agentscope-ai/QwenPaw v1.1.8 on GitHub

✨ Added

Plugins & Tools

Official Plugin Distribution: Browse and download official plugins from the website, or install them with one click in the console Plugin Manager (#4482)
QwenPaw Pet: Desktop pet companion plugin with animated pet window (#4418, #4516)
CloudPaw — Alibaba Cloud Deployment: New plugin with multi-agent orchestration, IaC-driven cloud provisioning, and A2A streaming integration with Alibaba Cloud Skills Hub (#4362, #4423, #4506, #4524)
Browser Robustness: Improved browser stability with crash recovery, idle timeout protection, and automatic cleanup on exit (#4306, #4350)
Browser Tab Metadata: tabs action now returns the URL and title of each open tab (#4438)

Chat & Console

Inbox Batch Operations: Redesigned Inbox with batch select and batch delete for managing messages more efficiently (#4358, #4493)
Pinned Chat History Drawer: Pin the session drawer to keep it open alongside the chat (#4414, #4416, #4517)

Models & Providers

Custom HTTP Headers & Auth Mode: Custom headers editor for all providers with auth mode selection (API Key vs Bearer Token) (#4413)
Per-Model Token Limits: max_tokens and max_input_length are now configured per model in Settings → Models (#4417)

Agent System

/make-skill Command: A new magic command for turning the current chat session into a reusable skill (#4282)
Indonesian Agent Templates: Agent persona markdown templates and Asia/Jakarta timezone (#4287)
Cron Job Timeout: Configurable timeout for cron jobs (default 120s) (#4425)

Security

Skill Path Safety: Prevent path traversal attacks in skill directory operations (#4335)
Backup Trust Controls: Verify backup integrity on import/restore with trust confirmation dialogs, and strengthen remote access controls (#4409, #4429)
AgentMd Path Traversal Prevention: Prevent path traversal in agent memory file operations (#4511)
Plugin API Auth: Plugin management APIs now require authentication (#4513)

Channels

Matrix E2EE Verification: Password and access-token login with E2EE toggle and SAS device verification (#4120)
Telegram Streaming Output: Real-time streaming replies with reasoning indicator support (#4318)
DingTalk Streaming Cards: Real-time streaming replies via AI Card (Card message mode only) (#4420)
Feishu CardKit Streaming: Real-time streaming replies via CardKit (#4480)

Console Header Navigation: Consolidated header links into a Documentation dropdown with Tutorial, Feature Demos, Changelog, and FAQ entries (#3875)
Feishu/Lark QR Code Domain: QR code API accepts query parameters (#4504)
Stream Task Timeout: Increased from 300 to 1800 seconds for long-running streamed agent tasks (#4510)

Channels

WeCom Duplicate Placeholder: Suppress duplicate "Thinking…" stream on rapid consecutive messages (#4427)
WeChat Poll Shutdown: Fix crash-on-exit and tight error loops in the WeChat polling thread (#4490)
QQ Reconnect Loop: Prevent high-frequency reconnect on IP whitelist rejection (#4503)

Skills

QA Agent Docs Packaging: QA agent now works correctly in all install methods (pip, Docker, desktop) — previously some docs might be missing (#4280)
Skill Hub URL Validation: Fixed skill import failing for URLs with www. prefix (#4359)

Providers & Models

Per-Model Rate Limiter: A rate limit on one model no longer blocks requests to other models (#4487)
Per-Model Token Usage: Token usage summaries now include a per-model breakdown with prompt/completion token counts (#4476)

Console & UI

SSE Connection Leak: Fixed SSE connections not closing on page navigation, which could exhaust browser connection limits (#4488)
Cron Validation Errors: Cron creation/update returns localized, actionable error messages instead of generic server errors (#4495)
Session Memory Persistence: /mission and /skill info responses are now persisted to session memory so they survive page reload (#4523)

Website Feature Demos: Docs demo gallery with walkthrough videos for skills, doctor, and mission mode (#4507)

Full Changelog: v1.1.7...v1.1.8