openclaw 2026.5.31-beta.3

2026.5.31

Highlights

• Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (, , , , , , and , .


• Workboard, SecretRef plugin manifests, hosted iOS push relay, and external Copilot/Tokenjuice packaging add broader orchestration, integration, and plugin delivery surfaces. (, , .


• Skills: let the skill_workshop agent tool apply, reject, and quarantine explicit proposals through the guarded review flow. Thanks .


• Skills: let pending proposals be revised in place with versioned, dated proposal frontmatter before approval. Thanks .


• Plugins: externalize Tokenjuice as the official @openclaw/tokenjuice plugin with npm and ClawHub publish metadata.


• Plugins: externalize the GitHub Copilot agent runtime as the official @openclaw/copilot plugin with npm and ClawHub publish metadata.


• iOS: add hosted push relay defaults, realtime Talk playback, and a guarded WebSocket ping path for more reliable mobile sessions. (, )


• Gateway: support Tailscale Serve service-name bindings for gateway exposure and status.


• Code mode: add internal namespaces for scoped agent/global sessions and exact namespace tool dispatch. () Thanks ) Thanks )


• Plugins: add a SecretRef provider integration manifest contract and extract shared LLM core packages for provider/plugin reuse. ()


• Skills: add the core skills index and centralize skills runtime loading, status, filtering, and prompt formatting.

Fixes

• Agents/media: keep async image, music, and video generation starts from ending the Codex turn, so mixed requests can continue with summaries or other work while media renders in the background.


• Agents/Codex: keep public OpenAI API-key profiles from being treated as native Codex app-server auth while preserving persisted Codex OAuth sessions.


• Agents/Codex: stream Codex app-server final-answer partials to live reply previews, preserve ACP metadata in SQLite, prefer real tool results over synthetic repair output, and preserve workspace/session metadata through ACP runtime refactors. (, .


• Agents/Codex: surface Skill Workshop guidance in Codex app-server prompts when skill_workshop is available. Thanks , .


• CLI: avoid live catalog validation during openclaw agents add, so adding a secondary agent no longer depends on provider catalog availability. () Thanks )


• Memory: serialize QMD update/embed writes per store, preserve phase signals on read errors, and rewrite generated transcript paths on rollover so memory/search state survives concurrent gateway and CLI activity. () Thanks ) Thanks )


• Providers: bound generated media downloads from OpenAI, Runway, xAI, MiniMax, BytePlus, DashScope-compatible, FAL, OpenRouter, Google, Vydra, and Comfy providers.


• Providers/OpenAI: avoid orphan Responses message-id replay and sanitize raw HTTP 401 provider errors before they reach user-facing logs.


• Providers: cap GitHub Copilot OAuth request timeouts before creating abort signals.


• Cron: retry recurring jobs after transient model rate limits before waiting for the next scheduled slot.


• Agents/Codex: keep live session locks during cleanup, recover interrupted CLI tool transcripts, preserve Codex auth and compaction session identity, clear orphan tool state, cap app-server idle timers, and keep media completion delivery retryable. (, , , )


• Security/config parsing: reject unsafe OAuth/token lifetimes, retry-after delays, inbound timestamps, response body sizes, command timeout config, sandbox observer token TTLs, and gateway WebSocket calls after close.


• Gateway/security: rate-limit bootstrap-token verification, guard direct session display names, and add Tailscale Serve service-name support without weakening gateway exposure checks.


• Providers/media: cap local service, model, usage, queue, generated media, TTS, music, workflow polling, and provider OAuth request timers across hosted and local providers.


• Plugins/install: add npm README coverage for channel providers and pin WhatsApp media decoding to Baileys' supported peer range so external WhatsApp installs do not fail npm peer resolution.


• Release/CI/E2E: bound release candidate reads, beta smoke REST calls, changelog restore, kitchen-sink and bundled plugin readiness probes, secret-provider probes, Vitest routing, and mainline test flakes. (, )


• Release/CI/E2E: refresh pinned Node Docker image digests and keep pairing challenge assertions aligned with fenced approval commands. () Thanks ) Thanks @zhangguiping-xydt.


• CI/Crabbox: keep default runner capacity spot-only and provider-neutral so OpenClaw remote validation does not silently fall back to on-demand leases or stale AWS region hints.


• CI/Crabbox: route Crabbox wrapper and Testbox workflow edits to their regression tests so changed-test gates do not silently run zero specs.


• CI/workflows: route workflow sanity helper edits to their guard tests and cover composite-action input interpolation checks.


• CI/tooling: route CI scope, dependency, changelog, and docs helper edits to their owner tests instead of silently skipping changed-test coverage.


• CI/tooling: route package, release, and install helper edits to their owner tests so changed-test gates cover publish and installer script changes.


• CI/tooling: route shared script library edits through their owner tests so lock, process, safety, and scan helpers do not skip changed-test coverage.


• CI/tooling: skip expensive import-graph scans once a changed diff already requires broad fallback, keeping local changed-test planning fast while still collecting explicit owner tests.


• CI/tooling: route script edits through conventional owner tests when matching test/scripts or src/scripts coverage already exists.


• CI/tooling: honor option terminators in the memory FD repro script so follow-on arguments are not reparsed.


• Release/CI/E2E: assert plugin lifecycle runtime inspect output instead of only capturing it.


• Release/CI/E2E: make gateway-network prove the advertised health RPC and retry early WebSocket closes without burning full open timeouts.


• Release/CI/E2E: honor option terminators across release, Parallels smoke, plugin gauntlet, and extension-memory scripts.


• Release/CI/E2E: fail plugin gateway gauntlet QA chunks when the requested suite summary is missing or invalid.


• Performance: prebuild QA runtime probes with generated plugin assets but without CLI startup metadata.


• Performance: skip declaration bundling for runtime-only CLI startup and gateway watch build profiles.


• Performance: reuse prepared provider handles, strict tool schemas, gateway runtime metadata, session maintenance config, plugin metadata, bundled skill allowlists, package-local plugin artifacts, single-entry store writes, and validated/serialized session prompt blobs.