chore(release): cut v1.10.2

[github-actions]

Automated release PR for v1.10.2. Merging this PR will automatically tag the release and publish it.

---

---

v1.10.2 — Transaction Granularity & Sandbox Stability Enhancements

What's New

Core Features

• Database ContextVar DAO Layer & Transaction Granularity Optimization: Introduced a ContextVar-based DAO abstraction, leading to cleaner, safer transaction handling throughout the application. This reduces risk of cross-request interference and improves backend reliability in concurrent environments.
• Expanded Soul.md Capacity for Agent Context: Increased the character limit for soul.md in agent context-building from 2,000 to 30,000 characters, allowing for richer agent context and more complex behavior modeling.

Optimizations

• Sandbox Process Tree Cleanup on Timeout: Significantly improved bwrap sandbox process cleanup to ensure all subprocesses are reliably terminated after execution timeout. This prevents zombie processes and resource leaks in environments with high code execution activity.
• Tool Call Pairing Integrity in LLM Routing: Enhanced LLM payload handling to ensure tool call pairs are always valid, preventing mismatches during agent tool calling and reducing backend errors.
• Workspace Deletion Permissions Refinement: Clarified and enforced workspace deletion permissions, ensuring only authorized users may delete workspaces or workspace files.

UI/UX Enhancements

• Sidebar Focus List Expansion Option: Users can now view more than 12 items in the sidebar Focus list, with an expand option for easier navigation.
• Chat Timestamp Localization: Chat message timestamps now strictly align with the selected application language, improving global user experience and clarity.

Bug Fixes

• A2A Infinite Loop Prevention: Addressed an issue where agent-to-agent message triggers could recurse infinitely, ensuring stable message routing and preventing backend exhaustion.
• System Email Validation for Invitations: Added pre-validation for system email addresses before sending invites, preventing invalid invitation cycles and reducing bounce rates.
• Agent Settings Permissions Consistency: Fixed permission handling for agent settings, preventing unauthorized edits and ensuring consistent access control.
• Browser Extract Schema Compatibility: Migrated browser extract schema to use Pydantic RootModel[Any], resolving SDK typing issues for proper API serialization/deserialization.
• Workspace File Delete Authorization: Ensured workspace file deletions honor manager permissions, fixing cases where unauthorized deletes could occur.
• History Message Order Correction: Fixed double-reverse logic in chat gateway message ordering, restoring correct transcript sequencing in chat histories.

Upgrade Guide

Docker Deployment

git pull origin main

cd deploy
# Rebuild and restart services
docker compose down && docker compose up -d --build

Source Deployment

git pull origin main

cd backend
cd ..

cd frontend
npm install
npm run build
cd ..

./restart.sh

Kubernetes / Helm

helm upgrade clawith helm/clawith/ -f values.yaml

Notes

• Database Transaction Logic: Custom integrations or plugins interacting with the backend database should review transaction scope logic for compatibility with the new ContextVar-based DAO layer.
• Sandbox Process Cleanup: No configuration changes are needed for sandbox improvements, but heavy code execution tenants may notice improved resource management.
• Soul.md Expansion: Applications or agents using large context files can now take advantage of the raised character limit for richer agent capabilities.
• No manual database migration required: Schema migrations run automatically on application startup.

---