OpenClaw

2026.2.3

Wed, 04 Feb 2026 17:47:10 -0800

OpenClaw 2026.2.3

Changes

Telegram: remove last @ts-nocheck from bot-handlers.ts, use Grammy types directly, deduplicate StickerMetadata. Zero @ts-nocheck remaining in src/telegram/. (#9206)
Telegram: remove @ts-nocheck from bot-message.ts, type deps via Omit, widen allMedia to TelegramMediaRef[]. (#9180)
Telegram: remove @ts-nocheck from bot.ts, fix duplicate bot.catch error handler (Grammy overrides), remove dead reaction message_thread_id routing, harden sticker cache guard. (#9077)
Onboarding: add Cloudflare AI Gateway provider setup and docs. (#7914) Thanks @roerohan.
Onboarding: add Moonshot (.cn) auth choice and keep the China base URL when preserving defaults. (#7180) Thanks @waynelwz.
Docs: clarify tmux send-keys for TUI by splitting text and Enter. (#7737) Thanks @Wangnov.
Docs: mirror the landing page revamp for zh-CN (features, quickstart, docs directory, network model, credits). (#8994) Thanks @joshp123.
Messages: add per-channel and per-account responsePrefix overrides across channels. (#9001) Thanks @mudrii.
Cron: add announce delivery mode for isolated jobs (CLI + Control UI) and delivery mode config.
Cron: default isolated jobs to announce delivery; accept ISO 8601 schedule.at in tool inputs.
Cron: hard-migrate isolated jobs to announce/none delivery; drop legacy post-to-main/payload delivery fields and atMs inputs.
Cron: delete one-shot jobs after success by default; add --keep-after-run for CLI.
Cron: suppress messaging tools during announce delivery so summaries post consistently.
Cron: avoid duplicate deliveries when isolated runs send messages directly.

Fixes

Heartbeat: allow explicit accountId routing for multi-account channels. (#8702) Thanks @lsh411.
TUI/Gateway: handle non-streaming finals, refresh history for non-local chat runs, and avoid event gap warnings for targeted tool streams. (#8432) Thanks @gumadeiras.
Shell completion: auto-detect and migrate slow dynamic patterns to cached files for faster terminal startup; add completion health checks to doctor/update/onboard.
Telegram: honor session model overrides in inline model selection. (#8193) Thanks @gildo.
Web UI: fix agent model selection saves for default/non-default agents and wrap long workspace paths. Thanks @Takhoffman.
Web UI: resolve header logo path when gateway.controlUi.basePath is set. (#7178) Thanks @Yeom-JinHo.
Web UI: apply button styling to the new-messages indicator.
Security: keep untrusted channel metadata out of system prompts (Slack/Discord). Thanks @KonstantinMirin.
Security: enforce sandboxed media paths for message tool attachments. (#9182) Thanks @victormier.
Security: require explicit credentials for gateway URL overrides to prevent credential leakage. (#8113) Thanks @victormier.
Security: gate whatsapp_login tool to owner senders and default-deny non-owner contexts. (#8768) Thanks @victormier.
Voice call: harden webhook verification with host allowlists/proxy trust and keep ngrok loopback bypass.
Voice call: add regression coverage for anonymous inbound caller IDs with allowlist policy. (#8104) Thanks @victormier.
Cron: accept epoch timestamps and 0ms durations in CLI --at parsing.
Cron: reload store data when the store file is recreated or mtime changes.
Cron: deliver announce runs directly, honor delivery mode, and respect wakeMode for summaries. (#8540) Thanks @tyler6204.
Telegram: include forward_from_chat metadata in forwarded messages and harden cron delivery target checks. (#8392) Thanks @Glucksberg.

View full changelog

2026.2.2

Tue, 03 Feb 2026 17:04:17 -0800

2026.1.30

Sat, 31 Jan 2026 14:29:57 +0100

OpenClaw 2026.1.30

Changes

CLI: add completion command (Zsh/Bash/PowerShell/Fish) and auto-setup during postinstall/onboarding.
CLI: add per-agent models status (--agent filter). (#4780) Thanks @jlowin.
Agents: add Kimi K2.5 to the synthetic model catalog. (#4407) Thanks @manikv12.
Auth: switch Kimi Coding to built-in provider; normalize OAuth profile email.
Auth: add MiniMax OAuth plugin + onboarding option. (#4521) Thanks @Maosghoul.
Agents: update pi SDK/API usage and dependencies.
Web UI: refresh sessions after chat commands and improve session display names.
Build: move TypeScript builds to tsdown + tsgo (faster builds, CI typechecks), update tsconfig target, and clean up lint rules.
Build: align npm tar override and bin metadata so the openclaw CLI entrypoint is preserved in npm publishes.
Docs: add pi/pi-dev docs and update OpenClaw branding + install links.

Fixes

Security: restrict local path extraction in media parser to prevent LFI. (#4880)
Gateway: prevent token defaults from becoming the literal "undefined". (#4873) Thanks @Hisleren.
Control UI: fix assets resolution for npm global installs. (#4909) Thanks @YuriNachos.
macOS: avoid stderr pipe backpressure in gateway discovery. (#3304) Thanks @abhijeet117.
Telegram: normalize account token lookup for non-normalized IDs. (#5055) Thanks @jasonsschin.
Telegram: preserve delivery thread fallback and fix threadId handling in delivery context.
Telegram: fix HTML nesting for overlapping styles/links. (#4578) Thanks @ThanhNguyxn.
Telegram: accept numeric messageId/chatId in react actions. (#4533) Thanks @Ayush10.
Telegram: honor per-account proxy dispatcher via undici fetch. (#4456) Thanks @spiceoogway.
Telegram: scope skill commands to bound agent per bot. (#4360) Thanks @robhparker.
BlueBubbles: debounce by messageId to preserve attachments in text+image messages. (#4984)
Routing: prefer requesterOrigin over stale session entries for sub-agent announce delivery. (#4957)
Extensions: restore embedded extension discovery typings.
CLI: fix tui:dev port resolution.
LINE: fix status command TypeError. (#4651)
OAuth: skip expired-token warnings when refresh tokens are still valid. (#4593)
Build: skip redundant UI install step in Dockerfile. (#4584) Thanks @obviyus.

View full changelog