binding sync - Top-level secret reference binding now stays in sync, and agent secret bindings are enforced across lifecycle flows so a reassigned or re-run agent always sees the right secrets. (#8630, #8307, @cryppadotta)
• Sandbox restore & publishing - Fixed sandbox restore index drift, sandbox git publishing, large workspace uploads, and excluded transient Codex home dirs from sandbox sync. (#8595, #8422, #8581, @cryppadotta)
• Daytona disk & resources - Daytona sandboxes default to auto-archive so they leave the disk quota, resource overrides work for image-backed sandboxes, and the env config form accepts valid memory input with size presets. (#8561, #8564, #8389, @cryppadotta)
• Smarter recovery - Stranded-issue recovery converts review-parked continuations into dependency waits and exempts routine-parent issues from missing-disposition handoff, so agents aren't yanked off legitimately-waiting work. (#8371, @cryppadotta; #8157, @BuyWhere)
• Cancelled child blockers ignored - Attention calculations now ignore cancelled child blockers, so a cancelled subtask no longer keeps its parent stuck. (#7577, @MrBlackTongue)
• Issue read authorization - Single-issue comments and issue-thread lists now enforce read authorization, and mention-granted closed-issue comments respect resume intent. (#8346, #8331, #8350, @nickyleach)
• CEO authorization hardening - Same-company CEO authorization is hardened against cross-company access. (#8276, @cryppadotta)
• Isolated remote Claude config - Remote Claude config is isolated from local credentials, so a sandboxed Claude run can't pick up your host login. (#7676, @lennies)
• Live events socket hardening - Live-events upgrade sockets are hardened against malformed upgrades. (#8383, @cryppadotta)
• Gemini headless stalls - Fixed headless Gemini invocation stalls. (#8368, @chekos)
• Cursor streamed text - The cursor adapter coalesces streamed assistant text into clean prose blocks. (#8544, @seb-veto)
• OpenClaw Gateway root params - The OpenClaw Gateway no longer forwards root Paperclip params. (#4416, @serenakeyitan)
• Agent creation & hire UI - Fixed the blank page when creating an agent, and inbox hire approvals now clear when approving or terminating from the detail page. (#8336, #8340, @cryppadotta)
• Routine schedule editor - The routine schedule editor is stabilized, including interrupted-run labels. (#8333, @cryppadotta)
• Copy buttons over HTTP - Issue copy buttons work again when served over plain HTTP. (#8212, @joegalbert-ai)
• Fresh worktrees track origin/master - New worktrees are based on origin/master and unstarted reuses are refreshed, so execution workspaces don't start from stale code. (#8412, @cryppadotta)
• Durable agent pause - Agent pause now stays durable at execution-start. (#8317, @Tattoofamily)
• CLI board auth - The CLI handles a headless browser-open failure during board auth instead of hanging. (#8328, @AayushThakur1999)
• Pipelines plumbing - Internal groundwork for multi-stage pipeline cases landed under the hood (stages, case transitions, drift detection); it's not a user-facing surface yet. (#7903, @cryppadotta)

Contributors

Thank you to everyone who contributed to this release!

@AayushThakur1999, @aronprins, @BuyWhere, @chekos, @dmndbrp-oss, @joegalbert-ai, @lennies, @LeonSGP43, @levineam, @MrBlackTongue, @neerazz, @seb-veto, @serenakeyitan, @Tattoofamily, @tonio-alucema, @uky333, @zenprocess