v1.1.8

## ✨ Added

**Plugins & Tools**

- **Official Plugin Distribution**: Browse and download official plugins from the website, or install them with one click in the console Plugin Manager ([#4482](https://github.com/agentscope-ai/QwenPaw/pull/4482))
- **QwenPaw Pet**: Desktop pet companion plugin with animated pet window ([#4418](https://github.com/agentscope-ai/QwenPaw/pull/4418), [#4516](https://github.com/agentscope-ai/QwenPaw/pull/4516))
- **CloudPaw — Alibaba Cloud Deployment**: New plugin with multi-agent orchestration, IaC-driven cloud provisioning, and A2A streaming integration with Alibaba Cloud Skills Hub ([#4362](https://github.com/agentscope-ai/QwenPaw/pull/4362), [#4423](https://github.com/agentscope-ai/QwenPaw/pull/4423), [#4506](https://github.com/agentscope-ai/QwenPaw/pull/4506), [#4524](https://github.com/agentscope-ai/QwenPaw/pull/4524))
- **Browser Robustness**: Improved browser stability with crash recovery, idle timeout protection, and automatic cleanup on exit ([#4306](https://github.com/agentscope-ai/QwenPaw/pull/4306), [#4350](https://github.com/agentscope-ai/QwenPaw/pull/4350))
- **Browser Tab Metadata**: `tabs` action now returns the URL and title of each open tab ([#4438](https://github.com/agentscope-ai/QwenPaw/pull/4438))

**Chat & Console**

- **Inbox Batch Operations**: Redesigned Inbox with batch select and batch delete for managing messages more efficiently ([#4358](https://github.com/agentscope-ai/QwenPaw/pull/4358), [#4493](https://github.com/agentscope-ai/QwenPaw/pull/4493))
- **Pinned Chat History Drawer**: Pin the session drawer to keep it open alongside the chat ([#4414](https://github.com/agentscope-ai/QwenPaw/pull/4414), [#4416](https://github.com/agentscope-ai/QwenPaw/pull/4416), [#4517](https://github.com/agentscope-ai/QwenPaw/pull/4517))

**Models & Providers**

- **Custom HTTP Headers & Auth Mode**: Custom headers editor for all providers with auth mode selection (API Key vs Bearer Token) ([#4413](https://github.com/agentscope-ai/QwenPaw/pull/4413))
- **Per-Model Token Limits**: `max_tokens` and `max_input_length` are now configured per model in Settings → Models ([#4417](https://github.com/agentscope-ai/QwenPaw/pull/4417))

**Agent System**

- **`/make-skill` Command**: A new magic command for turning the current chat session into a reusable skill ([#4282](https://github.com/agentscope-ai/QwenPaw/pull/4282))
- **Indonesian Agent Templates**: Agent persona markdown templates and `Asia/Jakarta` timezone ([#4287](https://github.com/agentscope-ai/QwenPaw/pull/4287))
- **Cron Job Timeout**: Configurable timeout for cron jobs (default 120s) ([#4425](https://github.com/agentscope-ai/QwenPaw/pull/4425))

**Security**

- **Skill Path Safety**: Prevent path traversal attacks in skill directory operations ([#4335](https://github.com/agentscope-ai/QwenPaw/pull/4335))
- **Backup Trust Controls**: Verify backup integrity on import/restore with trust confirmation dialogs, and strengthen remote access controls ([#4409](https://github.com/agentscope-ai/QwenPaw/pull/4409), [#4429](https://github.com/agentscope-ai/QwenPaw/pull/4429))
- **AgentMd Path Traversal Prevention**: Prevent path traversal in agent memory file operations ([#4511](https://github.com/agentscope-ai/QwenPaw/pull/4511))
- **Plugin API Auth**: Plugin management APIs now require authentication ([#4513](https://github.com/agentscope-ai/QwenPaw/pull/4513))

**Channels**

- **Matrix E2EE Verification**: Password and access-token login with E2EE toggle and SAS device verification ([#4120](https://github.com/agentscope-ai/QwenPaw/pull/4120))
- **Telegram Streaming Output**: Real-time streaming replies with reasoning indicator support ([#4318](https://github.com/agentscope-ai/QwenPaw/pull/4318))
- **DingTalk Streaming Cards**: Real-time streaming replies via AI Card (Card message mode only) ([#4420](https://github.com/agentscope-ai/QwenPaw/pull/4420))
- **Feishu CardKit Streaming**: Real-time streaming replies via CardKit ([#4480](https://github.com/agentscope-ai/QwenPaw/pull/4480))

## 🔄 Changed

- **Console Header Navigation**: Consolidated header links into a Documentation dropdown with Tutorial, Feature Demos, Changelog, and FAQ entries ([#3875](https://github.com/agentscope-ai/QwenPaw/pull/3875))
- **Feishu/Lark QR Code Domain**: QR code API accepts query parameters ([#4504](https://github.com/agentscope-ai/QwenPaw/pull/4504))
- **Stream Task Timeout**: Increased from 300 to 1800 seconds for long-running streamed agent tasks ([#4510](https://github.com/agentscope-ai/QwenPaw/pull/4510))


## 🐛 Fixed

**Channels**

- **WeCom Duplicate Placeholder**: Suppress duplicate "Thinking…" stream on rapid consecutive messages ([#4427](https://github.com/agentscope-ai/QwenPaw/pull/4427))
- **WeChat Poll Shutdown**: Fix crash-on-exit and tight error loops in the WeChat polling thread ([#4490](https://github.com/agentscope-ai/QwenPaw/pull/4490))
- **QQ Reconnect Loop**: Prevent high-frequency reconnect on IP whitelist rejection ([#4503](https://github.com/agentscope-ai/QwenPaw/pull/4503))

**Skills**

- **QA Agent Docs Packaging**: QA agent now works correctly in all install methods (pip, Docker, desktop) — previously some docs might be missing ([#4280](https://github.com/agentscope-ai/QwenPaw/pull/4280))
- **Skill Hub URL Validation**: Fixed skill import failing for URLs with `www.` prefix ([#4359](https://github.com/agentscope-ai/QwenPaw/pull/4359))

**Providers & Models**

- **Per-Model Rate Limiter**: A rate limit on one model no longer blocks requests to other models ([#4487](https://github.com/agentscope-ai/QwenPaw/pull/4487))
- **Per-Model Token Usage**: Token usage summaries now include a per-model breakdown with prompt/completion token counts ([#4476](https://github.com/agentscope-ai/QwenPaw/pull/4476))

**Console & UI**

- **SSE Connection Leak**: Fixed SSE connections not closing on page navigation, which could exhaust browser connection limits ([#4488](https://github.com/agentscope-ai/QwenPaw/pull/4488))
- **Cron Validation Errors**: Cron creation/update returns localized, actionable error messages instead of generic server errors ([#4495](https://github.com/agentscope-ai/QwenPaw/pull/4495))
- **Session Memory Persistence**: `/mission` and `/skill` info responses are now persisted to session memory so they survive page reload ([#4523](https://github.com/agentscope-ai/QwenPaw/pull/4523))

## 📝 Documentation

- **Website Feature Demos**: Docs demo gallery with walkthrough videos for skills, doctor, and mission mode ([#4507](https://github.com/agentscope-ai/QwenPaw/pull/4507))


## New Contributors
* @Morxi made their first contribution in https://github.com/agentscope-ai/QwenPaw/pull/4120

**Full Changelog**: https://github.com/agentscope-ai/QwenPaw/compare/v1.1.7...v1.1.8