- [persistence] thinkingSignature truncated at persist time (literal U+2026 in stored base64) → deterministic 'Invalid signature in thinking block' 400 once prompt cache expires — Component: session persistence / native Anthropic path (thinkingSignature) Version observed: 2026.6.11 (blocks dated 2026-06-24 onward; still present in transcripts after 2026.7.1 upgrade) Severity:...
- feat(mac): add canonical elevation host workflow — Summary - add one canonical --elevation-host runtime plan that implies attach/background behavior, keeps Gateway connectivity, Mac node, termination handling, and Peekaboo Bridge active, and...
- [Bug/RFC] Missing binding causes silent fallback to main agent — no warning, no validation — Problem When creating a new agent instance, if the user configures agents.list[], workspace (with SOUL.md/IDENTITY.md), and channels.feishu.accounts., but forgets to add a bindings[] entry, the...
- feat(ui): clarify incognito sessions at composition time — What Problem This Solves Incognito sessions were marked with a padlock, which describes access control — something incognito does not change. It changes where the session is kept. The marks were also...
- improve(ui): organize project and session identity in the chat header — What Problem This Solves The chat header showed session identity in pieces spread across the row. The creator avatar sat after the title, the session's management menu sat at the far right of the...
- feat(computer-use): computer.act v2 action contract with capability-filtered tool — What Problem This Solves The computer.act contract exposes only 13 desktop-coordinate actions, so none of the background window-scoped capabilities both providers (CUA Driver, Peekaboo) now support...
- feat(ui): review install policy warnings — New behavior An authenticated administrator can now review an install-policy warning in the Control UI and deliberately continue the same plugin install. - Gateway accepts the optional literal...
- fix(synology-chat): deliver attachments without forwarding source URLs [AI] — What Problem This Solves Synology Chat attachment delivery previously handed the original media URL to the NAS after OpenClaw had inspected it. The NAS then fetched that URL independently, outside...
- feat(security): require acknowledgement for install policy warnings — New behavior An external security.installPolicy command can now return warn, letting an authorized operator review a suspicious plugin or skill install before deciding whether to continue. -...
- fix(ui): renaming a config map key that holds a stored secret dead-ends the draft or binds the wrong credential — What Problem This Solves Renaming a config map key whose value is a stored secret (rendered client-side as the __OPENCLAW_REDACTED__ sentinel) breaks two ways: 1. Dead-end draft: the moved sentinel...
- fix(codex): fail closed native execution until containment — What Problem This Solves The Codex app-server native command executor is upstream-owned. Until its per-invocation deadline, descendant termination, and output-boundary contract is proven, OpenClaw...
- improve(ci): shorten hosted PR path — What Problem This Solves The hosted PR path had two recurring critical-path poles: three core oxlint stripes each ran for roughly 340 seconds, and checks-node-compact-small-26 repeatedly ran for...
- fix(gateway): reconnect mid-run shows idle for non-default agents (in-flight adoption unscoped) — What Problem This Solves Switch away from a non-default agent's session while a run is streaming, then switch back: the chat renders idle — no in-flight text, no spinner — and the streamed reply...
- fix(gateway): expired non-abortable runs survive every maintenance sweep as phantom active sessions — What Problem This Solves A session can get permanently stuck showing an active run — Stop button answers "no active run" while the row shows running, its chat/agent dedupe key stays pinned, and...
- fix(gateway): run timeouts project to the Control UI as generic failed with no error — What Problem This Solves A run that hits its idle or run-budget timeout shows in the Control UI as a generic "failed" with no error text — while the sessions list row and the TUI both correctly say...
- fix(ui): partial tool output flips a running card to succeeded/failed mid-execution — What Problem This Solves A running tool card flips to "succeeded" the moment its first partial output streams in — the spinner disappears, the group header loses its running row, and if the partial...
- fix(ui): autosave acks wipe open add-entry drafts and in-progress JSON text — What Problem This Solves Toggle any switch, then click "Add" on an array/map and start typing — about a second later the debounced autosave ack lands and the add-entry panel silently vanishes with...
- fix(ui): revealing a stored secret displays the redaction sentinel as an editable value — What Problem This Solves Clicking the reveal eye (or env "Peek") on a stored secret shows the literal __OPENCLAW_REDACTED__ sentinel as the field's value in an editable input. If the operator edits...
- fix(ui): hiding a catalog makes its adopted sessions vanish from the entire sidebar — What Problem This Solves Hiding a session catalog section (sidebar "Hide" action) — or switching the sidebar to the Archived filter — makes every session adopted into that catalog vanish from the...
- fix(ui): empty-string i18n params render the raw {placeholder} — What Problem This Solves Any t() call that passes an empty-string parameter renders the raw {placeholder} to the user instead of an empty value. Concretely: the Devices page binding row shows...
- refactor(ui): one token formatter — the same count no longer renders two ways — What Problem This Solves The same token count renders differently across Control UI surfaces: a session with 15,600 total tokens shows 16k on the Sessions page but 15.6k in the chat composer's...
- refactor(ui): move session state into a trailing endcap — What Problem This Solves Every sidebar session row reserves a leading column before its title. When a session has no creator avatar, no attention glyph and no privacy qualifier — the common case —...
- fix(reply): keep configured ACP bindings from dropping the first turn — Summary Fixes #97186. Configured type: "acp" bindings could finish session initialization but still lose the first inbound turn when no reply_dispatch hook claimed the ACP session. The result matched...
- fix(matrix): admit server-less room IDs in groups validator — Closes #122739 What Problem This Solves The Matrix plugin's startup validator for channels.matrix.groups keys rejects current-format Matrix room IDs — the ones modern homeservers (e.g. Continuwuity)...
- improve(ui): pinned sessions render inside the Pages navigation group — What happened A pinned session renders as one more row of the sidebar's PAGES navigation group. It sits directly under Automations/Plugins, inside the same .nav-section__items container, under the...
- improve(ui): give pinned sessions their own sidebar group — Closes #121710 What Problem This Solves Fixes an issue where operators who pin a session would find it rendered as one more row of the sidebar's PAGES navigation group — same container, same head,...
- fix(msteams): dedupe poll vote selections before maxSelections truncation — Summary fix(msteams): deduplicate poll vote selections before enforcing maxSelections, so a duplicated choice no longer consumes a slot and drops a voter's later distinct choice What Problem This...
- refactor(skills): centralize internal write paths — What Problem This Solves Core skill-content mutations currently enter through several low-level Workshop and lifecycle helpers. That makes ownership difficult to enforce, and successful lifecycle...
- fix(memory): re-throw non-ENOENT/ENOTDIR errors in root memory file lookup — What Problem This Solves findRootMemoryFile in active-memory-files.ts wraps fs.readdir in a try-catch that silently swallows all errors. Non-absence errors like EACCES (permission denied) are...
- OpenClaw repo stats for 2026-08-14 — 386263 stars, 81186 forks, 3096 contributors
- OpenClaw sponsors (93 total) — 93 sponsors supporting OpenClaw
- fix: update footer attribution (#3467) — fix: update footer attribution chore: update nanoid security override
- Remove external services connection section from README — Removed section about connecting to external services and related content.
- Add skill: riffkit/riffkit
- OpenClaw — Deploy your own personal AI assistant with OpenClaw on a DigitalOcean Droplet® server, a powerful open-source platform that runs entirely on your infrastructure. OpenClaw connects to the messaging...
- OpenClaw privilege escalation vulnerability
- OpenClaw is a security nightmare dressed up as a daydream
- Open Source Image Watermark Remover Built with Python & OpenCV (Web UI + CLI) — I’m sharing an open-source watermark removal project powered by OpenCV image inpainting. GitHub...
- What agents learned in Synthetics' Last Cradle — On July 29, 2026, five OpenClaw agents sat down at Synthetics' Last Cradle and played for five hours...
- Our Eilik Journey: From USB Packets to a Kids-Friendly Robot Web App — Continue reading on Medium »
- Behind Hermes’ Rise to the Top: A Web3 Team’s Path Forward — Author: 0xjacobzhao | https://linktr.ee/0xjacobzhaoContinue reading on Medium »
- Can AI take care of my plant? (because I can’t) — Twice a day, an AI agent reads my pot-plant’s sensors, looks at a photo of her and then decides which way to rotate her, watering her if…Continue reading on Medium »
- The Meeting Recorder That Turns Your Standup Into a Pull Request — Reverbic.ai records engineering conversations, extracts the build spec, grounds it in your codebase, and drafts the code for review.Continue reading on Medium »
- Helpful Skills or Hidden Payloads? Bitdefender Labs Dives Deep into the OpenClaw Malicious Skill Trap — With hundreds of malicious OpenClaw skills blending in among legitimate ones, manually reviewing every script or command isn’t realistic — especially when skills are designed to look helpful and...