OpenBot

Summary

Release history

1. v0.0.7Sep 4, 2026 · issue 018

   OpenBot v0.0.7 adds conversation-crafted skills and coworkers, standing instructions, auto-named chats, and multi-arch published service images.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.0.7 https://github.com/CopilotKit/OpenBot.git
   # already have the repo? check out this version:
   $ git checkout v0.0.7

   └──▷ TRY IT
   Pull pre-built multi-arch service images instead of building Chromium and friends from source on every machine — saves several minutes per host.
   copy

   $ export COMPUTER_IMAGE=ghcr.io/copilotkit/openbot-agent-computer@sha256:<digest>
   export SUPERVISOR_IMAGE=ghcr.io/copilotkit/openbot-supervisor@sha256:<digest>
   export BOT_IMAGE=ghcr.io/copilotkit/openbot-bot@sha256:<digest>
   export LANGGRAPH_IMAGE=ghcr.io/copilotkit/openbot-langgraph@sha256:<digest>
   export SERVER_IMAGE=ghcr.io/copilotkit/openbot-server@sha256:<digest>
   export IMAGE_PULL_POLICY=missing
   docker compose up

   • ›Adds COMPUTER_IMAGE, SUPERVISOR_IMAGE, BOT_IMAGE, LANGGRAPH_IMAGE, and SERVER_IMAGE environment variables to pull pre-built service images from ghcr.io/copilotkit/openbot-<service> instead of building from source; set IMAGE_PULL_POLICY=missing to activate pull mode.
   • ›Publishes five ghcr.io/copilotkit/openbot-<service> images per release, each with linux/amd64 and linux/arm64 support and build provenance attestations, with digests pinned in container-images.json.
   • ›Published service images now use zstd compression instead of gzip, reducing agent-computer from 962 MB to 886 MB on the wire with significantly faster decompression; requires a zstd-capable client (Podman or current containerd).
   • ›Ships a skill-creator skill granted to general-assistant with four tools for listing, reading, and saving skills via POST /api/plugins/skills, enabling skills to be authored interactively in conversation rather than typed into the /skills form.
   • ›Ships a bot-creator skill granted to general-assistant with tools for listing, reading, and saving coworkers via the same person-facing endpoints, enabling coworkers to be created interactively in conversation.

   +4 moreshow less

   • ›Adds a standing-instructions box in Settings — one text field per person, spliced into every built-in coworker's prompt on every run including overnight routines, stored under migration 0026_user_instructions.
   • ›Automatically names conversations from their opening exchange (up to 600 code points) using the model named by tenantPackage.model, replacing the last-message preview in the channel roster's second line.
   • ›Adds visibility field to bot.created and bot.updated audit rows on every edit, so the trail shows who a coworker was accessible to at every point in time.
   • ›Adds a 400 response naming the agentId field when POST /api/channels/:id/activity receives a blank or whitespace-only value, replacing the previous misleading 404 Agent not found.
   • ›Adds COMPUTER_IMAGE, SUPERVISOR_IMAGE, BOT_IMAGE, LANGGRAPH_IMAGE, and SERVER_IMAGE environment variables to pull pre-built service images from ghcr.io/copilotkit/openbot-<service> instead of building from source; set IMAGE_PULL_POLICY=missing to activate pull mode.
   • ›Publishes five ghcr.io/copilotkit/openbot-<service> images per release, each with linux/amd64 and linux/arm64 support and build provenance attestations, with digests pinned in container-images.json.
   • ›Ships a skill-creator skill granted to general-assistant with four tools for listing, reading, and saving skills via POST /api/plugins/skills, enabling skills to be authored interactively in conversation rather than typed into the /skills form.
   • ›Ships a bot-creator skill granted to general-assistant with tools for listing, reading, and saving coworkers via the same person-facing endpoints, enabling coworkers to be created interactively in conversation.
   • ›Adds a standing-instructions box in Settings — one text field per person, spliced into every built-in coworker's prompt on every run including overnight routines, stored under migration 0026_user_instructions.

   +1 moreshow less

   • ›Automatically names conversations from their opening exchange (up to 600 code points) using the model named by tenantPackage.model, replacing the last-message preview in the channel roster's second line.

   3 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !Service images are now published as zstd-compressed layers rather than gzip; any host pulling ghcr.io/copilotkit/openbot-<service> images must use a zstd-capable runtime (Podman or current containerd) — older Docker daemons without zstd support will fail to pull.
2. v0.0.6Sep 4, 2026 · issue 018

   OpenBot v0.0.6 simplifies credentials to three env vars, adds MCPMCPModel Context Protocol, an open standard from Anthropic that lets an AI model call external tools and data sources through a uniform interface, so cyber tools can expose capabilities directly to LLM-based agents. auth scheme passthrough, and ships a coworker wizard UI.

   └──▷ GET THIS VERSION
   copy

   $ git clone --branch v0.0.6 https://github.com/CopilotKit/OpenBot.git
   # already have the repo? check out this version:
   $ git checkout v0.0.6

   └──▷ USE IT
   Minimal environment for a managed-Intelligence deployment — only three credentials needed now that COPILOTKIT_LICENSE_TOKEN is removed.
   .envcopy

   INTELLIGENCE_API_URL=https://intelligence.example.com
   INTELLIGENCE_GATEWAY_WS_URL=wss://intelligence.example.com
   INTELLIGENCE_API_KEY=sk-live-...

   Pass a Basic-auth MCP server credential with its scheme so it reaches the upstream API correctly instead of being sent as Bearer.
   📍# In the Plugins UI, set the token field to the full credential string: # Basic dXNlcjpwYXNzd29yZA== # A bare token is still forwarded as Bearer with no change needed.
   • ›Removes the COPILOTKIT_LICENSE_TOKEN requirement; deployments now need only INTELLIGENCE_API_URL, INTELLIGENCE_GATEWAY_WS_URL, and INTELLIGENCE_API_KEY to start.
   • ›Makes secrets.licenseToken optional in the Helm chart so managed-Intelligence installs are no longer refused at helm install.
   • ›Treats an empty PORT or SERVER_PORT as unset rather than parsing to NaN, defaulting to port 4300, and refusing non-numeric or out-of-range values instead of silently binding a wrong port.
   • ›Respects the auth scheme prefix in custom MCP server tokens — a token beginning with Basic or Bearer is now forwarded as written; bare tokens still default to Bearer.
   • ›Adds three structured log keys for OAuth connection failures — oauth-token-endpoint-unreachable, oauth-registration-endpoint-unreachable, and oauth-connection-not-recorded — plus oauth-token-endpoint-unusable for catalogue-side faults.

   +4 moreshow less

   • ›Adds TRUSTED_ORIGINS fallback to port 3010 (the actual app port) instead of http://localhost:3000, preventing broken OAuth redirects on deployments that leave the variable unset.
   • ›Redacts toolResult and toolArguments (camelCase MCP/computer-tool spellings) in audit_events.payload in addition to the already-redacted tool_result and tool_arguments.
   • ›Introduces a three-step coworker creation wizard (identity, visibility, endpoint) and replaces the side panel with a full coworker management dialog accessible from any surface, including mobile.
   • ›Moves routines out of the global sidebar and into each coworker's own dialog section, with run-state chips showing channel, last-run outcome, and next scheduled time.
   • ›Adds three structured log keys for OAuth connection failures — oauth-token-endpoint-unreachable, oauth-registration-endpoint-unreachable, and oauth-connection-not-recorded — plus oauth-token-endpoint-unusable for catalogue-side faults.
   • ›Introduces a three-step coworker creation wizard (identity, visibility, endpoint) and replaces the side panel with a full coworker management dialog accessible from any surface, including mobile.

   7 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !COPILOTKIT_LICENSE_TOKEN is no longer required and is ignored for managed-Intelligence deployments; the required credentials are now INTELLIGENCE_API_URL, INTELLIGENCE_GATEWAY_WS_URL, and INTELLIGENCE_API_KEY.
   • !The global /routines sidebar entry is removed; routines are now managed inside each coworker's dialog (direct links to /routines still resolve).