openclaw 2026.10.2

openclaw 2026.10.2

on Node.js NPM

2026.10.2

Highlights

• Updates from 2026.10.1: the first upgrade from stable 2026.10.1 now completes cleanly, successful in-place updates no longer end in errors, and Windows, cloned-filesystem, and private-Node update paths finish instead of stalling or rolling back. (#168849, #169031, #165233, #166530, #168968, #164677, #165257) Thanks @RomneyDa, @jarvisnextgeneration20-lang, and @MrJanvar.
• Doctor and update recovery: Doctor no longer stops on residual legacy imports, stale Gateway locks, slow state inspection, memory reindex locks, or allowlists for removed channel accounts, and stale-receipt sessions keep their current data. (#166397, #165355, #165417, #168161, #166517, #167651, #165775) Thanks @coolcoolwcr, @obviyus, @Tosko4, @noelff, @oshunter, @donquiche61, and @RomneyDa.
• Provider-native compaction: OpenAI and Anthropic API-key routes now default to provider-native compaction, and compaction recovers when the primary auth profile is cooling down. (#168164, #166459) Thanks @obviyus and @hawkit.
• Secret redaction: credentials that cross a chunk boundary in long tool output are now masked, and redaction of large text no longer stalls or overflows the stack while running several times faster. (#161480, #166701, #167943) Thanks @eleqtrizit.
• Prompt-cache stability: Anthropic conversation checkpoints, enriched user prompts, tool results, and inter-session provenance stay byte-identical across follow-ups, replays, Gateway restarts, and subagent completions, so cached prefixes keep hitting. (#168042, #167938, #168392, #167898, #169130, #169238) Thanks @RomneyDa.
• Gateway responsiveness: Control UI reconnects, model changes with large plugins, dashboard title work, and catalog loading no longer freeze the Gateway or hang new sessions. (#167374, #161267, #162689, #166089, #166376) Thanks @jalehman, @obviyus, @ericcaiwx-star, @cursoragent, @dimonnld, and @dprev.

Changes

• Defaulted OpenAI and Anthropic API-key routes to provider-native compaction. (#168164) Thanks @obviyus.
• Reported finalized update successes and suppressed channels as warnings instead of failures. (#169037)
• Stopped live npm dist-tag drift from failing already-validated release candidates. (#168836) Thanks @RomneyDa.

Fixes

• Fixed credential leaks across redaction chunk boundaries and redaction stalls on large tool output. (#161480) Thanks @eleqtrizit.
• Fixed replies lost while an agent finishes starting, streamed Telegram replies vanishing when the replacement message never lands, and Telegram treating local owner rejection as ambiguous delivery. (#168826, #164649, #167470) Thanks @xiaozishan, @jayzhou2309, @obviyus, @jmar5439, and @mgr-nick.
• Fixed Claude CLI sessions showing runtime prompts as user messages, routed CLI prompts appearing on the owner's side of history, lost replies after long streamed turns, and post-turn compaction failing without an Anthropic API key. (#166080, #163521, #153545, #162066) Thanks @Marvinthebored, @Peetiegonzalez, @RomneyDa, @rogeriochaves, @zhangguiping-xydt, @obviyus, @methylester, @llmsommelier, and @ajmtrz.
• Fixed subagent and ACP answers being truncated, superseded child answers delivered by late receipts, and requester turns stopping when completion delivery expires. (#165800, #162843, #166139, #164282) Thanks @yetval, @holgergruenhagen, @zyz619963502zyz, @Yun-0000, @michaeljgood71, @Oldrich333, and @obviyus.
• Fixed runs aborted as stalled after completed async tools or while waiting on plugin approval, context-engine advancement lost after steering, and the tool loop refilling from the wrong context window. (#166997, #161821, #168394, #166120) Thanks @SunnyShu0925, @hannesrudolph, @fransqaas, @obviyus, @robertoronderosjr, @ruel225, and @igs-rogenlo.
• Fixed OpenAI turns failing on regex-lookaround tool schemas, ChatGPT websocket expiry and 16 MiB SSE limits, strict chat templates after runtime notices, and Code Mode calls with repeated tool-call IDs. (#166999, #167063, #166853, #167309, #165210) Thanks @scs0209, @cursoragent, @obviyus, @adamjgmiller, @Jackten, @jlapenna, and @RomneyDa.
• Fixed Codex sessions stopping after thread unloads, leaked app-server clients after model discovery timeouts, provider failures shown as a silent stop, and max thinking dropping on cron and hook turns. (#166693, #168365, #165488, #165444) Thanks @jalehman, @Oldrich333, and @obviyus.
• Fixed sessions failing every turn after a truncated image, the agent disowning earlier image answers, and memory_search snake_case arguments being rejected through tool_call. (#166564, #166165, #158632) Thanks @jayzhou2309, @mirasrael, @nogikeyaksh, @masatohoshino, and @obviyus.
• Fixed scheduled cron runs losing the Gateway plugin registry, manual cron runs losing tool access, runs rejected after catalog publication, and preflight compaction skipped for completion turns. (#166991, #168037, #168410, #163117) Thanks @67-luck, @lucianosmori, @obviyus, @RomneyDa, @SunnyShu0925, and @AXEG0.
• Fixed the Control UI hold-to-dictate button stopping on release, typed /stop letting queued turns restart the agent, repeated browser replies after background work, and pending Home creation notices piling up. (#166843, #167860, #166362, #168239) Thanks @alfredjbclaw, @obviyus, @masatohoshino, and @shakkernerd.
• Fixed update failures from absolute avatar paths, refused finalize steps leaving the Gateway stopped, and the SQLite worker launch error hidden behind a TypeError. (#164638, #166548, #165373) Thanks @nitinjwadhawan and @Shirleyyyhk.
• Fixed worker capacity leaks after forced descendant cleanup and browser tab eviction at the managed tab cap. (#168746, #166666) Thanks @aniruddhaadak80, @ruel225, and @obviyus.
• Fixed Feishu replaying obsolete streaming previews, Bedrock custom provider routes using the wrong region, the egress proxy CA rejected by strict TLS clients, and quoted Windows shell arguments in the node host. (#166610, #164406, #165818, #158160) Thanks @rudycelekli, @Takhoffman, @Ayushdevo, @obviyus, @kai-ocean-kurt, @vortexopenclaw, @RyanSandoval, @Dimitri-lcht, and @igs-rogenlo.
• Fixed macOS crashes: the Swift compiler crash in the sidebar picker, Rosetta segfaults, Intel worker startup, and managed llama.cpp setup on macOS below 13.3. (#165573, #165088, #161876, #163358) Thanks @shakkernerd, @NovaUnboundAi, @VACInc, and @xXG0DLessXx.
• Logged update config fallback diagnostics as warnings and unblocked production lint suppression checks. (#165539, #166841) Thanks @Patrick-Erichsen.

Complete contribution record

This audited record covers the complete v2026.10.1..64cec48 history: 85 in-range PRs + 0 retained seed-only PRs = 85 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

• PR #165573 Related #165560. Thanks @shakkernerd.
• PR #165233
• PR #166397 Related #166204. Thanks @coolcoolwcr.
• PR #166459 Related #166436. Thanks @hawkit.
• PR #166530
• PR #166548 Related #166509. Thanks @Shirleyyyhk.
• PR #166610 Thanks @rudycelekli and @Takhoffman.
• PR #166693 Thanks @jalehman.
• PR #166999 Related #166877. Thanks @scs0209 and @cursoragent and @obviyus and @adamjgmiller.
• PR #166666 Thanks @ruel225 and @obviyus.
• PR #166564 Related #166515. Thanks @jayzhou2309 and @mirasrael.
• PR #167063 Related #166708. Thanks @Jackten.
• PR #166853 Thanks @Jackten.
• PR #166997 Related #166770. Thanks @SunnyShu0925 and @hannesrudolph.
• PR #167309 Related #167305. Thanks @jlapenna.
• PR #166991 Related #166756. Thanks @67-luck and @lucianosmori.
• PR #166843 Related #166842. Thanks @alfredjbclaw and @obviyus.
• PR #167374 Thanks @jalehman.
• PR #161267 Thanks @obviyus.
• PR #167470 Related #167416. Thanks @obviyus and @mgr-nick.
• PR #168037 Thanks @obviyus.
• PR #168239
• PR #168365
• PR #167860 Related #167859. Thanks @masatohoshino.
• PR #168410 Thanks @RomneyDa.
• PR #168746 Related #160643. Thanks @aniruddhaadak80.
• PR #168394 Related #168014. Thanks @robertoronderosjr.
• PR #168826 Related #157814. Thanks @xiaozishan.
• PR #164649 Related #164610, #164611. Thanks @jayzhou2309 and @obviyus and @jmar5439.
• PR #164282 Related #164141. Thanks @Oldrich333 and @obviyus.
• PR #165088
• PR #161876
• PR #153545 Related #150132. Thanks @zhangguiping-xydt and @obviyus and @methylester.
• PR #162689 Related #162420. Thanks @ericcaiwx-star and @cursoragent and @obviyus and @dimonnld.
• PR #164638 Thanks @nitinjwadhawan.
• PR #161821 Thanks @fransqaas and @obviyus.
• PR #163117 Related #162853. Thanks @SunnyShu0925 and @AXEG0.
• PR #158632 Related #158631. Thanks @masatohoshino and @obviyus.
• PR #158160 Related #142847. Thanks @Dimitri-lcht and @igs-rogenlo.
• PR #162066 Related #153174. Thanks @rogeriochaves and @llmsommelier and @RomneyDa and @ajmtrz.
• PR #164406 Related #164379. Thanks @Ayushdevo and @obviyus and @kai-ocean-kurt.
• PR #164677 Related #164525. Thanks @jarvisnextgeneration20-lang.
• PR #165257 Related #164113. Thanks @MrJanvar.
• PR #165355 Related #165214.
• PR #165373
• PR #166089 Related #166084. Thanks @ericcaiwx-star and @obviyus.
• PR #163358 Related #128879. Thanks @NovaUnboundAi and @VACInc and @xXG0DLessXx.
• PR #166376 Related #161409. Thanks @dprev.
• PR #166517 Related #166450. Thanks @noelff.
• PR #167651 Related #134570. Thanks @oshunter.
• PR #165210
• PR #165444 Related #164812. Thanks @Oldrich333 and @obviyus.
• PR #166362 Related #166344. Thanks @shakkernerd.
• PR #165818 Related #139151. Thanks @vortexopenclaw and @RyanSandoval.
• PR #166165 Related #166134. Thanks @jayzhou2309 and @nogikeyaksh.
• PR #165800 Related #162777. Thanks @yetval and @holgergruenhagen.
• PR #162843 Related #162777. Thanks @zyz619963502zyz and @yetval and @holgergruenhagen.
• PR #166139 Related #142850. Thanks @Yun-0000 and @michaeljgood71.
• PR #166120 Related #166076. Thanks @ruel225 and @igs-rogenlo.
• PR #165488
• PR #163521 Thanks @rogeriochaves.
• PR #166080 Thanks @Marvinthebored and @Peetiegonzalez and @RomneyDa.
• PR #168851 Thanks @RomneyDa.
• PR #161480 Thanks @eleqtrizit.
• PR #166701
• PR #167943
• PR #165775 Related #158239. Thanks @donquiche61.
• PR #168161 Related #168031. Thanks @obviyus and @Tosko4.
• PR #168164 Thanks @obviyus.
• PR #168849 Thanks @RomneyDa.
• PR #168968 Thanks @RomneyDa.
• PR #166841
• PR #168569 Related #168014. Thanks @robertoronderosjr.
• PR #165417
• PR #168042
• PR #168392
• PR #167938
• PR #167898
• PR #169130 Thanks @RomneyDa.
• PR #165539 Thanks @Patrick-Erichsen.
• PR #169238 Thanks @RomneyDa.
• PR #169225 Thanks @RomneyDa.
• PR #169031 Thanks @RomneyDa.
• PR #169037
• PR #168836 Thanks @RomneyDa.

Release verification

• npm package: https://www.npmjs.com/package/openclaw/v/2026.10.2
• registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.10.2.tgz
• integrity: sha512-FuLLF+WI12ypwQ0r+pcKDcmB+kXus5N4QClaKEnaAn6GN4I1AitkOhwv0GFl2rVKpvuUBDQWIfglHNy6Trv/EQ==
• release SHA: b8952d477f0c932d8ddc6da5c89cab5a169b6ff1
• full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.10.2/release-evidence.md
• release publish: https://github.com/openclaw/openclaw/actions/runs/38206442814
• npm preflight: https://github.com/openclaw/openclaw/actions/runs/38181105939
• full release validation: https://github.com/openclaw/openclaw/actions/runs/38180680775
• plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/38206893097
• plugin ClawHub submission: https://github.com/openclaw/openclaw/actions/runs/38206895444; public finalization and exact artifact verification follow terminal release-parent completion
• plugin ClawHub bootstrap: not needed
• OpenClaw npm publish: https://github.com/openclaw/openclaw/actions/runs/38207115053
• npm Telegram beta E2E: not supplied
• Android APK: skipped — apps/android/version.json is 2026.8.2, release train is 2026.10.2; run pnpm android:version:pin -- --from-gateway before the next tag.