pre_seed utils (AWS CLI 2.35.13 + ghp 0.3.2)

Bundled pre_seed utilities for OAB fleet.

Contents:

• AWS CLI v2.35.13
• ghp v0.3.2 (ghpool shim)
• gh → ghp symlink

Usage: Add to [hooks.pre_seed].sources as S3 URI after uploading.

openab-0.9.0-beta.6

A lightweight, secure, cloud-native ACP harness that bridges Discord and any ACP-compatible coding CLI.

What's Changed since beta.5

🚀 Features

• Native Agent — Anthropic OAuth (Claude Pro/Max) login for openab-agent: PKCE browser/paste login against platform.claude.com, token refresh, and an OAuth-mode Anthropic provider. New openab-agent auth anthropic-oauth subcommand. (#1187)
• Telegram — source IP logging on webhook requests (phase 1). (#1248)

🐛 Bug Fixes

• Fixed GLIBC crash on all bots (GLIBC_2.38/2.39 not found): runtime images upgraded from Debian Bookworm to Trixie (glibc 2.41), and the Rust builder image pinned to a digest to prevent silent glibc drift. (#1251, #1246)
• pre_seed — allow safe relative symlinks: tarball extraction no longer rejects valid relative symlinks (e.g. bin/aws -> ../aws-cli/...); targets are validated before write (no TOCTOU). Lifecycle hooks (pre_seed/pre_boot/pre_shutdown) are now explicitly Unix-only and fail fast on Windows. (#1255)
• Telegram — thinking indicator reworked to avoid stale draft artifacts; final behavior keeps emoji status reactions only. (#1256, #1249, #1247)
• CI: fix premature aws verification before the symlink-relink step in the bundle workflow. (#1254)

🏗️ Infrastructure & CI

• New bundle-pre-seed-utils workflow: builds the utils.tar.gz (AWS CLI v2 + ghp + gh) for both amd64 and arm64 and publishes to a GitHub release, with an optional S3 upload. (#1252)
• Bundle workflow auto-resolves the latest AWS CLI and ghpool versions when inputs are left empty. (#1253)

📖 Documentation

• Devin: documented [agent].env config including model selection and DEVIN_PERMISSION_MODE. (#1257)
• OpenSHELL support marked as paused / not recommended. (#1250)

Full Changelog: openab-0.9.0-beta.5...openab-0.9.0-beta.6

Version Info

• Chart Version: 0.9.0-beta.6
• App Version: 0.9.0-beta.6

Installation

Helm Repository (GitHub Pages)

helm repo add openab https://openabdev.github.io/openab
helm repo update
helm install openab openab/openab --version 0.9.0-beta.6

OCI Registry

helm install openab oci://ghcr.io/openabdev/charts/openab --version 0.9.0-beta.6

pre_seed utils (AWS CLI 2.35.12 + ghp 0.3.2)

Bundled pre_seed utilities for OAB fleet.

Contents:

• AWS CLI v2.35.12
• ghp v0.3.2 (ghpool shim)
• gh CLI (from runner)

Usage: Add to [hooks.pre_seed].sources as S3 URI after uploading.

openab-0.9.0-beta.5

What's Changed since v0.9.0-beta.4

Features

• Devin CLI backend — new devin target in Dockerfile.unified (#1229)
• Unified mode for webhook platforms — Telegram, LINE, Feishu, WeCom, Google Chat, Teams now work with just env vars, no [gateway] config needed (#1237)

Performance

• Build: compile once, fan out — build-core produces the binary once per arch, build-agents reuses it via stage aliasing. Eliminates redundant Rust recompilation across variants (#1227, #1242)

Fixes

• Telegram: dismiss thinking indicator on remove_reaction (#1238)
• Discord: insert newline before URLs glued to text in /auth output (#1232)
• Discord: make auth URLs clickable (remove code block wrapping) (#1232)
• Windows: gate Unix socket code with cfg(unix) (#1231)
• Unified mode: gate env var checks with cfg!(feature) to prevent silent dead-start on builds without platform features

Docs

• Unified mode config examples for all webhook platforms (Telegram, LINE, Feishu, Google Chat, WeCom)
• Minimal + recommended config for Kiro + Telegram
• Removed obsolete command/args/working_dir from [agent] examples
• ADR: supersede custom-gateway with unified embedded adapters (#1243)
• Updated refarch and chart README with unified mode as recommended

CI

• Pinned rust:1-bookworm builder image by digest to prevent glibc mismatch (#1246)

---

Full Changelog: v0.9.0-beta.4...v0.9.0-beta.5

openab-0.9.0-beta.4

A lightweight, secure, cloud-native ACP harness that bridges Discord and any ACP-compatible coding CLI.

Version Info

• Chart Version: 0.9.0-beta.4
• App Version: 0.9.0-beta.4

What's Changed (since beta.3)

✨ Features

• Ambient mode — new batch-flush dispatcher that observes threads under configured channels, with custom instructions_file for system prompts, sender UID in transcripts, and debug mode (#1217, #1220, #1221, #1222)
• Discord image attachments — pass through image attachment URLs to agent prompt (#1208)
• Multi-vendor OAuth — cross-process auth.json locking with codex + MCP support (#1190)

🐛 Fixes

• Auth — strip ANSI escape codes from /auth output (#1206)
• Session — surface diagnostic instead of (no response) on empty 0-token end_turn (#1213)
• Adapter — surface error on agent EOF without final response (#1198)
• Ctl — resolve thread for single-adapter bots so set/get thread.name works (#1216)
• Ambient — default allow_bot_messages to true; bypass discord bot gating for ambient buffer (#1225, #1226)

🏗️ CI / Infra

• Pre-beta CI: run hourly only when main had a commit in the last hour (#1214)
• PR review: trigger on open/sync/reopen, skip fork PRs with read-only token (#1218, #1219)

🧹 Chores

• Remove orphaned gateway/ directory (#1223)
• ADR doc for Ambient Mode (#1211)

openab-0.9.0-beta.3

What's Changed since beta.2

🚀 Features

• S3 config source — openab -c s3://bucket/config.toml now supported alongside http(s):// and local paths (#1183)
• /auth slash command — device-flow auth via Discord DM; single-flight guard, UTF-16 truncation, bot-user rejection (#1185)
• pre_seed lifecycle phase — download & extract S3 archives (zip, tar.gz, tgz) into $HOME before pre_boot, with budget limits, cooperative deadlines, and S3-native SHA-256 verification (#1189, #1196)
• Pre-Beta Build workflow — gh workflow run "Pre-Beta Build" builds all 14 agent variants as pre-beta-<agent> tags (#1195)

🐛 Bug Fixes

• pre_seed: security hardening — symlink validation, suid/sgid stripping, tempdir permission fix, path traversal prevention (#1199)

📖 Documentation

• Add Helm image.tag usage to all agent platform docs (#1184)
• Add S3 restore + backup round-trip example for stateless compute (#1202)

🏗️ Infrastructure / CI

• Reduce redundant smoke test runs with concurrency groups + draft PR skip (#1193)
• Make pre-seed a default feature (deps already compiled) (#1197)

---

Version Info

• Chart Version: 0.9.0-beta.3
• App Version: 0.9.0-beta.3

Installation

Helm Repository (GitHub Pages)

helm repo add openab https://openabdev.github.io/openab
helm repo update
helm install openab openab/openab --version 0.9.0-beta.3

OCI Registry

helm install openab oci://ghcr.io/openabdev/charts/openab --version 0.9.0-beta.3

Full Changelog: openab-0.9.0-beta.2...openab-0.9.0-beta.3

openab-0.9.0-beta.2

What's New in 0.9.0-beta.2

🏗️ Unified Image Architecture (Breaking Change)

All agent variants now ship from a single image repository with tag-based selection:

ghcr.io/openabdev/openab:<version>-<agent>

Available agents:

ghcr.io/openabdev/openab:0.9.0-beta.2-kiro
ghcr.io/openabdev/openab:0.9.0-beta.2-claude
ghcr.io/openabdev/openab:0.9.0-beta.2-codex
ghcr.io/openabdev/openab:0.9.0-beta.2-copilot
ghcr.io/openabdev/openab:0.9.0-beta.2-cursor
ghcr.io/openabdev/openab:0.9.0-beta.2-gemini
ghcr.io/openabdev/openab:0.9.0-beta.2-grok
ghcr.io/openabdev/openab:0.9.0-beta.2-hermes
ghcr.io/openabdev/openab:0.9.0-beta.2-mimocode
ghcr.io/openabdev/openab:0.9.0-beta.2-opencode
ghcr.io/openabdev/openab:0.9.0-beta.2-antigravity
ghcr.io/openabdev/openab:0.9.0-beta.2-pi
ghcr.io/openabdev/openab:0.9.0-beta.2-native
ghcr.io/openabdev/openab:0.9.0-beta.2-agentcore

Tag scheme:

• <version>-<agent> — pinned release (e.g., 0.9.0-beta.2-kiro)
• beta-<agent> — floating beta channel (e.g., beta-kiro)
• <sha>-<agent> — traceability tags

No more latest tag — all images require explicit agent suffix.

🚀 Features

Unified Binary & Workspace Restructure

• Cargo workspace with openab-core crate + feature-gated compilation (#1146)
• Serenity conditional on discord feature (#1175)
• Embedded axum webhook server for unified mode (Phase 2/3)
• UnifiedGatewayAdapter for config-based platform routing

Build Pipeline

• Single Dockerfile.unified builds all variants from shared Rust builder stage
• build-operator migrated to unified Dockerfile + tag format (#1180)
• Shared builder stage extracted (Dockerfile DRY)

Gateway Phase 3

• Bot filter, fallback routing, improved logging (#1173)
• process_gateway_event() public API for unified mode
• Gateway serve() extracted into lib.rs

Kiro API Key Auth

• Kiro CLI now supports API key authentication as recommended method (#1178)

Helm Chart

• Migrated to unified image tag format openab:<tag>-<agent> (#1180)
• Chart version 0.9.0-beta.2 published to OCI

🐛 Bug Fixes

• fix(unified): port reaction_add handler — emoji reaction mappings were missing in unified build (#1177)
• fix: review findings for reaction_add — F1/F2/F3 gating tests
• fix: Helm unittest documentIndex for non-kiro agent tests
• fix: remove unused imports in gateway serve()
• fix: use matched ref instead of redundant unwrap in Teams dispatch
• fix: clarify release flow diagram wording

⚠️ Migration from 0.9.0-beta.1

Image references changed:

# Before (separate repos)
ghcr.io/openabdev/openab:beta           → ghcr.io/openabdev/openab:beta-kiro
ghcr.io/openabdev/openab-codex:beta     → ghcr.io/openabdev/openab:beta-codex
ghcr.io/openabdev/openab-antigravity:beta → ghcr.io/openabdev/openab:beta-antigravity

Helm chart: update image.tag to include agent suffix.

---

Full Changelog: openab-0.9.0-beta.1...openab-0.9.0-beta.2

openab-0.9.0-beta.1

What's New in 0.9.0-beta.1

📦 CLI Version Bumps

Agent	Version
kiro-cli	2.8.1
codex	0.141.0
codex-acp	0.16.0
claude-code	2.1.179
gemini	0.47.0
copilot	1.0.63
cursor	2026.06.19
opencode	1.17.9
antigravity	1.0.10
pi	0.79.9
hermes	v2026.6.19

🐛 Fixes

• Bump codex-acp 0.15.0 → 0.16.0
• Fix stale comment in antigravity Dockerfile

---

Full Changelog: openab-0.8.5...openab-0.9.0-beta.1

openab-0.8.5

What's New in 0.8.5

🚀 Features

AgentCore Runtime — Run coding agents remotely on Amazon Bedrock AgentCore

• Native Rust WebSocket bridge for persistent ACP sessions (#1089)
• Config sugar: [agentcore] section auto-spawns adapter (#1071)
• Dockerfile.agentcore — OAB + adapter only, no bundled CLI (#1069)

oabctl CLI — New provisioning tool for ECS-based agent fleets

• oabctl bootstrap — one-time infra setup (cluster, IAM, S3, SG, logs) (#1158)
• oabctl create — interactive wizard to scaffold agent manifests
• oabctl apply — deploy/update agents from YAML manifests
• oabctl exec — ECS Exec into running agent containers
• oabctl delete — tear down agent services
• OABFleet kind for batch agent deployment

Feishu/Lark

• Card streaming — no 20-edit cap, native table support (#1159)

LINE

• Inbound image support via Gateway (#1105)
• Inbound audio attachments for STT (#1163)
• Native @mention gating via LINE webhook (#1105)
• Rich Messages support (Telegram Bot API 10.1) (#1106)

Slack

• Assistant mode — native streaming + assistant status indicators (#995)
• Keep tool-used summary in assistant_mode messages (#1079)
• Half-open Socket Mode detection via ping + idle-timeout reconnect (#1120)

Discord

• Emoji reaction mapping (#1150)
• Propagate mentions to all split message chunks (#1153)

Secrets Management

• AWS Secrets Manager + exec:// provider for runtime secret injection (#1042)
• Secrets resolved at startup, never leaked to agent subprocess

Control Directives (Phase 1)

• [[ws:...]] — workspace switching per message
• [[title:...]] — thread title override

MiMo-Code

• New ACP backend support (#1117)

OpenAB Agent (Native)

• /models slash command with configurable model lists
• Preserve session history on model switch
• MAX_TOOL_LOOPS configurable via env var (#1119)

Helm Chart

• configUrl — skip ConfigMap, use remote config (#1105)
• Lifecycle hooks: pre_boot / pre_shutdown rendering
• Workspace aliases from values.yaml

Antigravity (agy-acp)

• SQLite-based response extraction (P1)
• Streaming + real cancel + id:Value support (#1087)

Other

• openab set/get — Unix socket IPC for runtime config (Phase 1: thread.name) (#1147)
• Snapshot Build CI workflow (parallel matrix) (#1154)
• Default allow_user_messages to multibot-mentions (#1126)

🐛 Bug Fixes

• Fix session ID preservation on session/load timeout (#1140)
• Fix multibot thread detection persistence to disk (#1129)
• Fix Feishu 20-edit cap recovery (errcode 230072) (#1122)
• Fix agent subprocess argument injection in run.sh
• Fix empty error details for JSON-RPC -32603 responses
• Fix Slack native-stream finalize dedup
• Fix gateway Teams webhook body size bound
• Fix Telegram Markdown parse failure retry
• Pin kiro-cli to 2.5.0 to avoid libasound.so.2 regression
• Bump CLI versions: kiro 2.6.0, codex 0.137.0, gemini 0.44.1, copilot 1.0.60, cursor 06.04, opencode 1.16.2

📖 Docs

• AgentCore Runtime guide
• Secrets management guide
• Control directives + workspaces guides
• Python/uv execution guide
• ADRs: AgentCore, Control Directives, iMessage, Secrets, PR Review Loop

⚠️ Breaking Changes

• allow_user_messages now defaults to multibot-mentions (was true) — existing single-bot deployments unaffected, multi-bot setups should verify behavior (#1126)

Contributors

Thanks to @clsung, @dogzzdogzz, @brettchien, @chenhan-agent, @JARVIS-coding-Agent and the OpenAB maintainer team!

openab-0.8.5-beta.13

OpenAB v0.8.5-beta.13

A lightweight, secure, cloud-native ACP harness that bridges Discord, Slack, and webhook platforms to ACP-compatible coding CLIs.

What's Changed since beta.12

Features

• feat(discord): emoji reaction mapping (#1150) — map user emoji reactions to text commands via [reactions.mapping] config
• feat: openab set/get — Unix socket IPC (#1147) — Phase 1: thread.name IPC for runtime state inspection
• feat(schema): add status field to Attachment (#1143) — propagate rejected attachments in all gateway adapters

Fixes

• fix(streaming): recover from Feishu 20-edit cap (#1122) — graceful recovery from errcode 230072
• fix(acp/pool): preserve session ID on session/load timeout (#1140) — prevents session loss on transient load failures
• fix(adapter): propagate mentions to all split chunks (#1153) — ensures @mentions appear in every message chunk
• fix(ci): PR review webhook fixes (#1136, #1137, #1138, #1139, #1144)

Refactors

• refactor(slack): extract allow-list source behind AllowListSource trait (#1152)

CI/Infra

• ci: convert PR review from reactive to scheduled polling (#1145)
• ci: add Snapshot Build workflow (parallel matrix) (#1154)

Docs

• docs(adr): iMessage integration architecture (#1141)
• docs(adr): separate binaries by default, opt-in unified build (#1116)
• docs(telegram): add [markdown] tables = "off" for Rich Messages (#1142)

Contributors

• @chaodu-agent
• @chenhan-agent
• @luffy-aiagent
• @wangyuyan-agent
• @antigenius0910

Docker

docker pull ghcr.io/openabdev/openab:pre-beta
docker pull ghcr.io/openabdev/openab-codex:pre-beta
docker pull ghcr.io/openabdev/openab-claude:pre-beta
docker pull ghcr.io/openabdev/openab-copilot:pre-beta
docker pull ghcr.io/openabdev/openab-antigravity:pre-beta
docker pull ghcr.io/openabdev/openab-grok:pre-beta
docker pull ghcr.io/openabdev/openab-opencode:pre-beta
docker pull ghcr.io/openabdev/openab-native:pre-beta