diff --git a/releases/v2026.427.0.md b/releases/v2026.427.0.md index 78dfd87cae5..51a040f5033 100644 --- a/releases/v2026.427.0.md +++ b/releases/v2026.427.0.md @@ -5,13 +5,15 @@ ## Highlights - **Multi-user access and invite flows** — Paperclip can now run as a shared, authenticated control plane. Real human identities, company memberships, invite creation/landing, onboarding, profile settings, and company-scoped access controls are first-class while keeping the local-first single-operator path intact. ([#3784](https://github.com/paperclipai/paperclip/pull/3784)) -- **First-class issue references** — Mentions of `PAP-123`-style ticket ids in issue text, comments, and documents now persist as durable reference relationships. The board surfaces backlinks, queryable cross-issue context, and an idempotent backfill for existing content. ([#4214](https://github.com/paperclipai/paperclip/pull/4214)) - **Structured issue-thread interactions** — Agents can now post structured proposals into the thread: suggested tasks, multi-question forms, and request-for-confirmation cards. The board renders them as interactive cards with accept/reject/answer flows, idempotency keys, and resumable agent continuations. Plan approvals and yes/no decisions are now explicit, auditable, and replayable without leaving the issue. ([#4244](https://github.com/paperclipai/paperclip/pull/4244), [#4381](https://github.com/paperclipai/paperclip/pull/4381)) -- **Environments and pluggable sandbox providers** — Heartbeat runs now execute against a first-class `Environment` record with lease lifecycle tracking. Local, SSH-backed remote, and sandboxed execution targets are all supported, and providers are pluggable via a generic plugin contract. The new `@paperclipai/plugin-e2b` package ships as the reference third-party sandbox provider. ([#4297](https://github.com/paperclipai/paperclip/pull/4297), [#4358](https://github.com/paperclipai/paperclip/pull/4358), [#4415](https://github.com/paperclipai/paperclip/pull/4415), [#4449](https://github.com/paperclipai/paperclip/pull/4449), [#4452](https://github.com/paperclipai/paperclip/pull/4452)) -- **Issue subtree pause, cancel, and restore** — Board operators can now hold, cancel, or restore a whole issue subtree from the issue detail. Holds are durable, dependency-aware, and keep descendant execution and wake behavior coherent. ([#4332](https://github.com/paperclipai/paperclip/pull/4332)) - **Run liveness continuations and runtime lifecycle recovery** — Heartbeat runs now record liveness state, next-action hints, and continuation attempts so long or interrupted work can resume with full context. A new active-run watchdog plus runtime lifecycle recovery surfaces silent runs, covered-blocker chains, and stalled in-review leaves with operator-visible recovery decisions. ([#4083](https://github.com/paperclipai/paperclip/pull/4083), [#4419](https://github.com/paperclipai/paperclip/pull/4419), [#4209](https://github.com/paperclipai/paperclip/pull/4209)) - **Sub-issues as a workflow checklist** — Ordered sub-issues now render as a dependency-aware progress checklist with current-step affordances, blocker context, and de-emphasized done items, replacing the flat table presentation. ([#4523](https://github.com/paperclipai/paperclip/pull/4523), [#4588](https://github.com/paperclipai/paperclip/pull/4588)) -- **First-class security agent role** — Added a dedicated `security` agent role to the taxonomy with route coverage and regression tests so security responsibilities can be modeled explicitly in the org chart. ([#4532](https://github.com/paperclipai/paperclip/pull/4532), [#4586](https://github.com/paperclipai/paperclip/pull/4586), [#4589](https://github.com/paperclipai/paperclip/pull/4589)) +- **Issue subtree pause, cancel, and restore** — Board operators can now hold, cancel, or restore a whole issue subtree from the issue detail. Holds are durable, dependency-aware, and keep descendant execution and wake behavior coherent. ([#4332](https://github.com/paperclipai/paperclip/pull/4332)) +- **First-class issue references** — Mentions of `PAP-123`-style ticket ids in issue text, comments, and documents now persist as durable reference relationships. The board surfaces backlinks, queryable cross-issue context, and an idempotent backfill for existing content. ([#4214](https://github.com/paperclipai/paperclip/pull/4214)) + +## Beta Features + +- **BETA Environments and pluggable sandbox providers** — Heartbeat runs now execute against a first-class `Environment` record with lease lifecycle tracking. Local, SSH-backed remote, and sandboxed execution targets are all supported, and providers are pluggable via a generic plugin contract. The new `@paperclipai/plugin-e2b` package ships as the reference third-party sandbox provider. ([#4297](https://github.com/paperclipai/paperclip/pull/4297), [#4358](https://github.com/paperclipai/paperclip/pull/4358), [#4415](https://github.com/paperclipai/paperclip/pull/4415), [#4449](https://github.com/paperclipai/paperclip/pull/4449), [#4452](https://github.com/paperclipai/paperclip/pull/4452)) ## Improvements @@ -37,6 +39,7 @@ - **README architecture systems** — New README documentation walking through the major systems in the codebase. ([#4250](https://github.com/paperclipai/paperclip/pull/4250)) - **AWS ECS Fargate deployment runbook** — End-to-end deployment guide for running Paperclip on ECS Fargate. ([#3897](https://github.com/paperclipai/paperclip/pull/3897), @neerazz) - **Structured agent mentions in paperclip skill** — Skill comments now use structured `[@Name](agent://id)` mentions instead of raw `@Name` strings. ([#4103](https://github.com/paperclipai/paperclip/pull/4103), @aronprins) +- **First-class security agent role** — Added a dedicated `security` agent role to the taxonomy with route coverage and regression tests so security responsibilities can be modeled explicitly in the org chart. ([#4532](https://github.com/paperclipai/paperclip/pull/4532), [#4586](https://github.com/paperclipai/paperclip/pull/4586), [#4589](https://github.com/paperclipai/paperclip/pull/4589)) ## Fixes