Development Update — March 5, 2026
Big push this week with major features landing across the stack. Here’s what’s new:
Discourse Forum Integration — 51 Native Tools
Full forum management is now built into OpenPawz. Connect your Discourse community and let your agents:
- Topics: create, list, pin, archive, close, invite users, set auto-close timers
- Posts: reply, edit, delete, like, toggle wiki mode, view revision history
- Categories: create, edit, delete, list with permissions
- Users: manage trust levels, suspend/unsuspend, silence, send private messages
- Admin: site settings, statistics, badges (create/grant/revoke), backups, reports
Setup: Settings → Integrations → Discourse — enter your forum URL, API key, and bot username.
The integration uses REST API polling, so no webhooks or public URLs required.
Tesseract 4D Activity Indicator
The legacy loading dots have been replaced with a rotating 4D hypercube that reflects agent state:
| State | Animation | Colour |
|---|---|---|
| Idle | Slow drift | Blue-purple |
| Thinking | Moderate spin | Purple-magenta |
| Streaming | Rapid pulse | Hot pink-orange |
| Done | Settle & collapse | Sage green |
You’ll see it in chat, the flow editor, engine status page, and inside the new context window gauge.
Unified Key Vault
Previously, OpenPawz stored 7 separate entries in macOS Keychain, prompting you multiple times on launch. Now everything is consolidated into a single encrypted JSON blob:
- Single Keychain prompt instead of 6+
- Automatic migration from legacy entries on first launch
- Thread-safe caching with double-checked locking
Security Hardening
Enterprise-grade improvements across the engine:
- OsRng (kernel CSPRNG) for all 256-bit key generation
- Zeroizing wrappers ensure key material is zeroed on drop
- Constant-time comparison for passphrase verification
- SSRF protection: blocks localhost, RFC-1918, link-local, cloud metadata endpoints
- Exec hardening: 28+ dangerous command patterns blocked
- Certificate-pinned TLS for OAuth connections
Canvas Expansion — 6 New Widget Types
The Agent Canvas now supports 16 widget types (up from 10):
| Widget | Description |
|---|---|
timeline |
Visual phase/milestone timeline |
checklist |
Interactive task list with progress bar |
gauge |
SVG radial meter with animated entrance |
countdown |
Live-ticking countdown to a target date |
image |
Image display with caption |
embed |
Sandboxed iframe for HTML/CSS/JS |
The embed widget is especially powerful — agents can now use Three.js, Chart.js, D3, p5.js, or any CDN library inside canvas dashboards.
Profile Personalization
Click your avatar on the Today page to upload a profile picture. Inline name editing with personalized greetings. Images are resized to 128×128 and compressed before storing locally.
Other Fixes
- Safe UTF-8 truncation prevents panic on multi-byte characters
- Markdown renderer handles streaming code blocks and GFM tables
- Canvas pop-out windows save/restore geometry
- Discord channel setup now includes Server (Guild) ID field
Full commit history on GitHub. Questions? Drop them in Questions.