hkuds--openharness/RELEASE_NOTES_v0.1.8.md

v0.1.8 — Providers, ohmo Feishu Groups, and Safer Remotes

OpenHarness v0.1.8 is a stabilization and provider-expansion release. It adds more first-class provider workflows, improves ohmo's Feishu group experience, hardens remote-channel security, and fixes several Windows/MCP reliability issues.

Highlights

• New provider workflows

  • Added NVIDIA NIM as a built-in OpenAI-compatible provider using NVIDIA_API_KEY.
  • Added ModelScope Inference API support.
  • Added Qwen (DashScope), MiniMax, and Gemini provider profiles.
  • Improved OpenAI-compatible API behavior, including explicit bearer authorization headers and <think> block filtering for compatible streaming responses.

• ohmo Feishu group support

  • Added Feishu managed group creation flow for ohmo.
  • Added gateway-scoped provider/model commands for chat-based operation.
  • Improved group routing and mention policy so ohmo responds in shared Feishu groups only when explicitly addressed.
  • Hardened Feishu attachment filename handling.

• Security and remote-channel hardening

  • Kept sensitive config/auth/provider/model/ship commands local-only by default in remote channels.
  • Kept bridge commands local-only by default.
  • Added coverage for bridge spawn blocking and remote gateway security behavior.
  • Rejected path traversal names during plugin uninstall.

• Windows and shell reliability

  • Fixed Windows agent/subagent spawning by direct-executing teammate argv instead of shell-wrapping Python paths.
  • Windows shell resolution now skips discovered bash.exe binaries that cannot actually run commands, falling back to PowerShell/cmd.
  • Improved Windows gateway process lifecycle handling.
  • Avoided shell execution when opening browsers on Windows.

• MCP, tools, and stability

  • MCP startup now isolates failed servers instead of aborting the whole OpenHarness startup.
  • Fixed subprocess stderr pipe deadlocks in grep/glob/bash/session runner paths.
  • Bounded large tool results in conversation history and improved compaction under large/vision contexts.
  • Improved skill frontmatter parsing with YAML safe_load for bundled and user skills.

• TUI and UX fixes

  • Restored raw DEL backspace handling for macOS Terminal-style environments.
  • Added better slash-command completion, markdown table rendering, spinner behavior, and escape interruption.
  • Added image-to-text fallback support for text-only models and --vision-model override.

External contributors

Thanks to the external contributors whose PRs are included in this release:

• @Litianhui888 — MCP startup isolation (#237)
• @Hinotoi-agent — remote command security hardening (#232, #209, #208, #198, #197)
• @nsxdavid — Windows agent spawn fix (#231)
• @voidborne-d — bundled skill frontmatter parsing (#229)
• @Mcy0618 — image-to-text fallback and ModelScope support (#227, #224)
• @WANG-Guangxin — invalid regex fallback fix (#219)
• @glitch-ux — Windows browser auth safety, async coordinator draining, autopilot shell safety, hook events (#217, #200, #188, #170)
• @Escapingbug — Windows gateway lifecycle and Telegram proxy config fixes (#193, #192)
• @ZevGit — Qwen provider profile (#207)
• @yl-jiang — subprocess stderr deadlock fixes and OpenAI-compatible think-block filtering (#205, #174)
• @he-yufeng — TUI slash-command completion polish (#185)
• @powAu3 — raw DEL backspace fix (#182)
• @flobo3 — shell subprocess stdin default fix (#179)

Install

pip install --upgrade openharness-ai==0.1.8

Or run the installer from the repository docs.