最新版本 v2026.722.0 已发布（2026 年 7 月 22 日）。

查看更新
← 全部版本

v2026.722.0

亮点

  • 运行绑定智能体密钥访问 — Agents can now fetch the secrets they’ve been granted on demand through a run-bound API, instead of relying only on ambient environment injection. A new access.* delivery mode exposes API-only secrets, GET /api/agents/me/secrets lists just the aliases an agent is granted, and POST /api/agents/me/secrets/:key/value returns a value with Cache-Control: no-store. Every value read is written to both the security audit trail and the operator activity log, low-trust review/skill-test tokens stay denied, and a new Secret access editor lets you manage per-agent grants from agent settings. (#9921)
  • 本地智能体可在 Windows 运行 — The embedded ACPX engine no longer wraps local agent commands in a generated Bash script, so Claude, Codex, Gemini, and custom ACP adapters now spawn natively on Windows as well as Linux. Environment variables are injected through ACPX session options, child stderr is captured in-process, .cmd npm/pnpm shims are preferred on Windows, and symlink EPERM failures fall back to copies. A real Node ACP spawn smoke now runs on both Ubuntu and Windows. (#9980)

改进

  • User-named PAPERCLIP_* bindings now reach your agents — The heartbeat previously stripped every PAPERCLIP_-prefixed env binding before resolution, so a secret you deliberately named something like PAPERCLIP_CLOUD_PROD_PROVIDER_RAILWAY_TOKEN was silently dropped. Now only PAPERCLIP_API_KEY is categorically rejected, harness-assigned runtime vars always win, and every other PAPERCLIP_* binding flows through to the run environment. (#9974)
  • 更稳的遥测客户端 — The telemetry client now matches the wire contract: payloads are chunked, batch IDs are deterministic, retries are batched with backoff, and the local store is bounded. A silent-drop baseline is pinned and caps/backoff are now a configurable surface. Telemetry remains anonymized and can be disabled with DO_NOT_TRACK=1 or PAPERCLIP_TELEMETRY_DISABLED=1. (#9946, #9906, @nickyleach)
  • 斜杠命名 secret 按文件夹浏览 — Secrets whose names contain slashes now navigate as nested folders in the UI. (#9913)
  • Secret 访问的可搜索 agent 选择器 — Granting per-agent secret access now uses a searchable agent picker instead of a long flat list. (#9918)
  • 更简洁的外部对象标签与星标控件 — External object labels and the star controls that sit next to them were simplified for less visual noise. (#9929)
  • Safer sandbox CODEX_HOME sync — The codex-local adapter now stages an explicit allowlist when syncing CODEX_HOME into the sandbox, rather than copying the whole home directory. (#9972, @nickyleach)

实验性

这些功能在实验设置后可用——在实验设置中启用 Apps 即可试用。

  • Connections v3 基础 — The groundwork for one-click Connected Apps landed: a v3 schema core adds a stable company-scoped connection UID, explicit ownership/auth/transport fields, a subject-aware connection_grants table, and multi-key credentials (with the legacy remote_http transport renamed to mcp_remote). On top of that, a generated AppDefinition Wave 1 catalog gives browse and setup a single typed contract, and a runtime layer adds subject-aware authorization state, scoped key handling, and OpenAPI-registered grant routes that fail closed for unknown scopes. (#9958, #9981, #9982)

修复

  • 已归档收件箱项保持归档 — Items you’ve archived no longer resurface in the inbox. (#9931)
  • 桌面 shell 不再乱滚 — Approving the final stage of an execution policy now terminates the policy instead of rewinding it back to stage 1. (#7936, @HKTITAN)
  • 接受 Office issue 附件 — Office document attachments (Word, Excel, PowerPoint) are now accepted on issues. (#8562, @samrusani)
  • 服务端日志脱敏 HTTP Cookie — Cookie headers are now redacted from server logs so session material doesn’t leak into log output. (#7977, @nosolosoft)
  • Run 撰写评论不再 500 — createdByRunId is sanitized on comment insert, fixing a class of 500 errors. (#9489, @digitalflanker-ux)
  • Release issue 时保留 terminal 状态 — Releasing an issue no longer clobbers a terminal (done/cancelled) status. (#7524, @harshkotak)
  • 无效配置文件大声失败 — An invalid config file now surfaces a clear error instead of being silently ignored. (#9041, @lesbass)
  • 待审批引导不可点击 — The pending-approval admin guidance on the invite screen is no longer a misleading clickable element. (#6786, @le-czs)
  • Cron 有效性随 radix-ui 1.6.4 稳定 — Cron validity handling and a settle-branch test were synced for radix-ui 1.6.4. (#9966, @nickyleach)
  • CLI 导入选项修复 — Cleared import selections no longer drop the extension file, and missing company-manifest fields were added to the import-selection test fixture. (#2379, @kevinmanase, #9978, @aaymeloglu)
  • Cloud 托管实例通过 health gate — Cloud-managed instances are now treated as bootstrapped in the health gate so they don’t stall on startup. (#9912)

升级指南

  • This release adds two additive database migrations for the Connections v3 foundation (0182_connections_v3_schema_core, 0183_connection_user_authorization_state), which backfill stable connection UIDs, create default workspace grants, and rename the remote_http transport to mcp_remote. Migrations run automatically on startup — no manual action is required.
  • If you previously set a static PAPERCLIP_API_KEY in adapter/config env to override the run token, that override no longer applies — the harness-minted run token is now the only source of the run API key. All other PAPERCLIP_*-named bindings now flow through to the run environment as expected.
  • Connections/Apps remain gated behind experimental settings. Enable Apps under experimental settings to try the Connections v3 surfaces.

贡献者

本版本含 13 位贡献者的 44 次提交。感谢每一位贡献者！

@aaymeloglu, @digitalflanker-ux, @harshkotak, @HKTITAN, @kevinmanase, @le-czs, @lesbass, @MindSyncHub, @nickyleach, @nosolosoft, @samrusani