GoClaw Files

GoClaw v3.11.0

27 commits since v3.10.0.

Features

Tooling

• feat(tools/shell): runtime-reloadable global shell deny-groups via config.tools.shellDenyGroups — toggle package_install, env_dump, etc. from the /config Web UI without restart; per-agent overrides still win per-key (df5d48c7)
• feat(tools): send_file tool for delivering existing workspace files to channels (3a85d625)
• feat(tools): team-root cross-chat read access with separate write-allowed paths (4583e5dd)
• feat(tools): vault tool group now part of policy (#984)

Media & Providers

• feat: native image_generation for Codex + OpenAI-compat providers (#1002)
• feat(codex-pool): collapse primary_first routing + route pools through create_image chain (#1006)
• feat(codex-pool): split round-robin counter per modality (chat vs image) (#1021)
• feat(tts): tenant-scoped timeout wiring + Gemini text-only 400 fix (04a9938f)

Vault & Pipeline

• feat(vault): chat_id isolation for isolated teams (migration 000056) (c7b2df9e)
• feat(pipeline): session compaction overflow recovery (#958)

Channels

• feat(pancake): TikTok sub-platform support (#990)
• feat(pancake): Shopee platform support (#975)
• feat(telegram): inject bot self-identity into agent system prompt (4d6ebe9c)

Fixes

• fix(tools): scope credentialed-CLI blocked-command wording to [CREDENTIALED EXEC] marker — removes over-generalized "requires admin approval" LLM pre-refusals on plain shell failures (17170b40)
• fix(tools/read_audio): route transcription models (whisper, gpt-4o-transcribe) to /v1/audio/transcriptions for openai_compat providers (e.g. DashScope); fail-fast instead of silent fallback on missing credentials (7ffcdf16)
• fix(discord): remove redundant allowlist gate that broke pairing/allowlist policies (#985, [#1010])
• fix(vault): expand legacy-backfill regex to cover all channel integrations (2979f370)
• fix(vault): complete chat_id isolation coverage (9625a20e)
• fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display (cd4a8bd1)
• fix(pipeline): include tool-schema tokens in overhead + dynamic compact max_tokens (eb6723d6)
• fix(telegram): strip own @mention from inbound content (e392fca1)

Refactor & chore

• refactor: adopt Go 1.26+ standard library modernizations (b676ee13)
• refactor(pancake): simplify private-reply to stateless DM (#951)
• refactor(tools): use write-allowed paths for edit and shell execution (bb49b878)
• chore: minor formatting and cleanup across config, audio, cache, http, provider modules (860bfff3)

Docs

• docs: new "Shell Deny-Groups (Runtime Config)" section in 03-tools-system.md + 2026-04-24 changelog entry (25fb62ab)
• docs: update architecture and changelog for context-tokens and compact-quality fixes (955b7a51)

Breaking changes: None.

Migration: 000056 adds chat_id to vault tables for isolated-team isolation — auto-applied via goclaw migrate up.

New config key (optional): config.tools.shellDenyGroups (map[string]bool). Live-reloads via /config UI.

Full changelog: https://github.com/nextlevelbuilder/goclaw/compare/v3.10.0...v3.11.0