diff --git a/releases/v2026.511.0.md b/releases/v2026.512.0.md similarity index 94% rename from releases/v2026.511.0.md rename to releases/v2026.512.0.md index f5a60130..b893428e 100644 --- a/releases/v2026.511.0.md +++ b/releases/v2026.512.0.md @@ -1,6 +1,6 @@ -# v2026.511.0 +# v2026.512.0 -> Released: 2026-05-11 +> Released: 2026-05-12 ## Highlights @@ -9,9 +9,9 @@ - **Routine revision history with restore** — Routines now keep an append-only revision log with a History tab on routine detail. Operators can preview prior revisions, see structured change summaries, diff descriptions, restore older definitions safely, and recover webhook secrets after restore. ([#5285](https://github.com/paperclipai/paperclip/pull/5285)) - **Successful-run handoff and system notices** — When an agent run ends productively but the issue still needs a final disposition, the recovery service now opens an explicit handoff with first-class system notices rendered in the issue thread, so operators can see exactly why a run paused, escalated, or closed. ([#5289](https://github.com/paperclipai/paperclip/pull/5289)) - **Expanded plugin host surface** — Plugins can now declare scoped database namespaces (with migration tracking), local project folders, managed agents, managed routines, scoped APIs, and reusable UI building blocks (file trees, resizable sidebars, route sidebars, managed-routine controls), all through documented contracts and validators. Follow-up host support landed for managed plugin skills and richer SDK types. ([#5205](https://github.com/paperclipai/paperclip/pull/5205), [#5597](https://github.com/paperclipai/paperclip/pull/5597)) +- **LLM Wiki plugin package** — Built on the new plugin host contracts, the `@paperclip/plugin-llm-wiki` package now ships in the monorepo with public entrypoints and Docker manifest coverage. ([#5716](https://github.com/paperclipai/paperclip/pull/5716)) - **Secrets provider vaults with remote import** — Company secrets gain provider-vault configuration, AWS Secrets Manager remote-import preview/commit, binding usage tracking, access events, and rotation guards. The Secrets settings UI now exposes vault management and remote import, with CLI/API docs to match. ([#5429](https://github.com/paperclipai/paperclip/pull/5429)) - **Cursor cloud adapter** — A new built-in `cursor_cloud` adapter drives Cursor's hosted-agent platform through `@cursor/sdk`, mapping Paperclip heartbeats to Cursor's durable-agent + per-run model with session reuse, streaming, and cancellation. ([#5664](https://github.com/paperclipai/paperclip/pull/5664)) -- **Daytona sandbox provider plugin** — A new `@paperclip/sandbox-provider-daytona` plugin uses `@daytonaio/sdk` for sandbox lifecycle, command execution, and shell detection, mirroring the existing E2B provider so operators can pick Daytona without touching core. ([#5580](https://github.com/paperclipai/paperclip/pull/5580), [#5586](https://github.com/paperclipai/paperclip/pull/5586)) - **ACPX local adapter** — A new ACPX local adapter runtime can proxy Claude- and Codex-style execution with provider-aware model handling, a polished agent config form, and Storybook-covered model/provider behavior. ([#4893](https://github.com/paperclipai/paperclip/pull/4893), [#5290](https://github.com/paperclipai/paperclip/pull/5290)) ## Improvements @@ -37,9 +37,7 @@ - **Issue comment presentation contract** — Issue comments grow optional `author_type`, `presentation`, and `metadata` fields so system-authored notices render as first-class thread messages without overloading regular comments. ([#5289](https://github.com/paperclipai/paperclip/pull/5289)) - **Database backups cover non-system schemas** — Database backup support now covers non-system schemas and is hardened against schema drift. ([#4859](https://github.com/paperclipai/paperclip/pull/4859), [#4960](https://github.com/paperclipai/paperclip/pull/4960)) - **Dedicated environment settings page** — Environments get their own settings page with a test-in-environment flow so operators can validate adapters before assigning work. ([#4798](https://github.com/paperclipai/paperclip/pull/4798)) -- **Cursor sandbox support** — Adds Cursor as a supported sandbox, alongside SSH workspace-sync fixes for remote setups. ([#4803](https://github.com/paperclipai/paperclip/pull/4803)) - **E2B plugin configuration UX** — The E2B plugin gets a clearer configuration UX, longer-running execution support, and a default-template flag for example plugins. ([#4802](https://github.com/paperclipai/paperclip/pull/4802), [#4901](https://github.com/paperclipai/paperclip/pull/4901)) -- **Sandbox provider messaging** — Company environment settings call out the active sandbox provider more clearly so operators know which runtime backs each environment. ([#4902](https://github.com/paperclipai/paperclip/pull/4902)) - **Sandbox callback bridge for remote envs** — Remote execution targets now reach the host environment through a scoped callback bridge with serialization against concurrent heartbeats, env sanitization at the boundary, an expanded allowlist for the documented heartbeat surface, optional proxy logging via `PAPERCLIP_BRIDGE_DEBUG`, and SSH-environment-callback migration. ([#4801](https://github.com/paperclipai/paperclip/pull/4801), [#5326](https://github.com/paperclipai/paperclip/pull/5326), [#5325](https://github.com/paperclipai/paperclip/pull/5325), [#5324](https://github.com/paperclipai/paperclip/pull/5324), [#5140](https://github.com/paperclipai/paperclip/pull/5140), [#5116](https://github.com/paperclipai/paperclip/pull/5116)) - **Sandbox install/test surface** — Per-adapter sandbox install commands flow through both the test and execute paths, sandbox providers can declare shell defaults, explicit-environment adapter tests run on the requested target instead of falling back to the host, and remote provisioning now consults a runtime command spec from the adapter. ([#5280](https://github.com/paperclipai/paperclip/pull/5280), [#5277](https://github.com/paperclipai/paperclip/pull/5277), [#5141](https://github.com/paperclipai/paperclip/pull/5141), [#5114](https://github.com/paperclipai/paperclip/pull/5114)) - **Polished board settings and skills workflow** — Board settings and the skills assignment flow are smoother to navigate. ([#4863](https://github.com/paperclipai/paperclip/pull/4863)) @@ -55,7 +53,6 @@ - **Remote workspace environment shaping** — Remote workspace environment shaping now produces the right env for downstream commands. ([#5118](https://github.com/paperclipai/paperclip/pull/5118)) - **SSH callback URL selection on LAN/private networks** — The SSH callback now picks a URL the remote can reach when the host is on a LAN or private network. ([#4799](https://github.com/paperclipai/paperclip/pull/4799)) - **Harder remote workspace sync and restore** — Workspace export uses a per-import unique ref, restore goes through a new snapshot-aware merge that only writes files the remote actually changed, and every adapter threads a pre-run snapshot through sandbox/SSH paths to avoid trampling local state. ([#5444](https://github.com/paperclipai/paperclip/pull/5444)) -- **Cursor sandbox runtime resolution** — Cursor sandbox runtime resolution is more stable across adapter targets. ([#5446](https://github.com/paperclipai/paperclip/pull/5446)) - **Runtime probes and Codex env tests** — Runtime probe behavior and Codex environment tests are stabilized so flakes no longer mask real adapter problems. ([#5445](https://github.com/paperclipai/paperclip/pull/5445)) - **E2B sandbox executor reliability** — E2B sandboxes now run a real `command -v` probe and source login profiles before exec, stage stdin to a temp file so it is delivered reliably, and the gemini-local hello probe gets a 60-second timeout for SSH and E2B targets. ([#5279](https://github.com/paperclipai/paperclip/pull/5279), [#5278](https://github.com/paperclipai/paperclip/pull/5278), [#5322](https://github.com/paperclipai/paperclip/pull/5322)) - **Runtime races and orphaned leases** — Fixes a runtime state race, workspace-sync gaps, plugin startup ordering, and orphaned execution leases. ([#4804](https://github.com/paperclipai/paperclip/pull/4804)) @@ -80,4 +77,4 @@ Nine new database migrations (`0075`–`0083`) run automatically on startup. All - `0082_dry_vision` — adds the secrets provider infrastructure: creates `company_secret_bindings` and `secret_access_events`, adds a stable `key` slug to `company_secrets` (backfilled and de-duplicated from existing names), and grows `company_secrets` / `company_secret_versions` with provider metadata, fingerprints, rotation timestamps, and soft-delete columns. Existing secrets get `managed_mode = 'paperclip_managed'`, `status = 'active'`, and a backfilled `last_rotated_at`. - `0083_company_secret_provider_configs` — creates `company_secret_provider_configs` and retypes `company_secrets.provider_config_id` from `text` to `uuid`. Any prior non-UUID values in that column are cleared to NULL before the type change, so make sure you have no production data relying on free-form provider config ids before upgrading. If you do, capture those values out-of-band and reconfigure secrets against a real provider config row after the migration. -No application configuration changes are required to take this release. If you operate the Codex adapter against Codex CLI 0.122 or newer, the new apikey-mode `auth.json` is written automatically from your existing `OPENAI_API_KEY` configuration. The new `cursor_cloud` adapter and Daytona sandbox provider are opt-in — agents and environments continue to use whatever runtime/sandbox they were configured with. +No application configuration changes are required to take this release. If you operate the Codex adapter against Codex CLI 0.122 or newer, the new apikey-mode `auth.json` is written automatically from your existing `OPENAI_API_KEY` configuration. The new `cursor_cloud` adapter is opt-in — agents continue to use whatever runtime they were configured with.