Cambios de OpenClaw (changelog oficial)

2026.10.6

Highlights

• Patched Node runtime required: OpenClaw now requires Node 24.22.1+ on the 24 line or 26.12.1+ on the 26 line, which reject TLS chains signed with the compromised certificate keys addressed in the October 2026 Node.js security releases. Docker images ship Node 24.22.1, installers select the patched runtimes, and openclaw update refuses with recovery guidance before installing on an older Node instead of breaking the running install. Source builds now pin pnpm 12.15.0.

• Safer updates and recovery: package swaps now refuse unsafe service states, Windows and macOS package-manager updates recover from platform-specific failures, and frozen Gateway startup owners can be retired cleanly.

• Data-preserving migrations and backups: Doctor and migration paths now refuse malformed or lossy workspace imports, preserve malformed Notes bytes, reject unsafe non-UTF-8 wiki rewrites, keep deeply nested SQLite backups, and retain staging evidence when restore inspection fails.

• Reliable delivery across restarts: queued turns, watched child results, dead-lettered deliveries, and streamed replies now survive recovery without disappearing, duplicating, or producing false missing-answer notices.

• Provider and model resilience: GPT-5.6 tool turns, OpenRouter DeepSeek tool calls, LM Studio overflow recovery, parallel OpenAI reasoning settings, and model retry/fallback budgets now behave consistently.

• Windows and mobile stability: fresh Windows state stores, Proxy-backed environments, and stored Anthropic credentials no longer block startup, while iOS Talk and chat connectivity recover from first-reply and timeout failures.

• Agent and tool-call recovery: unfinished tools now time out visibly, context overflow compacts after steered tool results, malformed calls continue after earlier refusals, large patch hunks avoid argument-limit crashes, and stopped yielded tasks stay stopped.

• Channel delivery correctness: WhatsApp retries and stickers, Telegram albums and dual-stack replies, Slack relay recovery, and Discord voice-call replies no longer lose or duplicate messages.

• Worker and worktree recovery: hosts reclaim worker capacity after reboot, partial-clone worktrees repair missing objects, and child-result and exec-wake evidence survives Gateway restarts.

Changes

• This patch release contains focused reliability fixes only; it does not introduce new user-facing features.

Fixes

• State and system-agent recovery: restore access to agents held by affected upgrades, recover held system-agent databases after schema changes, and preserve live configuration when forensic snapshots fail.

• Windows state and updates: canonicalize schema ownership across path aliases, serialize Proxy-backed environments before inspection IPC, hide SQLite helper windows during update

2026.10.10-beta.3

Highlights

• Windows reliability: restore fresh state initialization and Gateway startup, hide SQLite helper windows during app updates, and make forced Gateway reinstalls tolerate launcher timestamp settling. (#176194, #174969, #176174, #176945; related #176111, #174906, #176163, and #176872)

• Upgrade recovery: converge app-owned plugins to the upgraded core version, restore affected agent stores including held system agents after schema-changing updates, and scope migration rollback backups to the versioned tables being changed. (#174257, #175007, #176783, #172671; related #174120 and #176669)

Changes

Fixes

• Agent state: concurrent initialization can no longer let two agents claim ownership of the same agent database.

• Codex and native apps: previews no longer block replies after a context refresh, session replies resume after native child recovery, bound Codex history survives app-server restarts, and native app messages send again after reconnecting.

• Background tasks: completions are no longer dropped when the config changes mid-turn. (#169529; related #169054)

• Discord: restore native slash commands in channels and threads.

• Agents: keep the prompt cache when a rate-limited run retries, and preserve steering messages that arrive without an explicit target.

• Cron/CLI continuity: preserve CLI chat sessions across cron announce wakes instead of resetting their provider session. (#176218; related #176208)

• CLI tools: invalidate reused CLI sessions when the available tool catalog changes, restoring tools such as exec after Gateway restarts and preventing stale catalogs from reaching spawned agents. (#176577; related #175670)

• GMI: omit unsupported reasoning_effort values on GPT-5.6 tool turns so the provider no longer rejects them with HTTP 400.

• Windows updates: recognize Scheduled Task permission denials in every Windows display language, keep Windows plugin dependency links across Doctor phases, and clean up backup scratch directories without EPERM failures. (#178624, #178219, #169672, #176836; related #176743)

• Update and Doctor: update finalization honors TMPDIR for disposable copies, Doctor suggests a retry instead of a restore after snapshot contention, and repeated Docker container restarts no longer take a full Doctor pre-repair capture each time. (#178009, #176779, #173711; related #176750 and #173564)

• Memory: cold Gateway starts no longer open every memory index (restoring 2026.10.4 startup memory), memory files keep indexing after plugin reloads, and plugin reloads no longer time out during slow dreaming cleanup.

• Nodes: synchronous node exec output is no longer repeated as a separate Exec finished wake after the waiting caller already received it.

• macOS: long exec commands through the macOS app node no longer fail after 20 seconds. (#172117; related #139706)

• Control UI: offer desktop setup instead of Retry when Host Desktop is off, model pickers refresh when the catalog changes mid-read, and locale refresh works again after adding a source-only locale. (#177888, #174812, #172689; related #174368)

Complete contribution record

This audited record covers

OpenClaw v2026.10.5

2,704 commits · 2,250 pull requests · 638 contributors

Changes included in this release

The release notes and changelog contain the same content, presented in two formats:

• Release notes — formatted for people.
• Changelog — plain Markdown for AI agents and tools.

Thanks

@609nft @67-luck @9fw2pq8sgb-art @a1fred-ai @a6xa3 @aaajiao @aacodex401 @aatreya @abacha @absol89 @adamamzalag @adamjgmiller @adele-with-a-b @adenzhou1350 @adlbas26 @aia007731-lab @aikohoshinoai-prog @ajmtrz @akshatshahh @aldiz1711 @aleps001 @alexph-dev @alexsimeonoww @alfred429 @alfredjbclaw @alix-007 @alkor2000 @altaywtf @amittell @an2in @andersgreg @angeliti999 @anhnt3 @aniruddhaadak80 @antaresgg @anvinali @anyech @aoclaw-glitch @apalmiere @arcueidmp @arduano @arifarai @arpanghoshal @asikorskiy @astutoai @automaton1379 @awss1i @axeg0 @ayushdevo @azuretek @bamorem @barry-ssb @bartok9 @baumus @bautrey @bbs2i58 @benjaml4 @bensonchen1204 @bipolar84 @bit-777 @bluet @bodapatisaikrishna @boeingchoco @boriszhangyyy @bottanicals @brianmcguire @brokemac79 @brookpw @bruce-yii @bsniznd @burchk007-jpg @cablackmon @camillevalley @captain-marlow @cas1per @cassthebandit @catnipluss @cbhawthorne84 @ceckert [@cestercian](https://github.com/cestercia

2026.10.10-beta.2

Highlights

Changes

Fixes

• Workspace safety: reject a multi-file apply_patch before changing files when a later update target is missing or its context does not match, preserving the original workspace for the next attempt. Commit-time I/O failures can still leave partial effects. (#160409; related #117742 and #127496)

• Tool policy: run plugin before_tool_call hooks in standalone openclaw agent exec sessions so plugin tool guards take effect. (#159333; fixes #158824)

• Buzz: reconnect when a relay closes during NIP-42 authentication without terminating the Gateway or interrupting other channels and sessions. (#170591; fixes #147269)

• macOS downloads: save dashboard and conversation attachments through the native Save dialog while keeping the current page open.

• OpenRouter onboarding: accept valid API keys with the default openrouter/auto model instead of rejecting setup with a route mismatch. (#173292; related #162798)

• macOS setup: let fresh native profiles start the Gateway and complete automatic setup, including when supervised startup needs a retry.

• Gateway startup: follow a replacement model-runtime refresh instead of exiting when initial preparation is superseded. (#173366; related #173357)

• Gateway logging: keep serving and shut down normally when a deleted temporary-directory backing path makes daily log rollover fail. (#160433; fixes #130807)

• Gateway stability: stop session diff capture from opening live SQLite and hard-linked files, preventing SIGBUS crash loops when the shared-memory file is truncated.

• Native app updates: let Doctor finish agent database upgrades on native-first profiles instead of reporting success while the Gateway refuses to start on an older schema.

• Cron: plan history maintenance from run identities and load full payloads only for rows it updates, so large cron histories no longer exhaust the SQLite worker’s memory and take channels down. (#174530; fixes #174078)

• Windows Claude CLI: stop every turn with a stored Anthropic credential from stalling until the no-output watchdog when Claude Code never reads the credential pipe. (#174571; fixes #174204)

• Plugins: restore the SDK facade exports that published external plugins still import, so those plugins load again. (#173777; fixes #173386)

• Chat tools: keep the chat usable after removing a tool server that failed to start, cleaning up its failed startup before reporting the launch error.

• Updates: bound the post-activation Doctor step by the update’s allowance instead of waiting indefinitely with the Gateway down.

• Updates: keep Gateway-managed source updates from failing with missing backup modules after the runtime is replaced.

• Updates: make openclaw update --no-restart honest for npm, pnpm, and bun installs, which restart themselves after the package is replaced, record the update as successful, and keep a still-serving older build unverified. (#173409, #174649; fixes #171311)

Complete contribution record

This audited record covers the complete v2026.10.10-beta.1..f90bd063751f2448330ee6abbb4c894508600d63 history: 24 in-range PRs + 0 retained seed-only PRs = 24 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Shipped baseline exclusions: v2026.10.10-beta.1 (1 PRs: #171016).

Pull requests

• PR #173654

2026.10.10-beta.1

Highlights

• Faster, steadier Gateway: chat turns, session lists, startup, and idle Gateways do far less SQLite and main-thread work, with more database work moved onto worker threads, so busy hosts and large agent fleets stay responsive.

• Updates that finish: upgrades from 2026.10.1 and earlier betas complete, busy Gateways and slow Doctor steps no longer refuse or roll back a good update, failed updates no longer leave a half-installed version, and macOS, Windows, and Bun installs recover from their platform-specific failures.

• Restart-safe replies: interrupted and unfinished replies resume after a Gateway restart, and watched child results, queued turns, accepted agent updates, and operator tasks survive restarts instead of disappearing.

• Cloud sessions: move sessions between local and cloud from the session menu, organize cloud environments by repository with environment recipes and verified Node toolchains, and see snapshot progress while sessions start before the first snapshot finishes uploading.

• Local Gateway in the desktop apps: the Windows desktop app and fresh Tauri installs can run a local Gateway, fresh macOS installs start in guided dashboard setup, and first-run setup chooses inference automatically.

• New models: Gemini 4 Argon becomes the default Gemini model alongside Gemini 3.8 Flash, Nemotron 3.5 Super VL and xAI Imagine Image 2.0 arrive, Meta models run through Muse Code, and pickers stop offering retired models.

• Newer Apple platforms required: OpenClaw now requires macOS 26.2, iOS 26.2, and Safari 26.2 or newer.

Changes

• Apple platform requirement: require macOS, iOS, and Safari 26.2 or newer for the native apps and Control UI.

• Cloud sessions: move sessions between local and cloud from session menus, organize cloud environments by repository, support repository environment recipes with verified Node toolchains, save suggested cloud profiles on first use, show snapshot startup progress, start sessions while the first snapshot uploads, ready workers for empty-workspace sessions, report slow dispatch phases, and keep cloud setup secrets behind scoped egress grants.

• Desktop apps and first run: support local Gateways in the Windows desktop app, start fresh Tauri installs with a local Gateway, start fresh macOS installs in guided dashboard setup, guide missing native permissions in chat, and choose inference automatically during first-run setup.

• Local setup: offer optional memory embedding setup, add managed llama.cpp OCR and vision setup, and allow non-interactive llama.cpp embedding-only setup.

• Bun runtime: build standalone OpenClaw executables with Bun, add an opt-in pinned Bun runtime that rejects unpinnable paths before changing anything, and start the Gateway faster on Bun.

• Experimental PostgreSQL: add an experimental PostgreSQL engine for the W

2026.10.5-beta.4

Highlights

• Updates finish more reliably: macOS updates no longer time out on aliased temporary directories, systemd user installs reclaim abandoned runtimes, pacman and FreeBSD package installs are left to their package manager, snapshot failures are identified before activation with accurate recovery advice, and the success summary no longer repeats settled plugin upgrades as pending.

• ChatGPT models work on the default Codex runtime: ChatGPT-listed models no longer fail before sending any request.

• Headless browser sign-ins stay usable: headless pages keep accepting clicks and key presses while a site waits for a passkey.

Changes

• Context limits: status shows corrected context limits after model discovery, Copilot honors reported context capacity when native limits are missing, and llama.cpp keeps live router model limits and tools on refresh.

Fixes

• Gateway access: local access keeps working when the tailnet denies Tailscale Serve, and lifecycle publications survive after the emitting producer drains.

• macOS repair and recovery: update recovery finishes repairing the bundled Gateway, the app keeps a compatible newer Gateway during recovery instead of downgrading it, LaunchAgent repair accepts verified bootstrap recovery, and Doctor allows offline state repair for app-owned Gateways.

• Update resilience: updates keep moving when optional cron inspection or snapshot cleanup fails.

• Security: Tlon never treats group DM authors as the owner.

• Turns and replies: Claude CLI sessions remember announced sub-agent results on the next turn, agent plugin reloads no longer wait on their own turn, interrupted turns are preserved when new messages arrive, ACP follow-up replies no longer disappear after the previous turn is stopped, context-engine advancement survives steering, visible sub-agent spawns try the primary model first, and launched agent turns no longer fail with writer claim errors.

• Gateway lifecycle: the Gateway stays responsive during reply-tagged streams and long quoted tool XML no longer triggers per-token Markdown parsing, blocked context-engine turns stop repeating in the Gateway log on every run, the Control UI no longer reconnects on delayed heartbeats, state reads stay closed until restart after a failed state cleanup, the Gateway recovers state ownership after sleep and clock changes, stalled transcript workers no longer block shutdown, database admission no longer blocks worker startup, shutdown joins lifecycle publication, forced descendant cleanup releases worker capacity, enabled standalone plugin files start with the Gateway, Gateway restart works from verified external macOS terminals, and Android/Termux gateways no longer fail with “shared-state database generation changed”.

• Workers: worker heap limits are enforced under process-wide Node flags.

• Channels and tools: MCP OAuth login completes with portless loopback registrations, and each Feishu monitor start gets its own binding adapter registration. (#170876, #169