Update dependency @paperclipai/plugin-sdk to ^2026.626.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@paperclipai/plugin-sdk (source)	^2026.618.0 → ^2026.626.0

---

Release Notes

paperclipai/paperclip (@​paperclipai/plugin-sdk)

v2026.626.0

Compare Source

Paperclip v2026.626.0

Released: 2026-06-26

This release lands 122 commits from 17 contributors.

Highlights

• Hermes, now built in (local & remote gateway) - Hermes is a first-class adapter in this release. Hire hermes_local agents that run on your own machine, or hermes_gateway agents that run Hermes remotely through a gateway — no manual plugin install required, with secure onboarding defaults for the gateway URL and API key. External Hermes packages can still override or shadow the built-ins through Adapter manager. (#​8543, @​cryppadotta)
• Task watchdogs - A first-class watchdog control plane lets you attach automated checks to a task and have Paperclip watch it for you — surfacing watchdog state, outcomes, and outstanding work right in the issue thread instead of leaving you to babysit a long-running agent. (#​8339, @​cryppadotta)
• Ask work mode - Issues can now run in an "ask" work mode for question-and-answer tasks, so you can point an agent at a question and get an answer back without it spinning up a full execution workflow. (#​8334, @​cryppadotta)
• Sandbox runtime status, live in your threads - Ephemeral sandbox runtimes now report their status directly in issue threads, and Daytona sandbox leases are reused across runs — so cloud/sandboxed execution is both more visible and faster to spin up. (#​8594, #​8593, @​devinfoley; #​8513, @​devinfoley)
• Workspace file downloads & external object references - Get work products out of Paperclip: download the files your agents produced straight from the workspace, and reference external objects (links, assets) across issue surfaces so the right context travels with the task. (#​8512, #​8229, @​cryppadotta)

Improvements

• Refreshed onboarding - The onboarding flow has been reworked and the older classic wizard retired, alongside a batch of UI style fixes — so getting a new instance set up is cleaner and the default task UI (work-mode labels, status colors, team-creation copy) is consistent out of the box. (#​8628, @​cryppadotta)
• Task status icons & colors - Task status now reads at a glance with dedicated icons and colors across the board and issue lists. (#​8580, @​scotttong; #​8376, @​tonio-alucema)
• Routine date variables - Routines gain date variable controls, so a recurring routine can parameterize on the run date without hand-editing the prompt each time. (#​8655, @​cryppadotta)
• Skill category editing - You can now edit skill categories in settings, making it easier to organize an installed skill catalog. (#​8615, @​cryppadotta)
• Publish Paperclip pages & capsules - A bundled page-publishing skill lets agents publish static HTML pages and asset folders to an approved host, and a bundled capsules skill ships the Paperclip capsule identicon toolkit. (#​8664, #​8669, @​cryppadotta)
• Bounded workspace overview - The workspace overview endpoint is now bounded, dramatically cutting the payload and latency for instances with large workspaces. (#​8627, @​cryppadotta)
• Streamlined sidebar by default - The streamlined sidebar is now the default layout. (#​8496, @​devinfoley)
• Sorted workspace routines - Workspace routines are now sorted by name, so the routine list stays predictable. (#​8666, @​cryppadotta)
• Plugin install targeting - The CLI surfaces the plugin install target host and adds a plugin target command, so you always know which instance a plugin is being installed into. (#​8575, @​cryppadotta)
• Better workspace selector search - The reusable workspace selector gets improved search, making it quicker to pick the right workspace. (#​8597, @​cryppadotta)
• Instance-scoped execution environments - Execution environments are now instance-scoped and edited through a dialog, with cleaner copy and a tidier driver dropdown on the Company Environments screen. (#​8375, #​8391, #​8400, #​8398, #​8329, @​cryppadotta)
• Heartbeat preflight budget caps - Heartbeats now respect preflight budget caps, giving you a hard ceiling on what a single wake can spend. (#​8347, @​levineam)
• Skill mutations gated by permission - Skill create/edit/delete is now gated behind a dedicated skills:create permission, so lower-privileged principals can browse skills without being able to change them. (#​8616, @​cryppadotta)
• Observable sandbox sync progress - Adapter utilities can now report sandbox sync progress, so long file syncs into a sandbox are no longer a black box. (#​8395, @​cryppadotta)
• Codex local inherits host login - codex_local agents inherit the host Codex login by default and seed managed auth into isolated homes, so they work without re-authenticating. (#​8425, #​8403, @​cryppadotta)
• Codex local inactivity monitor - The codex_local adapter now monitors output inactivity and prefers the loopback runtime API URL for local agents, improving reliability of long local runs. (#​5017, #​5102, @​neerazz)
• Claude refusal signal - The claude_local adapter emits an errorCode of claude_refusal on a stop_reason refusal, so refusals are handled as a first-class outcome. (#​8314, @​uky333)
• Claude 4.5 model aliases - claude_local now uses direct 4.5 model aliases. (#​3800, @​LeonSGP43)
• Agent id header for claude_local - claude_local stamps the agent id via an X-Anthropic-Agent-Id header. (#​8322, @​zenprocess)
• Cleaner agent config & company copy - The agent config environment selector is cleaner, the company creation copy is refreshed, and the adapter test button only tests (no accidental saves). (#​8504, #​8653, #​8405, @​cryppadotta)
• Cheap-model agent config check - Agent configuration checks now test with a cheap model, so validating a config doesn't burn premium tokens. (#​8632, @​cryppadotta)

Fixes

• Mobile issue chat - Fixed issue-chat spacing on mobile, the mention warning spacing, and horizontal viewport scroll on small screens. (#​8493, #​8486, #​8370, @​cryppadotta)
• Scroll position on back/forward - The main content area now restores its scroll position on browser back/forward navigation. (#​8636, @​devinfoley)
• UI detail regressions - A batch of issue-detail and rich-object regressions are fixed, including generic URL rich-object labels. (#​8613, #​8662, @​cryppadotta)
• Secret ref binding sync - Top-level secret reference binding now stays in sync, and agent secret bindings are enforced across lifecycle flows so a reassigned or re-run agent always sees the right secrets. (#​8630, #​8307, @​cryppadotta)
• Sandbox restore & publishing - Fixed sandbox restore index drift, sandbox git publishing, large workspace uploads, and excluded transient Codex home dirs from sandbox sync. (#​8595, #​8422, #​8581, @​cryppadotta)
• Daytona disk & resources - Daytona sandboxes default to auto-archive so they leave the disk quota, resource overrides work for image-backed sandboxes, and the env config form accepts valid memory input with size presets. (#​8561, #​8564, #​8389, @​cryppadotta)
• Smarter recovery - Stranded-issue recovery converts review-parked continuations into dependency waits and exempts routine-parent issues from missing-disposition handoff, so agents aren't yanked off legitimately-waiting work. (#​8371, @​cryppadotta; #​8157, @​BuyWhere)
• Cancelled child blockers ignored - Attention calculations now ignore cancelled child blockers, so a cancelled subtask no longer keeps its parent stuck. (#​7577, @​MrBlackTongue)
• Issue read authorization - Single-issue comments and issue-thread lists now enforce read authorization, and mention-granted closed-issue comments respect resume intent. (#​8346, #​8331, #​8350, @​nickyleach)
• CEO authorization hardening - Same-company CEO authorization is hardened against cross-company access. (#​8276, @​cryppadotta)
• Isolated remote Claude config - Remote Claude config is isolated from local credentials, so a sandboxed Claude run can't pick up your host login. (#​7676, @​lennies)
• Live events socket hardening - Live-events upgrade sockets are hardened against malformed upgrades. (#​8383, @​cryppadotta)
• Gemini headless stalls - Fixed headless Gemini invocation stalls. (#​8368, @​chekos)
• Cursor streamed text - The cursor adapter coalesces streamed assistant text into clean prose blocks. (#​8544, @​seb-veto)
• OpenClaw Gateway root params - The OpenClaw Gateway no longer forwards root Paperclip params. (#​4416, @​serenakeyitan)
• Agent creation & hire UI - Fixed the blank page when creating an agent, and inbox hire approvals now clear when approving or terminating from the detail page. (#​8336, #​8340, @​cryppadotta)
• Routine schedule editor - The routine schedule editor is stabilized, including interrupted-run labels. (#​8333, @​cryppadotta)
• Copy buttons over HTTP - Issue copy buttons work again when served over plain HTTP. (#​8212, @​joegalbert-ai)
• Fresh worktrees track origin/master - New worktrees are based on origin/master and unstarted reuses are refreshed, so execution workspaces don't start from stale code. (#​8412, @​cryppadotta)
• Durable agent pause - Agent pause now stays durable at execution-start. (#​8317, @​Tattoofamily)
• CLI board auth - The CLI handles a headless browser-open failure during board auth instead of hanging. (#​8328, @​AayushThakur1999)
• Pipelines plumbing - Internal groundwork for multi-stage pipeline cases landed under the hood (stages, case transitions, drift detection); it's not a user-facing surface yet. (#​7903, @​cryppadotta)

Contributors

Thank you to everyone who contributed to this release!

@​AayushThakur1999, @​aronprins, @​BuyWhere, @​chekos, @​dmndbrp-oss, @​joegalbert-ai, @​lennies, @​LeonSGP43, @​levineam, @​MrBlackTongue, @​neerazz, @​seb-veto, @​serenakeyitan, @​Tattoofamily, @​tonio-alucema, @​uky333, @​zenprocess

---

Configuration

📅 Schedule: (in timezone Europe/Madrid)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.