Faster, steadier Gateway: chat turns, session lists, startup, and idle Gateways do far less SQLite and main-thread work, with more database work moved onto worker threads, so busy hosts and large agent fleets stay responsive. (#167965, #168002, #168093, #169005, #169164, #171685, #170151, #169871, #168649, #170612, #171371, #171805, #168992, #169543) Thanks @obviyus, @609NFT, @Leon-SK668, @chelsealong, @RomneyDa, and @joshavant.
Updates that finish: upgrades from 2026.10.1 and earlier betas complete, busy Gateways and slow Doctor steps no longer refuse or roll back a good update, failed updates no longer leave a half-installed version, and macOS, Windows, and Bun installs recover from their platform-specific failures. (#168849, #172249, #172196, #172151, #172247, #171101, #170519, #172640, #171936, #170940, #171077, #172494) Thanks @RomneyDa, @homeworld520, @Yolo521-bot, @giulianoaccorsi, @AntaresGG, @stop-time, @davidcittadini, and @SBC2016.
Restart-safe replies: interrupted and unfinished replies resume after a Gateway restart, and watched child results, queued turns, accepted agent updates, and operator tasks survive restarts instead of disappearing. (#172234, #172412, #169489, #171717, #170697, #170858, #170384, #172356, #172023) Thanks @jeanmonet.
Cloud sessions: move sessions between local and cloud from the session menu, organize cloud environments by repository with environment recipes and verified Node toolchains, and see snapshot progress while sessions start before the first snapshot finishes uploading. (#171690, #170892, #170862, #170796, #170875, #170895, #171729)
Local Gateway in the desktop apps: the Windows desktop app and fresh Tauri installs can run a local Gateway, fresh macOS installs start in guided dashboard setup, and first-run setup chooses inference automatically. (#169522, #169512, #169568, #169628)
New models: Gemini 4 Argon becomes the default Gemini model alongside Gemini 3.8 Flash, Nemotron 3.5 Super VL and xAI Imagine Image 2.0 arrive, Meta models run through Muse Code, and pickers stop offering retired models. (#171852, #172339, #172449, #172445, #170487, #171526, #171879) Thanks @nv-kasikritc, @jacobtomlinson, @JFLeonM, and @obviyus.
Newer Apple platforms required: OpenClaw now requires macOS 26.2, iOS 26.2, and Safari 26.2 or newer. (#168595)
Changes
Apple platform requirement: require macOS, iOS, and Safari 26.2 or newer for the native apps and Control UI. (#168595)
Cloud sessions: move sessions between local and cloud from session menus, organize cloud environments by repository, support repository environment recipes with verified Node toolchains, save suggested cloud profiles on first use, show snapshot startup progress, start sessions while the first snapshot uploads, ready workers for empty-workspace sessions, report slow dispatch phases, and keep cloud setup secrets behind scoped egress grants. (#171690, #170892, #170862, #170796, #170875, #170895, #171729, #170929, #171749, #171073, #170810) Thanks @VACInc.
Desktop apps and first run: support local Gateways in the Windows desktop app, start fresh Tauri installs with a local Gateway, start fresh macOS installs in guided dashboard setup, guide missing native permissions in chat, and choose inference automatically during first-run setup. (#169522, #169512, #169568, #169635, #169628)
Local setup: offer optional memory embedding setup, add managed llama.cpp OCR and vision setup, and allow non-interactive llama.cpp embedding-only setup. (#163693, #148193, #170153) Thanks @PollyBot13, @duyufansh2008, and @dh-js.
Bun runtime: build standalone OpenClaw executables with Bun, add an opt-in pinned Bun runtime that rejects unpinnable paths before changing anything, and start the Gateway faster on Bun. (#172384, #168832, #168982, #169543) Thanks @vincentkoc.
Experimental PostgreSQL: add an experimental PostgreSQL engine for the Workboard store, select the shared-state engine at its owner, generate PostgreSQL DDL from canonical SQLite schemas, add PostgreSQL migrations with capability admission and exact schema-drift checks, preserve PostgreSQL stores in backups and updates, and add verified offline database port tooling. (#169214, #171962, #168219, #169933, #172265, #170828, #170518, #171368, #171265, #170037, #170055, #170059, #171350, #171484, #171518, #171795, #172046, #171545) Thanks @vincentkoc and @joshavant.
Conversations: organize and archive nested conversations explicitly, choose when sessions can send and receive messages, opt in to sessions_send thread targets, run sessions in existing folders on paired devices, and snooze sessions until a custom time. (#168076, #162316, #168846, #169722, #171255) Thanks @VACInc, @obviyus, and @jacobtomlinson.
Session personalization: personalize session backgrounds, add per-session speech bubbles and prompt reactions, show session-specific previews for public links, and match public conversation pages to the chat design with copy buttons. (#168301, #168861, #169527, #168156) Thanks @vyctorbrzezowski and @VACInc.
Control UI navigation: organize personal navigation in a compact sidebar rail with real shortcut icons, filter sidebar users by online status, keep New conversation visible across sidebar modes, show session details beside wide conversations, make colored sessions easier to scan, inspect attached automations from session hovercards, put everyday session actions first, and make release updates discoverable from the account menu. (#168325, #168997, #172243, #170771, #170707, #170382, #172240, #168616, #172544, #100024) Thanks @fuller-stack-dev, @shakkernerd, and @VACInc.
Control UI chat: group session context and task progress in Details, clarify the session details inspector, render assistant directives and an embed tag, show readable tweet preview cards, load older history in larger pages, shrink the composer in existing sessions, search emoji by name in the reaction picker, add manual code folding to session diffs, and show or hide values in secure entry prompts. (#161674, #172436, #64104, #168213, #170481, #171637, #172577, #172350, #169925, #172549) Thanks @vyctorbrzezowski, @obviyus, @Takhoffman, @Patrick-Erichsen, and @jacobtomlinson.
Languages: add Swedish to the Control UI and docs, and include plugin catalogs in locale refresh. (#62063, #171496) Thanks @yeager and @vincentkoc.
Agents API: choose Agents API hosted workspaces when starting sessions, isolate Agents API sessions from Gateway tools and MCP, and allow shared compaction tuning in hosted sessions. (#168259, #170728, #171813)
MCP apps and automations: use MCP plugin apps across conversations and workspace files, trigger automations from MCP events, connect MCP apps through a principal-bound relay plugin, and support principal-bound remote Control UI for trusted plugins. (#161747, #165399, #168233, #170540)
Plugins and SDK: allow per-run model fallback overrides, fork a session's live context for background side questions, let plugins steer a session's active run, support Solid Control UI views, add worker-owned keyed state and conversation binding APIs, join service and account scheduling at retirement, complete awaited SQLite compatibility migration paths, and show calm notices for deprecated SDK usage. (#168893, #170146, #170152, #168408, #168478, #168483, #162669, #171443, #171752) Thanks @obviyus, @dwty11, and @joshavant.
ClawHub: expose published ClawHub packages to the Gateway and accept portable manifest categories. (#171622, #171532) Thanks @Patrick-Erichsen.
Models and providers: add Gemini 4 Argon as the default Gemini model with Gemini 3.8 Flash, replace Nemotron 3 Super with Nemotron 3.5 Super VL, add xAI Imagine Image 2.0 without silent image-model fallback, accept the Fish Audio Drama 3 preview, support endpoint-resolved custom model aliases, prefer a newer installed Codex for ChatGPT discovery, and prioritize shared private vLLM requests. (#171852, #172339, #172449, #172445, #170473, #170009, #168228, #129434) Thanks @nv-kasikritc, @jacobtomlinson, @JFLeonM, @xyrolle, @obviyus, @m888m, and @joshavant.
Muse Code: run Meta models through the Muse Code CLI agent runtime, sign in to Muse Code from Model Setup and Provider Access, and run consented turns under a conversation tool policy. (#170487, #171526, #171790, #172361) Thanks @obviyus.
Usage and accounts: show active auth subscription blocks, show Ollama cloud balance in status usage, add a ClawRouter sidebar dashboard for subscription pool headroom, show local provider processing with estimated wait time, and show every matched session in a paged usage overview. (#133087, #167474, #169514, #170041, #170369, #169660) Thanks @Leon-SK668, @vincentkoc, and @usimic.
Model recovery: use model fallbacks after context-overflow recovery, compact ChatGPT sign-in sessions server-side, end runs after confirmed final source replies, and support typed OpenAI Decisions API evaluations. (#170141, #168401, #170653, #166320) Thanks @amirarenco-create, @obviyus, @RomneyDa, @sunlit-deng, @jjjhenriksen, and @Kimiyu-186.
Labs Advisor: add an experimental Advisor that steers agents away from avoidable work. (#169564) Thanks @obviyus.
CLI progress: show progress while tool input is generated. (#167789) Thanks @ZengWen-DT, @obviyus, and @umeranjum17.
Skills: show a Learned notice row with one-press Undo, make background review channel notices opt-in, and save only repeatable procedures from background reviews. (#167996, #170025, #170277) Thanks @obviyus.
Clearer messages: simplify wording across Settings, Gateway and security diagnostics, CLI and Doctor, agent and command execution, browser and approval help, provider, messaging, workspace, and memory plugins, and the macOS, iOS, Android, and Linux apps. (#168703, #168704, #168705, #168706, #168707, #168709, #168710, #168711, #168713, #168714, #168715, #168716) Thanks @RomneyDa, @synthalorian, and @obviyus.
Mobile and devices: add Android system, photos, contacts, calendar, and motion capabilities, add an authenticated iOS background presence beacon, and support multiple Microsoft Teams bot accounts. (#29398, #73330, #112811) Thanks @obviyus and @jimmypuckett.
Worker placement: require configured worker placement for sessions and allow keyless Gateway selection for worker-local inference. (#158903, #170132) Thanks @sallyom, @RomneyDa, and @obviyus.
Diagnostics: export turn prompts and final answers on message and run spans, attribute GC metrics by kind and worker, measure allocated bytes per RPC and turn, attribute native CPU samples to JavaScript callers, capture main-thread stall stacks, and expose SQLite worker delay phases. (#156603, #171923, #172486, #171686, #170904, #169535, #170932, #171082, #171062) Thanks @ryan-dyer-sp, @vincentkoc, and @joshavant.
More: expose wrapped browser observations to Code Mode, allow pausing automatic team-report collection, and add scoped startup migration backups. (#164833, #171840, #171764) Thanks @alkor2000, @potterdigital, and @vincentkoc.
Fixes
Content boundaries: keep internal runtime context, serialized tool-call XML, split tool-call markers, raw background command notices, runtime prompts, and legacy requester guidance out of replies and chat history, and stop models that print tool-call text from reporting false success. (#163471, #138204, #169172, #171898, #168236, #166080, #163521, #168943, #168928, #170799, #137273) Thanks @RomneyDa, @obviyus, @consoleaf, @JacquesLFR8, @ericcaiwx-star, @ruiling-smartbear, @JasonBuildAI, @Marvinthebored, @Peetiegonzalez, @rogeriochaves, @llmsommelier, @alkor2000, @Oldrich333, and @LiuwqGit.
Reply text: keep trailing reply text after quoted closing tags, suppress punctuated and truncated silent placeholders, prevent thinking-only utility replies, and keep Ollama reasoning out of replies for manually configured models. (#149775, #168571, #170190, #169920, #169851, #171573) Thanks @bodapatisaikrishna, @liwenjie200543, @maliv2, @jacobtomlinson, @boeingchoco, and @vincentkoc.
Security and authority: stop setup diagnostics repairing state without approval, reject project cache symlinks, bind Discord and Slack channel tool policy to resolved channel IDs, resolve Matrix room policy by room ID, never treat Tlon group DM authors as the owner, enforce exclusive Matrix crypto store ownership, separate exec approval ownership from node policy, isolate managed local provider auth, and align pairing setup with administrator scope. (#171960, #172079, #171829, #171828, #171645, #165801, #160707, #148612, #158108, #170988, #160982) Thanks @vincentkoc, @yetval, @eleqtrizit, @joshavant, @beenhero, and @ysumatta.
Private data: stop logging inbound message content and spoken text, wait for explicit actions before reading Chrome data on macOS, honor ordinary permissions for voice requests, reject unknown WhatsApp login actions, disable unresolved hook ingress without blocking the Gateway, and reject oversized workspace document saves. (#170815, #170999, #171177, #159697, #158719, #165019, #171938) Thanks @brokemac79, @Alix-007, @mcaxtr, and @eleqtrizit.
State ownership: keep secret, catalog, config, agent, plugin, backup, device, Memory, Matrix, and Workboard writes with the running Gateway, protect provider and MCP credentials from concurrent CLI writes, keep channel setup credentials out of config, and refuse local Claws, migration, and proxy writes while a Gateway owns the state. (#168108, #168135, #169732, #168417, #168757, #168466, #168471, #168457, #168586, #168419, #168459) Thanks @obviyus.
Restart recovery: resume interrupted replies, aborted main turns, and requester-settle work after Gateway restarts, keep streamed answers when a restart aborts the run, settle replaced subagents and permanently rejected restart events, and resume sessions whose aborted run finished before recovery. (#172234, #172412, #170697, #170858, #170699, #171158, #170513, #172322, #171717, #169489, #170384, #172356, #172023, #170781) Thanks @jeanmonet.
