GitHub: openclaw 2026.7.2-beta.7

2026.7.2

Highlights

• State safety and recovery: protect persisted data with a quarantine store that survives primary-database damage, crash-recoverable SQLite snapshots, crash-durable filesystem publication, schema-upgrade data-loss rejection, and rollback-writer snapshot recovery. (, , .


• Durable channel delivery: keep accepted messages recoverable across gateway restarts and local crashes through the shared ingress drain and dead-letter recovery, covering Telegram, Signal, Slack, QQBot, Twitch, Synology Chat, Tlon, IRC, and Zalo User. , , , , , , ) Thanks .


• Session rewind and branching: rewind or fork conversations from individual messages, switch transcript branches across web and native apps, fork upstream Codex sessions, preserve branch-safe queued sends, reject stale-pane writes, and restore prompt images after a fork. (, , , ) Thanks , (, , , , .


• Questions and approvals everywhere: let agents ask structured questions with option cards across web, channels, macOS, and native apps, while approvals gain push notifications, history, fair queuing, headless resolution, Claude tool-request relay, reviewer detail, and clearer formatted prompts. , , , , , , ) Thanks , (, , , , , .


• Wear OS companion: add the phone-proxied Wear companion with home-screen agent/session/model selection, realtime Talk controls, audio-reactive playback, and an instant-talk tile. , , , ) Thanks , and (, , , , )

Changes

• Models and providers: add Claude Opus 5 across catalog and runtime, Kimi K3, and GPT Live realtime support with the supported Platform API authentication path. (, ; ; related , .


• Local inference and setup: detect local inference providers during onboarding, add in-process llama.cpp GGUF inference and Baseten Model API support, discover models from live provider catalogs, and offer model downloads from web and macOS setup. (; ; related ; related ) Thanks , , , , , )


• Native apps: bring Quick Chat to macOS and Linux with streaming, routing, context capture, dictation, and model controls; add Linux desktop integration and signed updates; add multi-gateway apps and mobile dashboards; and expand Wear OS companion/Talk support. (, , , , ; related , ; related , , , and , , )


• Channels: add the Buzz plugin, Slack user-identity and Agent View modes, Telegram Bot API rich blocks and native Markdown lists, and richer Matrix formatting. (, ; , and , , ; ; related , , .


• Memory: add fast active-memory recall, default cross-conversation recall for personal installs, guided imports from Claude Code/Codex/Hermes, and a dedicated Memory settings page. (, )


• Scheduling: add per-job dynamic cadence, gated script payloads, durable schedule-source streaming, cron-backed heartbeat monitors, heartbeat-task conversion, current-conversation defaults, and /loop. (, , )


• Fish Audio speech: add hosted S2.1 synthesis with streaming, voice notes, voice discovery, and telephony, plus local Fish S2 Pro reference-voice streaming in native macOS Talk. (, .


• Control UI setup: continue verified model setup into Custodian, explain that the web app is ready without a channel, and offer an optional dismissible path to Channels. () Thanks , .


• Automations naming: rename the scheduler-facing cron agent tool and visible CLI/UI surfaces to Automations while retaining the compatible CLI alias. (, .


• DuckDuckGo search: move DuckDuckGo search into the plugin boundary so provider ownership, installation, and runtime behavior stay outside core. (.

Fixes

• Security and authorization: prevent channel allowlists from granting owner access, keep session exports inside the workspace, close a forged-marker/web-search boundary bypass, prevent non-owner ACP session exposure, reject unsafe explicit approval IDs, harden secret redaction and exec/OAuth approvals, validate downloaded install scripts, and prevent insecure secrets-plan writes. (; ; ; related , , , , ; , , .


• SQLite and data safety: commit session indexes before transcript eviction, preserve state through maintenance races and live-WAL verification, reject invalid backups and schema data loss, make snapshot publication crash-recoverable, retain complete backups after interrupted commits, and evict only the exact corrupted cached database owner so repairs recover without a Gateway restart. (; related , ; related , , ) Thanks , .


• Channel delivery: stop Telegram durable-ingress loss across restarts and persist offsets only after spool writes, preserve Discord/iMessage/WhatsApp traffic across crashes or restarts, restore assistant context and interrupted turns after restart, suppress outbound echoes, deliver ingress retries whose queued run was dropped, report finalized Telegram previews to plugins, explain invalid native queue arguments instead of false model-failure fallbacks, validate native settings, and preserve Telegram ingress outcomes. (; ; , ; related , , ; related ; related ; related ) Thanks , , , and ; related , ; , , , , , ) Thanks , , , and ; related ; related ; related , ; , , ; related , , , , , and ; related , ; , , , ; , ; related , ) Thanks , , , , , and ; related , ) Thanks .


• Cron reliability: restore one-shot and startup catch-up jobs, preserve script state and scheduled authority across restarts, accept benign same-generation updates, bind jobs to the durable store session, unblock completed jobs behind slower batches, and trim job IDs before exact lookup. (; related ; related , ; ; related , ) Thanks , , , and ; related ; related , , and ; related , ; related , , .


• Channel edge cases: settle Feishu outbound delivery, surface Signal recipient failures, and support reverse-proxy paths in Matrix homeserver URLs. (; related ; related , .

Complete contribution record

The full contribution record is available in the tag-pinned