cowork-os 0.3.85 → 0.3.87

package/CHANGELOG.md

@@ -7,6 +7,52 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- **Intent-routed task strategy runtime**: tasks are now classified into `chat`, `advice`, `planning`, `execution`, or `mixed` and receive derived strategy defaults (conversation mode, turns, quality passes, answer-first flags).
+- **Relationship memory lifecycle APIs**: added relationship memory and commitment IPC/preload surfaces:
+  - `memory:relationshipList`
+  - `memory:relationshipUpdate`
+  - `memory:relationshipDelete`
+  - `memory:commitmentsGet`
+  - `memory:commitmentsDueSoon`
+- **Relationship memory UI controls** in Memory Settings for edit/forget and commitment status management.
+- **Dedicated relationship-agent architecture + UAT docs**:
+  - `docs/relationship-agent-architecture.md`
+  - `docs/relationship-agent-uat.md`
+
+### Changed
+- **Execution strategy orchestration** in daemon lifecycle:
+  - strategy derivation at task creation
+  - runtime strategy re-application for queued/legacy tasks
+  - relationship-memory outcome recording on top-level task completion
+- **Memory context composition** now combines `UserProfileService` facts with layered relationship memory context for prompt injection.
+- **Soft-deadline behavior** in executor now switches from deep step execution to best-effort finalization before hard timeout.
+
+### Fixed
+- **Timeout-abort completion gap**: timeout-triggered cancellation paths now attempt best-effort finalization instead of exiting without a user-facing answer.
+- **Cancellation observability**: executor cancellation logs now include cancellation reason (`user`, `timeout`, `shutdown`, etc.) for clearer diagnosis.
+
+## [0.3.86] - 2026-02-14
+
+### Added
+- **ACP and Canvas control-plane endpoints**: introduced ACP task-delegation handlers and new canvas APIs (`canvas.list/get/snapshot/content/push/eval/checkpoint.*`) with corresponding protocol constants and IPC wiring.
+- **Canvas checkpoint tooling**: added `canvas_checkpoint`, `canvas_restore`, and `canvas_checkpoints` tools, plus in-memory checkpoint history and restore flows in `CanvasManager`.
+- **Renderer i18n support**: added language resources and UI selection for English, Japanese, and Simplified Chinese, with persisted language preference.
+- **Talk Mode UX**: introduced continuous voice talk-mode hook and UI controls for conversational voice interaction in main task view.
+
+### Changed
+- **Agent execution flow hardening**: executor now emits long-running tool heartbeats, tracks recovered failures more precisely, and preflights shell-permission requirements when command execution is required.
+- **Shell approvals and safety**: `run_command` now supports single-approval bundle mode for safe command sequences and normalizes signatures more robustly for duplicate detection.
+- **Gateway routing extensibility**: router now supports channel-level `defaultAgentRoleId`, `defaultWorkspaceId`, and `allowedAgentRoleIds`, plus new `set_agent` router-rule action.
+- **Skill registry backend**: default registry now points to GitHub static catalog mode with client-side cached search and static skill fetch/install paths.
+- **Plugin discovery behavior**: plugin registry initializes at startup and supports incremental discovery of newly-added plugins without full re-init.
+
+### Fixed
+- **Sensitive shell output leakage**: command output now redacts seed phrases and private-key material before logging/model context.
+- **Isolated macOS install keychain prompt safety**: added `COWORK_DISABLE_OS_KEYCHAIN=1` path to bypass OS keychain integration in disposable test environments.
+- **Task activity signaling in UI**: task “working” indicators now consider tool calls/results and tool-execution progress heartbeats, reducing false idle states.
+- **Install reliability carry-forward**: retains prior setup retry behavior and low-memory setup defaults while validating clean first-install flow.
+
 ## [0.3.85] - 2026-02-14
 
 ### Fixed

package/README.md

@@ -17,7 +17,8 @@
   <a href="https://github.com/CoWork-OS/CoWork-OS/actions/workflows/ci.yml"><img src="https://github.com/CoWork-OS/CoWork-OS/actions/workflows/ci.yml/badge.svg" alt="CI"></a>
   <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT"></a>
   <a href="https://www.apple.com/macos/"><img src="https://img.shields.io/badge/platform-macOS-blue.svg" alt="macOS"></a>
-  <a href="https://www.electronjs.org/"><img src="https://img.shields.io/badge/electron-40.0.0-47848F.svg" alt="Electron"></a>
+  <a href="https://www.electronjs.org/"><img src="https://img.shields.io/badge/electron-40.4.1-47848F.svg" alt="Electron"></a>
+  <a href="https://github.com/sponsors/CoWork-OS"><img src="https://img.shields.io/badge/Sponsor-CoWork%20OS-ff4d4f?logo=github-sponsors&logoColor=white" alt="Sponsor on GitHub"></a>
 </p>
 
 **The operating system for personal AI assistants**
@@ -28,25 +29,58 @@ Your AI needs a secure home. CoWork OS provides the runtime, security layers, an
 |---|---|
 | **20+ AI Providers** | Claude, OpenAI, Gemini, Bedrock, OpenRouter, Ollama (free/local), Groq, xAI, Kimi, Mistral, Cerebras, MiniMax, Qwen, Copilot, and more |
 | **14 Messaging Channels** | WhatsApp, Telegram, Discord, Slack, Teams, Google Chat, iMessage, Signal, Mattermost, Matrix, Twitch, LINE, BlueBubbles, Email |
-| **8 Enterprise Connectors** | Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta |
+| **9 Enterprise Connectors** | Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta, Resend |
 | **6 Cloud Storage** | Notion, Box, OneDrive, Google Workspace (Drive/Gmail/Calendar), Dropbox, SharePoint |
 | **Voice Calls** | Outbound phone calls via ElevenLabs Agents |
 | **Agent Teams** | Multi-agent collaboration with shared checklists and coordinated runs |
 | **Workspace Kit** | Workspace `.cowork/` kit (projects, access rules, context injection, per-workspace settings) |
+| **Intent Routing** | Per-message routing across chat/advice/planning/execution/mixed modes |
+| **Relationship Memory** | Layered continuity memory (identity, preferences, context, history, commitments) |
+| **Completion-First** | Answer-first responses, soft-deadline fallback, timeout recovery finalization |
 | **Security-First** | 2800+ unit tests, configurable guardrails, approval workflows, gateway hardening |
 | **Local-First** | Your data stays on your machine. BYOK (Bring Your Own Key) |
 
-### What’s new in 0.3.85
-
-- **Hoisted Electron setup fix**: `npm run setup` now detects Electron in both local and parent `node_modules`, avoiding unnecessary fallback installs on npm-hoisted layouts.
-- **Lower-memory native recovery**: missing `better-sqlite3` install/rebuild now runs from the install root, reducing large dependency reify spikes during first install on macOS.
-- **Release guardrails tightened**: release smoke tests now assert setup behavior on installed packages, and package publish jobs are gated on release validation.
-- **Version sync**: bumped to `0.3.85`.
+### What’s new in 0.3.73
+
+- **Release and install reliability**: fixed publish-blocking type/lint regressions so npm desktop/client releases can be published reliably.
+- **Task config validation**: stricter `personalityId` validation for task `agentConfig` avoids malformed IDs reaching task execution.
+- **Control-plane/LLM error handling alignment**: tests and runtime error codes now match shared validation shapes for predictable client behavior.
+- **Workspace auto-switch confidence**: improved ambiguous temp-task preflight handling when preferred workspace signals are available.
+
+### Current Branch Enhancements (Unreleased)
+
+- **Executor reliability**: tasks can no longer get stuck in `executing` status after follow-ups; varied-failure loop detection nudges the agent to switch strategy after 5 persistent tool failures.
+- **Smarter artifact handling**: read-only analysis steps no longer require artifact output; verification evidence is skipped when the task already produced files; document creation only triggers for explicit DOCX/PDF requests (attachment filenames no longer cause false positives).
+- **Gateway connection resilience**: Slack Socket Mode uses relaxed ping/pong timeouts (15s/60s) to reduce reconnection churn; WhatsApp adds connection-flap detection with enforced backoff when rapid disconnect/reconnect cycles are detected.
+- **XLSX file support**: Excel spreadsheets (.xlsx/.xls) can now be read and extracted as tab-separated text in the file viewer, with support for formulas, rich text, and dates.
+- **Attachment chips in chat**: user message bubbles now show compact attachment chips instead of raw file listings; the collapsible bubble toggle shows both "Show more" and "Show less".
+- **User identity hardening**: the personality prompt now explicitly instructs the LLM to ignore names found in file paths, filenames, and OS metadata when a preferred name is stored, preventing identity leakage.
+- **Hooks auto-token**: enabled hooks server auto-generates a missing authentication token instead of silently disabling.
+- **Reduced log noise**: suppressed zero-count startup messages for plugins, canvas sessions, and legacy settings; demoted MCP stderr to debug level.
+- **Relationship-agent runtime**: tasks are now intent-routed (`chat`, `advice`, `planning`, `execution`, `mixed`) and strategy-bound before execution.
+- **Answer-first behavior**: strategy-marked prompts emit a direct user answer early, then continue with deeper execution when needed.
+- **Soft-deadline execution control**: long-running steps switch to best-effort finalization before hard timeout to reduce unfinished tasks.
+- **Timeout cancellation recovery**: timeout-triggered cancellation paths now attempt best-effort final answers instead of silent termination.
+- **Relationship memory controls**: new layered memory CRUD and commitment APIs (`open`, `done`, `due soon`) are exposed through IPC/preload and renderer memory settings.
 
 > **Status**: macOS desktop app + headless/server mode (Linux/VPS). Cross-platform desktop support planned.
 
 ---
 
+## Relationship-Agent Validation (Recommended)
+
+Use this quick runbook after upgrades:
+
+1. Send a strategic prompt in a channel (for example: "How should I position this product, who should I target, and what should I achieve?").
+2. Confirm you receive a direct answer early (not only research chatter).
+3. Confirm task ends in `completed` with a final response.
+4. If timeout occurs, confirm logs show timeout recovery/finalization instead of silent cancellation.
+5. In **Settings > Memory**, confirm relationship items and commitments can be edited/forgotten and commitment status can be toggled.
+
+For a full acceptance checklist, see `docs/relationship-agent-uat.md`.
+
+---
+
 ## Installation
 
 ### macOS App (Recommended)
@@ -68,45 +102,29 @@ Use this flow to test like a first-time user in a clean folder:
 # Install into a local folder
 mkdir -p /tmp/cowork-run
 cd /tmp/cowork-run
-npm install --ignore-scripts --omit=optional cowork-os@latest --no-audit --no-fund
-
-# Prepare native runtime (Electron binary + native module cache)
-npm run --prefix node_modules/cowork-os setup
+npm install cowork-os@latest --no-audit --no-fund
 
 # Ensure no previously running CoWork instance is active
 pkill -f '/cowork-os' || true
 
 # Start app
-./node_modules/.bin/cowork-os
-```
-
-This is the first install path users should try on macOS:
-
-> If you run plain `npm install cowork-os@latest`, macOS can still intermittently kill lifecycle scripts during dependency extraction. Use the flow above with `--ignore-scripts --omit=optional` and `npm run --prefix node_modules/cowork-os setup` before first launch.
-
-For strict reproducibility on low-memory machines:
-
-```bash
-export COWORK_SETUP_JOBS=1
-export COWORK_SETUP_NATIVE_OUTER_ATTEMPTS=10
-export COWORK_SETUP_NATIVE_SHELL_ATTEMPTS=10
-npm run --prefix node_modules/cowork-os setup
+npx cowork-os
 ```
 
 #### Install reliability notes (macOS / low-memory environments)
 
-- If setup is interrupted by `SIGKILL`, close other memory-heavy apps and rerun:
-  - `npm run --prefix node_modules/cowork-os setup`
+- If install fails with `SIGKILL` during `node_modules/electron/install.js`, use a two-step install:
+  - `npm install --ignore-scripts cowork-os@latest --no-audit --no-fund`
+  - `npm run setup` (from the install directory) before launching the CLI
 - For local package testing, use the same `--ignore-scripts` flow with the tarball:
   - `npm init -y`  
   - `npm install --ignore-scripts /path/to/cowork-os-<version>.tgz`
-  - `npm run --prefix node_modules/cowork-os setup`
 - If you already have a global install, verify with `coworkd-node --version` and avoid launching without dependency setup on first run.
 
 You can also install globally and launch directly:
 
 ```bash
-npm install -g --ignore-scripts --omit=optional --no-audit --no-fund cowork-os
+npm install -g cowork-os
 
 # Optional: verify installed version
 npm list -g cowork-os --depth=0
@@ -130,7 +148,7 @@ cowork-os
 
 #### Prerequisites
 
-- Node.js 22+ and npm
+- Node.js 24+ and npm
 - macOS 12 (Monterey) or later
 - One of: any supported LLM provider credentials (API key/token or AWS credentials) or Ollama installed locally
 - Xcode Command Line Tools (needed to build `better-sqlite3` for Electron): `xcode-select --install`
@@ -153,26 +171,10 @@ npm run dev
 
 If you see `Killed: 9` during `npm run setup`, macOS terminated a native build due to memory pressure.
 
-`npm run setup` already retries native setup automatically with backoff. Let it continue until it exits. If it still exits non-zero:
-
-```bash
-pkill -f '/cowork-os' || true
-npm run --prefix node_modules/cowork-os setup
-```
-
-If the shell shows `zsh: killed` again, this usually means your system killed a child process. Repeat with lower-memory settings:
-
-```bash
-COWORK_SETUP_JOBS=1 \
-COWORK_SETUP_NATIVE_OUTER_ATTEMPTS=12 \
-COWORK_SETUP_NATIVE_SHELL_ATTEMPTS=12 \
-npm run --prefix node_modules/cowork-os setup
-```
-
-If `npm run --prefix node_modules/cowork-os setup` is itself killed immediately (before setup logs appear), run the native retry wrapper directly:
+`npm run setup` already retries native setup automatically with backoff. Let it continue until it exits. If it still exits non-zero, close heavy apps and run the same command again:
 
 ```bash
-(cd node_modules/cowork-os && sh scripts/setup_native_retry.sh)
+npm run setup
 ```
 
 #### Build for Production
@@ -197,10 +199,10 @@ node -v
 npm -v
 ```
 
-`cowork-os` requires Node `>=22.12.0`. If you see `v20`/`v21`, upgrade first:
+`cowork-os` requires Node `>=24.0.0`. If you see `v22`/`v23`, upgrade first:
 
 ```bash
-curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
+curl -fsSL https://deb.nodesource.com/setup_24.x | sudo -E bash -
 sudo apt-get install -y nodejs
 node -v
 ```
@@ -2171,6 +2173,7 @@ Pre-built MCP server connectors for enterprise integrations. Install from **Sett
 | **Linear** | Product/Issue | `health`, `list_issues`, `get_issue`, `search_issues`, `create_issue`, `update_issue` |
 | **Asana** | Work Management | `health`, `list_tasks`, `get_task`, `search_tasks`, `create_task`, `update_task` |
 | **Okta** | Identity | `health`, `list_users`, `get_user`, `search_users`, `create_user`, `update_user` |
+| **Resend** | Email | `health`, `send_email`, `list_webhooks`, `create_webhook`, `delete_webhook`, `get_received_email` |
 
 ### Setup
 
@@ -2275,7 +2278,7 @@ Users must comply with their model provider's terms:
 - [x] Persistent memory system with privacy protection
 - [x] Mobile Companions with LAN access support
 - [x] Voice Mode with ElevenLabs and OpenAI integration
-- [x] Enterprise MCP Connectors (Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta)
+- [x] Enterprise MCP Connectors (Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta, Resend)
 - [x] Cloud Storage Integrations (Notion, Box, OneDrive, Google Drive, Dropbox, SharePoint)
 - [x] Visual Theme System (Modern/Terminal visual styles + Light/Dark/System color modes)
 - [x] Workspace recency ordering
@@ -2304,7 +2307,7 @@ Users must comply with their model provider's terms:
 - [x] Local memory embeddings and cross-workspace ChatGPT imported memory search
 - [x] Apple Calendar and Reminders tools (macOS native via AppleScript)
 - [x] Gateway ambient mode (passive message ingestion) and self-message capture
-- [x] Use-case skill templates (booking, draft reply, family digest, household capture, newsletter digest, transaction scan)
+- [x] Use-case skill templates (booking, draft reply, family digest, household capture, newsletter digest, transaction scan, inbox manager, chief-of-staff briefing, smart-home brain, dev task queue, figure-it-out agent)
 - [x] Headless Electron mode with env-based credential import (`COWORK_IMPORT_ENV_SETTINGS`)
 - [x] Node.js daemon entrypoint for non-Electron headless deployments (`coworkd-node.js`)
 - [x] Control plane web dashboard, approval API, and channel management API

package/connectors/README.md

@@ -16,5 +16,6 @@ Reference implementations:
 - `connectors/linear-mcp`
 - `connectors/asana-mcp`
 - `connectors/okta-mcp`
+- `connectors/resend-mcp`
 
 See `docs/enterprise-connectors.md` for the Phase 1 connector contract.

package/connectors/asana-mcp/dist/index.js

@@ -51,6 +51,7 @@ const MCP_ERROR_CODES = {
     SERVER_NOT_INITIALIZED: -32002,
 };
 class AsanaClient {
+    config;
     constructor(config) {
         this.config = config;
     }
@@ -147,11 +148,13 @@ class AsanaClient {
     }
 }
 class StdioMCPServer {
+    toolProvider;
+    serverInfo;
+    initialized = false;
+    rl = null;
     constructor(toolProvider, serverInfo) {
         this.toolProvider = toolProvider;
         this.serverInfo = serverInfo;
-        this.initialized = false;
-        this.rl = null;
     }
     start() {
         this.rl = readline.createInterface({

package/connectors/asana-mcp/tsconfig.json

@@ -1,13 +1,13 @@
 {
   "compilerOptions": {
-    "target": "ES2020",
+    "target": "ES2022",
     "module": "commonjs",
     "rootDir": "src",
     "outDir": "dist",
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "lib": ["ES2020", "DOM"]
+    "lib": ["ES2022", "DOM"]
   },
   "include": ["src"]
 }

package/connectors/hubspot-mcp/dist/index.js

@@ -51,6 +51,7 @@ const MCP_ERROR_CODES = {
     SERVER_NOT_INITIALIZED: -32002,
 };
 class HubSpotClient {
+    config;
     constructor(config) {
         this.config = config;
     }
@@ -166,11 +167,13 @@ class HubSpotClient {
     }
 }
 class StdioMCPServer {
+    toolProvider;
+    serverInfo;
+    initialized = false;
+    rl = null;
     constructor(toolProvider, serverInfo) {
         this.toolProvider = toolProvider;
         this.serverInfo = serverInfo;
-        this.initialized = false;
-        this.rl = null;
     }
     start() {
         this.rl = readline.createInterface({

package/connectors/hubspot-mcp/tsconfig.json

@@ -1,13 +1,13 @@
 {
   "compilerOptions": {
-    "target": "ES2020",
+    "target": "ES2022",
     "module": "commonjs",
     "rootDir": "src",
     "outDir": "dist",
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "lib": ["ES2020", "DOM"]
+    "lib": ["ES2022", "DOM"]
   },
   "include": ["src"]
 }

package/connectors/jira-mcp/dist/index.js

@@ -51,6 +51,7 @@ const MCP_ERROR_CODES = {
     SERVER_NOT_INITIALIZED: -32002,
 };
 class JiraClient {
+    config;
     constructor(config) {
         this.config = config;
     }
@@ -241,11 +242,13 @@ function deriveNextCursor(data) {
     return undefined;
 }
 class StdioMCPServer {
+    toolProvider;
+    serverInfo;
+    initialized = false;
+    rl = null;
     constructor(toolProvider, serverInfo) {
         this.toolProvider = toolProvider;
         this.serverInfo = serverInfo;
-        this.initialized = false;
-        this.rl = null;
     }
     start() {
         this.rl = readline.createInterface({

package/connectors/jira-mcp/tsconfig.json

@@ -1,13 +1,13 @@
 {
   "compilerOptions": {
-    "target": "ES2020",
+    "target": "ES2022",
     "module": "commonjs",
     "rootDir": "src",
     "outDir": "dist",
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "lib": ["ES2020", "DOM"]
+    "lib": ["ES2022", "DOM"]
   },
   "include": ["src"]
 }

package/connectors/linear-mcp/dist/index.js

@@ -51,6 +51,7 @@ const MCP_ERROR_CODES = {
     SERVER_NOT_INITIALIZED: -32002,
 };
 class LinearClient {
+    config;
     constructor(config) {
         this.config = config;
     }
@@ -156,11 +157,13 @@ class LinearClient {
     }
 }
 class StdioMCPServer {
+    toolProvider;
+    serverInfo;
+    initialized = false;
+    rl = null;
     constructor(toolProvider, serverInfo) {
         this.toolProvider = toolProvider;
         this.serverInfo = serverInfo;
-        this.initialized = false;
-        this.rl = null;
     }
     start() {
         this.rl = readline.createInterface({

package/connectors/linear-mcp/tsconfig.json

@@ -1,13 +1,13 @@
 {
   "compilerOptions": {
-    "target": "ES2020",
+    "target": "ES2022",
     "module": "commonjs",
     "rootDir": "src",
     "outDir": "dist",
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "lib": ["ES2020", "DOM"]
+    "lib": ["ES2022", "DOM"]
   },
   "include": ["src"]
 }

package/connectors/okta-mcp/dist/index.js

@@ -51,6 +51,7 @@ const MCP_ERROR_CODES = {
     SERVER_NOT_INITIALIZED: -32002,
 };
 class OktaClient {
+    config;
     constructor(config) {
         this.config = config;
     }
@@ -153,11 +154,13 @@ class OktaClient {
     }
 }
 class StdioMCPServer {
+    toolProvider;
+    serverInfo;
+    initialized = false;
+    rl = null;
     constructor(toolProvider, serverInfo) {
         this.toolProvider = toolProvider;
         this.serverInfo = serverInfo;
-        this.initialized = false;
-        this.rl = null;
     }
     start() {
         this.rl = readline.createInterface({

package/connectors/okta-mcp/tsconfig.json

@@ -1,13 +1,13 @@
 {
   "compilerOptions": {
-    "target": "ES2020",
+    "target": "ES2022",
     "module": "commonjs",
     "rootDir": "src",
     "outDir": "dist",
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "lib": ["ES2020", "DOM"]
+    "lib": ["ES2022", "DOM"]
   },
   "include": ["src"]
 }

package/connectors/resend-mcp/README.md

@@ -0,0 +1,29 @@
+# Resend MCP Connector (MVP)
+
+This connector exposes Resend email APIs to CoWork OS through MCP tools.
+
+## Requirements
+
+Provide credentials via environment variables:
+
+- `RESEND_API_KEY` (required)
+- `RESEND_BASE_URL` (optional, default: `https://api.resend.com`)
+
+## Build & Run
+
+```bash
+npm install
+npm run build
+npm start
+```
+
+## Tools
+
+- `resend.health`
+- `resend.send_email`
+- `resend.list_webhooks`
+- `resend.create_webhook`
+- `resend.delete_webhook`
+- `resend.get_received_email`
+
+See `docs/enterprise-connectors.md` for the connector contract.