High-value release highlights from Homebrew stable and dev tracks.
Stable channelbrew install sciclaw
Production track. Current public stable: v0.3.4.
Dev channelbrew install sciclaw-dev
Preview track for upcoming features and fixes. Current preview: v0.3.2-dev.1.
stablev0.3.4
May 5, 2026
Curated workspace memory. Added the dedicated remember tool for durable project facts: method decisions, data provenance, project conventions, canonical artifacts, known recurring issues, open questions, and collaborator preferences.
MEMORY.md guardrails. Generic write_file, edit_file, and append_file calls now refuse direct writes to memory/MEMORY.md. Obvious shell bypasses such as >> memory/MEMORY.md and tee -a MEMORY.md are blocked too.
No more execution-log memory. Routine successful runs, validation summaries, row counts, file sizes, and command transcripts stay in session history, jobs, hooks, artifacts, or output files instead of being injected as long-term memory on every turn.
Cleaner workspace templates.AGENTS.md, HOOKS.md, and the starter MEMORY.md template now describe memory as curated durable context, not runtime state or an activity ledger.
Public explanation. Added the Memory Is Not a Log File blog post and the curated workspace memory RFC.
Release hygiene. Re-ran Go formatting so GitHub build checks pass from the tagged release commit.
Fixed email delivery on self-hosted Resend instances. The from field now sends the bare email address instead of wrapping it in a display name, which self-hosted builds reject.
Addon system. sciClaw can now host optional capabilities as installable addons. Addons are separate git repos with a manifest, a sidecar binary, and optional install scripts. Ten CLI commands: install, enable, disable, uninstall, upgrade, verify, rollback, sbom, list, status.
Gateway reconciler. The gateway automatically spawns sidecar processes for enabled addons on startup and converges live state against the on-disk registry every 10 seconds. CLI changes take effect without a gateway restart.
Web UI addon tabs. The sidebar dynamically injects tabs for each enabled addon. Clicking a tab loads the addon's own React UI in an iframe, proxied over the addon's Unix socket.
User identity endpoint.GET /api/core/users returns the union of profile store entries and routing rule allowed senders. Addon UIs source a dropdown from this instead of accepting freeform names.
Two reference addons (private repos under the sciclaw org):
sciclaw-addon-webtop: per-user Ubuntu XFCE browser desktops via linuxserver/webtop and Docker. Shared workspace mounts. React admin panel with the identity dropdown.
sciclaw-addon-jupyter: per-user Jupyter Lab with token auth. Tokens rotate on restart. One-shot URL display with explicit copy/open actions. React admin panel.
Security hardening. Two full review passes closed 13 findings: proxy path allowlisting, mount source validation against an allowlist, Docker flag injection blocked via -- terminators, hook payload stripped of per-chat ACLs, socket 0600 enforced, concurrent installs serialized with file locks, upgrade failures roll back the working tree, rollback stops and restarts the live sidecar, symlink escape blocked in UI handlers.
Hook pipeline. Routing changes fire routing_changed hooks to subscribed addons via the gateway's reload watcher. Profile updates fire profile_updated. The reload watcher now starts unconditionally so addons receive hooks even when routing is enabled at runtime.
Cross-process proxy. The web server (separate process from the gateway) can proxy addon UIs by reading the on-disk registry and constructing a client for the addon's Unix socket, so the standard sciclaw gateway + sciclaw web two-process deployment works with addons.
SBOM honesty. The sciclaw addon sbom output now reports verification_status: not_implemented instead of the old misleading signature_verified: false field. GPG signing is not yet wired into the install flow.
Rewrote SOUL.md from corporate bullet points to direct, opinionated prose: "I am sciClaw. I work with scientists, not for them."
Hotfix for Codex provider streaming. The OpenAI backend delivers content via output_item.done events but the response.completed payload arrives with an empty output array. sciClaw now collects output items from stream events and injects them into the final response.
Fixed Codex provider empty responses caused by relying on ResponseCompletedEvent.Response.Output instead of collecting from ResponseOutputItemDoneEvent stream events.
Added per-user answer theme profiles and the /theme Discord slash command. Scientists pick Clear, Formal, or Brief; the agent adjusts its response style per user across all channels.
Added answer theme definitions to the AGENTS.md workspace template so new workspaces get Clear/Formal/Brief descriptions out of the box.
Surgical documentation update across all five doc surfaces (docs.html, README, security.html, philosophy.html, pubmed SKILL.md) for the v0.2.7-dev.1 feature set.
Reworked Discord into a queue-aware workflow with background job cards, explicit /btw read-only tasks, and a real /skill slash command with autocomplete.
Added typed pubmed_search, pubmed_fetch, and weather_forecast tools so common scientific and utility lookups stop depending on brittle page scraping.
Added Claude.ai oat-token bridge support for Anthropic users and hardened the bridge against empty direct-answer failures.