OpenClaw v2026.3.28-beta.1

## 2026.3.28-beta.1 ### 破坏性变更 - Providers/Qwen：移除已弃用的 `qwen-portal-auth` OAuth 集成（用于 `portal.qwen.ai`）；迁移至 Model Studio，使用 `openclaw onboard --auth-choice modelstudio-api-key`。(#52709) 感谢 @pomelo-nwu。 - Config/Doctor：放弃自动迁移超过两个月的老旧配置；非常古老的遗留密钥现在会在加载或运行 `openclaw doctor` 时直接验证失败，而不再被重写。 ### 变更 - xAI/tools：将捆绑的 xAI 提供商移至 Responses API，增加一级 `x_search` 支持，并自动从已拥有的网络搜索和工具配置中启用 xAI 插件，使捆绑的 Grok 认证/已配置搜索流程无需手动切换插件即可工作。(#56048) 感谢 @huntharo。 - MiniMax：为 `image-01` 模型增加图像生成提供商，支持生成和图像转图像编辑，并具备宽高比控制功能。(#54487) 感谢 @liyuan97。 - Plugins/hooks：在 `before_tool_call` 钩子中增加异步 `requireApproval`，允许插件暂停工具执行并通过执行批准覆盖层、Telegram 按钮、Discord 交互或任何频道的 `/approve` 命令提示用户批准。`/approve` 命令现在同时处理执行和插件批准，并具备自动回退机制。(#55339) 感谢 @vaclavbelak 和 @joshavant。 - ACP/channels：为 Discord、BlueBubbles 和 iMessage 增加当前会话 ACP 绑定，因此 `/acp spawn codex --bind here` 可将当前聊天转换为 Codex 支持的工作区，而无需创建子线程；同时文档化聊天表面、ACP 会话和运行时工作区之间的区别。 - OpenAI/apply_patch：默认对 OpenAI 和 OpenAI Codex 模型启用 `apply_patch`，并将其沙箱策略访问权限与 `write` 权限对齐。 - Plugins/CLI backends：将捆绑的 Claude CLI、Codex CLI 和 Gemini CLI 推理默认值移至插件表面，增加捆绑的 Gemini CLI 后端支持，并将 `gateway run --claude-cli-logs` 替换为通用 `--cli-backend-logs`，同时保留旧标志作为兼容别名。 - Plugins/startup：从显式配置引用自动加载捆绑的提供商和 CLI 后端插件，因此捆绑的 Claude CLI、Codex CLI 和 Gemini CLI 消息提供商设置不再需要手动 `plugins.allow` 条目。 - Podman：简化围绕当前无根用户的容器设置，将启动助手安装到 `~/.local/bin`，并文档化主机 CLI `openclaw --container <name> ...` 工作流，而非专用的 `openclaw` 服务用户。 - Slack/tool actions：增加显式的 `upload-file` Slack 操作，通过现有 Slack 上传传输路由文件上传，并为频道和私信提供可选的文件名/标题/注释覆盖。 - Message actions/files：通过为 Microsoft Teams 和 Google Chat 增加显式支持，以及通过 `upload-file` 暴露 BlueBubbles 文件发送（同时保留遗留的 `sendAttachment` 别名），开始统一基于规范 `upload-file` 操作的优先文件发送。 - Plugins/Matrix TTS：将自动 TTS 回复作为原生 Matrix 语音气泡发送，而非通用音频附件。(#37080) 感谢 @Matthew19990919。 - CLI：增加 `openclaw config schema` 以打印 `openclaw.json` 的生成 JSON 模式。(#54523) 感谢 @kvokka。 - Config/TTS：在常规读取和密钥解析时自动迁移遗留语音配置，为 Doctor 保留遗留诊断，并移除旧捆绑 `tts.<provider>` API 密钥形状的常规模式运行时回退。 - Memory/plugins：将预压缩内存刷新计划移至活动内存插件合约之后，因此 `memory-core` 拥有刷新提示和目标路径策略，而非硬编码的核心逻辑。 - MiniMax：将模型目录精简为仅 M2.7，移除遗留的 M2、M2.1、M2.5 和 VL-01 模型。(#54487) 感谢 @liyuan97。 - Plugins/runtime：在插件运行时 `system` 命名空间中暴露 `runHeartbeatOnce`，以便插件能触发单次心跳周期，并带有显式的交付目标覆盖（例如 `heartbeat: { target: "last" }`）。(#40299) 感谢 @loveyana。 - Agents/compaction：在陈旧使用预检压缩中保留后压缩 AGENTS 刷新，适用于即时回复和排队的后续操作。(#49479) 感谢 @jared596。 - Agents/compaction：公开特定防护的取消原因，并将良性的手动 `/compact` 无操作情况重新标记为“跳过”而非“失败”。(#51072) 感谢 @afurm。 - Docs：增加 `pnpm docs:check-links:anchors` 用于 Mintlify 锚点验证，同时保留 `scripts/docs-link-audit.mjs` 作为稳定的链接审计入口点。(#55912) 感谢 @velvet-shark。 - Tavily：用 `X-Client-Source: openclaw` 标记出站 API 请求，以便 Tavily 归属 OpenClaw 产生的流量。(#55335) 感谢 @lakshyaag-tavily。 ### 修复 - Google/models：通过传递实际运行时提供商 ID 并增加模板提供商回退，解决所有 Google 提供商别名的 Gemini 3.1 pro、flash 和 flash-lite 解析问题；修复 flash-lite 前缀排序。(#56567) - OpenAI Codex/image tools：为媒体理解注册 Codex，并将图像提示通过 Codex 指令路由，因此图像分析不再因缺少提供商注册或缺少 `instructions` 而失败。(#54829) 感谢 @neeravmakwana。 - Agents/image tool：恢复当未注册特定提供商的媒体理解提供商时的通用图像运行时回退，因此图像分析对 `openrouter` 和 `minimax-portal` 等提供商重新生效。(#54858) 感谢 @MonkeyLeeT。 - WhatsApp：修复自聊 DM 模式中的无限回声循环，即机器人自身的出站回复被重新处理为新的入站用户消息。(#54570) 感谢 @joelnishanth - Telegram/splitting：用经过验证的 HTML 长度搜索替换比例文本估计，因此长消息在单词边界而非单词中间分割；当标签开销超过限制时优雅降级。(#56595) - Telegram/delivery：在机器人投递中跳过仅空白和钩子擦除的文本回复，以防止 GrammyError 400 空文本崩溃。(#56620) - Telegram/send：在所有四个 API 接收点验证 `replyToMessageId`，使用共享规范化器拒绝非数字、NaN 和混合内容字符串。(#56587) - Mistral：规范化 OpenAI 兼容请求标志，因此官方 Mistral API 运行不再因剩余的 `422 状态码（无正文）` 聊天错误而失败。 - Control UI/config：默认保持敏感原始配置隐藏，用显式的“揭示以编辑”状态替换空白阻塞编辑器，并恢复原始 JSON 编辑而不自动暴露密钥。修复 #55322。 - CLI/zsh：延迟 `compdef` 注册直到 `compinit` 可用，因此 zsh 补全能通过插件管理器和手动设置干净加载。(#56555) - BlueBubbles/debounce：在入队边界通过清理 guarding 防抖刷新，并添加独立的组合器 guarding，以防止空消息文本。(#56573) - Auto-reply：在频道投递前用严格单键检测抑制 JSON 封装的 `{"action":"NO_REPLY"}` 控制信封；当文本仅为静默信封时保留媒体。(#56612) - ACP/ACPX 代理注册：将 OpenClaw 的 ACPX 内置代理镜像与最新 `openclaw/acpx` 命令默认值和内置别名对齐，将版本化的 `npx` 内置项固定到确切版本，并阻止未知 ACP 代理 ID 在 MCP-代理路径上回退到原始 `--agent` 命令执行。(#28321) 感谢 @m0nkmaster 和 @vincentkoc。 - Security/audit：扩展网络搜索密钥审计，通过边界安全捆绑网络搜索注册表填充程序识别 Gemini、Grok/xAI、Kimi、Moonshot 和 OpenRouter 凭据。(#56540) - Docs/FAQ：从英文和中文 FAQ 条目中删除损坏的 Xfinity SSL 故障排除交叉链接——两部分已包含完整的内联解决方法。(#56500) - Telegram：在论坛主题会话中再次投递详细工具摘要，因此线程化主题聊天现在匹配 DM 详细行为。(#43236) 感谢 @frankbuild。 - BlueBubbles/CLI agents：为 CLI 路由回合恢复入站提示图像引用，重新应用嵌入运行程序图像大小保护措施，并用回归测试覆盖两个 CLI 图像传输路径。(#51373) - BlueBubbles/groups：在组门控通过后，可选地用本地 macOS 联系人名称丰富未命名参与者列表，因此组成员上下文可显示名称而非仅原始电话号码。 - Discord/reconnect：排空陈旧的网关套接字，在强制全新重连前清除缓存的恢复状态，并在旧套接字拒绝死亡时失败关闭，因此 Discord 恢复停止在中毒恢复状态上循环。(#54697) 感谢 @ngutman。 - iMessage：停止通过发送 `reply_to` 作为 RPC 元数据并剥离出站消息中的游离指令标签，将内联 `[[reply_to:...]]` 标签泄漏到投递文本中。(#39512) 感谢 @mvanhorn。 - CLI/plugins：使路由命令使用与网关启动相同的自动启用捆绑频道快照，因此像 Slack 这样的配置捆绑频道无需先配置重写即可加载。(#54809) 感谢 @neeravmakwana。 - CLI/message send：通过始终将默认 CLI 代理线程化到出站镜像中，将手动 `openclaw message send` 投递再次写入已解析代理会话记录。(#54187) 感谢 @KevInTheCloud5617。 - CLI/onboarding：在 Moonshot 设置菜单中再次显示 Kimi Code API 密钥选项，因此交互式选择器包含所有 Kimi 设置路径。修复 #54412 感谢 @sparkyrider - Agents/status：为新的 Anthropic 4.6 模型覆盖使用提供商感知上下文窗口查找，因此 `/status` 显示正确的 1.0m 窗口，而非报告不足的共享缓存最小值。(#54796) 感谢 @neeravmakwana。 - OpenAI/WebSocket：在 WebSocket 工具回合上保留推理重放元数据和工具调用项 ID，并在需要完整上下文重发时启动新响应链。(#53856) 感谢 @xujingchen1996。 - OpenAI/WS：为 Responses WebSocket 运行恢复推理块，并保持推理/工具调用重放元数据完整，因此恢复的会话不会丢失或破坏后续推理能力回合。(#53856) 感谢 @xujingchen1996。 - Agents/errors：在可用时公开提供商配额/重置详情，但将 HTML/Cloudflare 速率限制页面保留在通用回退上，因此原始错误页面不会显示给用户。(#54512) 感谢 @bugkill3r。 - Claude CLI：将捆绑的 Claude CLI 后端切换为 `stream-json` 输出，以便监视程序查看长时间运行的进度，并在 Claude 以空结果行完成时保留会话/使用元数据。(#49698) 感谢 @felear2022。 - Claude CLI/MCP：始终为后台 Claude CLI 运行传递严格生成的 `--mcp-config` 覆盖，包括空服务器情况，因此 Claude 不会继承环境用户/全局 MCP 服务器。(#54961) 感谢 @markojak。 - Agents/embedded replies：当嵌入运行在没有用户可见回复的情况下结束时，公开中间 429 和过载失败，同时保留仍使用遗留 `mediaUrl` 的成功仅媒体回复。(#50930) 感谢 @infichen。 - Chat/UI：将聊天发送按钮移至共享幽灵按钮主题样式，同时保持停止按钮图标在危险状态下的可读性。(#55075) 感谢 @bottenbenny。 - WhatsApp/allowFrom：对有效阻塞目标显示特定的 allowFrom 策略错误，而非误导性的 `<E.164|group JID>` 格式提示。感谢 @mcaxtr。 - Agents/cooldowns：按模型限定速率限制冷却，因此一个 429 不再阻塞同一认证配置文件上的每个模型；用阶梯式 30 秒 / 1 分钟 / 5 分钟阶梯替换指数 1 分钟 -> 1 小时升级，并在所有模型速率限制时公开用户面向倒计时消息。(#49834) 感谢 @kiranvk-2011。 - Agents/embedded transport errors：在嵌入运行用户消息和生命周期诊断中区分常见网络故障（如连接被拒绝、DNS 查找失败和中断的套接字）与真实超时。(#51419) 感谢 @scoootscooob。 - Telegram/pairing：忽略自 authored DM `message` 更新，因此机器人固定的状态卡片和类似服务更新不会触发虚假配对请求或重新进入入站调度。(#54530) 感谢 @huntharo - Mattermost/replies：将配对回复、斜杠命令回退回复和模型选择器消息保留在已解析配置路径上，因此 `exec:` SecretRef 机器人令牌在所有出站回复分支上生效。(#48347) 感谢 @mathiasnagler。 - Microsoft Teams/config：在严格配置验证中接受现有的 `welcomeCard`、`groupWelcomeCard`、`promptStarters` 以及反馈/反思键，因此已支持的 Teams 运行时设置停止失败模式检查。(#54679) 感谢 @gumclaw。 - MCP/channels：增加网关支持的频道 MCP 桥，包含 Codex/Claude 面向的会话工具、Claude 频道通知，以及针对重连和路由会话发现的更安全 stdio 桥生命周期处理。 - Plugins/SDK：通过插件 SDK 别名解析线程化 `moduleUrl`，因此用户安装在 openclaw 目录外（例如 `~/.openclaw/extensions/`）的插件能正确解析 `openclaw/plugin-sdk/*` 子路径导入，并在 `release:check` 中门控 `plugin-sdk:check-exports`。(#54283) 感谢 @xieyongliang。 - Config/web fetch：允许运行时模式验证中记录的 `tools.web.fetch.maxResponseBytes` 设置，因此有效配置不再因无法识别的密钥错误而失败。(#53401) 感谢 @erhhung。 - Message tool/buttons：在合并的工具定义中保持共享 `buttons` 模式可选，因此当未提供按钮时，纯 `action=send` 调用停止失败验证。(#54418) 感谢 @adzendo。 - Agents/openai-compatible tool calls：跨实时助手消息和重放历史去重重复工具调用 ID，因此 OpenAI 兼容后端不再因重复 `tool_call_id` 值而拒绝 HTTP 400。(#40996) 感谢 @xaeon2026。 - Models/openai-completions：默认非原生 OpenAI 兼容提供商省略工具定义 `strict` 字段，除非用户明确选择重新加入，因此工具调用在拒绝该选项的提供商上继续工作。(#45497) 感谢 @sahancava。 - Plugins/context engines：当旧引擎拒绝时重试严格遗留 `assemble()` 调用（不带新 `prompt` 字段），为预提示插件保留提示感知检索兼容性。(#50848) 感谢 @danhdoan。 - CLI/update status：当本地版本已匹配 npm 最新版时明确说明“已是最新”，同时保持可用性逻辑不变。(#51409) 感谢 @dongzhenye。 - Daemon/Linux：停止将非网关 systemd 服务标记为重复网关（仅因其单元文件提及 OpenClaw），减少 Doctor/日志中的误报噪音。(#45328) 感谢 @gregretkowski。 - Feishu：在监视器停止/中止时关闭 WebSocket 连接，因此幽灵连接不再持续存在，防止重启周期中的重复事件处理和资源泄漏。(#52844) 感谢 @schumilin。 - Feishu：使用原始消息 `create_time` 而非 `Date.now()` 作为入站时间戳，因此离线重试的消息携带正确的创作时间，防止对陈旧指令的错误目标代理操作。(#52809) 感谢 @schumilin。 - Control UI/Skills：使用浏览器模态生命周期打开技能详情对话框，因此点击技能行时面板保持居中，而非在页面底部渲染为离屏。(#55075) 感谢 @bottenbenny。 - Matrix/replies：在入站回复上下文中包含引用的投票问题/选项，因此当用户回复 Matrix 投票消息时代理能看到原始投票内容。(#55056) 感谢 @alberthild。 - Matrix/plugins：防止插件引导在打包的运行时混合裸和深 `matrix-js-sdk` 入口点时崩溃，因此不相关频道在插件加载期间不会宕机。(#56273) 感谢 @aquaright1。 - Agents/sandbox：遵守 `tools.sandbox.tools.alsoAllow`，让显式沙箱重新允许移除匹配的内置默认拒绝工具，并保持沙箱解释/错误指导与有效沙箱工具策略对齐。(#54492) 感谢 @ngutman。 - Agents/sandbox：使阻止工具指导再次支持全局匹配，在解释提示中编辑/净化会话特定信息以更安全复制粘贴，并避免在这些提示中泄露控制字符会话密钥。(#54684) 感谢 @ngutman。 - Agents/compaction：在重试高上下文 LLM 超时前触发超时恢复压缩，因此嵌入运行停止重复超大请求。(#46417) 感谢 @joeykrug。 - Agents/compaction：在后期嵌入自动压缩成功后协调 `sessions.json.compactionCount`，因此持久化会话计数在处理程序报告完成后赶上来。(#45493) 感谢 @jackal092927。 - Agents/failover：将 Codex accountId 令牌提取失败分类为认证错误，因此模型故障转移继续到下一个配置的候选者。(#55206) 感谢 @cosmicnet。 - Plugins/runtime：在构建 HTTP `/tools/invoke` 工具列表时重用兼容的活动插件注册表，并强化工具构造以默认推断会话代理工作区，因此工作区插件不会在重复 HTTP 工具调用上重新注册。感谢 @gumadeiras。 - Talk/macOS：停止直接系统语音失败重放系统语音，对共享监视程序定时使用应用语言环境回退，并为 macOS 回退路由和语言感知超时策略增加回归覆盖。(#53511) 感谢 @hongsw。 - Discord/gateway cleanup：在启动/处置清理期间保持晚期 Carbon 重连耗尽错误被抑制，因此 Discord 监视器关闭不再在晚期网关关闭事件上崩溃。(#55373) 感谢 @Takhoffman。 - Discord/gateway shutdown：将预期重连耗尽事件（在故意生命周期停止期间）视为干净关闭，因此启动中止清理不再暴露虚假网关失败。(#55324) 感谢 @joelnishanth。 - Discord/gateway shutdown：抑制在拆卸翻转 `lifecycleStopping` 之前已缓冲的重连耗尽事件，因此陈旧套接字 Discord 重启不再使整个网关崩溃。修复 #55403 和 #55421。感谢 @lml2468 和 @vincentkoc。 - GitHub Copilot/auth refresh：将大的 `expires_at` 值视为秒纪元，并限制远期运行时认证刷新定时器，因此 Copilot 令牌刷新不能陷入 `setTimeout` 溢出热循环。(#55360) 感谢 @michael-abdo。 - Agents/status：在无显式覆盖时在 `session_status` 中使用持久化运行时会话模型，并在 `session_status` 和 `/status` 中都遵守每代理 `thinkingDefault`。(#55425) 感谢 @scoootscooob、@xaeon2026 和 @ysfbsf。 - Heartbeat/runner：保证心跳运行和意外运行程序错误后间隔定时器被重新武装，因此计划心跳在中断周期后不会静默停止。(#52270) 感谢 @MiloStack。 - Config/Doctor：将陈旧的捆绑插件加载路径从遗留 `extensions/*` 位置重写为打包捆绑路径，包括目录名称不匹配和斜杠后缀配置条目。(#55054) 感谢 @SnowSky1。 - WhatsApp/mentions：停止将引用消息中嵌入的提及视为直接提及，因此回复一条 @提及机器人的消息不再错误触发提及门控。(#52711) 感谢 @lurebat。 - Matrix：在 `m.direct` 种子成功后保持独立 2 人房间脱离 DM 路由，同时仍遵守显式 `is_direct` 状态和启动回退恢复。(#54890) 感谢 @private-peter - Agents/ollama fallback：用前导状态码公开非 2xx Ollama HTTP 错误，因此 HTTP 503 响应再次触发模型故障转移。(#55214) 感谢 @bugkill3r。 - Feishu/tools：阻止像 `agent-spawner` 这样的合成代理 ID 在工具执行期间被视为 Feishu 账户 ID，因此工具回退到配置/默认 Feishu 账户，除非上下文 ID 是真实启用的 Feishu 账户。(#55627) 感谢 @MonkeyLeeT。 - Google/tools：从 Gemini 工具模式中剥离空 `required: []` 数组，因此仅可选工具参数不再触发 Google 验证器 400 错误。(#52106) 感谢 @oliviareid-svg。 - Onboarding/TUI/local gateways：在设置输出中显示解析的网关端口，澄清无守护进程本地健康/仪表板消息，并在重跑和显式本地网关 URL 上保留回环 Control UI 认证，因此本地快速入门流程干净恢复。(#55730) 感谢 @shakkernerd。 - TUI/chat log：将系统消息保持为单个逻辑条目，并在整个消息边界修剪溢出，因此换行系统间距保持完整。(#55732) 感谢 @shakkernerd。 - TUI/activation：在 TUI 中验证 `/activation` 参数，并拒绝无效值而非静默强制为 `mention`。(#55733) 感谢 @shakkernerd。 - Agents/model switching：在下一个安全重试边界将 `/model` 更改应用于活动嵌入运行，因此过载或重试回合切换到新选择的模型，而非固定到旧提供商。 - Agents/Codex fallback：将 Codex `server_error` 负载分类为可故障转移，在到达聊天前净化 `Codex error:` 负载，为前缀 `invalid_request_error` 负载保留上下文溢出指导，并从用户面向 UI 副本中省略提供商 `request_id` 值。(#42892) 感谢 @xaeon2026。 - Memory/search：在拆分插件运行时之间共享内存嵌入提供商注册，因此内存搜索在 memory-core 注册内置适配器后不再因未知提供商错误而失败。(#55945) 感谢 @glitch418x。 - Discord/Carbon beta：更新 `@buape/carbon` 到最新 beta 并传递新 `RateLimitError` 请求参数，因此 Discord 与上游 beta 构造函数变更保持兼容。(#55980) 感谢 @ngutman。 - Plugins/inbound claims：通过 `inbound_claim` 钩子元数据传递完整入站附件数组，同时为兼容性保留遗留单一媒体附件字段。(#55452) 感谢 @huntharo。 - Plugins/Matrix：通过转发 `originalFilename` 到 `saveMediaBuffer` 保留入站媒体的发送者文件名。(#55692) 感谢 @esrehmki。 - Matrix/mentions：识别可见标签使用机器人房间显示名称的 `matrix.to` 提及，因此 `requireMention: true` 房间在现代 Matrix 客户端中正确响应。(#55393) 感谢 @nickludlam。 - Ollama/thinking off：通过实时 Ollama 扩展请求路径路由 `thinkingLevel=off`，因此支持思考的 Ollama 模型现在接收顶级 `think: false` 而非静默生成隐藏推理令牌。(#53200) 感谢 @BruceMacD。 - Plugins/diffs：在打包更新期间阶段捆绑 `@pierre/diffs` 运行时依赖，因此捆绑的差异查看器在全局安装和更新后保持加载。(#56077) 感谢 @gumadeiras。 - Plugins/diffs：不带 JSON 模块导入加载捆绑 Pierre 主题，因此差异渲染在较新 Node 构建上继续工作。(#45869) 感谢 @NickHood1984。 - Plugins/uninstall：卸载频道插件时移除拥有的 `channels.<id>` 配置，并使卸载预览与显式频道所有权对齐，因此内置频道和共享密钥保持完整。(#35915) 感谢 @wbxl2000。 - Plugins/Matrix：在选择出站直接房间和路由未映射验证摘要时优先显式 DM 信号，因此严格 2 人回退房间不会超越真实 DM。(#56076) 感谢 @gumadeiras - Plugins/Matrix：在启动期间解析环境支持的 `accessToken` 和 `password` SecretRefs 到活动 Matrix 配置环境路径，并正式接受 SecretRef `accessToken` 配置值。(#54980) 感谢 @kakahu2015。 - Microsoft Teams/proactive DMs：当存在多个存储的引用时，为 `user:<aadObjectId>` 发送使用最新的个人会话引用，因此回复停止针对陈旧的 DM 线程。(#54702) 感谢 @gumclaw。 - Gateway/plugins：在构建 HTTP `/tools/invoke` 工具列表时重用会话工作区，并强化工具构造以默认推断会话代理工作区，因此工作区插件不会在重复 HTTP 工具调用上重新注册。(#56101) 感谢 @neeravmakwana - Brave/web search：在请求和缓存键生成前将不支持的 Brave `country` 过滤器规范化为 `ALL`，因此像 `VN` 这样的语言环境派生值停止因上游 422 验证错误而失败。(#55695) 感谢 @chen-zhang-cs-code。 - Discord/replies：在剥离内联回复标签时保留前导缩进，因此回复标记的纯文本和围栏代码块保持其格式。(#55960) 感谢 @Nanako0129。 - Daemon/status：从轻量级探测公开即时网关关闭原因，并在 `openclaw daemon status` 中优先这些具体的认证或配对失败而非通用超时。(#56282) 感谢 @mbelinky。 - Agents/failover：默认将 HTTP 410 错误分类为可重试超时，同时从负载保留显式会话过期、计费和认证信号。(#55201) 感谢 @nikus-pan。 - Agents/subagents：为扩展频道（如 BlueBubbles）恢复完成宣布投递。(#56348) - Plugins/Matrix：通过 `createRequire(...)` 加载捆绑的 `@matrix-org/matrix-sdk-crypto-nodejs`，因此 E2EE 媒体发送和接收在打包的 ESM 构建中保持包本地原生绑定查找工作。(#54566) 感谢 @joelnishanth。

## 2026.3.28-beta.1 ### Breaking - Providers/Qwen: remove the deprecated `qwen-portal-auth` OAuth integration for `portal.qwen.ai`; migrate to Model Studio with `openclaw onboard --auth-choice modelstudio-api-key`. (#52709) Thanks @pomelo-nwu. - Config/Doctor: drop automatic config migrations older than two months; very old legacy keys now fail validation instead of being rewritten on load or by `openclaw doctor`. ### Changes - xAI/tools: move the bundled xAI provider to the Responses API, add first-class `x_search`, and auto-enable the xAI plugin from owned web-search and tool config so bundled Grok auth/configured search flows work without manual plugin toggles. (#56048) Thanks @huntharo. - MiniMax: add image generation provider for `image-01` model, supporting generate and image-to-image editing with aspect ratio control. (#54487) Thanks @liyuan97. - Plugins/hooks: add async `requireApproval` to `before_tool_call` hooks, letting plugins pause tool execution and prompt the user for approval via the exec approval overlay, Telegram buttons, Discord interactions, or the `/approve` command on any channel. The `/approve` command now handles both exec and plugin approvals with automatic fallback. (#55339) Thanks @vaclavbelak and @joshavant. - ACP/channels: add current-conversation ACP binds for Discord, BlueBubbles, and iMessage so `/acp spawn codex --bind here` can turn the current chat into a Codex-backed workspace without creating a child thread, and document the distinction between chat surface, ACP session, and runtime workspace. - OpenAI/apply_patch: enable `apply_patch` by default for OpenAI and OpenAI Codex models, and align its sandbox policy access with `write` permissions. - Plugins/CLI backends: move bundled Claude CLI, Codex CLI, and Gemini CLI inference defaults onto the plugin surface, add bundled Gemini CLI backend support, and replace `gateway run --claude-cli-logs` with generic `--cli-backend-logs` while keeping the old flag as a compatibility alias. - Plugins/startup: auto-load bundled provider and CLI-backend plugins from explicit config refs, so bundled Claude CLI, Codex CLI, and Gemini CLI message-provider setups no longer need manual `plugins.allow` entries. - Podman: simplify the container setup around the current rootless user, install the launch helper under `~/.local/bin`, and document the host-CLI `openclaw --container <name> ...` workflow instead of a dedicated `openclaw` service user. - Slack/tool actions: add an explicit `upload-file` Slack action that routes file uploads through the existing Slack upload transport, with optional filename/title/comment overrides for channels and DMs. - Message actions/files: start unifying file-first sends on the canonical `upload-file` action by adding explicit support for Microsoft Teams and Google Chat, and by exposing BlueBubbles file sends through `upload-file` while keeping the legacy `sendAttachment` alias. - Plugins/Matrix TTS: send auto-TTS replies as native Matrix voice bubbles instead of generic audio attachments. (#37080) thanks @Matthew19990919. - CLI: add `openclaw config schema` to print the generated JSON schema for `openclaw.json`. (#54523) Thanks @kvokka. - Config/TTS: auto-migrate legacy speech config on normal reads and secret resolution, keep legacy diagnostics for Doctor, and remove regular-mode runtime fallback for old bundled `tts.<provider>` API-key shapes. - Memory/plugins: move the pre-compaction memory flush plan behind the active memory plugin contract so `memory-core` owns flush prompts and target-path policy instead of hardcoded core logic. - MiniMax: trim model catalog to M2.7 only, removing legacy M2, M2.1, M2.5, and VL-01 models. (#54487) Thanks @liyuan97. - Plugins/runtime: expose `runHeartbeatOnce` in the plugin runtime `system` namespace so plugins can trigger a single heartbeat cycle with an explicit delivery target override (e.g. `heartbeat: { target: "last" }`). (#40299) Thanks @loveyana. - Agents/compaction: preserve the post-compaction AGENTS refresh on stale-usage preflight compaction for both immediate replies and queued followups. (#49479) Thanks @jared596. - Agents/compaction: surface safeguard-specific cancel reasons and relabel benign manual `/compact` no-op cases as skipped instead of failed. (#51072) Thanks @afurm. - Docs: add `pnpm docs:check-links:anchors` for Mintlify anchor validation while keeping `scripts/docs-link-audit.mjs` as the stable link-audit entrypoint. (#55912) Thanks @velvet-shark. - Tavily: mark outbound API requests with `X-Client-Source: openclaw` so Tavily can attribute OpenClaw-originated traffic. (#55335) Thanks @lakshyaag-tavily. ### Fixes - Google/models: resolve Gemini 3.1 pro, flash, and flash-lite for all Google provider aliases by passing the actual runtime provider ID and adding a template-provider fallback; fix flash-lite prefix ordering. (#56567) - OpenAI Codex/image tools: register Codex for media understanding and route image prompts through Codex instructions so image analysis no longer fails on missing provider registration or missing `instructions`. (#54829) Thanks @neeravmakwana. - Agents/image tool: restore the generic image-runtime fallback when no provider-specific media-understanding provider is registered, so image analysis works again for providers like `openrouter` and `minimax-portal`. (#54858) Thanks @MonkeyLeeT. - WhatsApp: fix infinite echo loop in self-chat DM mode where the bot's own outbound replies were re-processed as new inbound user messages. (#54570) Thanks @joelnishanth - Telegram/splitting: replace proportional text estimate with verified HTML-length search so long messages split at word boundaries instead of mid-word; gracefully degrade when tag overhead exceeds the limit. (#56595) - Telegram/delivery: skip whitespace-only and hook-blanked text replies in bot delivery to prevent GrammyError 400 empty-text crashes. (#56620) - Telegram/send: validate `replyToMessageId` at all four API sinks with a shared normalizer that rejects non-numeric, NaN, and mixed-content strings. (#56587) - Mistral: normalize OpenAI-compatible request flags so official Mistral API runs no longer fail with remaining `422 status code (no body)` chat errors. - Control UI/config: keep sensitive raw config hidden by default, replace the blank blocked editor with an explicit reveal-to-edit state, and restore raw JSON editing without auto-exposing secrets. Fixes #55322. - CLI/zsh: defer `compdef` registration until `compinit` is available so zsh completion loads cleanly with plugin managers and manual setups. (#56555) - BlueBubbles/debounce: guard debounce flush against null message text by sanitizing at the enqueue boundary and adding an independent combiner guard. (#56573) - Auto-reply: suppress JSON-wrapped `{"action":"NO_REPLY"}` control envelopes before channel delivery with a strict single-key detector; preserves media when text is only a silent envelope. (#56612) - ACP/ACPX agent registry: align OpenClaw's ACPX built-in agent mirror with the latest `openclaw/acpx` command defaults and built-in aliases, pin versioned `npx` built-ins to exact versions, and stop unknown ACP agent ids from falling through to raw `--agent` command execution on the MCP-proxy path. (#28321) Thanks @m0nkmaster and @vincentkoc. - Security/audit: extend web search key audit to recognize Gemini, Grok/xAI, Kimi, Moonshot, and OpenRouter credentials via a boundary-safe bundled-web-search registry shim. (#56540) - Docs/FAQ: remove broken Xfinity SSL troubleshooting cross-links from English and zh-CN FAQ entries — both sections already contain the full workaround inline. (#56500) - Telegram: deliver verbose tool summaries inside forum topic sessions again, so threaded topic chats now match DM verbose behavior. (#43236) Thanks @frankbuild. - BlueBubbles/CLI agents: restore inbound prompt image refs for CLI routed turns, reapply embedded runner image size guardrails, and cover both CLI image transport paths with regression tests. (#51373) - BlueBubbles/groups: optionally enrich unnamed participant lists with local macOS Contacts names after group gating passes, so group member context can show names instead of only raw phone numbers. - Discord/reconnect: drain stale gateway sockets, clear cached resume state before forced fresh reconnects, and fail closed when old sockets refuse to die so Discord recovery stops looping on poisoned resume state. (#54697) Thanks @ngutman. - iMessage: stop leaking inline `[[reply_to:...]]` tags into delivered text by sending `reply_to` as RPC metadata and stripping stray directive tags from outbound messages. (#39512) Thanks @mvanhorn. - CLI/plugins: make routed commands use the same auto-enabled bundled-channel snapshot as gateway startup, so configured bundled channels like Slack load without requiring a prior config rewrite. (#54809) Thanks @neeravmakwana. - CLI/message send: write manual `openclaw message send` deliveries into the resolved agent session transcript again by always threading the default CLI agent through outbound mirroring. (#54187) Thanks @KevInTheCloud5617. - CLI/onboarding: show the Kimi Code API key option again in the Moonshot setup menu so the interactive picker includes all Kimi setup paths together. Fixes #54412 Thanks @sparkyrider - Agents/status: use provider-aware context window lookup for fresh Anthropic 4.6 model overrides so `/status` shows the correct 1.0m window instead of an underreported shared-cache minimum. (#54796) Thanks @neeravmakwana. - OpenAI/WebSocket: preserve reasoning replay metadata and tool-call item ids on WebSocket tool turns, and start a fresh response chain when full-context resend is required. (#53856) Thanks @xujingchen1996. - OpenAI/WS: restore reasoning blocks for Responses WebSocket runs and keep reasoning/tool-call replay metadata intact so resumed sessions do not lose or break follow-up reasoning-capable turns. (#53856) Thanks @xujingchen1996. - Agents/errors: surface provider quota/reset details when available, but keep HTML/Cloudflare rate-limit pages on the generic fallback so raw error pages are not shown to users. (#54512) Thanks @bugkill3r. - Claude CLI: switch the bundled Claude CLI backend to `stream-json` output so watchdogs see progress on long runs, and keep session/usage metadata even when Claude finishes with an empty result line. (#49698) Thanks @felear2022. - Claude CLI/MCP: always pass a strict generated `--mcp-config` overlay for background Claude CLI runs, including the empty-server case, so Claude does not inherit ambient user/global MCP servers. (#54961) Thanks @markojak. - Agents/embedded replies: surface mid-turn 429 and overload failures when embedded runs end without a user-visible reply, while preserving successful media-only replies that still use legacy `mediaUrl`. (#50930) Thanks @infichen. - Chat/UI: move the chat send button onto the shared ghost-button theme styling, while keeping the stop button icon readable on the danger state. (#55075) Thanks @bottenbenny. - WhatsApp/allowFrom: show a specific allowFrom policy error for valid blocked targets instead of the misleading `<E.164|group JID>` format hint. Thanks @mcaxtr. - Agents/cooldowns: scope rate-limit cooldowns per model so one 429 no longer blocks every model on the same auth profile, replace the exponential 1 min -> 1 h escalation with a stepped 30 s / 1 min / 5 min ladder, and surface a user-facing countdown message when all models are rate-limited. (#49834) Thanks @kiranvk-2011. - Agents/embedded transport errors: distinguish common network failures like connection refused, DNS lookup failure, and interrupted sockets from true timeouts in embedded-run user messaging and lifecycle diagnostics. (#51419) Thanks @scoootscooob. - Telegram/pairing: ignore self-authored DM `message` updates so bot-pinned status cards and similar service updates do not trigger bogus pairing requests or re-enter inbound dispatch. (#54530) thanks @huntharo - Mattermost/replies: keep pairing replies, slash-command fallback replies, and model-picker messages on the resolved config path so `exec:` SecretRef bot tokens work across all outbound reply branches. (#48347) thanks @mathiasnagler. - Microsoft Teams/config: accept the existing `welcomeCard`, `groupWelcomeCard`, `promptStarters`, and feedback/reflection keys in strict config validation so already-supported Teams runtime settings stop failing schema checks. (#54679) Thanks @gumclaw. - MCP/channels: add a Gateway-backed channel MCP bridge with Codex/Claude-facing conversation tools, Claude channel notifications, and safer stdio bridge lifecycle handling for reconnects and routed session discovery. - Plugins/SDK: thread `moduleUrl` through plugin-sdk alias resolution so user-installed plugins outside the openclaw directory (e.g. `~/.openclaw/extensions/`) correctly resolve `openclaw/plugin-sdk/*` subpath imports, and gate `plugin-sdk:check-exports` in `release:check`. (#54283) Thanks @xieyongliang. - Config/web fetch: allow the documented `tools.web.fetch.maxResponseBytes` setting in runtime schema validation so valid configs no longer fail with unrecognized-key errors. (#53401) Thanks @erhhung. - Message tool/buttons: keep the shared `buttons` schema optional in merged tool definitions so plain `action=send` calls stop failing validation when no buttons are provided. (#54418) Thanks @adzendo. - Agents/openai-compatible tool calls: deduplicate repeated tool call ids across live assistant messages and replayed history so OpenAI-compatible backends no longer reject duplicate `tool_call_id` values with HTTP 400. (#40996) Thanks @xaeon2026. - Models/openai-completions: default non-native OpenAI-compatible providers to omit tool-definition `strict` fields unless users explicitly opt back in, so tool calling keeps working on providers that reject that option. (#45497) Thanks @sahancava. - Plugins/context engines: retry strict legacy `assemble()` calls without the new `prompt` field when older engines reject it, preserving prompt-aware retrieval compatibility for pre-prompt plugins. (#50848) thanks @danhdoan. - CLI/update status: explicitly say `up to date` when the local version already matches npm latest, while keeping the availability logic unchanged. (#51409) Thanks @dongzhenye. - Daemon/Linux: stop flagging non-gateway systemd services as duplicate gateways just because their unit files mention OpenClaw, reducing false-positive doctor/log noise. (#45328) Thanks @gregretkowski. - Feishu: close WebSocket connections on monitor stop/abort so ghost connections no longer persist, preventing duplicate event processing and resource leaks across restart cycles. (#52844) Thanks @schumilin. - Feishu: use the original message `create_time` instead of `Date.now()` for inbound timestamps so offline-retried messages carry the correct authoring time, preventing mis-targeted agent actions on stale instructions. (#52809) Thanks @schumilin. - Control UI/Skills: open skill detail dialogs with the browser modal lifecycle so clicking a skill row keeps the panel centered instead of rendering it off-screen at the bottom of the page. - Matrix/replies: include quoted poll question/options in inbound reply context so the agent sees the original poll content when users reply to Matrix poll messages. (#55056) Thanks @alberthild. - Matrix/plugins: keep plugin bootstrap from crashing when built runtime mixes bare and deep `matrix-js-sdk` entrypoints, so unrelated channels do not get taken down during plugin load. (#56273) Thanks @aquaright1. - Agents/sandbox: honor `tools.sandbox.tools.alsoAllow`, let explicit sandbox re-allows remove matching built-in default-deny tools, and keep sandbox explain/error guidance aligned with the effective sandbox tool policy. (#54492) Thanks @ngutman. - Agents/sandbox: make blocked-tool guidance glob-aware again, redact/sanitize session-specific explain hints for safer copy-paste, and avoid leaking control-character session keys in those hints. (#54684) Thanks @ngutman. - Agents/compaction: trigger timeout recovery compaction before retrying high-context LLM timeouts so embedded runs stop repeating oversized requests. (#46417) thanks @joeykrug. - Agents/compaction: reconcile `sessions.json.compactionCount` after a late embedded auto-compaction success so persisted session counts catch up once the handler reports completion. (#45493) Thanks @jackal092927. - Agents/failover: classify Codex accountId token extraction failures as auth errors so model fallback continues to the next configured candidate. (#55206) Thanks @cosmicnet. - Plugins/runtime: reuse only compatible active plugin registries across tools, providers, web search, and channel bootstrap, align `/tools/invoke` plugin loading with the session workspace, and retry outbound channel recovery when the pinned channel surface changes so plugin tools and channels stop disappearing or re-registering from mismatched runtime loads. Thanks @gumadeiras. - Talk/macOS: stop direct system-voice failures from replaying system speech, use app-locale fallback for shared watchdog timing, and add regression coverage for the macOS fallback route and language-aware timeout policy. (#53511) thanks @hongsw. - Discord/gateway cleanup: keep late Carbon reconnect-exhausted errors suppressed through startup/dispose cleanup so Discord monitor shutdown no longer crashes on late gateway close events. (#55373) Thanks @Takhoffman. - Discord/gateway shutdown: treat expected reconnect-exhausted events during intentional lifecycle stop as clean shutdowns so startup-abort cleanup no longer surfaces false gateway failures. (#55324) Thanks @joelnishanth. - Discord/gateway shutdown: suppress reconnect-exhausted events that were already buffered before teardown flips `lifecycleStopping`, so stale-socket Discord restarts no longer crash the whole gateway. Fixes #55403 and #55421. Thanks @lml2468 and @vincentkoc. - GitHub Copilot/auth refresh: treat large `expires_at` values as seconds epochs and clamp far-future runtime auth refresh timers so Copilot token refresh cannot fall into a `setTimeout` overflow hot loop. (#55360) Thanks @michael-abdo. - Agents/status: use the persisted runtime session model in `session_status` when no explicit override exists, and honor per-agent `thinkingDefault` in both `session_status` and `/status`. (#55425) Thanks @scoootscooob, @xaeon2026, and @ysfbsf. - Heartbeat/runner: guarantee the interval timer is re-armed after heartbeat runs and unexpected runner errors so scheduled heartbeats do not silently stop after an interrupted cycle. (#52270) Thanks @MiloStack. - Config/Doctor: rewrite stale bundled plugin load paths from legacy `extensions/*` locations to the packaged bundled path, including directory-name mismatches and slash-suffixed config entries. (#55054) Thanks @SnowSky1. - WhatsApp/mentions: stop treating mentions embedded in quoted messages as direct mentions so replying to a message that @mentioned the bot no longer falsely triggers mention gating. (#52711) Thanks @lurebat. - Matrix: keep separate 2-person rooms out of DM routing after `m.direct` seeds successfully, while still honoring explicit `is_direct` state and startup fallback recovery. (#54890) thanks @private-peter - Agents/ollama fallback: surface non-2xx Ollama HTTP errors with a leading status code so HTTP 503 responses trigger model fallback again. (#55214) Thanks @bugkill3r. - Feishu/tools: stop synthetic agent ids like `agent-spawner` from being treated as Feishu account ids during tool execution, so tools fall back to the configured/default Feishu account unless the contextual id is a real enabled Feishu account. (#55627) Thanks @MonkeyLeeT. - Google/tools: strip empty `required: []` arrays from Gemini tool schemas so optional-only tool parameters no longer trigger Google validator 400s. (#52106) Thanks @oliviareid-svg. - Onboarding/TUI/local gateways: show the resolved gateway port in setup output, clarify no-daemon local health/dashboard messaging, and preserve loopback Control UI auth on reruns and explicit local gateway URLs so local quickstart flows recover cleanly. (#55730) Thanks @shakkernerd. - TUI/chat log: keep system messages as single logical entries and prune overflow at whole-message boundaries so wrapped system spacing stays intact. (#55732) Thanks @shakkernerd. - TUI/activation: validate `/activation` arguments in the TUI and reject invalid values instead of silently coercing them to `mention`. (#55733) Thanks @shakkernerd. - Agents/model switching: apply `/model` changes to active embedded runs at the next safe retry boundary, so overloaded or retrying turns switch to the newly selected model instead of staying pinned to the old provider. - Agents/Codex fallback: classify Codex `server_error` payloads as failoverable, sanitize `Codex error:` payloads before they reach chat, preserve context-overflow guidance for prefixed `invalid_request_error` payloads, and omit provider `request_id` values from user-facing UI copy. (#42892) Thanks @xaeon2026. - Memory/search: share memory embedding provider registrations across split plugin runtimes so memory search no longer fails with unknown provider errors after memory-core registers built-in adapters. (#55945) Thanks @glitch418x. - Discord/Carbon beta: update `@buape/carbon` to the latest beta and pass the new `RateLimitError` request argument so Discord stays compatible with the upstream beta constructor change. (#55980) Thanks @ngutman. - Plugins/inbound claims: pass full inbound attachment arrays through `inbound_claim` hook metadata while keeping the legacy singular media attachment fields for compatibility. (#55452) Thanks @huntharo. - Plugins/Matrix: preserve sender filenames for inbound media by forwarding `originalFilename` to `saveMediaBuffer`. (#55692) thanks @esrehmki. - Matrix/mentions: recognize `matrix.to` mentions whose visible label uses the bot's room display name, so `requireMention: true` rooms respond correctly in modern Matrix clients. (#55393) thanks @nickludlam. - Ollama/thinking off: route `thinkingLevel=off` through the live Ollama extension request path so thinking-capable Ollama models now receive top-level `think: false` instead of silently generating hidden reasoning tokens. (#53200) Thanks @BruceMacD. - Plugins/diffs: stage bundled `@pierre/diffs` runtime dependencies during packaged updates so the bundled diff viewer keeps loading after global installs and updates. (#56077) Thanks @gumadeiras. - Plugins/diffs: load bundled Pierre themes without JSON module imports so diff rendering keeps working on newer Node builds. (#45869) thanks @NickHood1984. - Plugins/uninstall: remove owned `channels.<id>` config when uninstalling channel plugins, and keep the uninstall preview aligned with explicit channel ownership so built-in channels and shared keys stay intact. (#35915) Thanks @wbxl2000. - Plugins/Matrix: prefer explicit DM signals when choosing outbound direct rooms and routing unmapped verification summaries, so strict 2-person fallback rooms do not outrank the real DM. (#56076) thanks @gumadeiras - Plugins/Matrix: resolve env-backed `accessToken` and `password` SecretRefs against the active Matrix config env path during startup, and officially accept SecretRef `accessToken` config values. (#54980) thanks @kakahu2015. - Microsoft Teams/proactive DMs: prefer the freshest personal conversation reference for `user:<aadObjectId>` sends when multiple stored references exist, so replies stop targeting stale DM threads. (#54702) Thanks @gumclaw. - Gateway/plugins: reuse the session workspace when building HTTP `/tools/invoke` tool lists and harden tool construction to infer the session agent workspace by default, so workspace plugins do not re-register on repeated HTTP tool calls. (#56101) thanks @neeravmakwana - Brave/web search: normalize unsupported Brave `country` filters to `ALL` before request and cache-key generation so locale-derived values like `VN` stop failing with upstream 422 validation errors. (#55695) Thanks @chen-zhang-cs-code. - Discord/replies: preserve leading indentation when stripping inline reply tags so reply-tagged plain text and fenced code blocks keep their formatting. (#55960) Thanks @Nanako0129. - Daemon/status: surface immediate gateway close reasons from lightweight probes and prefer those concrete auth or pairing failures over generic timeouts in `openclaw daemon status`. (#56282) Thanks @mbelinky. - Agents/failover: classify HTTP 410 errors as retryable timeouts by default while still preserving explicit session-expired, billing, and auth signals from the payload. (#55201) thanks @nikus-pan. - Agents/subagents: restore completion announce delivery for extension channels like BlueBubbles. (#56348) - Plugins/Matrix: load bundled `@matrix-org/matrix-sdk-crypto-nodejs` through `createRequire(...)` so E2EE media send and receive keep the package-local native binding lookup working in packaged ESM builds. (#54566) thanks @joelnishanth.

OpenClaw v2026.3.28-beta.1 预发布