# paperclip changelog

> paperclip release notes.

- Vendor: paperclip
- Category: AI
- Official site: https://paperclip.ing/
- Tracked by: What's New (https://whatsnew.fyi/product/paperclip)
- Harvested from: GitHub (paperclipai/paperclip)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### v2026.722.0

- Date: 2026-07-22
- Version: v2026.722.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.722.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.722.0

- **added** — Agents can now fetch secrets they've been granted on demand through a run-bound API with new access.* delivery mode, GET /api/agents/me/secrets to list granted aliases, and POST /api/agents/me/secrets/:key/value to return values with Cache-Control: no-store
- **added** — Secret access editor in agent settings lets you manage per-agent secret grants
- **added** — Local agents run natively on Windows without Bash script wrapping, with native spawning for Claude, Codex, Gemini, and custom ACP adapters
- **changed** — User-named PAPERCLIP_* environment bindings now reach agents instead of being stripped, with only PAPERCLIP_API_KEY categorically rejected
- **changed** — Telemetry client now matches wire contract with chunked payloads, deterministic batch IDs, batched retries with backoff, and bounded local store
- **changed** — Secrets whose names contain slashes now navigate as nested folders in the UI
- **changed** — Secret access grant interface now uses a searchable agent picker instead of a flat list
- **changed** — External object labels and star controls were simplified for less visual noise
- **changed** — codex-local adapter now stages an explicit allowlist when syncing CODEX_HOME into the sandbox
- **fixed** — Archived inbox items no longer resurface in the inbox
- **fixed** — Approving the final stage of an execution policy now terminates the policy instead of rewinding to stage 1
- **fixed** — Office document attachments (Word, Excel, PowerPoint) are now accepted on issues
- **fixed** — Cookie headers are now redacted from server logs to prevent session material leakage
- **fixed** — createdByRunId is sanitized on comment insert, fixing a class of 500 errors
- **fixed** — Releasing an issue no longer clobbers a terminal done or cancelled status
- **fixed** — Invalid config files now surface a clear error instead of being silently ignored
- **fixed** — Pending-approval admin guidance on the invite screen is no longer a clickable element
- **added** — Connections v3 foundation with stable company-scoped connection UID, explicit ownership/auth/transport fields, subject-aware connection_grants table, and multi-key credentials support

#### Paperclip v2026.722.0

> Released: 2026-07-22

##### Highlights

- **Run-bound agent secret access** — Agents can now fetch the secrets they've been granted on demand through a run-bound API, instead of relying only on ambient environment injection. A new `access.*` delivery mode exposes API-only secrets, `GET /api/agents/me/secrets` lists just the aliases an agent is granted, and `POST /api/agents/me/secrets/:key/value` returns a value with `Cache-Control: no-store`. Every value read is written to both the security audit trail and the operator activity log, low-trust review/skill-test tokens stay denied, and a new **Secret access** editor lets you manage per-agent grants from agent settings. ([#9921](https://github.com/paperclipai/paperclip/pull/9921))
- **Local agents run on Windows** — The embedded ACPX engine no longer wraps local agent commands in a generated Bash script, so Claude, Codex, Gemini, and custom ACP adapters now spawn natively on Windows as well as Linux. Environment variables are injected through ACPX session options, child stderr is captured in-process, `.cmd` npm/pnpm shims are preferred on Windows, and symlink `EPERM` failures fall back to copies. A real Node ACP spawn smoke now runs on both Ubuntu and Windows. ([#9980](https://github.com/paperclipai/paperclip/pull/9980))

##### Improvements

- **User-named `PAPERCLIP_*` bindings now reach your agents** — The heartbeat previously stripped *every* `PAPERCLIP_`-prefixed env binding before resolution, so a secret you deliberately named something like `PAPERCLIP_CLOUD_PROD_PROVIDER_RAILWAY_TOKEN` was silently dropped. Now only `PAPERCLIP_API_KEY` is categorically rejected, harness-assigned runtime vars always win, and every other `PAPERCLIP_*` binding flows through to the run environment. ([#9974](https://github.com/paperclipai/paperclip/pull/9974))
- **Sturdier telemetry client** — The telemetry client now matches the wire contract: payloads are chunked, batch IDs are deterministic, retries are batched with backoff, and the local store is bounded. A silent-drop baseline is pinned and caps/backoff are now a configurable surface. Telemetry remains anonymized and can be disabled with `DO_NOT_TRACK=1` or `PAPERCLIP_TELEMETRY_DISABLED=1`. ([#9946](https://github.com/paperclipai/paperclip/pull/9946), [#9906](https://github.com/paperclipai/paperclip/pull/9906), @nickyleach)
- **Slash-named secrets browse as folders** — Secrets whose names contain slashes now navigate as nested folders in the UI. ([#9913](https://github.com/paperclipai/paperclip/pull/9913))
- **Searchable agent picker for secret access** — Granting per-agent secret access now uses a searchable agent picker instead of a long flat list. ([#9918](https://github.com/paperclipai/paperclip/pull/9918))
- **Cleaner external object labels and star controls** — External object labels and the star controls that sit next to them were simplified for less visual noise. ([#9929](https://github.com/paperclipai/paperclip/pull/9929))
- **Safer sandbox `CODEX_HOME` sync** — The `codex-local` adapter now stages an explicit allowlist when syncing `CODEX_HOME` into the sandbox, rather than copying the whole home directory. ([#9972](https://github.com/paperclipai/paperclip/pull/9972), @nickyleach)

##### Experimental

These features ship gated behind experimental settings — enable Apps under experimental settings to try them out.

- **Connections v3 foundation** — The groundwork for one-click Connected Apps landed: a v3 schema core adds a stable company-scoped connection UID, explicit ownership/auth/transport fields, a subject-aware `connection_grants` table, and multi-key credentials (with the legacy `remote_http` transport renamed to `mcp_remote`). On top of that, a generated **AppDefinition** Wave 1 catalog gives browse and setup a single typed contract, and a runtime layer adds subject-aware authorization state, scoped key handling, and OpenAPI-registered grant routes that fail closed for unknown scopes. ([#9958]

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.722.0]_

### v2026.720.0

- Date: 2026-07-20
- Version: v2026.720.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.720.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.720.0

- **added** — Skill Studio with three-pane skill IDE, sandboxed test runs, nested skill folder organization, dedicated My Skills view, and skill imports from projects
- **added** — Attention queue and Decisions surface for consolidated input requests with faster scrolling and mobile-friendly decision rows
- **added** — Search filters, sorting, and operators with command-palette parity and bulk extract endpoint
- **added** — Run restart recovery with workspace self-heal, quota-aware retries, and failed-run metrics
- **changed** — Run recovery routed by failure cause, waits for provider quota resets, throttles serial repeats, and reports observability metrics with rate alerts
- **added** — Plan-approval continuations and external-wait liveness now durable across failed wakes
- **added** — Resolved blockers reliably wake dependent tasks
- **added** — ACP sessions can run in sandbox execution targets with sandbox support for Grok local adapter
- **added** — Custom-image snapshots applied across config tests and saves
- **changed** — Sandbox wall-clock backstop raised to four hours for long-running work
- **changed** — Issue monitors now surface across task surfaces and in issue properties
- **changed** — Secrets dialog reworked with in-sheet per-agent secret access capability
- **added** — Agents can archive and tidy user inboxes under governed inbox-archive access policy
- **added** — PR-gardening workflow to keep open pull requests moving
- **changed** — Workspace service control bar stabilized for predictable start/stop/restart behavior
- **added** — Activity logs stamp the responsible user with explicit issue attribution
- **changed** — UI explains why a message won't reopen a blocked issue
- **added** — Queued issue runs can now be interrupted
- **changed** — Issue properties clarify task-level model overrides
- **changed** — Local coding adapters now run through ACP by default with local coding processes confined for safety

#### Paperclip v2026.720.0

> Released: 2026-07-20

##### Highlights

- **Skill Studio & skill organization** — A three-pane skill IDE with sandboxed test runs, so you can author, edit, and try out skills without leaving Paperclip. Skills now organize into nested folders with a dedicated "My Skills" view, you can import skills straight from a project, and company skill policy is open-by-default with core UX for tightening it. Company skill forks run prechecks before they land, and markdown edits get proper dirty-tracking and save. ([#9241](https://github.com/paperclipai/paperclip/pull/9241), [#9235](https://github.com/paperclipai/paperclip/pull/9235), [#9356](https://github.com/paperclipai/paperclip/pull/9356), [#9633](https://github.com/paperclipai/paperclip/pull/9633), [#9620](https://github.com/paperclipai/paperclip/pull/9620), [#9564](https://github.com/paperclipai/paperclip/pull/9564))
- **Attention queue & Decisions** — A new attention queue and Decisions surface bring everything that needs your input into one place, with faster scrolling and readable, mobile-friendly decision rows. ([#9380](https://github.com/paperclipai/paperclip/pull/9380), [#9468](https://github.com/paperclipai/paperclip/pull/9468), [#9472](https://github.com/paperclipai/paperclip/pull/9472))
- **Better search** — Search gains filters, sorting, and operators, with command-palette parity so you can find issues and entities the same way everywhere, plus a new bulk extract endpoint. ([#9327](https://github.com/paperclipai/paperclip/pull/9327), [#9507](https://github.com/paperclipai/paperclip/pull/9507))
- **Tougher, self-healing runs** — Run restart recovery, workspace self-heal, quota-aware retries, and failed-run metrics mean your instance tries harder before it involves you. Recovery is now routed by failure cause, waits for provider quota resets, throttles serial repeats, and reports observability metrics with a rate alert. Plan-approval continuations and external-wait liveness are durable across failed wakes, and resolved blockers reliably wake the tasks that depend on them. ([#9183](https://github.com/paperclipai/paperclip/pull/9183), [#9331](https://github.com/paperclipai/paperclip/pull/9331), [#9373](https://github.com/paperclipai/paperclip/pull/9373), [#9229](https://github.com/paperclipai/paperclip/pull/9229), [#9634](https://github.com/paperclipai/paperclip/pull/9634), [#9635](https://github.com/paperclipai/paperclip/pull/9635), [#9651](https://github.com/paperclipai/paperclip/pull/9651), [#9644](https://github.com/paperclipai/paperclip/pull/9644))

##### Improvements

- **Sandbox execution** — ACP sessions can now run in sandbox execution targets, with sandbox support for the Grok local adapter, custom-image snapshots applied across config tests and saves, and a sandbox wall-clock backstop raised to four hours for long-running work. ([#9390](https://github.com/paperclipai/paperclip/pull/9390), [#9338](https://github.com/paperclipai/paperclip/pull/9338), [#9385](https://github.com/paperclipai/paperclip/pull/9385), [#9232](https://github.com/paperclipai/paperclip/pull/9232))
- **Issue monitors are visible everywhere** — External-service and issue monitors now surface across task surfaces and in issue properties, so you can see what a task is waiting on at a glance. ([#9783](https://github.com/paperclipai/paperclip/pull/9783))
- **Reworked secrets dialog with in-sheet agent access** — The secrets dialog was reworked and you can now grant per-agent secret access directly in the sheet. ([#9797](https://github.com/paperclipai/paperclip/pull/9797))
- **Agents can safely tidy inboxes** — Agents can now archive and tidy user inboxes under a governed inbox-archive access policy. ([#9724](https://github.com/paperclipai/paperclip/pull/9724), [#9658](https://github.com/paperclipai/paperclip/pull/9658), [#9654](https://github.com/paperclipai/paperclip/pull/9654))
- **Active PR gardening workflow** — A new PR-gardening workflow keeps open pull requests mov

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.720.0]_

### v2026.707.0

- Date: 2026-07-07
- Version: v2026.707.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.707.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.707.0

- **added** — User-specific runtime secrets can now be scoped to individual human operators and bound to environments with responsible-user run attribution
- **added** — Work Timeline page renders a Gantt-style SVG view of agent work, handoffs, and overlapping execution across the company
- **added** — Custom sandbox images can be built and configured with an embedded SSH terminal directly in the browser
- **added** — Starred resources feature allows pinning projects, agents, and tasks to a dedicated sidebar section
- **added** — Optional Ramp skill wires agents into Ramp's finance setup playbooks with Paperclip approval gates and host allowlist
- **changed** — Environment variables editor redesigned with a single reusable editor used consistently across agents, projects, routines, and company environments
- **changed** — Custom sandbox images are now scoped to their instance environments
- **changed** — Issue detail and activity-ledger responses trimmed to only required fields for faster loading
- **changed** — Project typeahead in the command palette now ranks projects above tasks
- **changed** — Live agent run viewer renders heartbeat progress events as system log lines during long operations
- **changed** — Sandboxed runs surface clearer live agent feedback during execution
- **changed** — Inbox rows now show live status of descendant work
- **changed** — Operator issue workflow UI received cleanup for clearer status and next-step affordances
- **changed** — Issue properties pane received cleanup and unified issue media attachment gallery across surfaces
- **changed** — Pipeline automations support title templates for consistent generated issue titles
- **changed** — Pipeline automation health warnings are deduplicated to prevent duplicate reports
- **added** — Gemini 3.1 Pro models added to the gemini-local adapter
- **added** — Recovery card offers one-click isolated re-issue when a task's branch has diverged from its base

#### Paperclip v2026.707.0

> Released: 2026-07-07

This release lands **89 commits from 8 contributors**.

##### Highlights

- **User-specific runtime secrets** - Secrets can now be scoped to the individual human operator, not just the company. Define user-specific secret definitions, store per-user values, bind them to environments, and — thanks to new responsible-user run attribution — have Paperclip deterministically check that the human behind a run has actually supplied the value a run needs before it dispatches. This is a real prerequisite for safe multi-user and cloud execution. ([#8825](https://github.com/paperclipai/paperclip/pull/8825), @cryppadotta)
- **Work Timeline** - A new company-scoped Work Timeline page renders a compact, Gantt-style SVG view of when your agents worked, how handoffs happened, and where work overlapped — so you can scan multi-agent execution across the whole company at a glance instead of opening runs one by one. The timeline is backed by a dedicated company endpoint with hardened security filters. ([#8938](https://github.com/paperclipai/paperclip/pull/8938), [#8880](https://github.com/paperclipai/paperclip/pull/8880), [#8875](https://github.com/paperclipai/paperclip/pull/8875), [#8923](https://github.com/paperclipai/paperclip/pull/8923), @cryppadotta)
- **Custom sandbox images with a built-in SSH terminal** - Build reusable custom sandbox images and set them up without ever leaving the browser: an embedded SSH terminal lets you install packages and prep the image directly from the environment configuration flow, and custom images are now scoped to their instance environments. No more copying an SSH command into an external terminal. ([#8911](https://github.com/paperclipai/paperclip/pull/8911), [#8794](https://github.com/paperclipai/paperclip/pull/8794), [#8850](https://github.com/paperclipai/paperclip/pull/8850), @devinfoley)
- **Redesigned environment variables editor** - The legacy env-var editor is replaced with a single reusable editor used everywhere environment variables are configured (agents, projects, routines, company environments). It handles text values, secret references, draft rows, and sensitive-value warnings consistently, with clearer affordances for converting a plain value into a secret reference. ([#8930](https://github.com/paperclipai/paperclip/pull/8930), @cryppadotta)
- **One-click recovery for diverged work** - The recovery card now diagnoses when a task's branch has diverged from its base and offers a one-click isolated re-issue, so you can recover stuck or conflicted work without hand-untangling git state. ([#9136](https://github.com/paperclipai/paperclip/pull/9136), @nickyleach)
- **Starred resources in the sidebar** - Pin the projects, agents, and tasks you touch most to a dedicated starred section in the sidebar for one-click access. ([#9085](https://github.com/paperclipai/paperclip/pull/9085), @cryppadotta)

##### Improvements

- **Optional Ramp skill** - A new optional catalog skill wires agents into Ramp's finance setup playbooks — account onboarding, cards, and spend controls — while keeping every action subordinate to Paperclip's approval gates and fail-closed host allowlist. Companies can opt in, and reviewers can see the source model and safety rules in one shipped catalog entry. ([#9157](https://github.com/paperclipai/paperclip/pull/9157), @cryppadotta)
- **Faster issue detail loading** - Issue detail and activity-ledger responses are trimmed to the fields those views actually need, dropping large embedded project, workspace, and runtime-metadata payloads. Active issues with workspaces now load noticeably faster without changing the underlying persistence model. ([#9125](https://github.com/paperclipai/paperclip/pull/9125), @cryppadotta)
- **Project typeahead in the ⌘K command palette** - Matching projects now rank above tasks in the command palette, so typing a project name jumps straight to it instead of burying it under tasks, and the project name is al

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.707.0]_

### v2026.626.0

- Date: 2026-06-27
- Version: v2026.626.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.626.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.626.0

- **added** — Hermes is now a first-class built-in adapter with hermes_local agents that run locally and hermes_gateway agents that run remotely through a gateway with secure onboarding defaults
- **added** — Task watchdogs provide automated checks attached to tasks with state, outcomes, and outstanding work surfaced in issue threads
- **added** — Issues can run in ask work mode for question-and-answer tasks without spinning up a full execution workflow
- **added** — Ephemeral sandbox runtimes report their status directly in issue threads and Daytona sandbox leases are reused across runs
- **added** — Workspace files can be downloaded from the workspace and external objects like links and assets can be referenced across issue surfaces
- **added** — Bundled page-publishing skill allows agents to publish static HTML pages and asset folders to an approved host
- **added** — Bundled capsules skill ships the Paperclip capsule identicon toolkit
- **changed** — Onboarding flow has been reworked and the classic wizard retired with updated UI styles
- **changed** — Task status now displays with dedicated icons and colors across boards and issue lists
- **changed** — Routines gain date variable controls for parameterization by run date without prompt editing
- **changed** — Skill categories are now editable in settings for easier organization of skill catalogs
- **changed** — Workspace overview endpoint is now bounded to dramatically reduce payload and latency for large workspaces
- **changed** — Streamlined sidebar is now the default layout
- **changed** — Workspace routines are now sorted by name
- **changed** — Plugin install targeting surfaces the target host and adds a plugin target command
- **changed** — Workspace selector search has been improved for quicker workspace selection
- **changed** — Execution environments are now instance-scoped and edited through a dialog with cleaner copy
- **changed** — Heartbeats now respect preflight budget caps for a hard ceiling on single wake spending
- **changed** — Skill create/edit/delete is now gated behind a dedicated skills:create permission
- **changed** — Adapter utilities can now report sandbox sync progress for visibility into long file syncs

#### Paperclip v2026.626.0

> Released: 2026-06-26

This release lands **122 commits from 17 contributors**.

##### Highlights

- **Hermes, now built in (local & remote gateway)** - Hermes is a first-class adapter in this release. Hire `hermes_local` agents that run on your own machine, or `hermes_gateway` agents that run Hermes **remotely** through a gateway — no manual plugin install required, with secure onboarding defaults for the gateway URL and API key. External Hermes packages can still override or shadow the built-ins through Adapter manager. ([#8543](https://github.com/paperclipai/paperclip/pull/8543), @cryppadotta)
- **Task watchdogs** - A first-class watchdog control plane lets you attach automated checks to a task and have Paperclip watch it for you — surfacing watchdog state, outcomes, and outstanding work right in the issue thread instead of leaving you to babysit a long-running agent. ([#8339](https://github.com/paperclipai/paperclip/pull/8339), @cryppadotta)
- **Ask work mode** - Issues can now run in an "ask" work mode for question-and-answer tasks, so you can point an agent at a question and get an answer back without it spinning up a full execution workflow. ([#8334](https://github.com/paperclipai/paperclip/pull/8334), @cryppadotta)
- **Sandbox runtime status, live in your threads** - Ephemeral sandbox runtimes now report their status directly in issue threads, and Daytona sandbox leases are reused across runs — so cloud/sandboxed execution is both more visible and faster to spin up. ([#8594](https://github.com/paperclipai/paperclip/pull/8594), [#8593](https://github.com/paperclipai/paperclip/pull/8593), @devinfoley; [#8513](https://github.com/paperclipai/paperclip/pull/8513), @devinfoley)
- **Workspace file downloads & external object references** - Get work products out of Paperclip: download the files your agents produced straight from the workspace, and reference external objects (links, assets) across issue surfaces so the right context travels with the task. ([#8512](https://github.com/paperclipai/paperclip/pull/8512), [#8229](https://github.com/paperclipai/paperclip/pull/8229), @cryppadotta)

##### Improvements

- **Refreshed onboarding** - The onboarding flow has been reworked and the older classic wizard retired, alongside a batch of UI style fixes — so getting a new instance set up is cleaner and the default task UI (work-mode labels, status colors, team-creation copy) is consistent out of the box. ([#8628](https://github.com/paperclipai/paperclip/pull/8628), @cryppadotta)
- **Task status icons & colors** - Task status now reads at a glance with dedicated icons and colors across the board and issue lists. ([#8580](https://github.com/paperclipai/paperclip/pull/8580), @scotttong; [#8376](https://github.com/paperclipai/paperclip/pull/8376), @tonio-alucema)
- **Routine date variables** - Routines gain date variable controls, so a recurring routine can parameterize on the run date without hand-editing the prompt each time. ([#8655](https://github.com/paperclipai/paperclip/pull/8655), @cryppadotta)
- **Skill category editing** - You can now edit skill categories in settings, making it easier to organize an installed skill catalog. ([#8615](https://github.com/paperclipai/paperclip/pull/8615), @cryppadotta)
- **Publish Paperclip pages & capsules** - A bundled page-publishing skill lets agents publish static HTML pages and asset folders to an approved host, and a bundled capsules skill ships the Paperclip capsule identicon toolkit. ([#8664](https://github.com/paperclipai/paperclip/pull/8664), [#8669](https://github.com/paperclipai/paperclip/pull/8669), @cryppadotta)
- **Bounded workspace overview** - The workspace overview endpoint is now bounded, dramatically cutting the payload and latency for instances with large workspaces. ([#8627](https://github.com/paperclipai/paperclip/pull/8627), @cryppadotta)
- **Streamlined sidebar by default** - The streamlined sidebar is now the default layout. ([#8496](https:/

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.626.0]_

### v2026.618.0

- Date: 2026-06-18
- Version: v2026.618.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.618.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.618.0

- **added** — Skills Store allows browsing, installing, and managing agent skills from a dedicated in-app store with install counts and company-scoped catalog
- **added** — Self-hostable Kubernetes sandbox provider plugin for agent execution on your own infrastructure
- **added** — Novita sandbox provider for agent execution
- **added** — Workspace file viewer and artifact links to inspect agent-produced files directly from issues
- **added** — OpenTelemetry auto-instrumentation support for opt-in integration with observability stacks
- **added** — GPT-5.5 model option in the codex_local adapter
- **changed** — Per-company multi-tenant isolation with company-specific JWT signing keys and company-scoped cloud tenants
- **changed** — Plugin tables now carry company_id foreign key for per-tenant data isolation
- **changed** — Local adapters (codex, pi, opencode, gemini) now support environment-driven gateway routing through custom providers and gateways
- **changed** — Routine detail page redesigned with improved sub-sidebar layout
- **changed** — First-time visitors now default to OS prefers-color-scheme with theme toggle on auth page
- **changed** — TRUST_PROXY now accepts CIDR list and named subnets for load balancer and reverse proxy configuration
- **changed** — Bundled plugins are now built automatically on install
- **changed** — Read-only agent config and skill endpoints no longer require agents:create permission
- **fixed** — Execution locks now release on cross-agent reassignment
- **fixed** — Stale executionRunId and checkoutRunId are cleared on release, reassignment, checkout, and run finalization with backstop sweeper
- **fixed** — Orphan execution locks are cleared when a run finalizes
- **fixed** — Stale checkout run ownership is safely adopted
- **fixed** — Stranded-issue recovery now skips issues with pending wake interaction and exempts escalation when assignee shows recent visible progress
- **security** — HTTP error log lines now redact passwords and tokens to prevent credentials from leaking into logs

#### Paperclip v2026.618.0

> Released: 2026-06-18

##### Highlights

- **Skills Store** - Browse, install, and manage agent skills from a dedicated in-app store, so you can give your agents new capabilities without hand-wiring files. Skills are now a first-class, installable unit with install counts and a company-scoped catalog. ([#7990](https://github.com/paperclipai/paperclip/pull/7990), @cryppadotta)
- **Self-hostable sandbox execution** - Cloud/sandboxed agent execution matures: a self-hostable Kubernetes sandbox provider plugin lands alongside server-side Kubernetes execution integration and hardened agent-runtime images, plus a new Novita sandbox provider. Run your agents in an isolated sandbox on your own infrastructure or a cloud provider. ([#5790](https://github.com/paperclipai/paperclip/pull/5790), [#7938](https://github.com/paperclipai/paperclip/pull/7938), [#7934](https://github.com/paperclipai/paperclip/pull/7934), @stubbi; [#7595](https://github.com/paperclipai/paperclip/pull/7595), @Alex-yang00)
- **Per-company multi-tenant isolation** - A major security foundation for shared and cloud deployments: each company now gets its own JWT signing keys, cloud tenants are strictly company-scoped (never instance-admin), and plugin tables carry a `company_id` foreign key so plugin data is isolated per tenant. ([#5864](https://github.com/paperclipai/paperclip/pull/5864), [#7525](https://github.com/paperclipai/paperclip/pull/7525), [#5865](https://github.com/paperclipai/paperclip/pull/5865), @stubbi)
- **Workspace file viewer and artifact links** - Inspect the files your agents produced directly from the issue — a built-in workspace file viewer plus artifact links mean you can open work products without leaving the thread. ([#7681](https://github.com/paperclipai/paperclip/pull/7681), @cryppadotta)
- **Env-driven gateway routing for local adapters** - The `codex`, `pi`, `opencode`, and `gemini` local adapters can now route through custom providers and gateways via environment configuration (custom providers, small/cheap model selection, remote allow-all) — a key prerequisite for running your own model gateways. ([#7919](https://github.com/paperclipai/paperclip/pull/7919), [#7920](https://github.com/paperclipai/paperclip/pull/7920), [#7837](https://github.com/paperclipai/paperclip/pull/7837), [#7918](https://github.com/paperclipai/paperclip/pull/7918), @stubbi)

##### Improvements

- **Harder-working agents** - A large batch of heartbeat, recovery, and execution-lock fixes makes your instance more resilient: execution locks release on cross-agent reassignment, stale `executionRunId`/`checkoutRunId` are cleared on release, reassignment, checkout, and run finalization (with a backstop sweeper), orphan execution locks are cleared when a run finalizes, and stale checkout run ownership is safely adopted. ([#5110](https://github.com/paperclipai/paperclip/pull/5110), @vbalko-claimate; [#2482](https://github.com/paperclipai/paperclip/pull/2482), @alcylu; [#6008](https://github.com/paperclipai/paperclip/pull/6008), @nicorodrigues; [#4318](https://github.com/paperclipai/paperclip/pull/4318), @AyeletMorris-ShieldFC; [#5413](https://github.com/paperclipai/paperclip/pull/5413), @ivasuy)
- **Smarter recovery** - Stranded-issue recovery now skips issues with a pending wake interaction and exempts escalation when the assignee shows recent visible progress, so agents aren't yanked off work they're actively doing. ([#4854](https://github.com/paperclipai/paperclip/pull/4854), @ming0627; [#5213](https://github.com/paperclipai/paperclip/pull/5213), @sunghere)
- **Routine detail page** - The routine detail page gets a redesigned sub-sidebar layout plus follow-up polish, making it easier to read and tune a recurring routine. ([#7848](https://github.com/paperclipai/paperclip/pull/7848), [#7858](https://github.com/paperclipai/paperclip/pull/7858), @cryppadotta)
- **Follow your system theme** - First-time visitors now default to their OS `prefers-colo

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.618.0]_

### v2026.609.0

- Date: 2026-06-09
- Version: v2026.609.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.609.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.609.0

- **added** — Company-scoped Artifacts page that indexes files, media, and documents produced by agents across issues and runs, grouped by task stack by default, with support for upload and rich playback including video artifact thumbnails
- **added** — Collapsible sidebar rail with hover/focus peek for primary navigation, giving more horizontal room to contextual pages while keeping global navigation accessible
- **added** — Video attachment support for issues with rich inline previews including standalone PWA browser controls and inline video playback
- **added** — Checkbox confirmation interactions for issue-thread interactions with structured checkbox payload and consistent validation across API, CLI, plugin helpers, and UI
- **added** — Clear-error agent action and live-run stop finalization actions for operators with direct, audited recovery paths
- **added** — Automated PR quality and security gates in commitperclip that check for linked issues, test coverage, complete templates, clean lockfiles, and dedup-search
- **added** — Low-trust review containment that gives reviewers of untrusted content a narrowly-scoped, prompt-injection-resistant authority preset
- **added** — Gemini CLI bundled in the production Docker image so the gemini_local adapter works out of the box
- **changed** — Information Architecture refresh as an opt-in visual refresh of project and agent surfaces to make high-frequency workflows easier to scan
- **changed** — Instance settings now live under company settings so configuration is discoverable from one place
- **changed** — Invalid agents (terminated, paused, pending-approval) are centrally prevented from receiving new assignments or runs
- **changed** — Document-scoped comments are now treated as review context instead of firing the same wake path as top-level issue comments
- **changed** — External adapter plugins can now hot-install over a built-in adapter type while keeping the built-in available as a fallback
- **changed** — Claude Fable 5 and Mythos 5 are now offered in the claude_local adapter's model selector with Opus 4.8 as the default
- **changed** — Scheduled routine ticks are now suppressed while a project is paused, archived routines are hidden from the routines page, and routines view defaults to grouping by project
- **changed** — CLI now sends X-Paperclip-Run-Id so agents can mutate their own issues via the CLI, with broader OpenAPI spec coverage and auth metadata
- **changed** — Login screen now includes proper accessibility and password-manager metadata
- **fixed** — Deleted issue comments are now redacted atomically with regression coverage so removed content does not linger in the thread
- **fixed** — Issue comment wake handoffs were refined so agents wake on the activity that actually needs them

#### v2026.609.0

> Released: 2026-06-09

##### Highlights

- **Company Artifacts** - Files, media, and documents your agents produce are now first-class. A new company-scoped Artifacts page indexes every work product across issues and runs, groups them by task stack by default, and supports upload and rich playback — including video artifact thumbnails — so you can inspect what your agents made without opening each issue one by one. ([#7621](https://github.com/paperclipai/paperclip/pull/7621), [#7654](https://github.com/paperclipai/paperclip/pull/7654), [#7667](https://github.com/paperclipai/paperclip/pull/7667), [#7248](https://github.com/paperclipai/paperclip/pull/7248), @cryppadotta)
- **Collapsible sidebar rail and takeover panes** - The primary navigation can now collapse to a persisted rail with hover/focus peek, giving contextual pages — especially company settings and plugin routes — far more horizontal room while keeping global navigation one click away. ([#7824](https://github.com/paperclipai/paperclip/pull/7824), @cryppadotta)
- **Rich issue attachments with video** - Issues now accept video attachments and render rich inline previews, including standalone PWA browser controls and inline video playback, so screen recordings and media land directly in the thread instead of as opaque downloads. ([#7361](https://github.com/paperclipai/paperclip/pull/7361), [#7360](https://github.com/paperclipai/paperclip/pull/7360), @cryppadotta)
- **Checkbox confirmation interactions** - Issue-thread interactions can now ask the board or user to confirm one or more options via a structured checkbox payload, with consistent validation across the API, CLI, plugin helpers, and UI — and free-text "other" answers now render as proper links. ([#7649](https://github.com/paperclipai/paperclip/pull/7649), @cryppadotta)
- **Information Architecture refresh (experimental)** - An opt-in visual refresh of the project and agent surfaces makes high-frequency workflows easier to scan, and instance settings now live under company settings so configuration is discoverable from one place. ([#7543](https://github.com/paperclipai/paperclip/pull/7543), @scotttong; [#7680](https://github.com/paperclipai/paperclip/pull/7680), @cryppadotta)
- **Automated PR quality and security gates** - `commitperclip` now runs automated quality and security gates on incoming PRs — checking for a linked issue, test coverage, a complete template, and a clean lockfile, plus a dedup-search check — so contributors get fast, consistent feedback and maintainers spend review time where it counts. Paired with new low-trust review containment that gives reviewers of untrusted content a narrowly-scoped, prompt-injection-resistant authority preset. ([#6469](https://github.com/paperclipai/paperclip/pull/6469), @brandonburr; [#7632](https://github.com/paperclipai/paperclip/pull/7632), [#7530](https://github.com/paperclipai/paperclip/pull/7530), @cryppadotta)

##### Improvements

- **Harder-working agents** - Operators get a direct, audited recovery path with a new clear-error agent action and live-run stop finalization actions, while invalid agents (terminated, paused, pending-approval) are centrally prevented from receiving new assignments or runs — so your instance stays consistent and tries harder before involving you. ([#7695](https://github.com/paperclipai/paperclip/pull/7695), [#7679](https://github.com/paperclipai/paperclip/pull/7679), [#7663](https://github.com/paperclipai/paperclip/pull/7663), @cryppadotta)
- **Sharper wake boundaries** - Document-scoped comments are now treated as review context instead of firing the same wake path as top-level issue comments, and issue comment wake handoffs were refined — so agents wake on the activity that actually needs them. ([#7766](https://github.com/paperclipai/paperclip/pull/7766), [#7678](https://github.com/paperclipai/paperclip/pull/7678), @cryppadotta)
- **External adapter overrides for built-ins** - External adapter plugins can now

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.609.0]_

### v2026.529.0

- Date: 2026-05-30
- Version: v2026.529.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.529.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.529.0

- **added** — Issue documents now support inline, revision-aware annotation threads with comments and stable anchor snapshots for discussing specific passages
- **added** — Skills are now first-class with new CLI commands to install, reset, audit, export, and assign company skills, backed by a packaged skills catalog and provenance model
- **added** — User-scoped resource membership allows each user to hide projects and agents from their sidebar while keeping resources accessible
- **added** — Fresh self-hosted deployments now support a one-time browser claim flow for the first admin without requiring an invite
- **added** — Claude Local adapter can now refresh its Anthropic model catalog from the UI to show newly released Claude models
- **added** — Bundled plugins now appear in the plugin manager alongside installed external plugins
- **changed** — Workspace finalize gates and no-remote-git enforcement prevent silent env reuse across assignees and ensure dependent issues see a consistent worktree
- **fixed** — Accepted plan revisions are now guarded to prevent decomposition more than once across overlapping runs, fixing duplicate-subtask fan-out

#### v2026.529.0

> Released: 2026-05-29

##### Highlights

- **Inline document annotations and comments** - Issue documents now support inline, revision-aware annotation threads with comments and stable anchor snapshots, so agents and operators can discuss a specific passage instead of leaving detached issue comments or editing the whole document. ([#6733](https://github.com/paperclipai/paperclip/pull/6733), @cryppadotta)
- **Company skills CLI and catalog management** - Skills are now first-class: install, reset, audit, export, and assign company skills with a new CLI and a board UI, backed by a packaged skills catalog and a clear provenance model across bundled, catalog, runtime, and adapter-provided skills. ([#6782](https://github.com/paperclipai/paperclip/pull/6782), @cryppadotta)
- **Hide projects and agents from your sidebar** - User-scoped resource membership lets each user leave projects and agents they don't want cluttering their sidebar while keeping every resource accessible, backed by company-scoped membership APIs and a cleaner, easier-to-scan project list. ([#6677](https://github.com/paperclipai/paperclip/pull/6677), @cryppadotta)
- **First-admin claim flow for fresh self-hosted deployments** - Private, unclaimed deployments (such as Umbrel installs on a LAN) now get a one-time browser claim so operators can create the first admin before any invite exists, while public deployments and installs with active invites keep the existing invite-only model. ([#6755](https://github.com/paperclipai/paperclip/pull/6755), @cryppadotta)
- **Live Claude model discovery** - The Claude Local adapter can now refresh its Anthropic model catalog from the UI, so newly released Claude models show up without waiting for a code release — with the static fallback list kept current as a safety net. ([#6953](https://github.com/paperclipai/paperclip/pull/6953), @cryppadotta)

##### Improvements

- **Bundled plugins now appear in the plugin manager** - Instance Settings → plugin manager lists built-in bundled plugins alongside installed external plugins, so the full set of available plugins is visible in one place. ([#6734](https://github.com/paperclipai/paperclip/pull/6734), @cryppadotta)
- **Tighter workspace lifecycle guarantees** - Workspace finalize gates and no-remote-git enforcement close holes in the worktree contract — no more silent env reuse across assignees, dependent issue wakes no longer fire before finalize lands, and `issue.interaction.accept` waits for finalize — so dependent issues reliably see a consistent worktree. ([#6969](https://github.com/paperclipai/paperclip/pull/6969), @devinfoley)

##### Fixes

- **Accepted plans decompose exactly once** - Accepted plan revisions are now guarded so they can't be decomposed more than once across overlapping runs, fixing the duplicate-subtask fan-out that could occur when agents woke from review decisions and reused isolated workspaces, plus clearer plan-decomposition UI state. ([#6831](https://github.com/paperclipai/paperclip/pull/6831), @devinfoley)

### v2026.525.0

- Date: 2026-05-25
- Version: v2026.525.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.525.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.525.0

- **added** — Modal sandbox provider is now a first-party plugin with CI publishing and cold-start-friendly probe timeouts
- **added** — Workspace diff plugin renders staged, unstaged, head, renamed, binary, oversized, and untracked changes with split/unified panes and sticky headers
- **added** — Routines can carry their own secrets with agent < project < routine precedence and safe secret metadata in routine UI/history
- **added** — Local Cloud Upstream sync flow with shared types, server routes, persisted run schema, CLI sync helpers, and board UI
- **added** — SecretBindingPicker is wired into plugin config forms for E2B, Modal, Cloudflare, Daytona, and other providers
- **added** — External agent invites moved into the add-agent modal with agent-oriented prompt result view
- **changed** — ACPX-Claude adapter now resolves bare Claude model IDs, surfaces real diagnostic detail, and respects user ~/.claude/settings.json permissions
- **changed** — Issue and agent assignment mutations now run through a real authorization service with protected-assignment enforcement
- **changed** — AWS provider vault setup offers discovery with prefill and removal flows on the Secrets page
- **changed** — Mobile board flows improved including new-issue dialog height, priority overflow, company settings nav, and touch-target refinements
- **changed** — Plugin runtime is scoped tighter to its company with host-owned invocation context and company invocation scope enforcement
- **changed** — Embedded Postgres now bootstraps native runtime before CLI/server/test startup with more reliable import paths
- **fixed** — Pagination sorts cleanly on updated issue lists and scheduled retry comments behave correctly
- **fixed** — Pending plugin migrations re-apply on hot reload and plugin-schema worktree seeds restore safely
- **fixed** — Stale request confirmations expire after user comments and feedback export shutdown drains without database-unavailable loops
- **fixed** — Cheap recovery model is fenced off from real work with explicit guard context and route guards blocking deliverable mutations
- **fixed** — Invite landing reuses shared companies query helper with restored existing-member invite behavior
- **fixed** — Reusable workspace selection picks correctly, worktree auth and static SPA fallback are fixed
- **fixed** — Markdown wrapping and plugin slot registration are firmed up with projects page sorting

#### v2026.525.0

> Released: 2026-05-25

##### Highlights

- **Modal sandbox provider is now a first-party plugin** - Paperclip ships a Modal sandbox-provider plugin so companies can run agents on Modal's managed sandboxes alongside E2B, Cloudflare, and Daytona, with CI publishing and cold-start-friendly probe timeouts wired in. ([#6245](https://github.com/paperclipai/paperclip/pull/6245), [#6289](https://github.com/paperclipai/paperclip/pull/6289), [#6290](https://github.com/paperclipai/paperclip/pull/6290), @devinfoley)
- **Workspace diffs are a first-class viewer plugin** - The new workspace diff plugin renders staged, unstaged, head, renamed, binary, oversized, and untracked changes through host services and plugin slots, with split/unified panes, sticky headers, and reliable default base refs. ([#6071](https://github.com/paperclipai/paperclip/pull/6071), [#6383](https://github.com/paperclipai/paperclip/pull/6383), @cryppadotta)
- **Routines can carry their own secrets** - Routine env now flows through the runtime contract with persisted revisions, `agent < project < routine` precedence, and safe secret metadata in routine UI/history — without exposing secret values in logs or access events. ([#6212](https://github.com/paperclipai/paperclip/pull/6212), @cryppadotta)
- **Local Cloud Upstream sync is in** - A new Cloud Upstream flow ships with shared types, server routes, persisted run schema, CLI sync helpers, a board UI, and settings entry points so operators can preview, resolve conflicts, and activate local-to-cloud syncs. ([#6548](https://github.com/paperclipai/paperclip/pull/6548), @cryppadotta)
- **ACPX-Claude adapter works seamlessly out of the box** - The `acpx_local` adapter now resolves bare Claude model IDs, surfaces real diagnostic detail instead of opaque "Internal error" logs, and respects user `~/.claude/settings.json` permissions so first-run Claude Local ACPX agents don't strand. ([#6590](https://github.com/paperclipai/paperclip/pull/6590), @devinfoley)

##### Improvements

- **Scoped agent permissions and assignment controls** - Issue and agent assignment mutations now run through a real authorization service with protected-assignment enforcement, plugin SDK/host APIs for company settings slots and policy/grant management, retry-now affordances on blocked issues, and an incremental principal-access compatibility backfill. ([#6386](https://github.com/paperclipai/paperclip/pull/6386), @cryppadotta)
- **AWS provider vault setup is operator-friendly** - The Secrets page now offers AWS provider vault discovery with prefill, removal flows, and Storybook coverage so external vault configuration no longer requires hand-typed metadata. ([#6381](https://github.com/paperclipai/paperclip/pull/6381), @cryppadotta)
- **SecretBindingPicker is wired into plugin config forms** - JSON-schema secret-ref fields (E2B, Modal, Cloudflare, Daytona, …) now render the canonical secret picker instead of a plain password input, so binding stored secrets no longer requires copy-pasting UUIDs. ([#6339](https://github.com/paperclipai/paperclip/pull/6339), @devinfoley)
- **External agent invites moved into the add-agent modal** - Bring-your-own-agent onboarding now lives next to local/managed agent creation with an agent-oriented prompt result view and Back navigation, instead of hiding behind OpenClaw-specific company invite settings. ([#6183](https://github.com/paperclipai/paperclip/pull/6183), @aronprins)
- **Mobile board flows feel smoother** - Mobile new-issue dialog height, priority overflow, company settings nav, plugin-route sidebar selection, browser controls in home-screen app mode, and small touch-target/menu scroll bugs are all polished. ([#6550](https://github.com/paperclipai/paperclip/pull/6550), [#6384](https://github.com/paperclipai/paperclip/pull/6384), @cryppadotta)
- **Plugin runtime is scoped tighter to its company** - Plugin worker-to-host calls now propagate host-owned invocation context, `performAction` carries au

_[Truncated at 4000 characters — full notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.525.0]_

### v2026.517.0

- Date: 2026-05-17
- Version: v2026.517.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.517.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.517.0

- **added** — Grok Build is now a first-class local runtime with server, UI, CLI, transcript parsing, session handling, and diagnostics support
- **added** — Issue documents can be locked for safer handoffs with board-managed document locks that preserve approved snapshots and record lock activity
- **changed** — The Issues board now supports compact cards, collapsed cold lanes, per-column reveal limits, and persisted density controls for high-volume Kanban columns
- **added** — Internationalization groundwork with i18next foundation, locale validation, runtime package declarations, and validated catalog of supported locale resources
- **changed** — Live issue document updates now refresh open boards by invalidating relevant list, active-document, and revision caches
- **changed** — Cloudflare sandbox execution is more reliable with larger execution capacity, SSE keepalives, safer stdout handling, and sandbox-aware probe budgets
- **changed** — LLM Wiki packaging now includes required assets, uses a visible bootstrap template, and validates migrations through explicit namespace-safe SQL
- **changed** — PR verification runs faster by fanning out typecheck, release-registry checks, and build work instead of serializing behind one monolithic job
- **added** — Multilingual issue flows have regression coverage for Chinese, Japanese, and Hindi text preservation
- **fixed** — Grok reasoning streams now restore missing line breaks between streamed chunks to prevent merging separate thoughts into run-on text
- **fixed** — Identifier-based wakeups now bind to the right project workspace by carrying resolved projectId and canonicalizing identifier-style issue references
- **fixed** — Company export now tolerates missing local run logs by degrading gracefully when historical heartbeat run log files are absent

#### v2026.517.0

> Released: 2026-05-17

##### Highlights

- **Grok Build is now a first-class local runtime** - Paperclip can configure and run `grok_local` through the built-in adapter registry, with server, UI, CLI, transcript parsing, session handling, diagnostics, and focused adapter coverage. ([#6087](https://github.com/paperclipai/paperclip/pull/6087), @devinfoley)
- **Issue documents can be locked for safer handoffs** - Board-managed document locks preserve approved snapshots, route agent writes to derived documents, expose lock state in the UI and API, and record lock activity. ([#6009](https://github.com/paperclipai/paperclip/pull/6009), @cryppadotta)
- **The Issues board scales better with large columns** - High-volume Kanban columns now support compact cards, collapsed cold lanes, per-column reveal limits, persisted density controls, and matching UI coverage. ([#5309](https://github.com/paperclipai/paperclip/pull/5309), @eibrahim)
- **Internationalization groundwork is in place** - The board UI now has an i18next foundation, locale validation, runtime package declarations, and a validated catalog of supported locale resources for future translated surfaces. ([#6058](https://github.com/paperclipai/paperclip/pull/6058), [#5943](https://github.com/paperclipai/paperclip/pull/5943), [#6070](https://github.com/paperclipai/paperclip/pull/6070), @cryppadotta)

##### Improvements

- **Live issue document updates refresh open boards** - Document create, update, restore, and delete activity now invalidates the relevant list, active-document, and revision caches without forcing operators to reload the issue page. ([#6005](https://github.com/paperclipai/paperclip/pull/6005), @cryppadotta)
- **Cloudflare sandbox execution is more reliable** - The Cloudflare bridge now has larger execution capacity, SSE keepalives, safer stdout handling, sandbox-aware probe budgets, and a corrected Pi sandbox install path. ([#5967](https://github.com/paperclipai/paperclip/pull/5967), @devinfoley)
- **LLM Wiki packaging and plugin migrations are safer** - The packaged plugin now includes required assets, uses a visible bootstrap template, and validates and applies spaces migrations through explicit namespace-safe SQL. ([#6010](https://github.com/paperclipai/paperclip/pull/6010), @cryppadotta)
- **PR verification runs faster** - The GitHub PR workflow now fans out typecheck, release-registry checks, grouped general tests, and build work instead of serializing them behind one monolithic verify job. ([#6137](https://github.com/paperclipai/paperclip/pull/6137), @devinfoley)
- **Multilingual issue flows have regression coverage** - Board issue creation, server issue/comment/document round trips, and scoped wake payload rendering now cover Chinese, Japanese, and Hindi text preservation. ([#6069](https://github.com/paperclipai/paperclip/pull/6069), @cryppadotta)

##### Fixes

- **Grok reasoning streams regain readable turn boundaries** - Paperclip now restores missing line breaks between streamed Grok reasoning chunks so the live Working panel no longer merges separate thoughts into run-on text. ([#6142](https://github.com/paperclipai/paperclip/pull/6142), @devinfoley)
- **Identifier-based wakeups bind to the right project workspace** - Heartbeat wakeup context now carries the resolved `projectId` and canonicalizes identifier-style issue references before workspace resolution. ([#6026](https://github.com/paperclipai/paperclip/pull/6026), @devinfoley)
- **Company export tolerates missing local run logs** - Optional comment attribution metadata now degrades gracefully when historical heartbeat run log files are missing, preserving exportable issue comments. ([#5960](https://github.com/paperclipai/paperclip/pull/5960), @cryppadotta)

##### Contributors

Thank you to everyone who contributed to this release!

@eibrahim

### v2026.513.0

- Date: 2026-05-13
- Version: v2026.513.0
- Original notes: https://github.com/paperclipai/paperclip/releases/tag/v2026.513.0
- Permalink: https://whatsnew.fyi/product/paperclip/releases/v2026.513.0

- **added** — Source-scoped recovery actions that create first-class recovery actions on the source issue itself with owner, evidence, wake policy, and resolution outcome
- **added** — Recovery indicators surface on issue rows, detail surfaces, active run panels, and blocker notices
- **added** — Blocked resolutions require a real first-class blocker instead of a comment
- **added** — Blocked Inbox tab surfaces blocked work alongside active assignments with blocked-reason chips, filtering and search, deterministic urgency sorting, and responsive layouts
- **added** — Backend blocker-attention contract for operators to have a clear triage path for stalled tasks
- **added** — Local plugin development workflow with paperclipai plugin init scaffolding covering local-path installs, plugin key routing, dashboard capabilities, dev watcher startup and reload, and SDK worker entrypoint validation for symlinked package layouts
- **added** — Local plugin development guide and refreshed paperclip-create-plugin skill instructions
- **changed** — Issue detail footers now expose previous/next ordered navigation that walks siblings and continues into a parent's first ordered child with hidden-issue filtering and dependency-aware ordering preserved
- **fixed** — Issue comment listing no longer fails with ERR_INVALID_ARG_TYPE when the derived-attribution heartbeat scan binds a Date into postgres-js
- **fixed** — Window bounds are now bound as ISO timestamp strings with explicit ::timestamptz casts so comments load on issues without weakening conservative attribution recovery
- **fixed** — Quicklook blur/click race is fixed so portaled link clicks complete reliably
- **fixed** — claude_local sessions now persist the host workspace cwd not the remote sandbox cwd and reject saved cwds that point at system roots before falling back to the agent home workspace
- **fixed** — Workspace restore snapshot capture skips sockets, FIFOs, devices, and other non-file entries
- **changed** — Only a small model-provider API-key allowlist is passed to plugins that declare environment.drivers.register

#### v2026.513.0

> Released: 2026-05-13

##### Highlights

- **Source-scoped recovery actions** — Stalled or missing-disposition recovery now creates first-class recovery actions on the source issue itself, with owner, evidence, wake policy, and resolution outcome (`restored`, `blocked`, `cancelled`, or `false_positive`). Recovery indicators surface on issue rows, detail surfaces, active run panels, and blocker notices, and blocked resolutions require a real first-class blocker instead of a comment. ([#5599](https://github.com/paperclipai/paperclip/pull/5599))
- **Blocked Inbox attention view** — A new Blocked Inbox tab surfaces blocked work alongside active assignments, with blocked-reason chips, filtering and search, deterministic urgency sorting, responsive layouts, and a backend blocker-attention contract so operators have a clear triage path for stalled tasks. ([#5603](https://github.com/paperclipai/paperclip/pull/5603))
- **Local plugin development workflow** — `paperclipai plugin init` scaffolding now ships with a CLI-first authoring loop covering local-path installs, plugin key routing, dashboard capabilities, dev watcher startup and reload, and SDK worker entrypoint validation for symlinked package layouts. A new local plugin development guide and refreshed `paperclip-create-plugin` skill instructions document the full happy path. ([#5821](https://github.com/paperclipai/paperclip/pull/5821))

##### Improvements

- **Ordered sub-issue navigation** — Issue detail footers now expose previous/next ordered navigation that walks siblings and continues into a parent's first ordered child, with hidden-issue filtering and dependency-aware ordering preserved. The quicklook blur/click race is also fixed so portaled link clicks complete reliably. ([#5938](https://github.com/paperclipai/paperclip/pull/5938))

##### Fixes

- **Comment date binding regression** — Issue comment listing no longer fails with `ERR_INVALID_ARG_TYPE` when the derived-attribution heartbeat scan binds a `Date` into postgres-js. Window bounds are now bound as ISO timestamp strings with explicit `::timestamptz` casts so comments load on issues such as `PAP-9284` without weakening the conservative attribution recovery. ([#5919](https://github.com/paperclipai/paperclip/pull/5919))
- **Remote sandbox host workspace resumes** — `claude_local` sessions now persist the host workspace cwd (not the remote sandbox cwd), reject saved cwds that point at system roots before falling back to the agent home workspace, skip sockets, FIFOs, devices, and other non-file entries during workspace restore snapshot capture, and pass only a small model-provider API-key allowlist to plugins that declare `environment.drivers.register`. ([#5922](https://github.com/paperclipai/paperclip/pull/5922))

##### Upgrade Guide

One new database migration runs automatically on startup:

- `0084_issue_recovery_actions` — adds the `issue_recovery_actions` table and supporting indexes for source-scoped recovery. The migration is idempotent so it is safe for anyone who previously applied an earlier branch-local recovery-action migration. Existing child recovery issue paths remain guarded; new source-scoped flows will surface recovery indicators in additional places on the board UI.

No application configuration changes are required to take this release.