openclaw 2026.5.3-beta.2

OpenClaw 2026.5.3 beta 2

on Node.js NPM

2026.5.3

Highlights

• Plugins/file-transfer: add bundled file-transfer plugin with file_fetch, dir_list, dir_fetch, and file_write agent tools for binary file ops on paired nodes; default-deny per-node path policy under plugins.entries.file-transfer.config.nodes with operator approval, symlink traversal refused by default (opt-in followSymlinks), and a 16 MB byte ceiling per round-trip. (#74742) Thanks @omarshahine.
• Plugins/install: harden official plugin install, uninstall, update, onboarding, ClawHub fallback, npm dependency-state reporting, and beta-channel update paths so externalized plugins behave like first-class package installs.
• Gateway/performance: trim startup and Control UI hot paths by lazy-loading plugin/runtime discovery, cron, schema, shutdown, sessions, and model metadata work only when needed.
• Channels/replies: improve Discord status reactions and degraded transport reporting, add WhatsApp Channel/Newsletter targets, and tighten Telegram, Feishu, Matrix, Microsoft Teams, and Slack delivery/recovery behavior.
• Install/update: recover broken macOS LaunchAgent upgrades, reject source-only plugin packages before runtime load, and repair stale Gateway/plugin state during updates and doctor runs.
• Agent/runtime reliability: preserve streamed provider replies, delayed A2A session replies, prompt/tool delivery, memory recall, web search provider discovery, and provider-specific thinking/model metadata across common edge cases.

Changes

• Plugins/onboarding: let Manual setup install optional official plugins, including ClawHub-backed diagnostics with npm fallback, and expose the external Codex plugin as a selectable provider setup choice. Thanks @vincentkoc.
• Plugins/CLI/update: include package dependency install state in openclaw plugins list --json, try plugin @beta updates first on the beta OpenClaw channel, and fall back to default/latest when no plugin beta release exists.
• Plugins/ClawHub: annotate 429 errors with reset windows and unauthenticated higher-rate-limit hints, so operators can tell when downloads recover and when signing in helps. Thanks @RomneyDa.
• Gateway/performance: lazy-load early runtime discovery, shutdown hooks, cron, channel-config schema metadata, restart sentinels, and maintenance timers after readiness; trim duplicate plugin auto-enable work and add startup CPU/profile controls.
• Gateway/config: stop Gateway startup and hot reload from auto-restoring invalid config; invalid config now fails closed and openclaw doctor --fix owns last-known-good repair.
• Discord/status: let explicit reaction tool calls opt into tracking later tool progress with trackToolCalls: true, share tool display emoji mapping, and surface degraded Discord transport or gateway event-loop starvation in status output. (#76327) Thanks @joshavant.
• Channels/WhatsApp: support explicit WhatsApp Channel/Newsletter @newsletter outbound message targets with channel session metadata instead of DM routing. Fixes #13417; carries forward the narrow outbound target idea from #13424. Thanks @vincentkoc and @agentz-manfred.
• Agents/tools: skip optional media and PDF tool factories when the effective tool denylist already blocks them, avoiding unnecessary hot-path setup for tools that will be filtered out before model use. (#76773) Thanks @dorukardahan.
• Agents/sandbox: store sandbox container and browser registry entries as per-runtime shard files, reducing unrelated session lock contention while openclaw doctor --fix migrates legacy monolithic registry files. (#74831) Thanks @luckylhb90.
• Tools/BTW: add /side as a text and native slash-command alias for /btw side questions.
• Exec approvals: add a tree-sitter-backed shell command explainer for future approval and command-review surfaces. (#75004) Thanks @jesse-merhi.
• QA/Mantis: add a pnpm openclaw qa mantis discord-smoke runner and manual GitHub workflow that verify the Mantis Discord bot can see the configured guild/channel, post a smoke message, add a reaction, and upload artifacts.

Fixes

• Plugins/update: keep beta-installed OpenClaw package updates on the beta plugin channel even when config still says stable, so Discord and other externalized plugins update from compiled @beta packages instead of stale source-only latest artifacts.

• Agents/tools: stop treating tools.deny: ["write"] as an implicit apply_patch deny; operators who want to block patch writes should deny apply_patch or group:fs explicitly. Fixes #76749. (#76795) Thanks @Nek-12 and @hclsys.

• Plugins/release: verify published plugin npm tarballs expose compiled runtime entries after publish, catching TS-only package artifacts before release closeout. Thanks @vincentkoc.

• CLI/message: exit cleanly with a nonzero status when message-command plugin registry loading fails before dispatch, preventing openclaw-message children from staying alive after plugin load errors. Fixes #76168.

• Gateway/update: recover an installed-but-unloaded macOS LaunchAgent after package updates, rerun Gateway health/version/channel readiness checks, and print restart, reinstall, and rollback guidance before reporting update failure. (#76790) Thanks @jonathanlindsay.

• CLI/plugins: explain when a missing plugin command alias belongs to a bundled plugin that is disabled by default, including the openclaw plugins enable <plugin> repair command. (#76835)

• Google Meet: route stateful CLI session commands through the gateway-owned runtime so joined realtime sessions survive after the starting CLI process exits. Fixes #76344. Thanks @coltonharris-wq.

• Memory/status: split builtin sqlite-vec store readiness from embedding-provider readiness in memory status --deep and openclaw status, so local vector-store failures no longer look like provider failures and provider failures no longer hide a healthy local vector store.

• CLI/doctor: trust a ready gateway memory probe when CLI-side active memory backend resolution is unavailable, preventing false "No active memory plugin is registered" warnings for healthy runtime setups. Fixes #76792. Thanks @som-686.

• Memory/status: keep plain openclaw memory status and openclaw memory status --json on the cheap read-only path by reserving vector and embedding provider probes for --deep or --index. Fixes #76769. Thanks @daruire.

• Telegram: suppress stale same-session replies when a newer accepted message arrives before an older in-flight Telegram dispatch finalizes. Fixes #76642. Thanks @chinar-amrutkar.

• Slack: collapse routine Socket Mode pong-timeout reconnects into one OpenClaw reconnect line and suppress the duplicate Slack SDK pong warning.

• Gateway/diagnostics: abort-drain embedded runs after an extended no-progress stall so a single dead session no longer leaves queued Discord/channel turns blocked behind repeated recovery=none liveness warnings.

• Plugins/ClawHub: accept the live artifact resolver kind/sha256 field names alongside the typed artifactKind/artifactSha256 form so clawhub: installs of npm-pack and legacy ZIP packages no longer miss downloadable artifacts. Thanks @RomneyDa.

• Control UI/Sessions: avoid full sessions.list reloads for chat-turn sessions.changed payloads, so large session stores no longer add multi-second delays while chat responses are being delivered. (#76676) Thanks @VACInc.

• Gateway/watch: run doctor --fix --non-interactive once and retry when the dev Gateway child exits during startup, so stale local plugin install/config state does not leave the tmux watch session disappearing without a repair attempt.

• Doctor/Telegram: warn when selected Telegram quote replies can suppress streaming.preview.toolProgress, and document the replyToMode trade-off without changing runtime delivery. Fixes #73487. Thanks @GodsBoy.

• Channels/Discord: send a best-effort native typing cue immediately after an inbound DM is accepted, so slow pre-dispatch turns show Discord liveness before queueing, context assembly, model, or tool work starts. Fixes #76417. Thanks @mlopez14.

• Plugins/install: reject source-only TypeScript package installs and installed plugin packages that are missing compiled runtime output, so broken npm artifacts fail at install/discovery time instead of falling through jiti and surfacing later as unavailable providers. Fixes #76720.

• Discord/status: honor explicit messages.statusReactions.enabled: true in tool-only guild channels so queued ack reactions can progress through thinking/done lifecycle reactions instead of stopping at the initial emoji. Thanks @Marvinthebored.

• Discord/native commands: compare Discord-normalized slash-command descriptions and localized descriptions during reconcile so CJK or multiline command text no longer triggers redundant startup PATCH bursts and rate-limit 429s. Fixes #76587. Thanks @zhengsx.

• Agents/OpenAI: omit Chat Completions reasoning_effort for gpt-5.4-mini only when function tools are present while preserving tool-free Chat and Responses reasoning support, preventing Telegram-routed fallback runs from hanging after OpenAI rejects tool payloads. Fixes #76176. Thanks @ThisIsAdilah and @chinar-amrutkar.

• Telegram: reuse the successful startup getMe probe for grammY polling startup and continue into getUpdates after recoverable deleteWebhook cleanup failures, reducing high-latency Bot API control-plane calls before long polling starts. Refs #76388. Thanks @jackiedepp.

• Gateway/diagnostics: merge session id/key aliases in diagnostic session state and activity tracking so completed runs no longer leave stale queued work behind that keeps liveness samples at warning level.

• Agents/models: forward model maxTokens as the default output-token limit for OpenAI-compatible Responses and Completions transports when no runtime override is provided, preventing provider defaults from silently truncating larger outputs. (#76645) Thanks @joeyfrasier.

• macOS CLI/onboarding: honor sensitive wizard text steps in openclaw-mac wizard with termios no-echo input, suppressing saved credential previews while preserving long API keys and gateway tokens. Fixes #76698. Thanks @anurag-bg-neu and @sallyom.

• Control UI/Skills: fix skill detail modal silently failing to open in all browsers by deferring showModal() until the dialog element is connected to the DOM; the Lit ref callback fired before connection causing a DOMException: HTMLDialogElement.showModal: Dialog element is not connected on every skill click. Thanks @nickmopen.

• Gateway/update: run doctor --non-interactive --fix after Control UI global package updates before reporting success, so legacy config is migrated before the gateway restart. Thanks @stevenchouai.

• Gateway/cron: stop a lazy cron startup that loses a hot-reload race, preventing the old cron service from starting after reload has already replaced cron state.

• CLI/plugins: warn when npm plugin installs remain shadowed by a failing config-selected source and surface the repair path in plugins doctor. Thanks @LindalyX-Lee.

• Agents/Telegram: preserve explicit reply and quote context in embedded model prompts without letting quoted text drive prompt-local image loading. Fixes #76419. (#76659) Thanks @cheechnd.

• Active Memory: apply setupGraceTimeoutMs to the embedded recall runner as well as the outer prompt-build watchdog, so very-cold first recalls keep the configured setup grace end-to-end. (#74480) Thanks @volcano303.

• Channels/Feishu: cap how long the per-chat sequential queue blocks subsequent same-key tasks behind a single in-flight task (5 min default), so a single hung dispatch no longer leaves later same-chat messages in queued state until gateway restart; the stuck task continues running but is evicted from the blocking chain and a warning is logged. Fixes #70133. (#76687) Thanks @martingarramon and @bek91.

• Active Memory: skip scoped Telegram forum-topic conversation ids (containing :) when resolving the embedded recall run channel, falling back to messageProvider instead, so Active Memory no longer throws a bundled-plugin dirName validation error in forum-topic sessions. Fixes #76704.

• Agents/tools: defer automatic PDF model/auth resolution until the PDF tool is used, keeping agent-turn tool prep from probing auth profiles on messages without PDFs while preserving explicit PDF model registration. Fixes #76644. Thanks @hclsys.

• CLI/config: keep JSON dry-run patches validating touched channel configuration against bundled channel schemas even when the patch only contains SecretRef objects.

• Plugins/tools: keep disabled bundled tool plugins out of explicit runtime allowlist ownership and fall back from loaded-but-empty channel registries to tool-bearing plugin registries, so Active Memory can use bundled memory-core search/get tools even when memory-lancedb is disabled. Fixes #76603. Thanks @jwong-art.

• Plugins/install: run npm install from the managed npm-root manifest so installing one @openclaw/* plugin preserves already installed sibling plugins instead of pruning them. Fixes #76571. (#76602) Thanks @byungskers and @crpol.

• Plugins/context-engine: include the selected plugins.slots.contextEngine plugin in the gateway startup load plan so external context-engine plugins without activation.onStartup in their manifest are loaded before any agent turn resolves the active engine; prevents the "Context engine X is not registered; falling back to default engine legacy" warning after gateway startup. Fixes #76576. Thanks @hclsys.

• Plugins/tools: restore on-demand registry load for path-based plugins (origin "config") so tool factories registered via plugins.load.paths are resolved at agent request time when no pre-warmed channel registry is present; prevents "unknown method" errors after gateway startup. Fixes #76598. Thanks @hclsys.

• Plugins/hooks: include explicitly enabled hook-capable plugins in the Gateway startup runtime scope so embedded PI runs can see their before_prompt_build and agent_end hooks. Fixes #76649. Thanks @wwf3045 and @MkDev11.

• Plugins/OpenCode: expose Claude thinking profiles through the lightweight provider policy surface so directive and session validation keep xhigh, adaptive, and max for opencode/claude-opus-4-7 instead of remapping xhigh to high. Fixes #76648. Thanks @aaajiao.

• Channels/QQ Bot: resolve structured clientSecret SecretRefs before QQ token exchange, expose the QQ Bot secret contract to secrets tooling, and reject legacy secretref:/... marker strings. (#74772) Thanks @xialonglee.

• Agents: keep active streamed provider replies alive by refreshing guarded fetch timeouts on raw body chunks and surface true prompt stream timeouts as explicit errors instead of partial assistant fragments. Fixes #76307. (#76633) Thanks @MkDev11.

• Plugins/externalization: keep official ACPX, Google Chat, and LINE install specs on production package names, leaving beta-tag probing to the explicit OpenClaw beta update channel. Thanks @vincentkoc.

• CLI/doctor: keep missing-plugin repair from overriding official catalog metadata with runtime fallbacks, so ACPX repairs preserve the official npm spec during the externalization rollout. Thanks @vincentkoc.

• CLI/doctor: match stale bundled-plugin install records by exact parsed package name so doctor does not remove external npm or ClawHub records that only share an OpenClaw package-name prefix.

• Plugins/catalog: preserve ClawHub install specs when generating the packaged channel catalog so future storepack-first channel plugins keep their remote source instead of becoming npm-only. Thanks @vincentkoc.

• Plugins/catalog: pin bare npm specs from prerelease external channel catalog entries to the catalog entry version, so beta catalogs do not silently install the latest stable package.

• Plugins/update: treat catalog-matched official npm updates and OpenClaw-authored externalized-bundled npm bridges as trusted official installs so launch-code plugins can update or migrate out of the bundled tree without scanner false positives. Thanks @vincentkoc.

• Plugins/onboarding: fall back from ClawHub to npm only for missing package/version errors, keeping integrity and verification failures fail-closed during storepack rollout. Thanks @vincentkoc.

• CLI/onboarding: mask credential inputs (model-auth provider API keys, gateway tokens and passwords, web-search provider keys, and skill env-var values) in the interactive openclaw onboard wizard so pasted secrets no longer echo into terminal scrollback, Start-Transcript logs, or screenshots; existing tokens/passwords are preserved through a masked-preview confirm step before the sensitive prompt. Thanks @anurag-bg-neu.

• Control UI/Talk: fix Talk (OpenAI Realtime WebRTC) CORS failure by stripping server-side-only attribution headers (originator, version, User-Agent) from browser offer headers; api.openai.com/v1/realtime/calls only allows authorization and content-type in its CORS preflight, so forwarding these headers caused the browser SDP exchange to fail. Fixes #76435. Thanks @hclsys.

• Chat delivery: make /verbose on|full|off changes affect subsequent tool-use chat bubbles again, including channels with draft preview tool progress enabled, while preserving one-shot verbose directives.

• CLI/logs: auto-reconnect openclaw logs --follow on transient gateway disconnects with bounded backoff, stderr retry warnings, [logs] gateway reconnected recovery notices, and JSON notice records while still exiting immediately on non-recoverable auth or configuration errors. Fixes #74782. (#75059, #75372) Thanks @shashank-poola and @RomneyDa.

• Codex/WhatsApp: keep the message dynamic tool available when Codex source replies are configured for message-tool delivery, so coding-profile chat agents do not complete turns privately without a visible channel reply. Fixes #76660. (#76663) Thanks @VishalJ99.

• Codex/heartbeat: send heartbeat-specific initiative guidance through Codex turn-scoped collaboration-mode instructions, keeping ordinary message-tool chat turns in Default mode without heartbeat prompt leakage. Thanks @pashpashpash.

• Plugins/onboarding: trust optional official plugin and web-search installs selected from the official catalog so npm security scanning treats them like other source-linked official install paths. Thanks @vincentkoc.

• Agents/web_search: keep installed runtime provider discovery enabled when web-search metadata is missing, so externally installed official providers such as Brave remain visible to agent and cron turns instead of falling back to bundled-only lookup. Fixes #76626. Thanks @amknight.

• Tests/plugins: expose the Discord npm onboarding Docker lane as a package script and assert planned Docker lanes point at real scripts, so external-channel onboarding coverage can actually run. Thanks @vincentkoc.

• Plugins/ClawHub: explain unreleased ClawHub plugin artifacts as a rollout-state fallback to npm: installs instead of leaking raw archive metadata fields. Thanks @vincentkoc.

• Tests/onboarding: assert packaged channel onboarding leaves openclaw channels status --json and plain openclaw status showing the configured channel, covering the empty Channels table regression path. Thanks @vincentkoc.

• Microsoft Teams: persist sent-message markers across Gateway restarts so follow-up replies to recent bot messages keep resolving the original conversation instead of dropping out after restart, with marker TTLs preserved on best-effort recovery. (#75585) Thanks @amknight.

• Matrix: persist pending approval reaction targets across Gateway restarts so room approvers can still approve or deny outstanding prompts after OpenClaw comes back online. (#75586) Thanks @amknight.

• Channels/onboarding: map third-party official WeCom and Yuanbao catalog entries to their published plugin ids so npm installs pass expected-plugin validation. Thanks @vincentkoc.

• Plugin SDK: restore the Mattermost and Matrix compatibility subpaths used by the pinned Yuanbao channel package so external installs can module-load after npm install. Thanks @vincentkoc.

• Plugins/install: keep managed npm-root security scans from treating earlier plugin openclaw peer links as failures, so one external plugin install cannot poison later official npm installs. Thanks @vincentkoc.

• Memory LanceDB: allow installed-but-unconfigured plugin metadata to load so onboarding and setup flows can prompt for embedding config instead of failing the plugin registry first. Thanks @vincentkoc.

• CLI/plugins: keep plugins enable and plugins disable from creating unconfigured channel config sections, so channel plugins with required setup fields no longer fail validation during lifecycle probes. Thanks @vincentkoc.

• Doctor/config: set messages.groupChat.visibleReplies: "message_tool" during compatibility repair for configured-channel configs that omit a visible-reply policy, so upgrades can persist the intended tool-only group/channel reply default. Thanks @kagura-agent.

• Agents/sessions: keep delayed sessions_send A2A replies alive after soft wait-window timeouts, while preserving terminal run timeouts and avoiding stale target replies in requester sessions. Fixes #76443. Thanks @ryswork1993 and @vincentkoc.

• TUI/Control UI: fix /think command showing only base thinking levels when the active session uses a different model from the default, so provider-specific levels like DeepSeek V4 Pro's xhigh and max are now visible and selectable. Fixes #76482. Thanks @amknight.

• CLI/sessions: keep intentional empty agent replies silent after tool-delivered channel output, instead of surfacing a misleading "No reply from agent." fallback. Thanks @vincentkoc.

• Config/doctor: cap .clobbered.* forensic snapshots per config path and serialize snapshot writes so repeated doctor --fix recovery loops cannot flood the config directory. Fixes #76454; carries forward #65649. Thanks @JUSTICEESSIELP, @rsnow, and @vincentkoc.

• Feishu: suppress duplicate text when replies send native voice media, preserve captions for ordinary audio files, and send fallback text plus attachment links when audioAsVoice transcode/upload fallback produces a generic file.

• TTS/plugins: activate configured and inherited speech provider plugins during Gateway startup, so Microsoft and Local CLI voice replies work immediately after persona selection instead of staying invisible in the startup plugin set. Fixes #76481. Thanks @amknight.

• Feishu: keep packaged Feishu startup from bundling the Lark SDK's ESM __dirname path by loading the SDK as a plugin-local runtime dependency. Fixes #76291 and #76494. (#76392) Thanks @zqchris.

• Plugins/npm: build package-local runtime dist files for publishable plugins and stop listing root-package-excluded plugin sidecars in the core package metadata, so npm plugin installs such as @openclaw/diffs and @openclaw/discord no longer publish source-only runtime payloads. Fixes #76426. Thanks @PrinceOfEgypt.

• Channels/secrets: resolve SecretRef-backed channel credentials through external plugin secret contracts after the plugin split, covering runtime startup, target discovery, webhook auth, disabled-account enumeration, and late-bound web_search config. Fixes #76371. (#76449) Thanks @joshavant and @neeravmakwana.

• Docker/Gateway: pass Docker setup .env values into gateway and CLI containers and preserve exec SecretRef passEnv keys in managed service plans, so 1Password Connect-backed Discord tokens keep resolving after doctor or plugin repair. Thanks @vincentkoc.

• Control UI/WebChat: explain compaction boundaries in chat history and link directly to session checkpoint controls so pre-compaction turns no longer look silently lost after refresh. Fixes #76415. Thanks @BunsDev.

• Agents/compaction: add an optional bundled compaction notifier hook and retry once from the compacted transcript when automatic compaction leaves a turn without a final visible reply. (#76651) Thanks @simplyclever914.

• Agents/incomplete-turn: detect and surface a warning when the agent's final text after a tool-call chain is silently dropped because the post-tool assistant response was never produced, instead of completing the turn with only the pre-tool analysis text. Fixes #76477. Thanks @amknight.

• Channels/WhatsApp: attach native outbound mention metadata for group text and media captions by resolving @+<digits> and @<digits> tokens against WhatsApp participant data, including LID groups. Fixes #39879; carries forward #56863. Thanks @kengi1437, @joe2643, and @fridayck.

• Channels/WhatsApp: require outbound mention tokens to end at a word boundary so phone-number prefixes inside longer strings no longer trigger hidden native mentions.

• Plugins/uninstall: remove empty managed git install parent directories after deleting cloned plugin repos and cover npm/git uninstall residue in Docker plugin lifecycle tests. Thanks @vincentkoc.

• Plugins/install: resolve bare official external plugin IDs such as brave through the official catalog when no bundled source is available, so packaged installs fetch the intended scoped npm package instead of an unrelated unscoped package. Fixes #76373. Thanks @bek91 and @vincentkoc.

• Plugins/install: require OpenClaw-owned install provenance before granting official npm plugin scanner trust, so direct npm package names no longer bypass launch-code scanning while catalog, onboarding, and doctor installs stay trusted. Thanks @fede-kamel and @vincentkoc.

• Network proxy: preserve target TLS hostname validation for Node HTTPS requests routed through the managed HTTP proxy, so Discord-style CONNECT traffic no longer validates certificates against the local proxy host. Fixes #74809. (#76442) Thanks @jesse-merhi and @abnershang.

• Gateway/sessions: keep sessions.list rows lightweight by bounding title/preview hydration to transcript head/tail reads and caching manifest model-id normalization plus setup fallback metadata against the active plugin snapshot. Thanks @vincentkoc and @rolandrscheel.

• Gateway/performance: cache per-run verbose-level session reads, skip a redundant lsof scan in gateway --force when no listener was killed, and make the Gateway startup benchmark print usage for --help.

• Gateway/sessions: keep agent runtime metadata on lightweight sessions.list rows and skip per-row transcript usage fallback, display model inference, and plugin projection, avoiding identity loss and event-loop stalls in large session stores. Thanks @Marvinthebored and @vincentkoc.

• Gateway/models: keep read-only models.list fallbacks on persisted/current metadata, configured rows, registry-compatible fallbacks, and static auth checks while preserving full-catalog image attachment capability checks. Fixes #76382; refs #76360 and #75707. Thanks @trojy13, @RayWoo, @AnathemaOfficial, @Marvinthebored, and @vincentkoc.

• CLI/plugins: reject missing plugin ids before config writes in plugins enable and plugins disable so a typo no longer persists a stale config entry. (#73554) Thanks @ai-hpc.

• Agents/sessions: preserve delivered trailing assistant replies during session-file repair so Telegram/WebChat history is not rewritten to drop already-delivered responses. Fixes #76329. Thanks @obviyus.

• Gateway/chat history: preserve oversized transcript turns as explicit omitted-message placeholders while avoiding large JSONL parse stalls. Thanks @Marvinthebored and @vincentkoc.

• CLI/doctor: load the configured memory-slot plugin when resolving memory diagnostics so bundled memory-core no longer triggers a false “no active memory plugin” warning on standalone doctor / status runs. Fixes #76367. Thanks @neeravmakwana.

• Gateway: preserve stack diagnostics when chat.send or agent attachment parsing/staging fails, improving image-send failure triage. Refs #63432. (#75135) Thanks @keen0206.

• Agents/idle-timeout: add a cost-runaway breaker to the outer embedded-run retry loop that halts further attempts after 5 consecutive idle timeouts without completed model progress, so a wedged provider can no longer fan paid model calls out across the same run; completed text or tool-call progress resets the breaker, but partial tool-argument token dribbles do not. Fixes #76293. Thanks @ThePuma312.

• Heartbeats/Codex: align structured heartbeat prompts with actual heartbeat_respond tool availability, stop sending legacy HEARTBEAT_OK when the tool exists, and keep tool-disabled commitment check-ins on the legacy ack path. Thanks @pashpashpash and @vincentkoc.

• Agent runtimes: fail explicit plugin runtime selections honestly when the requested harness is unavailable instead of silently falling back to the embedded PI runtime. Thanks @pashpashpash.

• Maintainer workflow: push prepared PR heads through GitHub's verified commit API by default and require an explicit override before git-protocol pushes can publish unsigned commits. Thanks @BunsDev.

• Feishu: resolve setup/status probes through the selected/default account so multi-account configs with account-scoped app credentials show as configured and probeable. Fixes #72930. Thanks @brokemac79.

• Gateway/responses: emit every client tool call from /v1/responses JSON and SSE responses when the agent invokes multiple client tools in a single turn, so multi-tool plans, graph orchestration calls, and similar batched flows no longer drop every call but the last. Fixes #52288. Thanks @CharZhou and @bonelli.

• Gateway/agent: enforce session.sendPolicy=deny on gateway agent requests only when deliver: true, so non-delivery smoke checks and internal agent runs are no longer rejected with send blocked by session policy while outbound delivery remains gated. Fixes #73381. Thanks @wenxu007.

• Slack/reactions: treat missing no_reaction remove responses as idempotent success and route own-reaction cleanup through the remove helper, so concurrent cleanup no longer surfaces Slack race errors. Fixes #50733. (#76304) Thanks @martingarramon and @Hollychou924.

• Feishu: include media file_key and image_key values in inbound dedupe so reused message IDs still process distinct media attachments while true retries stay suppressed. Fixes #75057. Thanks @SymbolStar.

• Control UI/Gateway: avoid full session-list reloads for locally applied message-phase session updates, carry known session keys through transcript-file update events, and defer media provider listing when explicit generation model config is present. Refs #76236, #76203, #76188, #76107, and #76166. Thanks @BunsDev.

• Install/update: prune the obsolete plugin-runtime-deps state directory during packaged postinstall so upgrades from pre-2026.5.2 releases reclaim old bundled-plugin dependency caches without touching external plugin installs.

• Auto-reply/queue: treat reset-triggered /new and /reset turns as interrupt runs across active-run queue handling, so steer/followup modes cannot delay a fresh session behind existing work. Fixes #74093. (#74144) Thanks @ruji9527 and @yelog.

• Cron: persist repaired startup runtime state back to jobs-state.json so a valid future nextRunAtMs with missing updatedAtMs no longer triggers repeated external health-check repairs after Gateway restart. Fixes #76461. Thanks @vincentkoc.

• Cron: preserve manual cron.run IDs in cron.runs history so manual run acknowledgements can be correlated with finished run records. Fixes #76276.

• CLI/devices: request operator.admin for openclaw devices approve <requestId> only when the exact pending device request would mint or inherit admin-scoped operator access, while keeping lower-scope approvals on the pairing scope.

• Memory/embedding: broaden the embedding reindex retry classifier to include transient socket-layer errors (fetch failed, ECONNRESET, socket hang up, UND_ERR_*, closed) so memory reindex survives provider network hiccups instead of aborting mid-run. Related #56815, #44166. (#76311) Thanks @buyitsydney.

• Memory/sessions: keep rotated and deleted transcripts (.jsonl.reset.<iso> / .jsonl.deleted.<iso>) searchable by indexing archive content, mapping archive hits back to live transcript stems, emitting transcript update events on archive rotation, and bypassing incremental delta thresholds for one-shot archive mutations while keeping backups and compaction checkpoints opaque. Refs #56131. Thanks @buyitsydney.

• Memory/search: keep sqlite-vec optional in packaged installs and point missing-extension recovery at the valid agents.defaults.memorySearch.store.vector.extensionPath setting. Thanks @willemsej and @vincentkoc.

• Gateway: keep directly requested plugin tools invokable under restrictive tool profiles while preserving explicit deny lists and the HTTP safety deny list, preventing catalog/invoke mismatches that surface as "Tool not available". Thanks @BunsDev.

• Gateway/update: allow beta binaries to refresh gateway services when the config was last written by the matching stable release version, avoiding false newer-config downgrade blocks during beta channel updates.

• Channels: keep Matrix and Mattermost bundled in the core package instead of advertising external npm installs before those channels are cut over. Thanks @vincentkoc.

• Bonjour: disable LAN mDNS advertising after a repeated stuck-announcing recovery instead of repeatedly restarting ciao and saturating the Gateway event loop.

• Channels/setup: label installable channel picker hints as remote npm installs and hide remote install hints for bundled plugins that already ship with OpenClaw.

• CLI/update: refuse package updates launched from the active gateway process tree before stopping the managed Gateway service, avoiding self-terminated in-lane updates that leave old Gateway code running. Fixes #75691. (#75819) Thanks @ai-hpc.

• CLI/plugins: stop treating the non-plugin auth command root as a bundled plugin id, so restrictive plugins.allow configs no longer tell users to add stale auth plugin entries.

• Doctor/plugins: update configured plugin installs whose stale manifests still declare channels without channelConfigs, so beta upgrades repair old Discord-style package payloads during doctor --fix.

• Doctor/plugins: repair configured external plugin installs whose persisted install record points at a missing package directory, so upgrades reconcile phantom npm metadata before plugin runtime validation. Thanks @vincentkoc.

• Active Memory: keep non-empty memory_search results from being fast-failed as empty when debug telemetry reports zero hits.

• Active Memory: preserve the target agent context when building embedded recall plugin tools so memory_search and memory_get stay available for explicit recall sessions. Fixes #76343. Thanks @Countermarch.

• Plugins/externalization: repair missing configured plugin installs from npm by default, reserve ClawHub downloads for explicit clawhubSpec metadata, and cover agent-runtime/env-selected plugin repair. Thanks @vincentkoc.

• Plugins/install: allow official catalog-matched npm channel plugins such as Feishu to pass the trusted install scanner path while keeping spoofed package names blocked. Thanks @vincentkoc.

• Tools/llm-task: keep JSON-only embedded model runs from tripping inherited tool allowlists when tools are intentionally disabled, while preserving runtime toolsAllow failures. Fixes #74019. Thanks @amknight.

• Tools/profiles: make tools.profile: "full" grant all tools including optional plugin tools such as browser, so the full profile no longer silently drops plugin-provided tools that require an explicit allowlist entry. Fixes #76507. Thanks @amknight.

• Feishu: keep timeout env parsing separate from the HTTP client wrapper so package security scans no longer report a false env-harvesting hit during install. Thanks @vincentkoc.

• Upgrade/config: validate configured web-search providers and statically suppressed model/provider pairs against the active plugin set at config load, so stale plugin state fails loud before runtime fallback.

• Status/update: resolve beta update-channel checks from the installed version when config still says stable, and let status --deep reuse live gateway channel credential state instead of warning on command-path-only token misses.

• Doctor/plugins: preserve unmanaged third-party plugin node_modules during doctor --fix, while still pruning OpenClaw-managed runtime dependency caches.

• Gateway/restart: add openclaw gateway restart --force and --wait <duration>, log active task run IDs before restart deferral timers, and report timeout restarts as explicit forced restarts.

• Discord: persist slash-command deploy hashes across process restarts so unchanged command sets skip redeploy and avoid restart-loop 429s.

• Providers/LM Studio: normalize binary off/on reasoning metadata from Gemma 4 and other local models to LM Studio's accepted OpenAI-compatible reasoning_effort values.

• Plugins/externalization: keep official external install docs, update examples, and live Codex npm checks on default npm tags instead of @beta. Thanks @vincentkoc.

• Plugins/externalization: keep ACPX, Google Chat, and LINE publishable plugin dist trees out of the core npm package file list.

• Plugins/ClawHub: fall back to version metadata when the artifact resolver route is missing and keep the Docker ClawHub fixture aligned with npm-pack artifact resolution, avoiding false version-not-found failures during plugin install validation. Thanks @vincentkoc.

• Providers/openai-codex: honor providerConfig.baseUrl in the dynamic-model synthesis fallback so codex providers configured with a custom upstream (for example a forwarding proxy) no longer silently bypass the configured URL when the registry has no template row to clone for the requested model id. (#76428) Thanks @arniesaha.

• Status/channels: show configured channels in openclaw status and config-only openclaw channels status output even when the Gateway is unreachable, avoiding empty Channels tables on WSL and other no-Gateway paths. Thanks @vincentkoc.

• Plugins/ClawHub: explain unavailable explicit ClawHub ClawPack artifact downloads with a temporary npm install hint while ClawHub artifact routing rolls out. Thanks @vincentkoc.

• Media: accept home-relative MEDIA:~/... attachment paths while preserving existing file-read policy, traversal checks, and media type validation. Fixes #73796. Thanks @fabkury.

• Onboarding/search: install official external web-search plugins such as Brave before saving provider config, and make doctor repair reconcile selected external search providers whose npm payload is missing. Thanks @vincentkoc.

• Plugins/externalization: add official npm-first catalogs for externalized channel, provider, and generic plugins, keep unpublished ACPX/Google Chat/LINE bundled, and make missing-plugin repair honor npm-first metadata while ClawHub pack files roll out. Thanks @vincentkoc.

• Plugins/update: detect tracked plugin install records whose package directories disappeared during openclaw update, reinstall them before normal plugin updates, and fail the update if any install record still points at missing disk payloads.

• Plugins/registry: hash manifest and package metadata when validating persisted plugin registries so fast same-size rewrites cannot leave stale plugin metadata trusted.

• Plugins/registry: canonicalize install-record provenance paths before trust diagnostics, so npm plugins installed under symlinked temp/state roots no longer warn as untracked local code.

• Plugins/install: let official external Discord reinstall requests pass the invalid-config guard and run stale-channel repair, so upgrades can recover missing external plugin state directly.

• CLI/infer: reject local codex/* one-shot model probes before simple-completion dispatch and point operators at the Codex app-server runtime path instead of ending with an empty-output error.

• Agents/sessions: preserve terminal lifecycle state when final run metadata persists from a stale in-memory snapshot, preventing main sessions from staying stuck as running after completed or timed-out turns.

• Gateway/CLI: make openclaw gateway start repair stale managed service definitions that point at old OpenClaw versions, missing binaries, or temporary installer paths before starting.

• Heartbeat/scheduler: make heartbeat phase scheduling active-hours-aware so the scheduler seeks forward to the first in-window phase slot instead of arming timers for quiet-hours slots and relying solely on the runtime guard. Non-UTC activeHours.timezone values (e.g. Asia/Shanghai) now correctly influence when the next heartbeat timer fires, avoiding wasted quiet-hours ticks and long dormant gaps after gateway restarts. Fixes #75487. Thanks @amknight.

• Providers/Arcee AI: mark Trinity Large Thinking as tool-incompatible so main-session runs use the same text-only request shape that made subagent runs recover, avoiding the remaining main-session response-shape mismatch after the #62848 transport failover fix. Fixes #62851 and #62847; carries forward #62848. Thanks @Adam-Researchh.

• Status: show the openai-codex OAuth profile for openai/gpt-* sessions running through the native Codex runtime instead of reporting auth as unknown. (#76197) Thanks @mbelinky.

• Gateway: avoid repeated plugin tool descriptor config hashing so large runtime configs do not block reply startup and trigger reconnect/timeouts. (#75944) Thanks @joshavant.

• Plugins/externalization: keep diagnostics ClawHub packages and persisted bundled-plugin relocation on npm-first install metadata for launch, and omit Discord from the core package now that its external package is published. Thanks @vincentkoc.

• Setup/TUI: bound the Terminal hatch bootstrap run so a stalled provider request times out instead of leaving first-run hatching stuck behind the watchdog. (#76241) Thanks @joshavant.

• Cron/CLI runtimes: route isolated cron jobs through configured per-agent CLI runtimes only when the resolved model provider is compatible, so OpenAI job overrides no longer inherit a mismatched Claude CLI backend. Thanks @vishutdhar.

• Plugins/Codex: allow the official npm Codex plugin to install without the unsafe-install override, keep /codex command ownership, and cover the real npm Docker live path through managed .openclaw/npm dependencies plus uninstall failure proof.

• Gateway/status: add concrete service, config, listener-owner, and log collection next steps when gateway probes fail and Bonjour finds no local gateway, so frozen or port-conflict reports include the data needed for root-cause triage. Refs #49012. Thanks @vincentkoc.

• Codex harness: forward OpenClaw workspace bootstrap files such as SOUL.md through native Codex config instructions while leaving AGENTS.md to Codex project-doc discovery. Fixes #76273. Thanks @zknicker.

• Parallels/Windows update smoke: escape the stale post-swap import regex in the generated PowerShell script so expected ERR_MODULE_NOT_FOUND update handoffs continue to post-update health checks. (#75315)

• Slack: allow draft preview streaming in top-level DMs when replyToMode is off while keeping Slack native streaming and assistant thread status gated on reply threads. Fixes #56480. (#56544) Thanks @HangGlidersRule.

• Control UI/chat: remove the delete-confirm popover outside-click listener on every dismiss path, so Cancel, Delete, outside clicks, and same-button toggles no longer leave stale document listeners behind. Refs #75590 and #69982. Thanks @Ricardo-M-L.

• Memory-core: treat exhausted file watcher limits as non-fatal for builtin memory auto-sync while preserving fatal handling for unrelated disk-full errors. (#73357) Thanks @solodmd.

• Providers/Ollama: restore catalog context-window forwarding as num_ctx for native /api/chat requests; fixes tool selection and context truncation regressions on models with catalog entries (qwen3, llama3, gemma3, …) when no explicit params.num_ctx was configured. Fixes #76117. (#76181) Thanks @openperf.

• Plugins/install: pin npm plugin installs to the verified resolved version and reject package-lock version or integrity drift, so mutable tags cannot race integrity checks into accepting a different artifact. Thanks @Lucenx9.

• Plugins/providers: preserve scoped cold-load fallback for enabled external manifest-contract capability providers missing from the startup registry, so providers such as Fish Audio can resolve on request without requiring activation.onStartup for correctness. (#76536) Thanks @Conan-Scott.

• Gateway/update: carry continuationMessage from update.run into successful restart sentinels so session-scoped self-updates can resume one follow-up turn after the Gateway restarts. Refs #71178. (#74362) Thanks @100menotu001, @HeilbronAILabs, and @artnking.

• Agents/fallback: suppress duplicate current-turn user-message transcript writes after embedded fallback retries while still sending the retry prompt to the model. (#63696) Thanks @dashhuang.

• Channels/Telegram: force a fresh final message when a visible non-preview bubble (tool/block/error) was delivered after the active answer preview, so multi-step assistant replies no longer end up with the final answer above intermediate output. Fixes #76529. Thanks @jack-stormentswe.

• Channels/Telegram: require an observed Telegram send, edit, or fallback before treating a forum-topic final as delivered, so final replies generated in transcript no longer disappear from Telegram topics. Fixes #76554. (#76764) Thanks @bubucilo and @obviyus.

• Plugins/update: keep externalized bundled npm bridge updates on the normal plugin security scanner path instead of granting source-linked official trust without artifact provenance. (#76765) Thanks @Lucenx9.

• Agents/reply context: label replied-to messages as the current user message target in model-visible metadata, so short replies are grounded to their explicit reply target instead of nearby chat history. (#76817) Thanks @obviyus.