openclaw 2026.7.2-beta.5

2026.7.2

Highlights

• State safety and recovery: protect persisted data with a quarantine store that survives primary-database damage, crash-recoverable SQLite snapshots, crash-durable filesystem publication, schema-upgrade data-loss rejection, and rollback-writer snapshot recovery. (#110453, #113367, #113453, #113473, #113580) Thanks @vincentkoc.
• Durable channel delivery: keep accepted messages recoverable across gateway restarts and local crashes through the shared ingress drain and dead-letter recovery, covering Telegram, Signal, Slack, QQBot, Twitch, Synology Chat, Tlon, IRC, and Zalo User. #108656, #107246, #109911 (#108924, #107288, #109907, #109910, #110844, #110852, #110899, #110910, #110914, #110916, #111029) Thanks @obviyus and @edenfunf.
• Session rewind and branching: rewind or fork conversations from individual messages, switch transcript branches across web and native apps, fork upstream Codex sessions, preserve branch-safe queued sends, reject stale-pane writes, and restore prompt images after a fork. (#110660, #110857, #110886, #111149, #112056, #112284, #113073, #113945)
• Interactive MCP Apps and dashboards: host ticketed MCP Apps with bound tools, resources, and bounded context updates; open them from channel replies, pin them to durable dashboards, harden their shared sandbox, and let native plugins declare them directly. #109851, #110451, #113218 (#109861, #109807, #110515, #111211, #111212, #111524, #111687, #111748, #113224) Thanks @fuller-stack-dev.
• Questions and approvals everywhere: let agents ask structured questions with option cards across web, channels, macOS, and native apps, while approvals gain push notifications, history, fair queuing, headless resolution, Claude tool-request relay, reviewer detail, and clearer formatted prompts. #85954 (#108505, #108709, #108776, #109922, #110242, #110372, #110584, #110681, #110989, #111060, #112918, #113027, #113193) Thanks @omarshahine.
• Meetings and realtime Talk: join Teams, Zoom, and Google Meet calls with default-enabled meeting plugins and durable transcript collection, while realtime Talk adds OpenAI and Gemini video plus GPT Live through Codex OAuth. #86425, #113353 (#109579, #109719, #109964, #111048, #113022, #113053, #113122, #113354) Thanks @shushushv and @Solvely-Colin.
• Wear OS companion: add the phone-proxied Wear companion with home-screen agent/session/model selection, realtime Talk controls, audio-reactive playback, and an instant-talk tile. #108781 (#108835, #109341, #109433, #109483, #110661, #111516, #112721) Thanks @sibbl, @IWhatsskill, and @Solvely-Colin.
• Guided setup and local inference: guide setup across browser, Linux, and macOS with local-provider detection, strongest-model selection, downloadable models, lean mode, memory imports, and an in-process RAM-gated llama.cpp/Gemma path. #108604 (#108605, #108868, #108977, #109250, #109444, #109585, #110054, #110141, #110596, #113476)

Changes

• Models and providers: add Claude Opus 5 across catalog and runtime, Kimi K3, and GPT Live through Codex OAuth. (#113391, #113392, #113633; related #113412; #113909, #113354; related #113353) Thanks @fuller-stack-dev, @vincentkoc, and @Solvely-Colin.
• Local inference and setup: detect local inference providers during onboarding, add in-process llama.cpp GGUF inference and Baseten Model API support, discover models from live provider catalogs, and offer model downloads from web and macOS setup. (#108605; related #108604; #109444, #108708; related #108665; #112412; related #112405; #113476) Thanks @fuller-stack-dev.
• Sessions and dashboards: add rewind/fork and branch switching across web and native chat, session boards and dashboards, archived/visibility/draft/incognito session states, and suggestion queues with typing indicators. (#110660, #110857, #110886, #111149, #110644, #110960, #112554, #112787, #113006, #113127, #113173)
• Native apps: bring Quick Chat to macOS and Linux with streaming, routing, context capture, dictation, and model controls; add Linux desktop integration and signed updates; add multi-gateway apps and mobile dashboards; and expand Wear OS companion/Talk support. (#109720, #109947, #110285, #110631, #110632, #110635, #110994, #109236, #108770, #111932; related #111931; #112163, #109341, #109433; related #108781; #109483, #112721) Thanks @sibbl, @IWhatsskill, @Solvely-Colin, and @vincentkoc.
• Meetings: add Teams and Zoom meeting guests, enable Teams, Zoom, and Google Meet plugins by default, and automatically collect durable meeting transcripts. (#109964, #111048, #113022, #113053, #113122)
• Channels: add the Buzz plugin, Slack user-identity and Agent View modes, Telegram Bot API rich blocks and native Markdown lists, and richer Matrix formatting. (#113419, #109837, #103895; related #103673; #107986, #113158, #113199) Thanks @Patrick-Erichsen and @obviyus.
• Browser and MCP Apps: add a secure per-tab browser copilot, batch browser CLI, bounded page-question extraction, a ticketed MCP App host and Control UI bridge, and manifest-declared MCP Apps for native plugins. (#109817, #111457, #113861, #109861; related #109851; #109807, #113224; related #113218) Thanks @anagnorisis2peripeteia, @FMLS, @cursoragent, @hxy91819, and @fuller-stack-dev.
• Memory: add fast active-memory recall, default cross-conversation recall for personal installs, guided imports from Claude Code/Codex/Hermes, and a dedicated Memory settings page. (#108043, #110597, #108977, #114037)
• Scheduling: add per-job dynamic cadence, gated script payloads, durable schedule-source streaming, cron-backed heartbeat monitors, heartbeat-task conversion, current-conversation defaults, and /loop. (#110978, #111112, #112387, #112585, #113165, #114328)

Fixes

• Security and authorization: prevent channel allowlists from granting owner access, keep session exports inside the workspace, close a forged-marker/web-search boundary bypass, prevent non-owner ACP session exposure, reject unsafe explicit approval IDs, harden secret redaction and exec/OAuth approvals, validate downloaded install scripts, and prevent insecure secrets-plan writes. (#107403; related #104984; #104708; related #102391; #110417, #110745; related #103055; #111055, #112947, #112952, #112953, #112956, #112946, #112957, #113307; related #90013; #113707) Thanks @obviyus, @yetval, @VACInc, @pgondhi987, and @SebTardif.
• SQLite and data safety: commit session indexes before transcript eviction, preserve state through maintenance races and live-WAL verification, reject invalid backups and schema data loss, make snapshot publication crash-recoverable, and retain complete backups after interrupted commits. (#108378, #113216; related #113209, #113210, #113211; #113287; related #113265; #113367, #113473, #113607, #114016) Thanks @yetval, @vincentkoc, and @VACInc.
• Channel delivery: stop Telegram durable-ingress loss across restarts and persist offsets only after spool writes, preserve Discord/iMessage/WhatsApp traffic across crashes or restarts, restore assistant context and interrupted turns after restart, keep queued replies alive, and emit a fallback when a visible turn returns no reply. (#107288; related #107246; #113368; related #113315; #110274, #110409, #110418, #112548; related #112520; #112562, #114058, #114531) Thanks @obviyus, @carlosjarenom, and @JesusSerrano-Seimako.
• Sessions and transcripts: preserve final replies, active turns, Codex-bound history, and transcript cursors; prevent repeated tool-call IDs from poisoning sessions; close lifecycle races and cross-agent deadlocks; and prevent TUI cross-session leaks and lost streams. (#107799; related #106594; #110389, #110518; related #109443; #112016, #112988, #114477; related #103077, #103089, #113005, #114187; #114524, #114504) Thanks @joshavant, @lockhartheavyindustries, @flashosophy, @yetval, @realaudreyserber-afk, and @hvhoon.
• Install and upgrade: preserve working installs on unsupported Node and npm 12, isolate source postinstall state, repair missing native adapters, keep versioned plugins off source paths, avoid dirty source builds, repair plugin config during upgrades, stop packages from deleting UI/runtime files, finish ClawHub uninstall, surface empty npm-install failures, and discover external web-search plugins on fresh installs. (#106994; related #106870; #108100; related #107290; #111514; related #111513; #111682, #112829; related #112827; #113094, #113324, #113856, #113821, #114090, #114215; related #113975; #114327) Thanks @woohahahaaa, @fuller-stack-dev, @vincentkoc, @sallyom, and @alxfyvwebaccts-png.
• Provider reliability: prevent false Codex exhaustion and silent replies, honor Anthropic Retry-After, preserve selected Claude CLI profiles and adopted chats, recover Codex Computer Use and user-home app-server routes, retry transient device polling, correct OpenAI onboarding, and stabilize Ollama/LM Studio/local-model discovery. (#110381; related #96815; #110980, #111072; related #103849; #112458; related #95612, #107668; #113078, #113393, #114397, #114094; related #114086; #114288, #114405, #114582) Thanks @xxw77, @yetval, @fuller-stack-dev, @cstreeter, @josh-cornelius, @lanyoung, @LeonidasLux, and @BomBastikDE.
• Cron reliability: restore one-shot and startup catch-up jobs, preserve script state and scheduled authority across restarts, accept benign same-generation updates, bind jobs to the durable store session, unblock completed jobs behind slower batches, and trim job IDs before exact lookup. (#107236, #110351; related #102236; #111292; related #111271, #111272, #111273, #111274; #112483, #113088; related #113085; #114421, #114441, #110849) Thanks @SL4N, @yetval, @joshavant, @metahacker, @efpiva, and @nocodet888-arch.
• Compaction and response delivery: account for CJK text in compaction estimates and treat no_compactable_entries as a benign skip. (#114386; related #103930; #114449; related #114385) Thanks @qingminglong, @revision-co-ltd, @loulanyue, and @alfredjbclaw.
• Platform and transport reliability: respect debug-proxy response backpressure, cancel early-woken meeting audio timers, and preserve Windows PATH delimiters in node status. (#114076; related #105701; #114526, #114505) Thanks @qingminglong, @aniruddhaadak80, and @IWhatsskill.
• Channel edge cases: settle Feishu outbound delivery, surface Signal recipient failures, and support reverse-proxy paths in Matrix homeserver URLs. (#113152, #111960; related #111959; #93516; related #102885) Thanks @joshavant, @ooiuuii, and @Papilionidae.

Complete contribution record

This audited record covers the complete a5b2e4167de860fe3fe3da7284cd5f36883560c8..1d326e4f917a6527a737781918a733360c89eed1 history: 3908 merged PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

• PR #107116 Related #107106.
• PR #107147
• PR #107148
• PR #107123
• PR #107146 Thanks @vincentkoc.
• PR #107142
• PR #107156
• PR #107150
• PR #104259 Thanks @yyj-xydt.
• PR #107151
• PR #107157
• PR #106899 Related #106838. Thanks @bek91.
• PR #106995 Thanks @joshavant.
• PR #107086
• PR #107072 Thanks @zhangguiping-xydt.
• PR #107103 Thanks @zw-xysk.
• PR #107165
• PR #106384 Thanks @ZengWen-DT and @wangmiao0668000666.
• PR #107169
• PR #107168
• PR #107101
• PR #107174 Thanks @fuller-stack-dev.
• PR #107178
• PR #107189
• PR #107190
• PR #96554 Thanks @ruizcrp.
• PR #107196
• PR #107197
• PR #107194
• PR #107177
• PR #107201
• PR #107206
• PR #107210
• PR #107186
• PR #107213
• PR #107217
• PR #107173
• PR #107204
• PR #107231
• PR #107200 Related #107183.
• PR #106069 Related #106014. Thanks @krissding and @jalfaro2876.
• PR #107181
• PR #107212
• PR #107208
• PR #107233
• PR #107235
• PR #107050 Related #105512.
• PR #107198
• PR #107241
• PR #107232
• PR #103918 Thanks @mmaps and @pgondhi987.
• PR #107245
• PR #107167
• PR #106479 Related #105530. Thanks @ml12580 and @mnowrot.
• PR #107162 Related #107112.
• PR #107247
• PR #103914 Thanks @mmaps and @pgondhi987.
• PR #107249
• PR #107254
• PR #107259
• PR #107258 Thanks @pgondhi987.
• PR #107270
• PR #107166 Related #107153.
• PR #107242
• PR #107264
• PR #107260
• PR #107271
• PR #107252
• PR #107284
• PR #107009 Related #104804.
• PR #107286
• PR #107275
• PR #107253
• PR #107287
• PR #107282
• PR #107122 Thanks @wahaha1223.
• PR #107291
• PR #107214
• PR #107293
• PR #107296
• PR #107298
• PR #107307
• PR #107301
• PR #107272
• PR #101253 Thanks @RomneyDa.
• PR #106178 Thanks @QiuYuang and @Monkey-wusky and @maweibin.
• PR #107312
• PR #107310
• PR #107297
• PR #107025
• PR #107319
• PR #107236 Thanks @SL4N.
• PR #107321
• PR #107326
• PR #107328
• PR #107331
• PR #107238 Related #106875. Thanks @SL4N and @dr00-eth.
• PR #107316
• PR #106498 Thanks @hugenshen.
• PR #107332
• PR #99404 Thanks @snowzlmbot.
• PR #107193
• PR #102271 Thanks @RomneyDa.
• PR #107340
• PR #107342
• PR #105001 Thanks @zhangguiping-xydt.
• PR #107345
• PR #107338
• PR #107311
• PR #105883 Thanks @Alix-007.
• PR #107353
• PR #107351
• PR #107337
• PR #107354
• PR #107357
• PR #107349 Related #107313.
• PR #107288 Related #107246. Thanks @obviyus.
• PR #107358 Thanks @fuller-stack-dev.
• PR #107370
• PR #107361 Related #107335.
• PR #107188 Thanks @joshavant.
• PR #107379
• PR #107380
• PR #107383
• PR #106997
• PR #107385
• PR #107387
• PR #107336 Related #107318.