GitHub Release: openclaw/openclaw v2026.9.3 (08.09.2026)

$ git clone https://github.com/openclaw/openclaw.git Clone

2026.9.3

Highlights

• Safer updates: rehearse core and plugin changes in isolated candidate state before activation, support eligible 2026.9.2 migrations, and recover abandoned update records without stopping a healthy matching Gateway. Related , , . (, , , .


• Skill Workshop: keep skills in one persistent agent-owned collection across workspaces, compare complete skill instructions, and retire missing-draft suggestions safely through Doctor. Related , , and , ) Thanks )


• A searchable meeting library: browse saved notes, search full transcripts, download complete Markdown or JSONL archives, and manage capture sources from the Control UI. ()


• Optional team activity reports: install and enable Team Reports to browse authenticated GitHub activity and explicitly configured Discord discussion, with stored history and optional model summaries. ()

Changes

• Breaking — Node runtime: require Node 24.16.0 or newer on 24.x, or Node 26.1.0 or newer; Node 26 is recommended. Upgrade Node before OpenClaw to prevent SQLite text truncation: Node 22, Node 25, and earlier 24.x/26.x builds are no longer supported. Node-based CLI/Gateway installs on macOS 11–13.4 or official Linux ARMv7 provisioning need a supported host; see )


• Breaking — execution-policy SDK: move the retired exec-mode and comparator helpers from infra-runtime to execPolicy on openclaw/plugin-sdk/agent-harness-runtime; use resolveExecModePolicy and select the returned fields needed by the caller. See .


• Breaking — SDK aliases: replace channel-inbound.buildChannelTurnMediaPayload with buildChannelInboundMediaPayload; infer the retained abortAndDrainAgentHarnessRun callable’s result instead of importing the removed AbortAndDrainAgentHarnessRunResult named type. The callable and its result data remain available. See ) Thanks .


• MCP prompt adapters: return the typed MCP GetPromptResult shape from SessionMcpRuntime.getPrompt, preserving its messages and image content; validate external responses instead of returning arbitrary unknown values. () Thanks )


• Update failure reports: submit a report from the failed-update action only after explicit consent, using the recorded update attempt and current owner. (.


• Active sessions: show running and queued permitted sessions in Live activity on entry and reconnect, with a visible limit notice and connection status instead of claiming disconnected sessions are idle. (.


• Code Mode composition: retain the running JavaScript environment across fast tool replies, add optional TypeScript checks against available tools, and report original-source error locations with bounded console output; explicit yields and resource limits still checkpoint execution. Related ) Thanks ) Thanks )


• Public session transcripts: session owners and Gateway admins can explicitly publish existing and future conversation text to anyone with a public URL and revoke access later; the read-only view omits tools, reasoning, files, images, and executable widgets. Review the text before enabling access; private-session preview links remain separate. ()


• Persistent sessions and subagent runs: keep persistent sessions created with visible spawning editable and steerable in their parent tree. Subagent runs remain view-only, omit author avatars, and keep live progress in the parent conversation with inactive cards paused. (, , ) Thanks . ( and . (, , , , , , , , .


• Browser panel: watch Agent browser tabs repaint live, with screenshot fallback when streaming is unavailable. In the macOS app, open external links as native WebKit Mac tabs in the same Browser panel, with navigation and one-shot Annotate/Inspect capture; Mac tabs belong to their window and survive chat switches. ()


• iOS voice shortcuts: open the current chat and start Talk with the Start Live Voice App Shortcut; pairing, provider setup, microphone permission, unlock, and foreground requirements still apply. Related , .


• Team Reports: install the optional Team Reports plugin for authenticated daily, weekly, and monthly GitHub reports and explicitly selected Discord sources, with stored history, optional summaries, people timelines and calendars, coverage warnings, scheduler/source health, and theme-aware report pages. (, , ) Thanks )


• Telegram photo albums: group consecutive eligible photos into native albums of up to ten while preserving order, captions, reply targets, and topics; single photos and messages with controls retain individual delivery. (.


• CLI and plugin discovery: limit displayed terminal or JSON documentation results with openclaw docs --limit, and let the system agent read installed-plugin inventory directly. Related , and ) Thanks . (.


• Native dashboard reports: display bounded report data directly through show_widget and dashboard authoring without an iframe. Related )


• Chrome extension setup on Mac: request the official Chrome Store extension from the local Mac device settings or CLI after native setup is ready; Chrome still owns approval and uninstall decisions, and OpenClaw shows when setup remains pending. Related )


• CLI agents by default: show supported create-capable CLI agents in the new-session model picker without a separate opt-in; set gateway.cliAgents.enabled to false to disable CLI agents and native CLI session creation. (. (.


• Folder navigation: filter the folder browser immediately as you type a path. (, , ) Thanks )


• Diagnostics: expose garbage-collection duration metrics and identify slow phases while opening agent databases. Related , ) Thanks )


• Cloud setup diagnostics: report cloud bootstrap phase timings so provisioning delays are easier to locate. (, )

Fixes

• Stale update recovery: recover abandoned update records without stopping a healthy, matching Gateway when no post-update work remains; retain live-driver protection and require explicit recovery for stale legacy records without driver identity. (. (, , , , .


• Authored configuration: preserve authored settings, environment and secret references, and omitted defaults through setup, updates, Settings saves, and Doctor migrations. Route supported edits to their owning include, retain explicit values equal to defaults, preserve configuration when recovery fails, apply changed environment values on restart, and reject or repair placeholder Gateway tokens. Related , , , , , ) Thanks , , and , , , , and . (, , ) Thanks .


• Development-to-package updates: replace npm’s install link without modifying its development checkout; restoring a link after failed activation remains unverified recovery and does not automatically restart the Gateway. (. (, , , , , ) Thanks , , , and , , , , , , , , , , .


• Update verification: check service ownership, settled health, matching version and build identity, plugin activation, channel readiness, and HTTP readiness without making a model call; failed checks follow the supported repair or rollback path. See , , , ) Thanks , and . (, .


• Skill Workshop reviews: compare complete skill instructions with inline changes, distinguish installed skills from proposal history, and support reviews through compatible restricted CLI backends. Preserve discovery of skills literally named skills and describe weekly reviews in terms of retained conversation context. (, , , .


• Skill Workshop recovery: retire missing-draft suggestions through Doctor while preserving installed skills and recovery evidence, distinguish movable backups from those needing review, and keep relocation lint read-only. Report explicit recovery steps for legacy execution policies and unsafe event paths. Related , . (, , , .


• Workshop learning and refresh: recover memory and skill refresh after watcher exhaustion, keep unavailable-backend status machine-readable, and show stale-search guidance. Review complete Workshop collections before editing, preserve task-specific knowledge, and keep one-time requests or routine repetition from becoming standing instructions. Related , , , ) Thanks , and . (. (, , , , , , , , , , , , , .


• Private runtime context: distinguish user-authored input from Gateway runtime context and strip recognized internal context, including partial streamed markers, from channel reasoning previews. Preserve stored user transcripts, original reasoning for replay, and existing session projections. () Thanks )


• Conversation durability: publish transcript rewrites atomically so interruptions do not expose partial history, and preserve already-projected tool history across Gateway restarts. Related . () Thanks .


• Reply and task continuity: discard superseded deferred tool replies before finalization while preserving commentary and media, and keep task pagination stable across metadata edits that do not change access. () Thanks )


• Code Mode results and diagnostics: preserve complete structured tool results or return a catchable resource-limit error, keep file pages separate from display notices, and retain handled error details. Preserve MCP declarations and search results, identify unawaited promises, report budgets and source locations accurately, and keep command dispatch responsive. Related . (, , , , , , , and , , , ) Thanks )


• Subagent completion and cancellation: resume nested orchestrators after yielding, retain child completion through parent recovery, and settle unsuccessful wakes durably. Preserve durable parent identity and replay order, cancel replaced or reset children, and let requester follow-ups finish without stale or duplicate completion. Related , , , , , . (, , , , , , ) Thanks , , , , , , , , and . (.


• Android conversation and accessibility: keep Android Send and Talk controls usable during active runs and short keyboard viewports without erasing another run’s output; retain delayed-send ownership, publish approval outcomes atomically, and improve large-text readability and contrast. Refresh model status for the selected agent and report failed refreshes without discarding choices; recover health and secondary-Gateway refreshes, reduce retries to unreachable Gateways, reopen chats at the live edge, make settings searchable, and surface workspace-sharing failures. Preserve the complete macOS automation count. Related , . (, , , , , , , , , , and . () Thanks .


• Context and compaction: size compaction against the full pending request, preserve complete exchanges and queued turns, and pair hooks even for no-op compaction. Keep runtime-generation ownership, tool schemas and readable results, enforce bounded heartbeat and search context, preserve errors during failed summary recovery, and run optional maintenance after delivery with foreground preemption. Related , . (, , , , , ) Thanks , , , , .


• Conversation recovery and completed replies: preserve queued input, completed assistant output, and successful tool results through watchdog retries, fallback, disconnects, and delayed history. Keep final delivery independent of stalled maintenance, prevent split or duplicate replies, and retain durable failure notices while preserving message order and session ownership. Related , , , , , , , , , , , , , .


• Long conversations and retained memory: reduce repeated transcript, branch, compaction, and bounded-text work in large conversations. Bound retained tool observers and projections, release prepared SQLite statements with their database, and avoid discarded waits in queued writes. (, , , , ) Thanks , , , , and , , , , , , , , ) Thanks , .


• Memory paths, recall, and budgets: use the current prompt for LanceDB recall and the prepared LM Studio instance for embeddings, honor profile and workspace paths, and keep blocked provenance out of promotion previews. Use effective model limits for memory flush and compaction, invalidate stale context usage after truncation, preserve transcript-growth freshness, and report skipped roots and read errors. Related . (, , , , ) Thanks , , , , and , , . (, , , , , ) Thanks , , , and , , , , ) Thanks , , and )


• Local models: route LM Studio chat through the prepared instance and use its actual context budget, reload evicted embedding models when enabled, and provide working login guidance. Honor Ollama sampling overrides and reasoning follow-ups, reject embedding-only chat setup, preserve llama.cpp presets and local conversation tools, and recover retired automation model overrides. Related , , , , , , , , ) Thanks , and . (, , .


• Prompt cache continuity: preserve warm conversation and tool prefixes across tool loops, background activity, Windows approvals, and resumed CLI turns. Keep Responses history append-only, Gemini hook instructions and stable-prefix caches intact, Anthropic tool checkpoints independent, and Bedrock checkpoints anchored to conversation history. (, , , , , .


• Native and compatible cache controls: honor native OpenAI cache-key and retention settings and restore Anthropic-style cache markers on managed Chat Completions routes, including supported DeepInfra and Model Studio routes. ()


• Cache and billing diagnostics: report cache misses per completed model request, include Codex /btw tool-loop usage in billing hooks and diagnostics, and preserve recorded service-tier costs while correctly applying Anthropic fast-mode tier pricing. (, . (, , , , , and ) Thanks , , .


• Provider route privacy: keep opaque realtime routes out of public configuration and catalog projections while preserving supported Talk authentication and relay routing. (.


• Models and providers: preserve the selected model when resuming managed Codex sessions, show the canonical provider after local-model changes, report Ollama cached-prompt usage, and include the required conversation identity on OpenCode Go/Zen requests. Related . (, ) Thanks , , , and , , , , .


• Provider and media choices: avoid stale runtime options, transcription models, and PDF defaults across provider changes, and honor global plugin disablement and document allowlists during PDF extraction. (, , , , , , , .


• Drafts, Review, and navigation: read supported same-origin text attachments directly in Files with indentation preserved. Keep delayed Review results bound to the current selection, preserve newer drafts through rewind and failed steer/redirect, clear Side chat when its parent disappears, and retain board and Home navigation context. Keep uploaded images visible while worktrees start, allow suggested follow-ups without a worktree, show local-link hover cards and line-range file references, and retain panel shortcuts and Review sizing within transcript bounds. Related , . (, , .


• Protected HTTPS continuity: renew protected HTTPS leaf certificates while keeping the Gateway process trust chain stable, so existing subprocesses continue working beyond one day; report certificate failures in status and Doctor. Related #136813. (#141484) Thanks and , .


• Bun transport compatibility: use the declared WebSocket implementations under Bun across Discord, Mattermost, Signal, Gateway, workers, voice calls, and provider routes, preserving handshake options, payloads, backpressure, and transcription limits. (#139480, #139567, #139717, #139919, #140048, #140071, #140318, #141465)


• Codex and CLI continuity: preserve current turn context and workspace references across reused Codex sessions, plugin updates, cold resume, and compaction. Retain completed answers through disconnect or settlement expiry, guard failed-session continuation, reject stale hook requests, and finish prior Claude CLI cleanup before starting replacement processes. Related #138835, #139173. (#136926, #139228, #139246, #139353, #140814, #140885, #140973, #141491) Thanks , .


• Usage details and exports: refresh the selected session’s timeline, conversation, and prompt breakdown with Usage totals, and keep exported data tied to the same concrete session instance. Show context pressure against the matching last-run prompt budget; fall back to the context window after model or cap changes and avoid warnings from stale totals. Related #138590, #140567. (#138666, #140573, #141632) Thanks .


• Channel progress: preserve every Teams progress reply across stream settlement and fallback, and show Telegram compaction status in enabled answer previews. (#141199, #141551) Thanks , .


• Catalog resilience and scope: retain discovered inventories after failed refreshes and report discovery failures instead of silently losing models. Keep exact model identities and selected-agent catalogs, preserve cold-path credential resolution and deferred tool availability, respect the final context budget, and defer downloaded catalog changes until restart. Related #139498, #139499. (#139231, #139357, #139649, #139749, #139750, #139791, #139817, #139846, #139848, #139849, #139880, #139900, #139907, #139923, #139991, #140086, #140435, #140436, #140441, #140657, #141354, #141402) Thanks , .


• Control UI connection and refresh: reconnect after pairing approval and missed update notices, preserve loaded sidebar children during roster refreshes, and retain recent dashboard interactions per pane. Keep suspension and offline state in the footer while panels retain data, report chat-search and GitHub-status failures accurately, restore editor focus after preview, and make browser URL copying work on plain HTTP without delayed older copies replacing newer clipboard content. Related #140492. (#140333, #140459, #140484, #140495, #140662, #140893, #141040, #141130, #141362, #141428) Thanks .


• Connection and location boundaries: bind desktop observer access to the requesting Gateway connection, accept the configured Gateway secret through either connect field without changing the selected auth mode, and honor Android’s Precise Location toggle for cached, fresh, and pending fixes. (#141336, #141344, #141456) Thanks .


• Claude questions: preserve Claude ask_user deadlines through the CLI tool lifecycle. (#140845) Thanks and , , , .


• Feishu routing and messages: use reloaded Feishu group bindings on the next message, expand quoted merged-forward contents, and preserve mentions in individual and debounced messages. Related #133757, #136200. (#96311, #133775, #136231) Thanks , .


• Matrix room information and polls: include alternative Matrix room aliases and correctly recognize disclosed poll results across supported event namespaces. (#140967, #140969)


• Slack structured replies: deliver valid Slack Block Kit sections intact even when their accessibility text exceeds the preferred chunk size. (#140805)


• Telegram reasoning display: keep internal reasoning-tag prefixes hidden when streamed tags contain extra whitespace. (#126219) Thanks .


• Browser recovery and captures: align screenshot labels with the actual image scale and crop, preserve focus for verified visible attached Chrome sessions on macOS and Linux, recover tabs after attachment loss while preserving per-client detach behavior, and keep historical or stopped previews from launching browsers unexpectedly. Related #138999. (#134400, #139064, #139089, #139275, #141103) Thanks , , and .


• Canvas action feedback: show rejected A2UI action errors immediately. (#140670)


• CLI selection and diagnostics: show configured channel account names in agent listings, distinguish diagnostic-only service state from the probe target, and report plugin enablement accurately during metadata inspection. Related #140950, #141263. (#140547, #140964, #141302) Thanks .


• CLI input, output, and drafts: reject explicitly blank pairing selectors, numeric inference/scan options, and Gateway ports; preserve escaped whitespace in skills JSON, machine-readable setup JSON, Unicode and Windows note line endings, and quoted Bash completion values. Make bare telemetry help succeed, preserve drafts after picker selection, and prevent multiline exit pastes from closing TUI. Related #138613. (#137209, #139512, #139613, #139639, #140034, #140235, #140238, #140283, #140780, #141070) Thanks , , , and .


• Plugin lifecycle: preserve install backups and manifest contents on interrupted writes or ownership loss, and report recovery paths. Validate setup entrypoints before loading, retain exact install receipts and current tool context, honor cache invalidation, remove owned aliases before files, and finish late-starting service cleanup. Related #138815, #140063. (#117370, #138870, #139828, #139908, #140065, #140132, #140328, #140740) Thanks , and .


• Policy tool vocabulary: use core aliases, groups, and wildcard rules for policy tool requirements so required deny lists cover the actual tools they name. (#140628)


• Capture history protection: keep supplied-ID and legacy capture history intact when occupancy capture restarts; reopen only a recent transcript whose stored origin confirms a generated ID. (#140563)


• Cloud allocation boundaries: finish local worker preparation before recording allocation intent, avoiding cleanup requests for leases that were never allocated. (#140945)


• Docker workspace ownership: preserve ownership of bind-mounted workspace project files during Docker setup. Related #140968. (#140993) Thanks .


• Windows startup and repository work: avoid compiler-triggered Windows Gateway startup failures and use Windows-compatible null paths in worker Git preparation and publication. Related #140795. (#140593, #140803)


• Automatic progress visibility: honor fast-auto progress visibility while retaining required transport lifecycle callbacks, including iMessage typing behavior. Related #97601. (#122221) Thanks , and .


• Meeting and desktop shutdown: cancel active meeting consults and ignore late speech after stopping; retain failed desktop cleanup so it can be retried before replacement. Related #140800. (#140658, #140801)


• Portals on IPv6 loopback: reach portal servers on either loopback address family even when localhost records list only IPv4 or IPv6. (#140580)


• Doctor compatibility: refuse an interactive update before writing update history when shared state uses a newer schema, and direct operators to a compatible installation; readable shared state still permits a source update past newer agent schemas.


• Localized controls: distinguish parent sessions from main sessions and dashboard panels from desktops, and correct selected native translations for pending states, consent, permissions, initial setup, and displayed-versus-total session counts.


• Questions and approvals: avoid telling users to tap nonexistent answer buttons and keep node-capability approvals available until resolved. Related #132829, #135354. (#137978, #140166) Thanks , .


• Scheduled work and monitor recovery: preserve scheduled delivery intent, accepted monitor scratch, paced checks, and recovered outcomes across restarts. Keep forced disabled one-shots disabled, produce fresh manual-run results, skip empty scheduled heartbeats without busy-queue retries, and converge or remove monitors through their owners after agents and configuration are ready. Related #131374, #136525, #137492, #138299, #139088, #139488, #139945, #140005, #140080. (#131462, #136589, #137517, #138322, #139017, #139037, #139225, #139491, #139509, #139947, #139967, #139987, #140025, #140083, #140256, #140260) Thanks , , , , .


• Meeting and channel lifecycle: settle duplicate recording auto-start retries and occupancy startup/cancellation diagnostics, retain TTS delivery decisions, report Nostr relay publish outcomes, and settle iMessage failures after errored stdio closure. Related #140287. (#139727, #140202, #140220, #140221, #140289)


• Media and HTTP: prevent stack overflow when decoding inline images, stop image setup after cancellation, release gracefully closed transcription socket state, and honor HTTP dates when revalidating assets and media. Related #140153. (#140149, #140173, #140226, #140303)


• Command controls: isolate background-result retention by process, retain Windows Startup fallback environment overrides, accept Swabble executable paths and file options, and avoid mistaking quoted JSON examples for results. (#122373, #122658, #127231, #140291) Thanks .


• Status and setup: resolve configured channel credentials in fast status scans, defer unrelated CLI options before status and health, count selected bootstrap-hook files accurately, and permit fresh llama.cpp binary validation on macOS26. Related #137217, #137308, #138672. (#137114, #137269, #137351, #139160) Thanks , , , , and , , .


• Active-run documents: retain extracted document text, attachment context, and rendered PDF pages when steering an active run, while preserving normal follow-up delivery when steering cannot be admitted. Related #138225. (#138275) Thanks , and .


• Channel and formatting behavior: preserve silent-reply guidance, fall back from oversized Feishu tables to post mode, restore LINE and Mattermost account promotion, retain indentation in cited memory snippets, and preserve emoji in remote-desktop text input. Related #43690, #136854, #140470. (#136045, #136382, #138345, #140157, #140471) Thanks , , .


• Native diagnostics and networking: keep Android settings diagnostics readable and copyable, preserve complete quoted cache validators, use the installed WebSocket transport for node streams, and support Matrix and the bundled Proxyline runtime on opt-in Bun installations. Related #140528. (#139647, #140411, #140477, #140490, #140529)


• Upgrade continuity: support 2026.9.2-driven shared-state-only upgrades by deferring publication of the new schema version while the updater still needs its update history. Agent-schema migrations, missing state metadata, and failed state migrations retain typed refusal and the external-install/fresh-Doctor recovery path; see , , .


• Approvals and task failures: refresh pending approvals when reopening a chat and identify Gateway storage failures in run-error messages. (#139409, #139457)


• Portable state and installation: open agent state on SQLite builds without extension support and install required native archive dependencies with bundle manifests. (#139415, #139487)


• Setup recovery: migrate legacy workspace setup before explicit Doctor preflight consumers, expose sanitized channel startup errors in health output, verify and save provider starter aliases, and list owned cron jobs only once in removal previews. (#139339, #139395, #139473)


• Profile and activity labels: show the primary user in multi-agent profile headers and keep activity labels visible with consistent row typography. (#136736, #139372) Thanks .


• Database and backup integrity: prevent writes after a failed nested rollback, preserve state artifacts when reading update history, and exclude shared-workspace files from state-only backups. Related #139549. (#138917, #139598, #139700) Thanks , .


• Tool results and progress: preserve empty client-tool completions, retain asynchronous tool results, ground exec approvals in actual tool results, and keep Swarm outcomes visible after completion. Related #139515, #139975. (#139490, #139520, #139988, #140043)


• Channel delivery: send pairing approvals from the approved account, restore bare-user Mattermost DMs on private servers, preserve Matrix thread reply targets, avoid repeated mention alerts on edits, and avoid duplicating Telegram native choices in message text. (#137268, #139479, #139726, #140091, #140108) Thanks .


• Meeting capture: keep Discord recording independent of voice conversations and retain transcript capture ownership through failed cleanup. (#139572, #139658)


• Attachments and browser media: retain fetched and node-proxied filenames, percent sequences, MIME parameters, and ffprobe dimensions or duration; restore browser file uploads in existing sessions and preserve code fences in page evaluation results. Related #138382, #139557. (#137219, #138411, #139508, #139559, #139621, #139904, #139906) Thanks , , and .


• Control UI: keep interactive dashboard authoring through restart, restore native customization access and configured agent avatars, show unavailable exec-node bindings, and expose agent-list failures on Memory pages. Related #127641, #139594. (#133032, #139510, #139705, #139873, #139899) Thanks .


• Background UI work: stop hidden Inbox and automation refreshes, avoid duplicate PR refreshes after replay, and skip remote node discovery for local-only catalog pages. (#139966, #140090, #140094, #140097)


• Linux and Windows: keep Linux widget replies connected, explain a missing Linux file opener, accept MSYS Git paths for worktrees and backups, and keep anchored Windows Gateway commands console-free. Related #138706, #139185. (#138751, #139252, #139266, #139664) Thanks , , .


• Docker startup: restore browser-enabled Gateways and stage bundled plugin runtime dependencies in their packaged plugin roots. Related #138777. (#139117, #139686) Thanks , , and .


• Cloud recovery: resume provisioning after temporary storage errors, preserve workspace-conflict errors during reclamation, and report failed cloud tools as errors. (#139582, #139758, #140021)


• Forwarded messages and commands: preserve Discord forwarded text and Teams thread context while keeping commands tied to the current sender, and retain Slack inline shortcuts after mention rendering. (#137313) Thanks .


• Service-control privacy: keep application credentials and unrelated parent variables out of native service-manager subprocesses while retaining required operating-system routing. (#139333)


• Activity pages: preserve the reader’s position during live refreshes and remove misleading per-subagent edit counters from chat rows. (#137868, #139375) Thanks .


• Streaming responsiveness: avoid repeated full rescans of native reasoning deltas, reduce discovery overhead for small-context models, and skip unnecessary provider catalog rewarming after rate limits. (#123120, #125906, #139244) Thanks .


• Pairing isolation: bind pairing requests and challenges to the correct channel and account even when callers supply conflicting fields. (#139142) Thanks .


• Agent selection: keep global session views, local commands, and Stop actions attached to the selected agent. (#138991, #139276)


• Questions and approvals: deliver loopback questions to their originating channel and show pending Skill Workshop approval controls. Related #135291, #138540. (#138831, #139248) Thanks , , and .


• Worker dispatch: let unrelated sessions start while pending maintenance waits for its original dispatch cohort. (#139251)


• Matrix and Buzz: exclude archived Matrix state roots from scans and account selection, and keep implicit Buzz replies at the thread root. Related #138812. (#112329, #138879) Thanks , and , .

Deprecation migration

• Plugin SDK context aliases: sdk-untrusted-context-identifier-aliases remains deprecated, with a recorded removal window of 2026-09-08; the aliases remain exported in this release. Migrate to MsgContext.ChannelPromptContext, MsgContext.ChannelStructuredContext, ChannelStructuredContextEntry, SupplementalContextFacts.channelStructuredContext, and buildChannelMetadata. See the .. and and and .


• PR #139016


• PR #139065


• PR #139055


• PR #139070


• PR #139052


• PR #139039


• PR #138170


• PR #138798 Related #138722. Thanks .


• PR #139073


• PR #139050


• PR #138850 Related #138753.


• PR #132459 Related #118386. Thanks and .


• PR #139087


• PR #139063 Related #139038.


• PR #139090


• PR #139081


• PR #138964


• PR #138821 Related #138802. Thanks and and and .


• PR #138059 Thanks .


• PR #139123


• PR #139095


• PR #139104


• PR #139118


• PR #137682 Thanks and and and and .


• PR #139148


• PR #139156


• PR #139157


• PR #139159


• PR #139112 Related #139094.


• PR #139140 Related #139086.


• PR #139162


• PR #136533 Related #136452. Thanks and .


• PR #139165 Related #139147. Thanks .


• PR #139163


• PR #139146


• PR #139184 Related #139183.


• PR #139174


• PR #139186


• PR #139142 Thanks .


• PR #139189


• PR #139037 Thanks .


• PR #139197 Thanks and .


• PR #139181


• PR #139193 Related #139187.


• PR #139192


• PR #138732 Thanks .


• PR #139155 Related #139154. Thanks .


• PR #139175


• PR #139067 Related #139053.


• PR #139103


• PR #139195 Related #139166.


• PR #139222


• PR #138958 Related #138956. Thanks and .


• PR #139236


• PR #139232 Thanks and .


• PR #136110 Thanks and .


• PR #139256


• PR #139200


• PR #139246 Related #138835. Thanks .


• PR #139250


• PR #139259


• PR #139247


• PR #138879 Related #138812. Thanks .


• PR #139229


• PR #139108


• PR #139261 Related #126445. Thanks .


• PR #139258


• PR #138831 Related #138540. Thanks and .


• PR #139248 Related #135291. Thanks and and .


• PR #139294


• PR #139297


• PR #138092


• PR #137731


• PR #139264


• PR #139228


• PR #139299


• PR #137693 Thanks .


• PR #139300


• PR #139286


• PR #139301


• PR #133808 Related #127586. Thanks and .


• PR #139298


• PR #139017


• PR #139283 Thanks .


• PR #139302


• PR #139324


• PR #139276


• PR #139332 Related #139305.


• PR #134198 Thanks and and .


• PR #139315


• PR #139306 Related #139263.


• PR #123120 Thanks .


• PR #139335 Related #139322.


• PR #139382


• PR #139362


• PR #139356


• PR #139275 Thanks .


• PR #139363


• PR #139061


• PR #139376


• PR #139350


• PR #139359


• PR #135868


• PR #139291 Thanks .


• PR #139387


• PR #139352


• PR #139366


• PR #139346


• PR #139369


• PR #139304


• PR #139380


• PR #139353 Related #139173. Thanks and .


• PR #139367


• PR #139417


• PR #139398


• PR #139390 Related #121351. Thanks .


• PR #139405


• PR #139389


• PR #139423 Thanks .


• PR #139414


• PR #139431


• PR #139454


• PR #139432


• PR #138196


• PR #139462 Related #137579. Thanks .


• PR #139385


• PR #139371


• PR #139455


• PR #139456


• PR #139355


• PR #139473


• PR #139429


• PR #139397 Related #139312.


• PR #139292 Related #138763. Thanks and and .


• PR #138210 Thanks .


• PR #139482


• PR #136361 Thanks .


• PR #139478


• PR #139487


• PR #139381


• PR #139400


• PR #139384


• PR #139289 Thanks .


• PR #127757 Thanks .


• PR #139481


• PR #139589


• PR #139553


• PR #139469


• PR #139581


• PR #139439


• PR #139357 Thanks .


• PR #139607


• PR #139512


• PR #139531


• PR #139612 Thanks .


• PR #139590


• PR #139490


• PR #139539 Related #139365. Thanks and and and and and .


• PR #139645


• PR #139308 Related #139257. Thanks and and .


• PR #139656 Thanks .


• PR #139564


• PR #139570


• PR #139596


• PR #139631


• PR #139616


• PR #139650


• PR #139610 Related #139609.


• PR #139630 Thanks .


• PR #139252 Thanks .


• PR #139667


• PR #139638


• PR #139665


• PR #139673


• PR #139563 Related #139537.


• PR #138917 Thanks and .


• PR #139627


• PR #139687


• PR #139652


• PR #139641


• PR #139659


• PR #139689


• PR #139668


• PR #139696


• PR #139636


• PR #139681


• PR #139684


• PR #139678


• PR #139685 Related #139680.


• PR #139694


• PR #139660 Thanks .


• PR #139691


• PR #139724


• PR #139510


• PR #139649 Thanks and and .


• PR #139729 Thanks .


• PR #139739


• PR #139763


• PR #139720


• PR #139503


• PR #139740


• PR #139698


• PR #139621


• PR #139794


• PR #139695


• PR #139749 Thanks .


• PR #139625


• PR #139801 Thanks .


• PR #139206 Thanks .


• PR #139750 Thanks and .


• PR #139733


• PR #139784


• PR #139640


• PR #139767


• PR #139785


• PR #139773


• PR #139786


• PR #139686 Thanks .


• PR #139814


• PR #139757


• PR #139658


• PR #139820


• PR #139755


• PR #139796


• PR #139765


• PR #139798


• PR #139776 Related #136246. Thanks .


• PR #139717


• PR #139758


• PR #127225 Thanks and and .


• PR #139846 Thanks .


• PR #139639


• PR #139845


• PR #139823


• PR #139771


• PR #139817 Thanks .


• PR #139309 Thanks .


• PR #139806


• PR #139777


• PR #139497


• PR #139655


• PR #139860


• PR #139778


• PR #139787


• PR #139730 Related #139671. Thanks .


• PR #139788


• PR #139779


• PR #139831


• PR #139826


• PR #139851


• PR #138839 Related #136997.


• PR #139829


• PR #139800


• PR #139852


• PR #139819


• PR #139793 Related #139774. Thanks .


• PR #139863


• PR #139864


• PR #139683 Thanks .


• PR #139880 Thanks .


• PR #139824


• PR #139825


• PR #139243 Related #139207. Thanks and .


• PR #137344 Thanks .


• PR #139890


• PR #139858


• PR #139894


• PR #139769


• PR #139886


• PR #139712


• PR #139897


• PR #139905


• PR #139732


• PR #139885


• PR #139555


• PR #139663


• PR #139895


• PR #139855


• PR #139873 Related #139594. Thanks .


• PR #139904


• PR #139898


• PR #139866


• PR #139907 Thanks .


• PR #139937


• PR #139799


• PR #139936


• PR #139916 Thanks .


• PR #139722 Thanks and .


• PR #139940 Related #139939.


• PR #139811


• PR #139879


• PR #139932


• PR #139418 Related #139303.


• PR #139935


• PR #139388


• PR #139930


• PR #139752


• PR #139919


• PR #139704 Thanks .


• PR #139942


• PR #139770


• PR #139947 Related #139945.


• PR #139832


• PR #139969


• PR #139924 Thanks .


• PR #139992


• PR #139956 Related #139954.


• PR #127113 Related #127095.


• PR #131595


• PR #139997


• PR #139918


• PR #139966


• PR #139965


• PR #139899


• PR #139882


• PR #139842 Thanks .


• PR #139959


• PR #139266 Related #139185. Thanks .


• PR #127136 Related #127128.


• PR #140017


• PR #139841


• PR #139973


• PR #139742


• PR #137268 Thanks .


• PR #140047


• PR #140058


• PR #140054


• PR #140024


• PR #140046


• PR #140061


• PR #139921


• PR #140057


• PR #140033


• PR #139922


• PR #117370


• PR #140023


• PR #140065 Related #140063.


• PR #140069


• PR #140062


• PR #140056


• PR #140041 Thanks and and .


• PR #140087


• PR #140077


• PR #140089


• PR #139789


• PR #140083 Related #140080.


• PR #140068


• PR #131462 Related #131374. Thanks .


• PR #140093


• PR #140092


• PR #138448


• PR #140088


• PR #140084


• PR #140070


• PR #140091


• PR #140082


• PR #140098


• PR #140090


• PR #140104 Related #140103.


• PR #140108 Thanks .


• PR #138391 Related #137864. Thanks and .


• PR #140086 Thanks .


• PR #139489


• PR #140126


• PR #140130 Thanks .


• PR #140139 Thanks .


• PR #140138


• PR #139613 Related #138613. Thanks .


• PR #140113


• PR #140123


• PR #140124


• PR #140143


• PR #140135


• PR #121603 Thanks .


• PR #139970


• PR #140132


• PR #140152


• PR #140149


• PR #140142


• PR #139933 Related #139838. Thanks and .


• PR #140120


• PR #140140


• PR #140150


• PR #139728 Thanks .


• PR #140160


• PR #140163


• PR #137105 Related #136966. Thanks and .


• PR #140177


• PR #140145


• PR #139675


• PR #140186


• PR #140188


• PR #140189


• PR #140187


• PR #137494 Thanks and .


• PR #140209 Thanks .


• PR #140197


• PR #140173 Related #140153.


• PR #140185


• PR #140205


• PR #140200


• PR #139972 Related #139950. Thanks and and .


• PR #139662 Thanks and .


• PR #123624 Thanks and .


• PR #140181


• PR #139160 Related #138672. Thanks and .


• PR #140223


• PR #140008 Thanks .


• PR #140166 Related #132829. Thanks .


• PR #140202


• PR #136293 Thanks .


• PR #140225


• PR #138322 Related #138299. Thanks and .


• PR #140262


• PR #140247


• PR #140236 Thanks .


• PR #140259


• PR #140220


• PR #140242


• PR #140271


• PR #140264


• PR #140241


• PR #137269 Related #137217. Thanks and .


• PR #140275


• PR #127231


• PR #140284 Thanks and .


• PR #140289 Related #140287.


• PR #140219


• PR #140290


• PR #140298


• PR #138985 Related #138959. Thanks .


• PR #140302


• PR #118094 Thanks .


• PR #140303


• PR #140222 Thanks .


• PR #140307


• PR #140321


• PR #140304


• PR #140257


• PR #140323


• PR #140319 Thanks and .


• PR #140306


• PR #140312


• PR #140328 Thanks .


• PR #140274 Related #124396. Thanks .


• PR #140311


• PR #140331


• PR #140343


• PR #140345


• PR #139540 Thanks .


• PR #140353 Thanks .


• PR #140360


• PR #140365


• PR #139990 Thanks .


• PR #140157


• PR #140254 Thanks and .


• PR #140267


• PR #137330 Related #137198. Thanks and .


• PR #140324


• PR #140372


• PR #140394


• PR #140395


• PR #140400


• PR #140391 Thanks .


• PR #140386


• PR #140402


• PR #140379


• PR #140403


• PR #140407


• PR #138386 Related #137452. Thanks and .


• PR #140409


• PR #140335 Thanks .


• PR #140427 Thanks and .


• PR #140432


• PR #140435


• PR #140433


• PR #140439


• PR #140436


• PR #140417 Related #140355. Thanks .


• PR #140419


• PR #140310 Thanks .


• PR #140442


• PR #140445


• PR #140399 Related #140398. Thanks .


• PR #140440 Thanks and .


• PR #140414


• PR #140453


• PR #140119


• PR #140451


• PR #139231 Thanks .


• PR #140456


• PR #140438 Thanks .


• PR #140426 Related #137108. Thanks and .


• PR #139647


• PR #140483


• PR #140485


• PR #140490


• PR #140491


• PR #140495 Related #140492.


• PR #140472 Thanks .


• PR #140496


• PR #140500


• PR #140484 Thanks .


• PR #140486 Thanks .


• PR #140506


• PR #140481 Thanks .


• PR #140523


• PR #140527


• PR #140524


• PR #140529 Related #140528.


• PR #140530


• PR #140533


• PR #122595 Thanks .


• PR #140534


• PR #140532


• PR #140536


• PR #140526 Related #139994. Thanks .


• PR #140542


• PR #140541


• PR #140538


• PR #139986 Thanks .


• PR #140539


• PR #140543


• PR #140546


• PR #140549 Thanks .


• PR #140561 Related #140560.


• PR #138803 Thanks .


• PR #140588 Related #140584.


• PR #140589 Related #140574. Thanks .


• PR #136231 Related #136200. Thanks .


• PR #140581


• PR #140597 Related #140595.


• PR #140599


• PR #140458 Related #140416. Thanks .


• PR #140412 Related #140356. Thanks .


• PR #140235 Thanks .


• PR #140531 Thanks .


• PR #140617


• PR #140594 Thanks .


• PR #140602 Related #140601. Thanks .


• PR #126198 Thanks .


• PR #140612


• PR #140613


• PR #138741 Thanks .


• PR #140305


• PR #140640


• PR #140638


• PR #140642


• PR #140575


• PR #140625


• PR #140593


• PR #140661 Thanks .


• PR #140659 Related #140623.


• PR #140624


• PR #140655


• PR #140449


• PR #140652


• PR #140669 Related #140668.


• PR #140614 Thanks .


• PR #140637


• PR #140658


• PR #140673


• PR #140665


• PR #140643


• PR #140667


• PR #140679


• PR #140610


• PR #140675


• PR #140600


• PR #140639


• PR #140660


• PR #140670


• PR #140656


• PR #140697 Related #140692.


• PR #140634


• PR #140688 Thanks .


• PR #140685


• PR #140694 Thanks .


• PR #140722


• PR #140381 Related #140214. Thanks and .


• PR #140735 Thanks .


• PR #140651


• PR #140619


• PR #137779 Related #137690. Thanks and .


• PR #140701


• PR #140747 Thanks .


• PR #140750 Related #140749.


• PR #140635 Thanks .


• PR #140744


• PR #140603


• PR #140641


• PR #140768 Thanks .


• PR #140763


• PR #137893 Thanks .


• PR #140753


• PR #140334 Thanks .


• PR #140746


• PR #140776 Thanks and .


• PR #140751 Related #140745. Thanks .


• PR #140782


• PR #140732 Related #140691.


• PR #140754


• PR #140777


• PR #140767 Thanks .


• PR #140783


• PR #140806 Thanks .


• PR #140794


• PR #140780


• PR #140653 Thanks and and .


• PR #140832


• PR #140824


• PR #140805


• PR #140787 Related #140786.


• PR #140841


• PR #140814


• PR #140813


• PR #140815


• PR #140137 Related #139963. Thanks .


• PR #140804


• PR #140851


• PR #140848 Thanks .


• PR #140830 Related #140785.


• PR #140820


• PR #140801 Related #140800.


• PR #140860


• PR #140855


• PR #139196 Thanks .


• PR #140844 Thanks .


• PR #140725


• PR #140874


• PR #140779


• PR #140870


• PR #140857


• PR #140869


• PR #140883


• PR #140878


• PR #140664 Thanks .


• PR #140856


• PR #140884 Thanks .


• PR #140827 Related #140826.


• PR #140784


• PR #140872


• PR #140885


• PR #140862


• PR #136884 Thanks .


• PR #137657 Thanks .


• PR #140901 Thanks .


• PR #140890


• PR #140906


• PR #140648


• PR #140896 Thanks .


• PR #140910


• PR #140816


• PR #140863


• PR #140837 Related #140836.


• PR #140904


• PR #140831


• PR #140886


• PR #140633


• PR #140925 Thanks .


• PR #140849


• PR #140923


• PR #120573 Thanks .


• PR #124061 Thanks .


• PR #140937


• PR #140936


• PR #140629


• PR #140893


• PR #126219 Thanks .


• PR #140938


• PR #140949 Thanks and .


• PR #140825


• PR #140766


• PR #140912 Thanks .


• PR #140964 Related #140950.


• PR #140962 Thanks .


• PR #140958


• PR #140808 Thanks .


• PR #140975


• PR #140578


• PR #141024


• PR #137059 Thanks .


• PR #141050


• PR #141056


• PR #140980


• PR #141016


• PR #140984


• PR #141044


• PR #125399


• PR #141048 Related #141036.


• PR #141053


• PR #141059


• PR #122221 Related #97601. Thanks and .


• PR #141075 Related #141068. Thanks .


• PR #141080


• PR #121287 Thanks .


• PR #137841 Thanks .


• PR #141100


• PR #141106


• PR #141077


• PR #141096


• PR #141082 Thanks .


• PR #141019


• PR #139492


• PR #140903 Thanks .


• PR #141070


• PR #141139 Thanks and and .


• PR #141148


• PR #141108


• PR #141158 Thanks .


• PR #141085


• PR #141020


• PR #140875 Thanks .


• PR #141149 Thanks .


• PR #133843 Thanks .


• PR #141118


• PR #140283 Thanks .


• PR #141159 Thanks .


• PR #141137 Thanks .


• PR #141120 Related #141111.


• PR #133775 Related #133757. Thanks .


• PR #141178 Thanks .


• PR #140982


• PR #140628


• PR #141126


• PR #141116 Related #137116. Thanks .


• PR #140654


• PR #141166


• PR #140972


• PR #141185


• PR #141089


• PR #140645 Related #131004. Thanks .


• PR #141204


• PR #141094


• PR #141208


• PR #140742


• PR #141193


• PR #141200 Thanks .


• PR #141047


• PR #140636


• PR #140873 Thanks .


• PR #140696


• PR #141215 Thanks .


• PR #140695


• PR #138953 Thanks .


• PR #140238 Thanks .


• PR #141220 Related #141198.


• PR #141227


• PR #141229


• PR #138989 Thanks .


• PR #141210


• PR #140684


• PR #141095 Related #131970.


• PR #141234 Related #141222.


• PR #141141


• PR #141236 Thanks .


• PR #141205 Related #140943. Thanks .


• PR #141165


• PR #141135


• PR #140452 Thanks .


• PR #141109


• PR #141267


• PR #141246


• PR #141258


• PR #140125 Related #139946. Thanks and .


• PR #141281


• PR #140547 Thanks .


• PR #141251 Thanks .


• PR #141294 Thanks .


• PR #141302 Related #141263.


• PR #141168


• PR #141125


• PR #141081 Related #141035.


• PR #140973


• PR #141103


• PR #141297 Thanks .


• PR #141324 Thanks and .


• PR #141105


• PR #141274


• PR #141325


• PR #141060


• PR #141320 Thanks .


• PR #141327


• PR #141336


• PR #141065


• PR #141335


• PR #141343 Thanks and .


• PR #141358 Thanks .


• PR #141359


• PR #141112


• PR #141344 Thanks .


• PR #141368 Thanks and .


• PR #141385


• PR #141390 Related #141357.


• PR #141395 Thanks .


• PR #141405


• PR #141147


• PR #141350


• PR #141396 Thanks .


• PR #140730 Related #140681. Thanks and .


• PR #141425 Thanks .


• PR #141419


• PR #139288 Thanks .


• PR #141398 Thanks .


• PR #141444 Thanks and and .


• PR #141456


• PR #141397


• PR #141427


• PR #141459


• PR #137975


• PR #141428


• PR #141455


• PR #141399


• PR #141460


• PR #141330 Related #137410. Thanks .


• PR #141421


• PR #141124


• PR #131014 Thanks .


• PR #141466


• PR #141485


• PR #141487


• PR #141495


• PR #141479


• PR #138984 Related #138965, #139201. Thanks .


• PR #141497


• PR #141499


• PR #141471


• PR #141446


• PR #141416


• PR #141461 Related #141349.


• PR #141484 Related #136813. Thanks .


• PR #141515


• PR #141490


• PR #141462


• PR #141512


• PR #141503 Related #141502.


• PR #141478


• PR #141493


• PR #141507


• PR #140988


• PR #141522


• PR #141434


• PR #141469


• PR #141511


• PR #141491


• PR #141494


• PR #141524 Thanks and and .


• PR #141519


• PR #141467


• PR #141517


• PR #141516


• PR #141514


• PR #141492


• PR #141518


• PR #141525


• PR #141104


• PR #141423


• PR #141509 Related #141508.


• PR #141530


• PR #141521


• PR #141532


• PR #141533 Thanks .


• PR #141529


• PR #141546


• PR #141549


• PR #134454 Thanks .


• PR #141537


• PR #137586 Thanks .


• PR #120340 Thanks .


• PR #137631 Thanks .


• PR #141565


• PR #141534 Thanks .


• PR #137603 Thanks .


• PR #137585 Thanks and .


• PR #141572


• PR #137661 Thanks .


• PR #141580


• PR #141593


• PR #141591


• PR #141557


• PR #137592 Thanks .


• PR #141567


• PR #141595


• PR #128189 Thanks .


• PR #141597


• PR #141571 Thanks .


• PR #141613


• PR #141611 Thanks .


• PR #141624


• PR #141601


• PR #141623


• PR #141619


• PR #141612


• PR #141630


• PR #141627


• PR #141609


• PR #141562


• PR #141588


• PR #141631


• PR #140579


• PR #141634


• PR #141636


• PR #141632


• PR #141645


• PR #141650


• PR #141649 Related #141644.


• PR #141543


• PR #141610


• PR #141635


• PR #141629


• PR #141659


• PR #141646


• PR #141662 Related #141661.


• PR #141654 Thanks .


• PR #141681

Release verification

• npm package:


• Integrity: sha512-CzDHMeHdnjlIZ76ZyBb1lvLO4H/yBIMYXupFGGBN87x0853y3hg5nLAnKfxSKqLzqhbUKqy9ebDRAWWV4t8aew==


• Release commit: 1391f7cd2d40ab5bbcf2f5f831d3a64f520e72d7


• Full release validation:


• All 90 npm plugins verified:


• Docker promotion: .


• , and (SHA-256); published scanner warnings remain recorded in the evidence.


• macOS signed and notarized assets attach independently after GitHub release finalization.


• Additional local fresh-install verification hit a five-minute host timeout; it is not claimed passed. The qualified package and independent published-package proofs above passed. Manual VM smoke was deferred; it is not claimed passed.