Paperclip v2026.707.0

Released: 2026-07-07

This release lands 89 commits from 8 contributors.

Highlights

• User-specific runtime secrets - Secrets can now be scoped to the individual human operator, not just the company. Define user-specific secret definitions, store per-user values, bind them to environments, and — thanks to new responsible-user run attribution — have Paperclip deterministically check that the human behind a run has actually supplied the value a run needs before it dispatches. This is a real prerequisite for safe multi-user and cloud execution. (#8825, @cryppadotta)
• Work Timeline - A new company-scoped Work Timeline page renders a compact, Gantt-style SVG view of when your agents worked, how handoffs happened, and where work overlapped — so you can scan multi-agent execution across the whole company at a glance instead of opening runs one by one. The timeline is backed by a dedicated company endpoint with hardened security filters. (#8938, #8880, #8875, #8923, @cryppadotta)
• Custom sandbox images with a built-in SSH terminal - Build reusable custom sandbox images and set them up without ever leaving the browser: an embedded SSH terminal lets you install packages and prep the image directly from the environment configuration flow, and custom images are now scoped to their instance environments. No more copying an SSH command into an external terminal. (#8911, #8794, #8850, @devinfoley)
• Redesigned environment variables editor - The legacy env-var editor is replaced with a single reusable editor used everywhere environment variables are configured (agents, projects, routines, company environments). It handles text values, secret references, draft rows, and sensitive-value warnings consistently, with clearer affordances for converting a plain value into a secret reference. (#8930, @cryppadotta)
• One-click recovery for diverged work - The recovery card now diagnoses when a task's branch has diverged from its base and offers a one-click isolated re-issue, so you can recover stuck or conflicted work without hand-untangling git state. (#9136, @nickyleach)
• Starred resources in the sidebar - Pin the projects, agents, and tasks you touch most to a dedicated starred section in the sidebar for one-click access. (#9085, @cryppadotta)

Improvements

• Optional Ramp skill - A new optional catalog skill wires agents into Ramp's finance setup playbooks — account onboarding, cards, and spend controls — while keeping every action subordinate to Paperclip's approval gates and fail-closed host allowlist. Companies can opt in, and reviewers can see the source model and safety rules in one shipped catalog entry. (#9157, @cryppadotta)
• Faster issue detail loading - Issue detail and activity-ledger responses are trimmed to the fields those views actually need, dropping large embedded project, workspace, and runtime-metadata payloads. Active issues with workspaces now load noticeably faster without changing the underlying persistence model. (#9125, @cryppadotta)
• Project typeahead in the ⌘K command palette - Matching projects now rank above tasks in the command palette, so typing a project name jumps straight to it instead of burying it under tasks, and the project name is always visible in the row. (#8773, @scotttong)
• Gemini 3.1 Pro models - The gemini-local adapter adds Gemini 3.1 Pro models. (#1602, @woosal1337)
• Live heartbeat progress in run logs - The live agent run viewer now renders heartbeat progress events as system log lines, so useful progress text shows up during long operations instead of staying invisible until another event arrives. (#8965, @devinfoley)
• Better live feedback during sandboxed runs - Sandboxed runs surface clearer live agent feedback while they execute. (#8915, @devinfoley)
• Live descendant status in inbox rows - Inbox rows now show the live status of descendant work, so a parent task reflects what its children are actually doing. (#8876, @cryppadotta)
• Operator issue workflow polish - The operator-facing issue workflow UI got a cleanup pass for clearer status and next-step affordances. (#9091, @cryppadotta)
• Cleaner issue properties pane - The issue properties pane got a cleanup pass, and the issue media attachment gallery is now unified across surfaces. (#8941, #8785, @cryppadotta)
• Pipeline automation title templates - Pipeline automations support title templates, so generated issues get consistent, templated titles. (#8787, @cryppadotta)
• Deduplicated pipeline automation health warnings - Pipeline automation health warnings are deduplicated, so the same issue isn't reported multiple times. (#9090, @cryppadotta)
• Deduplicated watchdog review wakes - Open watchdog review wakes are deduplicated so a single review doesn't trigger repeated wakes. (#9148, @cryppadotta)
• Bundled UI webfonts - The app now bundles its UI webfonts instead of fetching them at runtime, so the interface renders with consistent typography even offline or in locked-down networks. (#9020, @cryppadotta)
• Read-only diagnostics endpoints - New read-only diagnostics endpoints expose issue-subtree, issue-blocker, and workspace branch-ancestry state, making it easier to inspect why work is stuck without mutating anything. (#9135, #9114, #9117, @nickyleach)
• Branch incoherence containment - Managed workspaces now contain branch-incoherence situations instead of letting them cascade, so a single bad branch state doesn't strand downstream runs. (#9131, @nickyleach)
• Faster upgrades - The slow issue-comment attribution backfill was relocated to a fast, idempotent migration, so upgrading is quicker and safer to re-run. (#9108, @nickyleach)
• Checkbox selections carried into continuation wakes - Checkbox selections are now included in continuation wakes, so an agent resuming a task keeps the choices you made. (#8893, @cryppadotta)
• Plan review context preserved across wakes - Plan review context is preserved when an agent is woken, so long-running planning work doesn't lose its thread. (#8649, @cryppadotta)
• Dependency wake reconciliation backstop - A reconciliation backstop makes dependency-driven wakes more reliable, so blocked tasks don't get stranded when a blocker resolves. (#8943, @nickyleach)
• Ask-user questions expire when superseded - Pending ask-user questions are expired once a later comment supersedes them, so stale prompts don't linger. (#8799, @cryppadotta)
• Normalized adapter display labels - Adapter display labels are normalized for a consistent look across the UI. (#8913, @devinfoley)
• Telemetry data contract - This release adds a documented telemetry data contract, generated client telemetry types, and an interaction-resolved telemetry signal — groundwork for more reliable, well-typed anonymized usage insights. (#8886, #8818, #8824, @nickyleach)
• Accessibility improvements - The issues view toggle and goal-tree expand buttons get proper ARIA attributes and tooltips, and date preset and day-of-week toggle buttons now expose aria-pressed. (#1937, #1939, #1913, @bluzername)

Fixes

• Work Timeline actor avatars - Actor avatars now render correctly on the Work Timeline instead of showing missing or wrong images. (#9152, @cryppadotta)
• iOS inbox archive gestures - The inbox swipe-to-archive control no longer shares one pending-state gate across rows, so archiving one item on mobile no longer makes the other inbox archive gestures feel stuck. (#9154, @cryppadotta)
• Deduplicated adapter-agnostic config keys - Adapter-agnostic config keys are no longer duplicated, so agent configuration stays clean when switching adapters. (#9058, @nickyleach)
• Skill selection preserved when switching adapter type - Changing an agent's adapter type no longer drops the skill selection you'd already made. (#8975, @fengwuqingchen)
• Responsible-user migration hardening - A batch of fixes to the responsible-user migration path: the inbox-resurface backfill is corrected in place, migration timestamps are repaired, and heartbeat-run identifier references are migrated correctly — so inboxes don't resurface stale work after upgrade. (#9111, #9146, #9107, @cryppadotta, @nickyleach)
• DB backup health alerts - Database backup health alerts fire correctly again instead of misreporting healthy backups. (#9147, @cryppadotta)
• Projectless worktree workspaces fail fast - Git-worktree workspaces without a project now fail during heartbeat setup instead of starting a run that can't succeed. (#9118, @nickyleach)
• Wake diagnostics redaction - Wake diagnostics now redact low-trust identifier references, preventing untrusted identifiers from leaking into diagnostic output. (#9133, @nickyleach)
• Source-install version reporting - Source installs now report their version from git metadata, so the running version is accurate outside of tagged builds. (#9103, @nickyleach)
• OpenClaw gateway protocol version - The OpenClaw gateway adapter bumps PROTOCOL_VERSION to 4 to match the gateway, fixing version-mismatch handshakes. (#5984, @sparkeros)
• Clean terminal output in the UI - Hermes terminal output is stripped of ANSI escape codes in the UI parsers, so logs render cleanly instead of showing raw escape sequences. (#8731, @neerajdad123-byte)
• Agent-authored comments attributed correctly - Agent-authored comments are now attributed to the agent instead of being rendered as "Board". (#8833, @scotttong)
• Markdown contrast on accent bubbles - Fixed low-contrast markdown text rendered on accent-colored chat bubbles. (#8689, @aronprins)
• Workspace reuse & branch coherence - A batch of managed-workspace fixes: inherited workspace reuse falls back correctly, clean branch drift is restored on finalize, branch coherence recovery is fixed, and run config is refreshed before a workspace is reused so runs don't start from stale settings. (#8963, #8914, #8826, #8797, @devinfoley)
• Sandbox reliability - Sandbox bridge credentials and stalled review recovery are fixed, sandbox restore failures now emit better diagnostics, and sandboxed Claude and Codex probe behavior is corrected. (#8844, #8903, #8775, @devinfoley)
• Active heartbeat run reaping - Active heartbeat runs are no longer incorrectly reaped. (#8776, @devinfoley)
• Issue create response relation summaries - Creating an issue now returns correct relation summaries in the response. (#8901, @nickyleach)
• Watchdog properties pane cache - Fixed a stale cache in the watchdog properties pane. (#8786, @cryppadotta)
• Stale server info debug metadata - Cleared stale server-info debug metadata. (#8753, @devinfoley)

Contributors

Thank you to everyone who contributed to this release!

@aronprins, @bluzername, @fengwuqingchen, @ms-moar, @neerajdad123-byte, @nickyleach, @sparkeros, @woosal1337