Open-source personal AI assistant
Complete changelog with every version since the first release.
Latest Version:v2026.5.24-beta.2
Total Releases:120
Source:GitHub Releases
Releases (120)
v2026.5.24-beta.2New
openclaw 2026.5.24-beta.2
May 24, 2026
- •iMessage: support thumb-approval reactions —
👍(Like tapback) resolves an approval asallow-onceand👎resolves asdeny, with the explicit-approver allowlist read fromchannels.imessage.allowFrom;allow-alwaysstays on the manual/approve <id> allow-alwaystext fallback. Mirrors the WhatsApp behavior from #85477. - •Gateway/perf: reuse process-stable channel catalog reads, avoid repeated bundled-channel boundary checks, and rotate gateway watch CPU profiles so benchmark runs do not accumulate unbounded artifacts.
- •Gateway/perf: cache stable install-record, channel-catalog, bundled-channel, and Telegram session-store metadata during process-local hot paths to reduce repeated JSON and manifest reads.
- •Gateway/perf: reuse immutable plugin metadata snapshots across startup, config, model, channel, setup, and secret metadata readers so hot paths avoid repeated plugin file stats and manifest registry reloads.
- •Talk/realtime: let WebUI and Discord voice callers ask for active OpenClaw run status, cancel, steer, or queue follow-up work while a consult is still running. (#84231) Thanks @Solvely-Colin.
- •Discord/voice: add realtime wake-name gating with agent-name defaults and raise profile bootstrap context budget for longer
USER.md/SOUL.mdfiles. - •Gateway/perf: lazy-load startup-idle plugin work, core gateway method handlers, and the embedded ACPX runtime so Gateway health and ready signals no longer wait on unused handler trees or ACPX probes.
- •Gateway/perf: cache plugin SDK public-surface alias maps and skip irrelevant macOS Linuxbrew PATH probes so Gateway startup avoids repeated filesystem walks and slow missing-directory stats.
- •Image tool: add adaptive model-aware image compression with an
agents.defaults.imageQualitypreference for choosing token-efficient, balanced, or high-detail media handling. - •Meeting Notes: add a source-only external meeting-notes plugin and SDK source-provider contract outside the core npm package, with auto-start capture config, manual transcript imports, read-only
openclaw meeting-notesCLI access, and Discord voice as the first live source. - •Meeting Notes/Discord: release channel account startup before meeting-notes auto-capture, wait for the Discord voice manager during gateway boot, and stop plugin services before channel shutdown so voice capture state remains available during startup and cleanup.
- •Docs/channels/config: add Signal
configPath, Telegram wildcard topic defaults, local-time backup archive names, Termux home fallback, include-path validation, secret-scanner-safe placeholder guidance, Gemini CLI/Antigravity media guidance, and macOS VM auto-login guidance. Thanks @NorseGaud, @yudistiraashadi, @huangqian8, @VibhorGautam, @maweibin, @tianxingleo, @IgnacioPro, and @xzcxzcyy-claw. - •Docs: clarify model-usage portability, Codex migration prerequisites, status bootstrap wording, thread-bound subagent limits, hook ownership, and config-preserving safety guidance. Thanks @aniruddhaadak80, @leno23, @TomDjerry, @matthewxmurphy, @vincentkoc, and @stablegenius49.
- •Docs: clarify README onboarding and Gateway startup paths, WhatsApp QR/408 recovery, cron output language prompts, skill advanced features, gateway upstream 403 troubleshooting, and plugin fallback override guidance. Thanks @deepujain, @Zacxxx, @Jah-yee, @neyric, @usimic, @Renu-Cybe, @BigUncle, and @SeashoreShi.
- •Docs: clarify context-pruning ratio bounds, local dashboard recovery, CLI env markers, remote onboarding token behavior, and Peekaboo Bridge permissions for subprocess agents. Thanks @ayesha-aziz123, @dishraters, @hougangdev, and @brandonlipman.
v2026.5.24-beta.1New
openclaw 2026.5.24-beta.1
May 24, 2026
- •Gateway/perf: reuse process-stable channel catalog reads, avoid repeated bundled-channel boundary checks, and rotate gateway watch CPU profiles so benchmark runs do not accumulate unbounded artifacts.
- •Gateway/perf: cache stable install-record, channel-catalog, bundled-channel, and Telegram session-store metadata during process-local hot paths to reduce repeated JSON and manifest reads.
- •Gateway/perf: reuse immutable plugin metadata snapshots across startup, config, model, channel, setup, and secret metadata readers so hot paths avoid repeated plugin file stats and manifest registry reloads.
- •Talk/realtime: let WebUI and Discord voice callers ask for active OpenClaw run status, cancel, steer, or queue follow-up work while a consult is still running. (#84231) Thanks @Solvely-Colin.
- •Discord/voice: add realtime wake-name gating with agent-name defaults and raise profile bootstrap context budget for longer
USER.md/SOUL.mdfiles. - •Gateway/perf: lazy-load startup-idle plugin work, core gateway method handlers, and the embedded ACPX runtime so Gateway health and ready signals no longer wait on unused handler trees or ACPX probes.
- •Gateway/perf: cache plugin SDK public-surface alias maps and skip irrelevant macOS Linuxbrew PATH probes so Gateway startup avoids repeated filesystem walks and slow missing-directory stats.
- •Image tool: add adaptive model-aware image compression with an
agents.defaults.imageQualitypreference for choosing token-efficient, balanced, or high-detail media handling. - •Meeting Notes: add a source-only external meeting-notes plugin and SDK source-provider contract outside the core npm package, with auto-start capture config, manual transcript imports, read-only
openclaw meeting-notesCLI access, and Discord voice as the first live source. - •Meeting Notes/Discord: release channel account startup before meeting-notes auto-capture, wait for the Discord voice manager during gateway boot, and stop plugin services before channel shutdown so voice capture state remains available during startup and cleanup.
- •Docs/channels/config: add Signal
configPath, Telegram wildcard topic defaults, local-time backup archive names, Termux home fallback, include-path validation, secret-scanner-safe placeholder guidance, Gemini CLI/Antigravity media guidance, and macOS VM auto-login guidance. Thanks @NorseGaud, @yudistiraashadi, @huangqian8, @VibhorGautam, @maweibin, @tianxingleo, @IgnacioPro, and @xzcxzcyy-claw. - •Docs: clarify model-usage portability, Codex migration prerequisites, status bootstrap wording, thread-bound subagent limits, hook ownership, and config-preserving safety guidance. Thanks @aniruddhaadak80, @leno23, @TomDjerry, @matthewxmurphy, @vincentkoc, and @stablegenius49.
- •Docs: clarify README onboarding and Gateway startup paths, WhatsApp QR/408 recovery, cron output language prompts, skill advanced features, gateway upstream 403 troubleshooting, and plugin fallback override guidance. Thanks @deepujain, @Zacxxx, @Jah-yee, @neyric, @usimic, @Renu-Cybe, @BigUncle, and @SeashoreShi.
- •Docs: clarify context-pruning ratio bounds, local dashboard recovery, CLI env markers, remote onboarding token behavior, and Peekaboo Bridge permissions for subprocess agents. Thanks @ayesha-aziz123, @dishraters, @hougangdev, and @brandonlipman.
- •Docs: clarify browser CDP diagnostics, Plugin SDK allowlist imports, status-reaction timing defaults, queue steering behavior, limited-tool troubleshooting, cron HEARTBEAT handling, Telegram multi-agent groups, Bitwarden SecretRef setup, and EasyRunner deployments. Thanks @Quratulain-bilal, @mbelinky, @Mickey-, @vancece, @xenouzik, @posigit, @surlymochan, @janaka, and @choiking.
v2026.5.22New
openclaw 2026.5.22
May 24, 2026
- •Gateway/perf: reuse process-stable channel catalog reads, avoid repeated bundled-channel boundary checks, and rotate gateway watch CPU profiles so benchmark runs do not accumulate unbounded artifacts.
- •Gateway/perf: reuse immutable plugin metadata snapshots across startup, config, model, channel, setup, and secret metadata readers so hot paths avoid repeated plugin file stats and manifest registry reloads.
- •Gateway/perf: lazy-load startup-idle plugin work, core gateway method handlers, and the embedded ACPX runtime so Gateway health and ready signals no longer wait on unused handler trees or ACPX probes.
- •Gateway/perf: cache plugin SDK public-surface alias maps and skip irrelevant macOS Linuxbrew PATH probes so Gateway startup avoids repeated filesystem walks and slow missing-directory stats.
- •Meeting Notes: add a source-only external meeting-notes plugin and SDK source-provider contract outside the core npm package, with auto-start capture config, manual transcript imports, read-only
openclaw meeting-notesCLI access, and Discord voice as the first live source. - •Docs/channels/config: add Signal
configPath, Telegram wildcard topic defaults, local-time backup archive names, Termux home fallback, include-path validation, secret-scanner-safe placeholder guidance, Gemini CLI/Antigravity media guidance, and macOS VM auto-login guidance. Thanks @NorseGaud, @yudistiraashadi, @huangqian8, @VibhorGautam, @maweibin, @tianxingleo, @IgnacioPro, and @xzcxzcyy-claw. - •Docs: clarify model-usage portability, Codex migration prerequisites, status bootstrap wording, thread-bound subagent limits, hook ownership, and config-preserving safety guidance. Thanks @aniruddhaadak80, @leno23, @TomDjerry, @matthewxmurphy, @vincentkoc, and @stablegenius49.
- •Docs: clarify README onboarding and Gateway startup paths, WhatsApp QR/408 recovery, cron output language prompts, skill advanced features, gateway upstream 403 troubleshooting, and plugin fallback override guidance. Thanks @deepujain, @Zacxxx, @Jah-yee, @neyric, @usimic, @Renu-Cybe, @BigUncle, and @SeashoreShi.
- •Docs: clarify context-pruning ratio bounds, local dashboard recovery, CLI env markers, remote onboarding token behavior, and Peekaboo Bridge permissions for subprocess agents. Thanks @ayesha-aziz123, @dishraters, @hougangdev, and @brandonlipman.
- •Docs: clarify browser CDP diagnostics, Plugin SDK allowlist imports, status-reaction timing defaults, queue steering behavior, limited-tool troubleshooting, cron HEARTBEAT handling, Telegram multi-agent groups, Bitwarden SecretRef setup, and EasyRunner deployments. Thanks @Quratulain-bilal, @mbelinky, @Mickey-, @vancece, @xenouzik, @posigit, @surlymochan, @janaka, and @choiking.
- •Crabbox/Testbox: run clean sparse-checkout Testbox syncs from a temporary full checkout and route remote changed gates through Corepack pnpm.
- •Docs: clarify IPv4-only Gateway BYOH binding, trusted-proxy scope clearing, Android pairing approval, macOS Accessibility grants, Zalo profile env vars, password-store SecretRef setup, and Chinese memory navigation. Thanks @itskai-dev, @gwh7078, @longstoryscott, @MoeJaberr, and @yuaiccc.
- •Docs: consolidate GLM under Z.AI, add the Upstash Box install guide and Gateway exposure runbook, clarify MEDIA directives, Copilot and Voyage setup, config path quoting, real behavior proof, and memory-file write guidance. Thanks @BobDu, @alitariksahin, @Jefsky, @musaabhasan, @OmerZeyveli, @leno23, @WuKongAI-CMU, @luoyanglang, and @majin1102.
- •Docs: clarify media provider credentials, Codex/OpenClaw code-mode boundaries, Slack and Telegram ack reactions, Feishu dynamic agents, secrets plaintext boundaries, memory guidance, and Chinese glossary terms. Thanks @nielskaspers, @cosmopolitan033, @drclaw-iq, @alexgduarte, @zccyman, @chengoak, and @cassthebandit.
- •Packaging: exclude documentation images and assets from the npm tarball, reducing published package size without affecting runtime docs search or CLI behavior. Thanks @SebTardif.
v2026.5.22-beta.1New
openclaw 2026.5.22-beta.1
May 23, 2026
- •Docs: clarify README onboarding and Gateway startup paths, WhatsApp QR/408 recovery, cron output language prompts, skill advanced features, gateway upstream 403 troubleshooting, and plugin fallback override guidance. Thanks @deepujain, @Zacxxx, @Jah-yee, @neyric, @usimic, @Renu-Cybe, @BigUncle, and @SeashoreShi.
- •Docs: clarify context-pruning ratio bounds, local dashboard recovery, CLI env markers, remote onboarding token behavior, and Peekaboo Bridge permissions for subprocess agents. Thanks @ayesha-aziz123, @dishraters, @hougangdev, and @brandonlipman.
- •Docs: clarify browser CDP diagnostics, Plugin SDK allowlist imports, status-reaction timing defaults, queue steering behavior, limited-tool troubleshooting, cron HEARTBEAT handling, Telegram multi-agent groups, Bitwarden SecretRef setup, and EasyRunner deployments. Thanks @Quratulain-bilal, @mbelinky, @Mickey-, @vancece, @xenouzik, @posigit, @surlymochan, @janaka, and @choiking.
- •Crabbox/Testbox: run clean sparse-checkout Testbox syncs from a temporary full checkout and route remote changed gates through Corepack pnpm.
- •Docs: clarify IPv4-only Gateway BYOH binding, trusted-proxy scope clearing, Android pairing approval, macOS Accessibility grants, Zalo profile env vars, password-store SecretRef setup, and Chinese memory navigation. Thanks @itskai-dev, @gwh7078, @longstoryscott, @MoeJaberr, and @yuaiccc.
- •Docs: consolidate GLM under Z.AI, add the Upstash Box install guide and Gateway exposure runbook, clarify MEDIA directives, Copilot and Voyage setup, config path quoting, real behavior proof, and memory-file write guidance. Thanks @BobDu, @alitariksahin, @Jefsky, @musaabhasan, @OmerZeyveli, @leno23, @WuKongAI-CMU, @luoyanglang, and @majin1102.
- •Docs: clarify media provider credentials, Codex/OpenClaw code-mode boundaries, Slack and Telegram ack reactions, Feishu dynamic agents, secrets plaintext boundaries, memory guidance, and Chinese glossary terms. Thanks @nielskaspers, @cosmopolitan033, @drclaw-iq, @alexgduarte, @zccyman, @chengoak, and @cassthebandit.
- •Packaging: exclude documentation images and assets from the npm tarball, reducing published package size without affecting runtime docs search or CLI behavior. Thanks @SebTardif.
- •Media understanding: stop auto-probing Gemini CLI and use Antigravity CLI only as a lower-priority image/video fallback after configured provider APIs.
- •Agents/subagents: limit default sub-agent bootstrap context to
AGENTS.mdandTOOLS.md, keeping persona, identity, user, memory, heartbeat, and setup files out of delegated workers by default. (#85283) Thanks @100yenadmin. - •Maintainer skills: exclude plugin SDK/API boundary work from
openclaw-landable-bug-sweepso bugbash sweeps stay focused on small paper-cut fixes. - •QA-Lab/diagnostics: extend the OpenTelemetry smoke harness to prove trace, metric, and log export, and add first-class Prometheus and observability smoke aliases.
- •Plugin SDK: add a generic channel-message poll sender so channel plugins can expose poll delivery without depending on channel-specific SDK facades.
- •Crabbox: keep the local wrapper's provider validation synced with the installed Crabbox binary while preserving supported aliases such as
dockerandblacksmith. (#85302) Thanks @hxy91819. - •Maintainer skills: add
openclaw-landable-bug-sweepfor producing five small, reviewed, CI-green OpenClaw bugfix PRs from issue/PR sweeps.
v2026.5.20New
openclaw 2026.5.20
May 21, 2026
- •Exec approvals: remove the old
cat SKILL.md && printf ... && <skill-wrapper>allowlist compatibility path so skill files must be loaded with the read tool and only the real skill executable is auto-allowed. - •Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation. (#84264) Thanks @fuller-stack-dev.
- •Discord/voice: include bounded
IDENTITY.md,USER.md, andSOUL.mdprofile context in realtime voice session instructions by default, withvoice.realtime.bootstrapContextFiles: []available to disable it. (#84499) Thanks @fuller-stack-dev. - •Dependencies: bump the bundled Codex harness to
@openai/codex0.132.0and refresh the app-server model-list docs for the new catalog. - •CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair. (#80407) Thanks @giodl73-repo.
- •Agents/config: allow
agents.list[].experimental.localModelLeanso lean local-model mode can be enabled for one configured agent instead of globally. - •Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback. (#84005) Thanks @fuller-stack-dev.
- •Providers/OpenRouter: honor provider-level
params.providerrouting policy for OpenRouter requests, with model and agent params overriding the defaults. Thanks @amknight. - •CLI/tasks: include stale-running task maintenance decisions in
openclaw tasks maintenance --jsonso retained and reconcile candidates explain backing-session, cron, CLI, and wedged-subagent state. (#84691) Thanks @efpiva. - •Codex app-server: keep system-prompt reports working when bootstrap hooks provide workspace files with only a path and content, so hook-supplied SOUL/IDENTITY/TOOLS/USER context still reports injected characters correctly. (#84736) Thanks @JARVIS-Glasses.
- •Providers/MiniMax music: stop advertising
durationSecondscontrol and remove prompt-injected duration hints, somusic_generatereports MiniMax duration as an unsupported override instead of suggesting MiniMax can enforce track length. Fixes #84508. Thanks @neeravmakwana. - •Doctor: warn when sandbox tool policy hides configured MCP server tools before provider requests. (#84699) Thanks @nxmxbbd.
- •WhatsApp: update Baileys to
7.0.0-rc12. - •Build: suppress per-locale
rolldown-plugin-dts:fake-jsCommonJS dts warnings emitted while bundling the intentionally-inlinedzod/v4/locales/*.d.ctsfiles, sopnpm buildoutput stays readable after the 0.25.1 plugin bump. Thanks @romneyda. - •CLI/nodes: route lazy plugin-registration logs to stderr for JSON-mode
openclaw nodescommands so stdout stays parseable. (#84684) Thanks @TurboTheTurtle.
v2026.5.20-beta.2New
openclaw 2026.5.20-beta.2
May 21, 2026
- •Exec approvals: remove the old
cat SKILL.md && printf ... && <skill-wrapper>allowlist compatibility path so skill files must be loaded with the read tool and only the real skill executable is auto-allowed. - •Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation. (#84264) Thanks @fuller-stack-dev.
- •Discord/voice: include bounded
IDENTITY.md,USER.md, andSOUL.mdprofile context in realtime voice session instructions by default, withvoice.realtime.bootstrapContextFiles: []available to disable it. (#84499) Thanks @fuller-stack-dev. - •Dependencies: bump the bundled Codex harness to
@openai/codex0.132.0and refresh the app-server model-list docs for the new catalog. - •CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair. (#80407) Thanks @giodl73-repo.
- •Agents/config: allow
agents.list[].experimental.localModelLeanso lean local-model mode can be enabled for one configured agent instead of globally. - •Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback. (#84005) Thanks @fuller-stack-dev.
- •Providers/OpenRouter: honor provider-level
params.providerrouting policy for OpenRouter requests, with model and agent params overriding the defaults. Thanks @amknight. - •CLI/tasks: include stale-running task maintenance decisions in
openclaw tasks maintenance --jsonso retained and reconcile candidates explain backing-session, cron, CLI, and wedged-subagent state. (#84691) Thanks @efpiva. - •Codex app-server: keep system-prompt reports working when bootstrap hooks provide workspace files with only a path and content, so hook-supplied SOUL/IDENTITY/TOOLS/USER context still reports injected characters correctly. (#84736) Thanks @JARVIS-Glasses.
- •Providers/MiniMax music: stop advertising
durationSecondscontrol and remove prompt-injected duration hints, somusic_generatereports MiniMax duration as an unsupported override instead of suggesting MiniMax can enforce track length. Fixes #84508. Thanks @neeravmakwana. - •Doctor: warn when sandbox tool policy hides configured MCP server tools before provider requests. (#84699) Thanks @nxmxbbd.
- •WhatsApp: update Baileys to
7.0.0-rc12. - •Build: suppress per-locale
rolldown-plugin-dts:fake-jsCommonJS dts warnings emitted while bundling the intentionally-inlinedzod/v4/locales/*.d.ctsfiles, sopnpm buildoutput stays readable after the 0.25.1 plugin bump. Thanks @romneyda. - •CLI/nodes: route lazy plugin-registration logs to stderr for JSON-mode
openclaw nodescommands so stdout stays parseable. (#84684) Thanks @TurboTheTurtle.
v2026.5.20-beta.1New
openclaw 2026.5.20-beta.1
May 21, 2026
- •Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation. (#84264) Thanks @fuller-stack-dev.
- •Discord/voice: include bounded
IDENTITY.md,USER.md, andSOUL.mdprofile context in realtime voice session instructions by default, withvoice.realtime.bootstrapContextFiles: []available to disable it. (#84499) Thanks @fuller-stack-dev. - •Dependencies: bump the bundled Codex harness to
@openai/codex0.132.0and refresh the app-server model-list docs for the new catalog. - •CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair. (#80407) Thanks @giodl73-repo.
- •Agents/config: allow
agents.list[].experimental.localModelLeanso lean local-model mode can be enabled for one configured agent instead of globally. - •Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback. (#84005) Thanks @fuller-stack-dev.
- •Providers/OpenRouter: honor provider-level
params.providerrouting policy for OpenRouter requests, with model and agent params overriding the defaults. Thanks @amknight. - •WhatsApp: update Baileys to
7.0.0-rc12. - •Dependencies: update
@openclaw/fs-safeto0.2.7so OpenClaw's default Python-helper-off policy keeps best-effort Node write fallbacks for private stores, secret writes, run logs, and media attachments on Linux/macOS. - •Browser: honor the configured image sanitization limit for screenshots and labeled snapshots so browser-captured images follow the same resize policy as other image results. (#84595)
- •Doctor: remove unrecognized
models.providers.*.models[*].compat.thinkingFormatvalues duringdoctor --fixso stale provider model config can validate after upgrade. Fixes #77803. - •Status: show the configured default, session-selected model, reason, clear hint, and docs link when a session remains pinned to a model that differs from
agents.defaults.model.primary. - •Mac app: keep local packaging signed with a stable app identity for permission testing and fix Control UI production builds under current Vite/Highlight.js exports.
- •macOS app: update the embedded Peekaboo bridge to 3.2.1 so OpenClaw-hosted UI automation works with current Peekaboo CLI capture flows.
- •Cron: deliver preferred final assistant output for successful scheduled runs when trailing plain tool warnings remain in diagnostics instead of marking the run failed.
v2026.5.19New
openclaw 2026.5.19
May 20, 2026
- •Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths.
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
- •Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving
/readyzsidecar gating. (#83301) Thanks @samzong. - •Plugins/admin-http-rpc: allow trusted admin HTTP RPC clients to start and wait for web QR login flows. (#83259) Thanks @liorb-mountapps.
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Mac app: refine Voice & Talk recognition-language and wake-phrase settings so they use the same compact card rows as the rest of Settings.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Skills CLI: allow
openclaw skills installandopenclaw skills updateto target shared managed skills with--global. (#74466) Thanks @Marvae. - •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Browser CLI: add
openclaw browser evaluate --timeout-msso long-running page functions can extend both the evaluate action and request timeout budgets. (#83447) Thanks @eefreenyc. - •Codex app-server: scope OpenClaw prompt guidance by runtime surface so native Codex keeps Codex-owned base/personality instructions while OpenClaw contributes only runtime context, delivery guidance, and explicitly scoped command hints. (#83454) Thanks @100yenadmin.
v2026.5.19-beta.2New
openclaw 2026.5.19-beta.2
May 19, 2026
- •Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths.
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
- •Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving
/readyzsidecar gating. (#83301) Thanks @samzong. - •Plugins/admin-http-rpc: allow trusted admin HTTP RPC clients to start and wait for web QR login flows. (#83259) Thanks @liorb-mountapps.
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Mac app: refine Voice & Talk recognition-language and wake-phrase settings so they use the same compact card rows as the rest of Settings.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Skills CLI: allow
openclaw skills installandopenclaw skills updateto target shared managed skills with--global. (#74466) Thanks @Marvae. - •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Browser CLI: add
openclaw browser evaluate --timeout-msso long-running page functions can extend both the evaluate action and request timeout budgets. (#83447) Thanks @eefreenyc. - •Codex app-server: scope OpenClaw prompt guidance by runtime surface so native Codex keeps Codex-owned base/personality instructions while OpenClaw contributes only runtime context, delivery guidance, and explicitly scoped command hints. (#83454) Thanks @100yenadmin.
v2026.5.19-alpha.1New
openclaw 2026.5.19-alpha.1
May 20, 2026
- •Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths.
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
- •Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving
/readyzsidecar gating. (#83301) Thanks @samzong. - •Plugins/admin-http-rpc: allow trusted admin HTTP RPC clients to start and wait for web QR login flows. (#83259) Thanks @liorb-mountapps.
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Mac app: refine Voice & Talk recognition-language and wake-phrase settings so they use the same compact card rows as the rest of Settings.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Skills CLI: allow
openclaw skills installandopenclaw skills updateto target shared managed skills with--global. (#74466) Thanks @Marvae. - •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Browser CLI: add
openclaw browser evaluate --timeout-msso long-running page functions can extend both the evaluate action and request timeout budgets. (#83447) Thanks @eefreenyc. - •Codex app-server: scope OpenClaw prompt guidance by runtime surface so native Codex keeps Codex-owned base/personality instructions while OpenClaw contributes only runtime context, delivery guidance, and explicitly scoped command hints. (#83454) Thanks @100yenadmin.
v2026.5.19-beta.1New
openclaw 2026.5.19-beta.1
May 18, 2026
- •Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths.
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
- •Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving
/readyzsidecar gating. (#83301) Thanks @samzong. - •Plugins/admin-http-rpc: allow trusted admin HTTP RPC clients to start and wait for web QR login flows. (#83259) Thanks @liorb-mountapps.
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Skills CLI: allow
openclaw skills installandopenclaw skills updateto target shared managed skills with--global. (#74466) Thanks @Marvae. - •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Browser CLI: add
openclaw browser evaluate --timeout-msso long-running page functions can extend both the evaluate action and request timeout budgets. (#83447) Thanks @eefreenyc. - •Codex app-server: scope OpenClaw prompt guidance by runtime surface so native Codex keeps Codex-owned base/personality instructions while OpenClaw contributes only runtime context, delivery guidance, and explicitly scoped command hints. (#83454) Thanks @100yenadmin.
- •Agents/tools: shorten built-in tool descriptions and schema hints across media, messaging, sessions, cron, Gateway, web, image/PDF, TTS, nodes, and plan tools while preserving routing guardrails.
v2026.5.18
openclaw 2026.5.18
May 18, 2026
- •Control UI and Mac app: faster Settings, cleaner chat/session controls, responsive logs, remote gateway setup, native Dashboard, improved pairing sheets, and more stable protocol negotiation.
- •Realtime, voice, and mobile: Android Talk Mode moves to realtime Gateway relay voice sessions; Discord/OpenAI realtime follow-ups keep hearing turns; iOS/Mac permission, chat, and settings flows were polished.
- •Telegram and Discord reliability: isolated Telegram polling/topic lanes, media/forum-topic delivery,
/stopand/btwhandling, progress drafts, final reply recovery, and Discord progress/final-message delivery were tightened. - •Codex/OpenAI runtime: app-server context projection, MCP projection, native tool progress, code-mode/network handling, OAuth fallback, stale-thread recovery, and transcript/trajectory fidelity were improved.
- •Agents and subagents: queued follow-ups, manual-turn priority, subagent completion handoffs, session locks, context usage, fallback diagnostics, and final payload delivery were made more predictable.
- •Plugins and SDK: typed tool-plugin helpers, plugin RPC metadata, install/update repair, externalized plugin recovery, manifest validation, and SDK packaging were hardened.
- •Models/providers: xAI OAuth and media fixes, Anthropic/Claude CLI routing, OpenRouter/OpenAI-compatible reasoning replay, Gemini thought signatures, Ollama/Qwen/Together/Xiaomi/Copilot fixes, and local/custom provider guardrails landed.
- •Gateway and update path: startup tracing, restart readiness, update-check deferral, service recovery hints, package-swap doctor repair, npm freshness bypasses, and Docker/package validation were improved.
- •QA and release validation: personal-agent packs, Codex-vs-Pi parity, runtime tool coverage, Docker/package install/update lanes, and release evidence gates were expanded.
- •Security and robustness: audit suppressions, gateway auth/log redaction, malformed JSON/base64/URL handling, SSRF/private-network guardrails, exec approval realpath binding, and Docker non-loopback fail-closed behavior were tightened.
- •Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths.
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
v2026.5.18-beta.1
openclaw 2026.5.18-beta.1
May 18, 2026
- •Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths.
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
- •Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving
/readyzsidecar gating. (#83301) Thanks @samzong. - •Plugins/admin-http-rpc: allow trusted admin HTTP RPC clients to start and wait for web QR login flows. (#83259) Thanks @liorb-mountapps.
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Agents/tools: shorten built-in tool descriptions and schema hints across media, messaging, sessions, cron, Gateway, web, image/PDF, TTS, nodes, and plan tools while preserving routing guardrails.
- •Skills: add node inspector debugging, fused diagram generation, and throwaway spike workflow skills.
- •CLI/plugins: add
defineToolPluginplusopenclaw plugins build,validate, andinitfor typed simple tool plugins with generated manifest metadata, optional tool declarations, and context factories. - •Agents/skills: tighten bundled skill prompts and metadata, quote skill descriptions, refresh current CLI/API guidance, and update embedded sherpa-onnx runtime downloads.
v2026.5.16-beta.7
openclaw 2026.5.16-beta.7
May 18, 2026
- •Dependencies: update
@openclaw/proxylineto 0.3.3. - •Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19.
- •Docker/Podman: add
OPENCLAW_IMAGE_APT_PACKAGESas the runtime-neutral image build arg for extra apt packages while keepingOPENCLAW_DOCKER_APT_PACKAGESas a legacy fallback. (#62431) Thanks @urtabajev. - •Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. (#83300) Thanks @samzong.
- •Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving
/readyzsidecar gating. (#83301) Thanks @samzong. - •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Agents/tools: shorten built-in tool descriptions and schema hints across media, messaging, sessions, cron, Gateway, web, image/PDF, TTS, nodes, and plan tools while preserving routing guardrails.
- •Skills: add node inspector debugging, fused diagram generation, and throwaway spike workflow skills.
- •CLI/plugins: add
defineToolPluginplusopenclaw plugins build,validate, andinitfor typed simple tool plugins with generated manifest metadata, optional tool declarations, and context factories. - •Agents/skills: tighten bundled skill prompts and metadata, quote skill descriptions, refresh current CLI/API guidance, and update embedded sherpa-onnx runtime downloads.
- •Skills: update the Obsidian skill to target the official
obsidianCLI and require its registered binary instead of the third-partyobsidian-cli. - •Skills: add a Python debugging skill for pdb, breakpoint(), post-mortem inspection, and debugpy remote attach.
v2026.5.16-beta.6
openclaw 2026.5.16-beta.6
May 18, 2026
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Browser: surface pending and recently handled modal dialogs in snapshots, return
blockedByDialogwhen an action opens a modal, and allowbrowser dialog --dialog-idto answer pending dialogs. - •Agents/tools: shorten built-in tool descriptions and schema hints across media, messaging, sessions, cron, Gateway, web, image/PDF, TTS, nodes, and plan tools while preserving routing guardrails.
- •Skills: add node inspector debugging, fused diagram generation, and throwaway spike workflow skills.
- •CLI/plugins: add
defineToolPluginplusopenclaw plugins build,validate, andinitfor typed simple tool plugins with generated manifest metadata, optional tool declarations, and context factories. - •Agents/skills: tighten bundled skill prompts and metadata, quote skill descriptions, refresh current CLI/API guidance, and update embedded sherpa-onnx runtime downloads.
- •Skills: update the Obsidian skill to target the official
obsidianCLI and require its registered binary instead of the third-partyobsidian-cli. - •Skills: add a Python debugging skill for pdb, breakpoint(), post-mortem inspection, and debugpy remote attach.
- •Plugins/messages: add presentation capability limits for channel renderers, adapt rich message controls before native rendering, and mark legacy
interactive/Slack directive producer APIs as deprecated. - •Proxy: support HTTPS managed forward-proxy endpoints and scoped
proxy.tls.caFileCA trust for proxy endpoint TLS. (#79171) Thanks @jesse-merhi. - •QA-Lab: add first-hour 20-turn and optional 100-turn runtime parity scenarios, with tier metadata for standard and soak QA gates. Fixes #80338; refs #80337. Thanks @100yenadmin.
- •QA-Lab: add
openclaw qa suite --runtime-parity-tierand wire the standard Codex-vs-Pi tier into release checks separately from optional/live-only/soak lanes. Fixes #80337. Thanks @100yenadmin. - •QA-Lab: add a live-only Codex Pi-shaped Read vocabulary canary so runtime parity catches native workspace-read prompt compatibility drift. (#80323) Thanks @100yenadmin.
v2026.5.16-beta.5
openclaw 2026.5.16-beta.5
May 17, 2026
- •Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar.
- •Skills: rename the repo-local Codex closeout review skill and helper to
autoreviewwhile preserving the Codex-first fallback behavior. - •Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links.
- •Agents/tools: shorten built-in tool descriptions and schema hints across media, messaging, sessions, cron, Gateway, web, image/PDF, TTS, nodes, and plan tools while preserving routing guardrails.
- •Skills: add node inspector debugging, fused diagram generation, and throwaway spike workflow skills.
- •CLI/plugins: add
defineToolPluginplusopenclaw plugins build,validate, andinitfor typed simple tool plugins with generated manifest metadata, optional tool declarations, and context factories. - •Agents/skills: tighten bundled skill prompts and metadata, quote skill descriptions, refresh current CLI/API guidance, and update embedded sherpa-onnx runtime downloads.
- •Skills: update the Obsidian skill to target the official
obsidianCLI and require its registered binary instead of the third-partyobsidian-cli. - •Skills: add a Python debugging skill for pdb, breakpoint(), post-mortem inspection, and debugpy remote attach.
- •Plugins/messages: add presentation capability limits for channel renderers, adapt rich message controls before native rendering, and mark legacy
interactive/Slack directive producer APIs as deprecated. - •Proxy: support HTTPS managed forward-proxy endpoints and scoped
proxy.tls.caFileCA trust for proxy endpoint TLS. (#79171) Thanks @jesse-merhi. - •QA-Lab: add first-hour 20-turn and optional 100-turn runtime parity scenarios, with tier metadata for standard and soak QA gates. Fixes #80338; refs #80337. Thanks @100yenadmin.
- •QA-Lab: add
openclaw qa suite --runtime-parity-tierand wire the standard Codex-vs-Pi tier into release checks separately from optional/live-only/soak lanes. Fixes #80337. Thanks @100yenadmin. - •QA-Lab: add a live-only Codex Pi-shaped Read vocabulary canary so runtime parity catches native workspace-read prompt compatibility drift. (#80323) Thanks @100yenadmin.
- •QA-Lab: add live-only harness self-health scenarios for plugin hook crashes, manifest contract errors, and WebChat direct-reply self-message routing. (#80323) Thanks @100yenadmin.
v2026.5.16-beta.4
openclaw 2026.5.16-beta.4
May 17, 2026
- •Security/audit: add
security.audit.suppressionsfor intentionally accepted audit findings, keeping suppressed matches out of the active summary while preserving them in JSON output with an active suppression notice. (#76949) Thanks @100menotu001. - •Agents/subagents: label delegated task and subagent completion handoffs as ready for parent review, and tell requester agents to review/verify results before calling them done. (#78985) Thanks @100menotu001.
- •Providers/media: add fal and OpenRouter music-generation providers for the shared
music_generatetool, including fal MiniMax/ACE/Stable Audio endpoints and OpenRouter Lyria audio output. - •Maintainer tooling: warn before running JS package commands on raw Crabbox AWS boxes, pointing maintainers to Actions hydration or Blacksmith Testbox for CI-like proof.
- •Control UI: show provider quota usage in the Overview card and Chat header, and recover stale Chat in-progress state after missed terminal events. (#82647)
- •Mac app remote setup can now be preconfigured from
openclaw-mac configure-remote, skips onboarding when config is already complete, supports direct LAN/Tailnet gateway URLs, allows private same-origin Control UI loads, and owns the SSH tunnel process when SSH is selected. - •Providers/xAI: add xAI Grok OAuth login for SuperGrok subscribers, letting
xai/*models and xAI media/tool providers authenticate withoutXAI_API_KEY. - •CLI/cron: add
openclaw cron run --waitwith timeout and poll interval controls, plus exactcron.runs --run-idfiltering so automation can block on one queued manual run. (#81929) Thanks @ificator. - •Maintainer tooling: route Crabbox skill defaults through the repo brokered AWS config, leaving Blacksmith Testbox as an explicit opt-in instead of the broad-proof default.
- •CLI/onboarding: localize the setup wizard and bundled channel setup flows for English, Simplified Chinese, and Traditional Chinese. (#80645) Thanks @GaosCode.
- •Agents/skills: cache hydrated
resolvedSkillsacross warm gateway turns while keying reuse by the redacted effective config, reducing redundant skill snapshot rebuilds without crossing config-gated skill boundaries. (#81451) Thanks @solodmd. - •Group chat: add core inbound event classification with opt-in
messages.groupChat.unmentionedInbound: "room_event", so always-on unmentioned room chatter can run as quiet context and speak visibly only via the message tool. (#81317) Thanks @obviyus. - •Codex/context engines: bind thread-bootstrap projection epochs to Codex app-server threads, carry redacted tool-result context into fresh threads, and rotate backend threads when projection state changes. (#82351) Thanks @jalehman.
- •Agents/media: run
image_generatethrough the shared async media-generation task lifecycle in session-backed chats, with task status, duplicate guarding, and message-tool completion delivery matching music/video. - •Gateway: add opt-in restart trace logs for restart signal, active-work drain, close, next-start, ready, and memory spans. (#82396) Thanks @samzong.
v2026.5.16-beta.3
openclaw 2026.5.16-beta.3
May 16, 2026
- •Providers/xAI: add xAI Grok OAuth login for SuperGrok subscribers, letting
xai/*models and xAI media/tool providers authenticate withoutXAI_API_KEY. - •CLI/cron: add
openclaw cron run --waitwith timeout and poll interval controls, plus exactcron.runs --run-idfiltering so automation can block on one queued manual run. (#81929) Thanks @ificator. - •Maintainer tooling: route Crabbox skill defaults through the repo brokered AWS config, leaving Blacksmith Testbox as an explicit opt-in instead of the broad-proof default.
- •CLI/onboarding: localize the setup wizard and bundled channel setup flows for English, Simplified Chinese, and Traditional Chinese. (#80645) Thanks @GaosCode.
- •Agents/skills: cache hydrated
resolvedSkillsacross warm gateway turns while keying reuse by the redacted effective config, reducing redundant skill snapshot rebuilds without crossing config-gated skill boundaries. (#81451) Thanks @solodmd. - •Telegram/group chat: add opt-in
messages.groupChat.ambientTurns: "room_event"handling so always-on ambient chatter can run as quiet room context and speak visibly only via the message tool. (#81317) Thanks @obviyus. - •Codex/context engines: bind thread-bootstrap projection epochs to Codex app-server threads, carry redacted tool-result context into fresh threads, and rotate backend threads when projection state changes. (#82351) Thanks @jalehman.
- •Gateway: add opt-in restart trace logs for restart signal, active-work drain, close, next-start, ready, and memory spans. (#82396) Thanks @samzong.
- •Gateway/performance: split startup benchmark HTTP-listen timing from full gateway-ready timing and add post-bind plugin and sidecar diagnostics to restart-readiness traces. (#82603) Thanks @samzong.
- •Gateway/diagnostics: redact credential-bearing gateway target URLs and client diagnostics while preserving raw connection URLs for programmatic use, so connect-failure logs no longer surface embedded tokens.
- •Telegram: normalize announce group targets via a new
resolveSessionTargetchannel hook so scheduled announcements resolve consistently against the same Telegram session conversation registry as inbound turns. Fixes #81229. Thanks @giodl73-repo. - •Discord: bind delayed gateway
identifyretries to the originating socket generation so retries triggered after a reconnect do not identify against a fresh socket. Fixes #82225. Thanks @giodl73-repo. - •ACP/control plane: refresh cached runtime handles when agent config changes so ACP sessions stop using stale runtimes after
agents.defaultsedits. Fixes #82237. Thanks @giodl73-repo. - •Gateway/sessions: scope session data lookups by agent id so multi-agent gateway state cannot cross-leak session records across configured agents. (#81386) Thanks @pgondhi987.
- •Agents/media: accept generated media attachments on internal completion events and report delivery-loss failures as errors, so completed background music/video tasks do not disappear after provider success.
v2026.5.16-beta.2
openclaw 2026.5.16-beta.2
May 16, 2026
- •Providers/xAI: add xAI Grok OAuth login for SuperGrok subscribers, letting
xai/*models and xAI media/tool providers authenticate withoutXAI_API_KEY. - •CLI/cron: add
openclaw cron run --waitwith timeout and poll interval controls, plus exactcron.runs --run-idfiltering so automation can block on one queued manual run. (#81929) Thanks @ificator. - •Maintainer tooling: route Crabbox skill defaults through the repo brokered AWS config, leaving Blacksmith Testbox as an explicit opt-in instead of the broad-proof default.
- •CLI/onboarding: localize the setup wizard and bundled channel setup flows for English, Simplified Chinese, and Traditional Chinese. (#80645) Thanks @GaosCode.
- •Agents/skills: cache hydrated
resolvedSkillsacross warm gateway turns while keying reuse by the redacted effective config, reducing redundant skill snapshot rebuilds without crossing config-gated skill boundaries. (#81451) Thanks @solodmd. - •Telegram/group chat: add opt-in
messages.groupChat.ambientTurns: "room_event"handling so always-on ambient chatter can run as quiet room context and speak visibly only via the message tool. (#81317) Thanks @obviyus. - •Codex/context engines: bind thread-bootstrap projection epochs to Codex app-server threads, carry redacted tool-result context into fresh threads, and rotate backend threads when projection state changes. (#82351) Thanks @jalehman.
- •Telegram: persist polling updates through restart replay so queued same-topic messages resume in order instead of losing context after a gateway restart. (#82256) Thanks @VACInc.
- •Gateway/Gmail: abort in-flight Gmail watcher startup and hot-reload restarts before shutdown so reloads cannot spawn
gog serveafter the Gateway is closing. Thanks @frankekn. - •MCP plugin tools: forward host MCP
tools/callAbortSignalthroughcreatePluginToolsMcpHandlers().callToolinto plugintool.execute, so host cancellation actually cancels in-flight plugin tool calls instead of letting them run to completion. Fixes #82424. (#82443) Thanks @joshavant. - •Media: ignore image MIME and filename hints when bytes sniff as generic containers, so zip/octet-stream payloads mislabeled as images do not become local image media or keep image file extensions when staged.
- •Update/doctor: avoid materializing
groupAllowFromfor channel schemas that reject it, so package-swap doctor repairs do not fail on externalized Slack configs. - •Gateway/media: prevent image filenames from overriding generic non-image byte sniffing, so zip/octet-stream payloads mislabeled as images are offloaded or rejected before they become inline image attachments.
- •Plugins/web search: downgrade stale optional provider installs to warnings so Gateway and doctor repair paths keep running after startup provider selection. Refs #82313. Thanks @crackmac.
- •Telegram/Gateway: route targeted Telegram
/stop@botmessages onto the control lane without cached bot metadata and match gateway stop requests across raw/canonical session aliases. (#82298) Thanks @VACInc.
v2026.5.16-beta.1
openclaw 2026.5.16-beta.1
May 16, 2026
- •Maintainer tooling: route Crabbox skill defaults through the repo brokered AWS config, leaving Blacksmith Testbox as an explicit opt-in instead of the broad-proof default.
- •CLI/onboarding: localize the setup wizard and bundled channel setup flows for English, Simplified Chinese, and Traditional Chinese. (#80645) Thanks @GaosCode.
- •Agents/skills: cache hydrated
resolvedSkillsacross warm gateway turns while keying reuse by the redacted effective config, reducing redundant skill snapshot rebuilds without crossing config-gated skill boundaries. (#81451) Thanks @solodmd. - •Telegram/group chat: add opt-in
messages.groupChat.ambientTurns: "room_event"handling so always-on ambient chatter can run as quiet room context and speak visibly only via the message tool. (#81317) Thanks @obviyus. - •Release tooling: align the published launcher Node floor,
npm start, package script checks, sharded lint locking, Vitest root project coverage, and plugin-SDK declaration build cache metadata so release/package validation does not silently skip or ship stale surfaces. - •Cron/agents: honor configured subagent model fallbacks for isolated scheduled runs and forward that fallback policy into embedded agent timeout failover. Fixes #74985. Thanks @chrisgwynne.
- •Codex app-server/MCP: scope user MCP servers to specific OpenClaw agent ids through an optional
mcp.servers.<name>.codex.agentslist and acceptcodex.defaultToolsApprovalMode(auto/prompt/approve) for native Codex approval defaults; OpenClaw strips thecodexblock before handingmcp_serversconfig to Codex. (#82180) Thanks @sercada. - •Agents/OpenAI Responses: clamp
input_tokens - cached_tokensat zero and reconstructtotalTokensfrom input + output + cached components so Responses-API streams report consistent usage when providers under-reportinput_tokensrelative tocached_tokens. - •Plugins: reject malformed
package.jsonopenclaw.extensionsmetadata during install, discovery, and post-update payload smoke instead of silently dropping invalid entries. - •Media/files: sniff
input_filebytes before trusting declared MIME headers, rejecting spoofed image or zip payloads before they become agent-visible text. - •Config persistence: ignore malformed array/scalar auth profile, cron job state, and session store entries instead of hydrating them into numeric profile ids, crashed cron rows, or invalid session records.
- •Providers: reject malformed successful Runway, BytePlus, and Ollama embedding responses with provider-owned errors instead of raw parser/type failures, silent bad vectors, or long bogus polling.
- •Trajectory export: skip and report malformed session/runtime JSONL rows in
manifest.jsoninstead of letting wrong-shaped session rows crash support bundle export. - •Config/doctor: copy fallback-enabled channel
allowFromentries into explicitgroupAllowFromallowlists duringopenclaw doctor --fix, preserving current group access without adding runtime fallback-transition flags. - •Hooks: raise bounded gateway lifecycle hook wait budgets to 5 seconds for shutdown and 10 seconds for pre-restart, giving short restart notification handlers time to finish before shutdown continues. (#82273) Thanks @bryanbaer.
v2026.5.14-beta.2
openclaw 2026.5.14-beta.2
May 15, 2026
- •Channels/SDK: add normalized command turn facts to channel turn construction and expose command-turn helpers for plugin inbound contexts.
- •Agents/config: support per-agent bootstrap profile overrides for
contextInjection,bootstrapMaxChars, andbootstrapTotalMaxChars, inheriting fromagents.defaultswhen omitted. Fixes #69966. Thanks @BunsDev. - •Dependencies: route root ambient Node proxy agents through
@openclaw/proxylineand drop rootproxy-agent,https-proxy-agent, andminimatchdependencies. - •Canvas: lazy-load HTTP host, hosted media resolver, CLI implementation, and tool runtime modules so Gateway startup only pays Canvas implementation cost on first use. (#82001) Thanks @samzong.
- •Control UI/i18n: add a
pnpm ui:i18n:reportbaseline report for hardcoded-copy focus areas and locale fallback metadata. (#81320) Thanks @samzong. - •Maintainer tooling: add a repo-local
codex-reviewskill for Codex closeout reviews, including local dirty-work and PR-branch review helpers that rerun until no accepted/actionable findings remain and avoid unsupported inline prompts with--base. - •Maintainer tooling: fail CI when pull requests add package patch files or pnpm patched dependencies, preserving the upstream-and-bump dependency workflow.
- •Codex app-server: stream commentary preambles into editable channel progress drafts without promoting them to final answers.
- •Codex migration: remove the bundled
codex-clibackend and repair legacycodex-cli/*model refs to the Codex app-server route onopenai/*. - •Gateway/startup: add owner-level startup trace attribution for auth, plugin loading, lookup counts, and plugin sidecar services. (#81738) Thanks @samzong.
- •Plugins/hooks: expose the resolved effective
contextTokenBudgetplus source/reference metadata onllm_outputand sanitizedmodel_call_*hook events/contexts so plugin cost and context-health alerts can use agent-level context caps. Fixes #64327. Thanks @BunsDev. - •Channels/status reactions: wire
StatusReactionControllerinto WhatsApp message turns (queued → thinking → tool → done/error lifecycle, on par with Telegram and Discord), adddeploy/build/conciergeemoji categories with tool-token routing, and replace the status reaction defaults with self-explanatory emoji (🧠 thinking, 🛠️ tool, 💻 coding, 🌐 web, ⏳ stallSoft, ⚠️ stallHard, ✅ done, ❌ error, 🗜️ compacting) so stall and lifecycle reactions read as status indicators instead of emotional commentary. Fixes #59077. (#80612) Thanks @gado-ships-it. - •Control UI: add a browser-local Text size setting in Appearance and Quick Settings, scaling chat and dense UI text while keeping inputs above the mobile Safari focus-zoom threshold. Fixes #8547. Thanks @BunsDev.
- •Docs: add a dedicated ds4 provider page with local DeepSeek V4 Flash config, on-demand startup, context sizing, and live verification steps.
- •Release validation: add a package-installed Docker user-journey lane that verifies onboarding, mocked model setup, external plugin install/uninstall, ClickClack outbound/inbound messaging, Gateway restart survival, and doctor.
v2026.5.14-beta.1
openclaw 2026.5.14-beta.1
May 14, 2026
- •Dependencies: route root ambient Node proxy agents through
@openclaw/proxylineand drop rootproxy-agent,https-proxy-agent, andminimatchdependencies. - •Control UI/i18n: add a
pnpm ui:i18n:reportbaseline report for hardcoded-copy focus areas and locale fallback metadata. (#81320) Thanks @samzong. - •Maintainer tooling: add a repo-local
codex-reviewskill for Codex closeout reviews, including local dirty-work and PR-branch review helpers that rerun until no accepted/actionable findings remain and avoid unsupported inline prompts with--base. - •Maintainer tooling: fail CI when pull requests add package patch files or pnpm patched dependencies, preserving the upstream-and-bump dependency workflow.
- •Codex app-server: stream commentary preambles into editable channel progress drafts without promoting them to final answers.
- •Codex migration: remove the bundled
codex-clibackend and repair legacycodex-cli/*model refs to the Codex app-server route onopenai/*. - •Gateway/startup: add owner-level startup trace attribution for auth, plugin loading, lookup counts, and plugin sidecar services. (#81738) Thanks @samzong.
- •Channels/status reactions: wire
StatusReactionControllerinto WhatsApp message turns (queued → thinking → tool → done/error lifecycle, on par with Telegram and Discord), adddeploy/build/conciergeemoji categories with tool-token routing, and replace the status reaction defaults with self-explanatory emoji (🧠 thinking, 🛠️ tool, 💻 coding, 🌐 web, ⏳ stallSoft, ⚠️ stallHard, ✅ done, ❌ error, 🗜️ compacting) so stall and lifecycle reactions read as status indicators instead of emotional commentary. Fixes #59077. (#80612) Thanks @gado-ships-it. - •Control UI: add a browser-local Text size setting in Appearance and Quick Settings, scaling chat and dense UI text while keeping inputs above the mobile Safari focus-zoom threshold. Fixes #8547. Thanks @BunsDev.
- •Docs: add a dedicated ds4 provider page with local DeepSeek V4 Flash config, on-demand startup, context sizing, and live verification steps.
- •Release validation: add a package-installed Docker user-journey lane that verifies onboarding, mocked model setup, external plugin install/uninstall, ClickClack outbound/inbound messaging, Gateway restart survival, and doctor.
- •Release validation: add package-installed Docker lanes for real TTY onboarding, media and memory persistence, published-package upgrade journeys, and local marketplace plugin install/update/uninstall coverage.
- •Maintainers: add a Clawdtributor skill for Discrawl-backed contributor PR triage, live status checks, and compact review formatting.
- •Telegram: support Mini App
web_appbuttons in generic message presentation payloads, allowingopenclaw message send --presentationto render Telegram Web App inline buttons for private chats. (#81356) Thanks @jzakirov. - •Scripts: add
OPENCLAW_HEAVY_CHECK_LOCK_SCOPE=worktreeso high-capacity local worktrees can use independent heavy-check locks while shared locks remain the default. Fixes #80729. (#80734) Thanks @samzong.
v2026.5.12
openclaw 2026.5.12
May 14, 2026
- •Leaner installs: WhatsApp, Slack, Amazon Bedrock, Anthropic Vertex, and related provider/plugin dependency cones moved out of the core runtime so installs only pull what you use.
- •Telegram got much more resilient: isolated polling, durable local spooling, safer group-media handling, and preserved HTML/Markdown formatting in streamed and scheduled replies.
- •Codex/OpenAI paths are smoother: auth-profile-backed media tools, MCP server projection, context-engine thread rotation, and better app-server/runtime fallback behavior.
- •Plugin installs and updates are harder to wedge, with pnpm 11 support, peer-dependency preservation, safer runtime scans, and source/git install fixes.
- •Gateway, browser, Slack, node pairing, sandbox, and transcript paths picked up a broad security/provenance hardening pass.
- •UI and reply delivery improved across Control UI, WebChat, TUI, rich-only replies, session history, and streaming auto-scroll.
- •Amazon Bedrock: externalize the Bedrock and Bedrock Mantle provider packages so core installs no longer pull AWS SDK dependencies unless those providers are installed.
- •Plugins: externalize Slack, OpenShell sandbox, and Anthropic Vertex so their runtime dependency cones install only when those plugins are installed.
- •Control UI/WebChat: add a persisted auto-scroll mode selector so users can keep the current near-bottom behavior, always follow streaming output, or turn automatic streaming scroll off and use the New messages button manually. Fixes #7648 and #81287. Thanks @BunsDev.
- •ACP: add
acp.fallbacksso ACP turns can try configured backup runtime backends when the primary backend is unavailable before any output is emitted. (#69542) Thanks @kaseonedge. - •Doctor/Codex: stop warning that the message tool is unavailable for source-reply paths where OpenClaw grants
messageat runtime, keeping update and doctor output aligned with the OpenAI happy path. Thanks @pashpashpash. - •Channels/Weixin: bump the external Weixin catalog entry to
@tencent-weixin/openclaw-weixin@2.4.3with the matching package integrity. (#81730) Thanks @scotthuang. - •Agents/subagents: apply
agents.defaults.subagents.modelbefore target agent primary models duringsessions_spawn, so model-scoped runtimes such asclaude-clistay attached to default child runs. Fixes #81395. (#81783) Thanks @joshavant. - •Telegram: keep Bot API polling alive during main event-loop stalls by moving ingress to an isolated worker with a durable local spool. Fixes #81132. (#81746) Thanks @joshavant.
- •Telegram: preserve rendered HTML formatting through lazy cron announce delivery so Markdown links stay clickable instead of falling back to literal anchor tags. Fixes #81742. (#81758)
v2026.5.12-beta.8
openclaw 2026.5.12-beta.8
May 14, 2026
- •Amazon Bedrock: externalize the Bedrock and Bedrock Mantle provider packages so core installs no longer pull AWS SDK dependencies unless those providers are installed.
- •Plugins: externalize Slack, OpenShell sandbox, and Anthropic Vertex so their runtime dependency cones install only when those plugins are installed.
- •Control UI/WebChat: add a persisted auto-scroll mode selector so users can keep the current near-bottom behavior, always follow streaming output, or turn automatic streaming scroll off and use the New messages button manually. Fixes #7648 and #81287. Thanks @BunsDev.
- •ACP: add
acp.fallbacksso ACP turns can try configured backup runtime backends when the primary backend is unavailable before any output is emitted. (#69542) Thanks @kaseonedge. - •Agents/subagents: apply
agents.defaults.subagents.modelbefore target agent primary models duringsessions_spawn, so model-scoped runtimes such asclaude-clistay attached to default child runs. Fixes #81395. (#81783) Thanks @joshavant. - •Telegram: keep Bot API polling alive during main event-loop stalls by moving ingress to an isolated worker with a durable local spool. Fixes #81132. (#81746) Thanks @joshavant.
- •Telegram: preserve rendered HTML formatting through lazy cron announce delivery so Markdown links stay clickable instead of falling back to literal anchor tags. Fixes #81742. (#81758)
- •Telegram: skip unmentioned group media before download when
requireMentionis active, avoiding failed media-download replies for messages that should be ignored. Fixes #81181. (#81785) Thanks @joshavant. - •CLI/plugins: keep bare plugin and parent-command help on the lightweight path, avoiding plugin registry discovery before rendering help.
- •Gateway/session history: carry monotonic transcript message sequence through live updates and refresh SSE history when stale sequence input would otherwise append bad incremental state. (#81474) Thanks @samzong.
- •Security/sandbox: include Windows
USERPROFILEin the sandbox blocked home roots so credential-bearing binds (such as.codex,.openclaw, or.sshunder the Windows user profile) are denied even whenHOMEpoints at a different shell home. (#63074) Thanks @luoyanglang. - •Models config/auth: stop inferring provider env-var markers from broad
^[A-Z_][A-Z0-9_]*$strings, and resolve config-backed providerapiKeyvalues only through structured env SecretRefs (secrets.providers[id]/secrets.defaults), so unrelated env vars cannot accidentally become provider credentials. Thanks @sallyom. - •Media fetch: skip allocating and buffering the response body for bodyless media responses (HEAD probes and 204-style empty bodies), avoiding wasted heap on streams that carry no payload. Thanks @shakkernerd.
- •CLI/onboarding: forward provider-specific auth flags (e.g.
--openai-api-key) through the onboarding wizard so they reach provider auth methods viactx.opts, letting--openai-api-key "$OPENAI_API_KEY"skip the redundant "use existing env var?" prompt in non-interactive harnesses. (#81669) Thanks @sjf. - •CLI/migrate: drop trailing periods from Codex migrate item messages and
REASON_CODE_MESSAGESstrings so plan/result rows read as labels instead of sentence fragments. (#81705) Thanks @sjf.
v2026.5.12-beta.7
openclaw 2026.5.12-beta.7
May 14, 2026
- •Amazon Bedrock: externalize the Bedrock and Bedrock Mantle provider packages so core installs no longer pull AWS SDK dependencies unless those providers are installed.
- •Plugins: externalize Slack, OpenShell sandbox, and Anthropic Vertex so their runtime dependency cones install only when those plugins are installed.
- •Control UI/WebChat: add a persisted auto-scroll mode selector so users can keep the current near-bottom behavior, always follow streaming output, or turn automatic streaming scroll off and use the New messages button manually. Fixes #7648 and #81287. Thanks @BunsDev.
- •ACP: add
acp.fallbacksso ACP turns can try configured backup runtime backends when the primary backend is unavailable before any output is emitted. (#69542) Thanks @kaseonedge. - •Telegram: keep Bot API polling alive during main event-loop stalls by moving ingress to an isolated worker with a durable local spool. Fixes #81132. (#81746) Thanks @joshavant.
- •CLI/plugins: keep bare plugin and parent-command help on the lightweight path, avoiding plugin registry discovery before rendering help.
- •Gateway/session history: carry monotonic transcript message sequence through live updates and refresh SSE history when stale sequence input would otherwise append bad incremental state. (#81474) Thanks @samzong.
- •Security/sandbox: include Windows
USERPROFILEin the sandbox blocked home roots so credential-bearing binds (such as.codex,.openclaw, or.sshunder the Windows user profile) are denied even whenHOMEpoints at a different shell home. (#63074) Thanks @luoyanglang. - •Models config/auth: stop inferring provider env-var markers from broad
^[A-Z_][A-Z0-9_]*$strings, and resolve config-backed providerapiKeyvalues only through structured env SecretRefs (secrets.providers[id]/secrets.defaults), so unrelated env vars cannot accidentally become provider credentials. Thanks @sallyom. - •Media fetch: skip allocating and buffering the response body for bodyless media responses (HEAD probes and 204-style empty bodies), avoiding wasted heap on streams that carry no payload. Thanks @shakkernerd.
- •CLI/onboarding: forward provider-specific auth flags (e.g.
--openai-api-key) through the onboarding wizard so they reach provider auth methods viactx.opts, letting--openai-api-key "$OPENAI_API_KEY"skip the redundant "use existing env var?" prompt in non-interactive harnesses. (#81669) Thanks @sjf. - •CLI/migrate: drop trailing periods from Codex migrate item messages and
REASON_CODE_MESSAGESstrings so plan/result rows read as labels instead of sentence fragments. (#81705) Thanks @sjf. - •Slack: treat malformed private-file redirect
Locationheaders as unfollowable redirects instead of failing Slack media downloads. - •Plugins: discover provider plugins from
setup.providers[].envVarscredentials during provider discovery while keeping the deprecatedproviderAuthEnvVarsfallback. (#81542) Thanks @JARVIS-Glasses. - •Docs/Codex harness: clarify that per-agent
CODEX_HOMEisolates~/.codexwhile inheritedHOMEintentionally keeps.agentsdiscovery and subprocess user-home state available.
v2026.5.12-beta.6
openclaw 2026.5.12-beta.6
May 13, 2026
- •iMessage: stop sending visible
<media:image>placeholder text for media-only native image sends while preserving the internal echo key that prevents self-echo duplicate replies. (#81209) Thanks @homer-byte. - •Agents/sessions: create configured agent main sessions before first
sessions_sendor gateway send, so agent-to-agent messages no longer fail when the target agent has not started yet. - •gateway: pass Talk session scope to resolver [AI]. (#81379) Thanks @pgondhi987.
- •Gateway protocol: require v4 clients and stream explicit chat
deltaText/replaceframes so SDK clients can consume assistant updates without local diffing. (#80725) Thanks @samzong. - •GitHub Copilot: exchange OAuth tokens for Copilot API tokens on image understanding requests and route Gemini image payloads through Chat Completions, fixing Copilot Gemini image descriptions. (#80393, #80442) Thanks @afunnyhy.
- •Gateway: hide pending Node pairing commands, capabilities, and permissions until approval, and refresh the live approved surface when pairings change. (#80741) Thanks @samzong.
- •Plugins/Feishu/WhatsApp/Line: enforce inbound media size caps while reading download streams, avoiding full buffering of oversized attachments. (#81044, #81050) Thanks @samzong.
- •Plugins/install: limit install-time code safety scans to plugin-owned runtime entrypoints while keeping dependency manifest denylist checks, so trusted packages with large dependency trees no longer get blocked or warned on third-party runtime internals.
- •Config: serialize and retry semantic config mutations centrally, so concurrent commands can rebase safe changes instead of clobbering or hand-rolling command-local retry loops. (#76601)
- •Require approval for setup-code device pairing [AI]. (#81292) Thanks @pgondhi987.
- •Plugins/install: preserve third-party peer dependencies in the managed npm root when later plugin installs or updates recalculate the shared dependency tree. Thanks @shakkernerd.
- •Plugins/uninstall: prune managed third-party peer dependencies after their owning npm plugin is removed, without blocking plugin cleanup on peer-prune failures.
- •Docker: pin setup-time container paths so stale host
.envOpenClaw paths cannot leak into Linux containers. Fixes #80381. (#81105) Thanks @brokemac79. - •Channels/WeCom: refresh the official onboarding install to
@wecom/wecom-openclaw-plugin@2026.5.7and update existing managed npm installs instead of failing on the package directory. Fixes #79884. (#80390) Thanks @brokemac79. - •Anthropic: reseed Claude CLI fresh-session retries from bounded OpenClaw transcript history after session rotation, preventing conversation amnesia. Fixes #80905. (#80934) Thanks @bitloi.
v2026.5.12-beta.5
openclaw 2026.5.12-beta.5
May 13, 2026
- •gateway: pass Talk session scope to resolver [AI]. (#81379) Thanks @pgondhi987.
- •Gateway protocol: require v4 clients and stream explicit chat
deltaText/replaceframes so SDK clients can consume assistant updates without local diffing. (#80725) Thanks @samzong. - •GitHub Copilot: exchange OAuth tokens for Copilot API tokens on image understanding requests and route Gemini image payloads through Chat Completions, fixing Copilot Gemini image descriptions. (#80393, #80442) Thanks @afunnyhy.
- •Gateway: hide pending Node pairing commands, capabilities, and permissions until approval, and refresh the live approved surface when pairings change. (#80741) Thanks @samzong.
- •Plugins/Feishu/WhatsApp/Line: enforce inbound media size caps while reading download streams, avoiding full buffering of oversized attachments. (#81044, #81050) Thanks @samzong.
- •Config: serialize and retry semantic config mutations centrally, so concurrent commands can rebase safe changes instead of clobbering or hand-rolling command-local retry loops. (#76601)
- •Require approval for setup-code device pairing [AI]. (#81292) Thanks @pgondhi987.
- •Plugins/install: preserve third-party peer dependencies in the managed npm root when later plugin installs or updates recalculate the shared dependency tree. Thanks @shakkernerd.
- •Plugins/uninstall: prune managed third-party peer dependencies after their owning npm plugin is removed, without blocking plugin cleanup on peer-prune failures.
- •Docker: pin setup-time container paths so stale host
.envOpenClaw paths cannot leak into Linux containers. Fixes #80381. (#81105) Thanks @brokemac79. - •Channels/WeCom: refresh the official onboarding install to
@wecom/wecom-openclaw-plugin@2026.5.7and update existing managed npm installs instead of failing on the package directory. Fixes #79884. (#80390) Thanks @brokemac79. - •Anthropic: reseed Claude CLI fresh-session retries from bounded OpenClaw transcript history after session rotation, preventing conversation amnesia. Fixes #80905. (#80934) Thanks @bitloi.
- •Require explicit browser device pairing [AI]. (#81289) Thanks @pgondhi987.
- •Require Control UI pairing before proxy-scoped access [AI]. (#81288) Thanks @pgondhi987.
- •Installer: honor
--versionfor git installs and install from the checked-in lockfile, preventing recent dependency pins from tripping pnpm's minimum-release-age gate during tag installs.
v2026.5.12-beta.4
openclaw 2026.5.12-beta.4
May 13, 2026
- •Codex runtime: allow the official installed
@openclaw/codexpackage to use its private task-runtime SDK helper, fixingMODULE_NOT_FOUNDduring migrated OpenAI/Codex beta runs. - •Codex migration: make Enter activate the highlighted checkbox row before continuing, so
Skip for nowand bulk-selection rows work even when planned items start preselected. - •Codex harness: keep auth-profile-backed media tools such as
image_generateavailable when OpenAI auth lives in the agent's auth-profile store instead of environment variables. - •WhatsApp/install: allow Baileys' pinned libsignal git subdependency under pnpm 11 so source installs and local checks can complete.
- •fix(memory-wiki): require admin scope for ingest [AI]. (#80897) Thanks @pgondhi987.
- •memory-wiki: require write scope for Obsidian search [AI]. (#80904) Thanks @pgondhi987.
- •Build: skip copied metadata for bundled plugins that are excluded from build entries, preventing update/status rebuilds from advertising missing QQ Bot runtime files. (#80925)
- •Control UI/sessions: nest subagent sessions under their parent session in the session picker dropdown using a visual
└─prefix, making the parent-child relationship clear. Fixes #77628. (#78623) Thanks @chinar-amrutkar. - •Auto-reply: surface a visible error when the configured model backend fails and fallback produces no visible reply, while preserving intentional silent turns and side-effect-only deliveries. (#80917) Thanks @dutifulbob.
- •Agents/exec: skip redundant heartbeat wake-ups for subagent session exec completions, preventing spurious LLM invocations on parent sessions. Fixes #66748. (#66749) Thanks @ggzeng.
- •Provider streams: keep OpenAI-compatible SSE and JSON fallback streams draining across split chunks and fail Azure Responses streams with a bounded first-event diagnostic instead of stalling. Refs #80926. (#80927) Thanks @galiniliev and @CaptainTimon.
- •Agents: rewrite generic provider internal errors with support request IDs into user-friendly transient error copy. (#49401) Thanks @y471823206.
- •WhatsApp: finish handling pending debounced inbound messages before closing the socket. (#81246) Thanks @mcaxtr.
- •Telegram: preserve supported HTML tags in visible replies and durable mirrors so formatted messages render correctly instead of degrading to escaped text. (#80977) Thanks @obviyus.
- •Gateway/OpenAI HTTP: honor
max_completion_tokensandmax_tokenson inbound/v1/chat/completionsrequests so client-provided token caps reach the upstream provider viastreamParams.maxTokens, withmax_completion_tokenstaking precedence when both are sent. Thanks @Lellansin.
v2026.5.12-beta.3
openclaw 2026.5.12-beta.3
May 12, 2026
- •Codex harness: keep auth-profile-backed media tools such as
image_generateavailable when OpenAI auth lives in the agent's auth-profile store instead of environment variables. - •WhatsApp/install: allow Baileys' pinned libsignal git subdependency under pnpm 11 so source installs and local checks can complete.
- •Codex harness: keep auth-profile-backed media tools such as
image_generateavailable when OpenAI auth lives in the agent's auth-profile store instead of environment variables. - •fix(memory-wiki): require admin scope for ingest [AI]. (#80897) Thanks @pgondhi987.
- •memory-wiki: require write scope for Obsidian search [AI]. (#80904) Thanks @pgondhi987.
- •Build: skip copied metadata for bundled plugins that are excluded from build entries, preventing update/status rebuilds from advertising missing QQ Bot runtime files. (#80925)
- •Control UI/sessions: nest subagent sessions under their parent session in the session picker dropdown using a visual
└─prefix, making the parent-child relationship clear. Fixes #77628. (#78623) Thanks @chinar-amrutkar. - •Auto-reply: surface a visible error when the configured model backend fails and fallback produces no visible reply, while preserving intentional silent turns and side-effect-only deliveries. (#80917) Thanks @dutifulbob.
- •Agents/exec: skip redundant heartbeat wake-ups for subagent session exec completions, preventing spurious LLM invocations on parent sessions. Fixes #66748. (#66749) Thanks @ggzeng.
- •Provider streams: keep OpenAI-compatible SSE and JSON fallback streams draining across split chunks and fail Azure Responses streams with a bounded first-event diagnostic instead of stalling. Refs #80926. (#80927) Thanks @galiniliev and @CaptainTimon.
- •Agents: rewrite generic provider internal errors with support request IDs into user-friendly transient error copy. (#49401) Thanks @y471823206.
- •Gateway/OpenAI HTTP: honor
max_completion_tokensandmax_tokenson inbound/v1/chat/completionsrequests so client-provided token caps reach the upstream provider viastreamParams.maxTokens, withmax_completion_tokenstaking precedence when both are sent. Thanks @Lellansin. - •Models/OpenAI CLI auth: make
openclaw models auth login --provider openaistart the ChatGPT/Codex account login by default, while--method api-keyremains the explicit OpenAI API-key setup path. - •Google/Gemini: normalize retired Gemini 3 Pro Preview ids inside SDK OAuth auth-result default config patches, so helper-built provider auth flows emit
google/gemini-3.1-pro-previewfor Gemini 3.1 testing. - •Google/Gemini: normalize retired Gemini 3 Pro Preview ids returned by direct
openclaw models auth login --set-defaultprovider auth flows before writing config, so Gemini testing targetsgoogle/gemini-3.1-pro-preview.
v2026.5.12-beta.2
openclaw 2026.5.12-beta.2
May 12, 2026
- •Codex harness: keep auth-profile-backed media tools such as
image_generateavailable when OpenAI auth lives in the agent's auth-profile store instead of environment variables. - •WhatsApp/install: allow Baileys' pinned libsignal git subdependency under pnpm 11 so source installs and local checks can complete.
- •Codex harness: keep auth-profile-backed media tools such as
image_generateavailable when OpenAI auth lives in the agent's auth-profile store instead of environment variables. - •fix(memory-wiki): require admin scope for ingest [AI]. (#80897) Thanks @pgondhi987.
- •memory-wiki: require write scope for Obsidian search [AI]. (#80904) Thanks @pgondhi987.
- •Build: skip copied metadata for bundled plugins that are excluded from build entries, preventing update/status rebuilds from advertising missing QQ Bot runtime files. (#80925)
- •Control UI/sessions: nest subagent sessions under their parent session in the session picker dropdown using a visual
└─prefix, making the parent-child relationship clear. Fixes #77628. (#78623) Thanks @chinar-amrutkar. - •Auto-reply: surface a visible error when the configured model backend fails and fallback produces no visible reply, while preserving intentional silent turns and side-effect-only deliveries. (#80917) Thanks @dutifulbob.
- •Agents/exec: skip redundant heartbeat wake-ups for subagent session exec completions, preventing spurious LLM invocations on parent sessions. Fixes #66748. (#66749) Thanks @ggzeng.
- •Provider streams: keep OpenAI-compatible SSE and JSON fallback streams draining across split chunks and fail Azure Responses streams with a bounded first-event diagnostic instead of stalling. Refs #80926. (#80927) Thanks @galiniliev and @CaptainTimon.
- •Agents: rewrite generic provider internal errors with support request IDs into user-friendly transient error copy. (#49401) Thanks @y471823206.
- •Gateway/OpenAI HTTP: honor
max_completion_tokensandmax_tokenson inbound/v1/chat/completionsrequests so client-provided token caps reach the upstream provider viastreamParams.maxTokens, withmax_completion_tokenstaking precedence when both are sent. Thanks @Lellansin. - •Models/OpenAI CLI auth: make
openclaw models auth login --provider openaistart the ChatGPT/Codex account login by default, while--method api-keyremains the explicit OpenAI API-key setup path. - •Google/Gemini: normalize retired Gemini 3 Pro Preview ids inside SDK OAuth auth-result default config patches, so helper-built provider auth flows emit
google/gemini-3.1-pro-previewfor Gemini 3.1 testing. - •Google/Gemini: normalize retired Gemini 3 Pro Preview ids returned by direct
openclaw models auth login --set-defaultprovider auth flows before writing config, so Gemini testing targetsgoogle/gemini-3.1-pro-preview.
Showing 30 of 120