lobehub/lobehub v2.1.49

🚀 Release v2.1.49

on GitHub

📦 Release v2.1.49

This release was automatically published from PR #13716.

Changes

See PR description: #13716

Commit Message

📦 Weekly Release 20260410

This release includes 67 commits. Key user-facing updates below.

New Features and Enhancements

• Introduced Prompt Rewrite & Translate feature for assisted input editing.
• Added Skill Panel with dedicated skills tab in the skill store and fixed skill icon rendering.
• Introduced lh notify CLI command for external agent callbacks.
• Added migrate openclaw CLI command.
• Added GraphAgent and agentFactory for graph-driven agent execution (experimental).
• New topic auto-creation every 4 hours for long-running sessions.

Models and Provider Expansion

• Added a new provider: StreamLake (快手万擎).
• Added GLM-5.1 model support with Kimi CodingPlan fixes.
• Added Seedance 2.0 & Seedance 2.0 Fast video generation models (pricing adjusted with 20% service fee).
• Expanded AIGC parameter support for image and video generation.
• Improved model type normalization for better provider compatibility.
• Multi-media and multiple connection mode support for ComfyUI integration.

Desktop Improvements

• Embedded CLI in the desktop app with PATH installation support.
• Added Electron version display in system tools settings.
• Fixed RuntimeConfig instant-apply working directory with recent list.
• Fixed desktop locale restore — now uses stored URL parameter instead of system locale.
• Improved remote re-auth for batched tRPC and clean OIDC on gateway disconnect.

Stability, Security, and UX Fixes

• Security: prevented path traversal in TempFileManager.writeTempFile; patched IDOR in addFilesToKnowledgeBase; upgraded better-auth with hardened humanIntervention requirement in builtin-tool-activator.
• Context engine: added typeof guard before .trim() calls to prevent runtime crashes.
• Agent runtime: preserved reasoning state across OpenAI providers; fixed service error serialization producing [object Object]; surfaced error reasonDetail in agent_runtime_end events.
• Knowledge Base: cleaned up vector storage when deleting knowledge bases.
• Templates: allow templates to specify policyLoad so default docs are fully injected.
• Skills: inject current agents information when lobehub_skill is activated; filter current agent out of available agents list; fix agents_documents overriding systemRole.
• Google Tools: use parametersJsonSchema for Google tool schemas.
• Web Crawler: prevent happy-dom CSS parsing crash in htmlToMarkdown.
• Mobile/UI: fixed video page icon collision, missing locale keys, model query param; hidden LocalFile actions on topic share page; allow manual close of hidden builtin tools.
• Auth: ENABLE_MOCK_DEV_USER now supported in checkAuth and openapi auth middleware.
• Sandbox: stopped using sanitizeHTMLContent to block scripts & sandbox styles.

Refactors

• Library/resource tree store for hierarchy and move sync.
• Removed legacy messageLoadingIds from chat store.
• Removed promptfoo configs and dependencies.
• OnboardingContextInjector wired into context engine.

Credits

Huge thanks to these contributors (alphabetical):

@arvinxx @canisminor1990 @cy948 @hardy-one @hezhijie0327 @Innei @MarcellGu @ONLY-yours @rdmclin2 @rivertwilight @sxjeru @tjx666