OpenClaw

2026.2.9

Mon, 09 Feb 2026 13:23:25 -0600

OpenClaw 2026.2.9

Added

iOS: alpha node app + setup-code onboarding. (#11756) Thanks @mbelinky.
Channels: comprehensive BlueBubbles and channel cleanup. (#11093) Thanks @tyler6204.
Plugins: device pairing + phone control plugins (Telegram /pair, iOS/Android node controls). (#11755) Thanks @mbelinky.
Tools: add Grok (xAI) as a web_search provider. (#12419) Thanks @tmchow.
Gateway: add agent management RPC methods for the web UI (agents.create, agents.update, agents.delete). (#11045) Thanks @advaitpaliwal.
Web UI: show a Compaction divider in chat history. (#11341) Thanks @Takhoffman.
Agents: include runtime shell in agent envelopes. (#1835) Thanks @Takhoffman.
Paths: add OPENCLAW_HOME for overriding the home directory used by internal path resolution. (#12091) Thanks @sebslight.

Fixes

Telegram: harden quote parsing; preserve quote context; avoid QUOTE_TEXT_INVALID; avoid nested reply quote misclassification. (#12156) Thanks @rybnikov.
Telegram: recover proactive sends when stale topic thread IDs are used by retrying without message_thread_id. (#11620)
Telegram: render markdown spoilers with HTML tags. (#11543) Thanks @ezhikkk.
Telegram: truncate command registration to 100 entries to avoid BOT_COMMANDS_TOO_MUCH failures on startup. (#12356) Thanks @arosstale.
Telegram: match DM allowFrom against sender user id (fallback to chat id) and clarify pairing logs. (#12779) Thanks @liuxiaopai-ai.
Onboarding: QuickStart now auto-installs shell completion (prompt only in Manual).
Auth: strip embedded line breaks from pasted API keys and tokens before storing/resolving credentials.
Web UI: make chat refresh smoothly scroll to the latest messages and suppress new-messages badge flash during manual refresh.
Tools/web_search: include provider-specific settings in the web search cache key, and pass inlineCitations for Grok. (#12419) Thanks @tmchow.
Tools/web_search: normalize direct Perplexity model IDs while keeping OpenRouter model IDs unchanged. (#12795) Thanks @cdorsey.
Model failover: treat HTTP 400 errors as failover-eligible, enabling automatic model fallback. (#1879) Thanks @orenyomtov.
Errors: prevent false positive context overflow detection when conversation mentions "context overflow" topic. (#2078) Thanks @sbking.
Gateway: no more post-compaction amnesia; injected transcript writes now preserve Pi session parentId chain so agents can remember again. (#12283) Thanks @Takhoffman.
Gateway: fix multi-agent sessions.usage discovery. (#11523) Thanks @Takhoffman.
Agents: recover from context overflow caused by oversized tool results (pre-emptive capping + fallback truncation). (#11579) Thanks @tyler6204.
Subagents/compaction: stabilize announce timing and preserve compaction metrics across retries. (#11664) Thanks @tyler6204.
Cron: share isolated announce flow and harden scheduling/delivery reliability. (#11641) Thanks @tyler6204.
Cron tool: recover flat params when LLM omits the job wrapper for add requests. (#12124) Thanks @tyler6204.
Gateway/CLI: when gateway.bind=lan, use a LAN IP for probe URLs and Control UI links. (#11448) Thanks @AnonO6.
Hooks: fix bundled hooks broken since 2026.2.2 (tsdown migration). (#9295) Thanks @patrickshao.
Routing: refresh bindings per message by loading config at route resolution so binding changes apply without restart. (#11372) Thanks @juanpablodlc.
Exec approvals: render forwarded commands in monospace for safer approval scanning. (#11937) Thanks @sebslight.
Config: clamp maxTokens to contextWindow to prevent invalid model configs. (#5516) Thanks @lailoo.
Thinking: allow xhigh for github-copilot/gpt-5.2-codex and github-copilot/gpt-5.2. (#11646) Thanks @LatencyTDH.
Discord: support forum/media thread-create starter messages, wire message thread create --message, and harden routing. (#10062) Thanks @jarvis89757.
Paths: structurally resolve OPENCLAW_HOME-derived home paths and fix Windows drive-letter handling in tool meta shortening. (#12125) Thanks @mcaxtr.
Memory: set Voyage embeddings input_type for improved retrieval. (#10818) Thanks @mcinteerj.
Memory/QMD: reuse default model cache across agents instead of re-downloading per agent. (#12114) Thanks @tyler6204.
Media understanding: recognize .caf audio attachments for transcription. (#10982) Thanks @succ985.
State dir: honor OPENCLAW_STATE_DIR for default device identity and canvas storage paths. (#4824) Thanks @kossoy.

View full changelog

2026.2.3

Wed, 04 Feb 2026 17:47:10 -0800

2026.2.1

Mon, 02 Feb 2026 03:53:03 -0800

OpenClaw 2026.2.1

Changes

Docs: onboarding/install/i18n/exec-approvals/Control UI/exe.dev/cacheRetention updates + misc nav/typos. (#3050, #3461, #4064, #4675, #4729, #4763, #5003, #5402, #5446, #5474, #5663, #5689, #5694, #5967, #6270, #6300, #6311, #6416, #6487, #6550, #6789)
Telegram: use shared pairing store. (#6127) Thanks @obviyus.
Agents: add OpenRouter app attribution headers. Thanks @alexanderatallah.
Agents: add system prompt safety guardrails. (#5445) Thanks @joshp123.
Agents: update pi-ai to 0.50.9 and rename cacheControlTtl -> cacheRetention (with back-compat mapping).
Agents: extend CreateAgentSessionOptions with systemPrompt/skills/contextFiles.
Agents: add tool policy conformance snapshot (no runtime behavior change). (#6011)
Auth: update MiniMax OAuth hint + portal auth note copy.
Discord: inherit thread parent bindings for routing. (#3892) Thanks @aerolalit.
Gateway: inject timestamps into agent and chat.send messages. (#3705) Thanks @conroywhitney, @CashWilliams.
Gateway: require TLS 1.3 minimum for TLS listeners. (#5970) Thanks @loganaden.
Web UI: refine chat layout + extend session active duration.
CI: add formal conformance + alias consistency checks. (#5723, #5807)

Fixes

Plugins: validate plugin/hook install paths and reject traversal-like names.
Telegram: add download timeouts for file fetches. (#6914) Thanks @hclsys.
Telegram: enforce thread specs for DM vs forum sends. (#6833) Thanks @obviyus.
Streaming: flush block streaming on paragraph boundaries for newline chunking. (#7014)
Streaming: stabilize partial streaming filters.
Auto-reply: avoid referencing workspace files in /new greeting prompt. (#5706) Thanks @bravostation.
Tools: align tool execute adapters/signatures (legacy + parameter order + arg normalization).
Tools: treat "*" tool allowlist entries as valid to avoid spurious unknown-entry warnings.
Skills: update session-logs paths from .clawdbot to .openclaw. (#4502)
Slack: harden media fetch limits and Slack file URL validation. (#6639) Thanks @davidiach.
Lint: satisfy curly rule after import sorting. (#6310)
Process: resolve Windows spawn() failures for npm-family CLIs by appending .cmd when needed. (#5815) Thanks @thejhinvirtuoso.
Discord: resolve PluralKit proxied senders for allowlists and labels. (#5838) Thanks @thewilloftheshadow.
Tlon: add timeout to SSE client fetch calls (CWE-400). (#5926)
Memory search: L2-normalize local embedding vectors to fix semantic search. (#5332)
Agents: align embedded runner + typings with pi-coding-agent API updates (pi 0.51.0).
Agents: ensure OpenRouter attribution headers apply in the embedded runner.
Agents: cap context window resolution for compaction safeguard. (#6187) Thanks @iamEvanYT.
System prompt: resolve overrides and hint using session_status for current date/time. (#1897, #1928, #2108, #3677)
Agents: fix Pi prompt template argument syntax. (#6543)
Subagents: fix announce failover race (always emit lifecycle end; timeout=0 means no-timeout). (#6621)
Teams: gate media auth retries.
Telegram: restore draft streaming partials. (#5543) Thanks @obviyus.
Onboarding: friendlier Windows onboarding message. (#6242) Thanks @shanselman.
TUI: prevent crash when searching with digits in the model selector.
Agents: wire before_tool_call plugin hook into tool execution. (#6570, #6660) Thanks @ryancnelson.
Browser: secure Chrome extension relay CDP sessions.
Docker: use container port for gateway command instead of host port. (#5110) Thanks @mise42.
fix(lobster): block arbitrary exec via lobsterPath/cwd injection (GHSA-4mhr-g7xj-cg8j). (#5335) Thanks @vignesh07.
Security: sanitize WhatsApp accountId to prevent path traversal. (#4610)
Security: restrict MEDIA path extraction to prevent LFI. (#4930)
Security: validate message-tool filePath/path against sandbox root. (#6398)
Security: block LD*/DYLD* env overrides for host exec. (#4896) Thanks @HassanFleyah.
Security: harden web tool content wrapping + file parsing safeguards. (#4058) Thanks @VACInc.
Security: enforce Twitch allowFrom allowlist gating (deny non-allowlisted senders). Thanks @MegaManSec.

View full changelog