OpenClaw v2026.5.31-beta.2

## 2026.5.31 ### 亮点 - 代理及基于 CLI 的运行时在处理中断的工具调用、过期的会话绑定、压缩交接及媒体投递重试时，能更干净地恢复。（#88129, #88136, #88141, #88162, #88182） - 频道及移动端投递在 Telegram、WhatsApp、iMessage、Slack、Discord、Microsoft Teams、Google Chat、Google Meet 及 iOS 实时通话中更加稳定。（#88096, #88105, #88183, #88231） - 提供商及插件请求现在对更多定时器、重试次数、OAuth/设备码生命周期、媒体下载、本地服务探测及生成内容轮询路径进行了绑定，防止其挂起运行。 - 技能、会话元数据、网关运行时状态、插件元数据及存储写入在热路径上减少了重复工作，同时保持配置和调度行为稳定。 - 工作面板、SecretRef 插件清单、托管 iOS 推送中继以及外部 Copilot/Tokenjuice 打包扩展了更广泛的编排、集成及插件投递面。（#82326, #87469, #87796, #88107, #88117） - 发布、CI、Docker、E2E 及诊断通道现在对更多日志、响应体、就绪探测、工件检查及状态轮询进行了上限设置，使失败报告返回有界证据而非停滞。 ### 变更 - 文档：新增专用技能工作坊指南，涵盖受管技能创建、可审查提案、CLI、网关、代理工具行为、审批策略、支持文件及恢复。感谢 @shakkernerd。 - 技能：让 `skill_workshop` 代理工具通过有保护的审查流程应用、拒绝及隔离显式提案。感谢 @shakkernerd。 - 技能：让提案在标准技能文件夹下携带已批准的支持文件，并带有扫描、哈希及回滚保护。感谢 @shakkernerd。 - 技能：让待审批提案在批准前可原地修订，并带有版本化、带日期的提案前置元数据。感谢 @shakkernerd。 - 技能：新增技能工作坊，包含待审批提案、CLI/网关审查操作、回滚元数据及 `skill_workshop` 代理工具。感谢 @shakkernerd。 - 插件：将 Tokenjuice 外部化为官方 `@openclaw/tokenjuice` 插件，附带 npm 和 ClawHub 发布元数据。 - 插件：将 GitHub Copilot 代理运行时外部化为官方 `@openclaw/copilot` 插件，附带 npm 和 ClawHub 发布元数据。 - iOS：添加托管推送中继默认值、实时通话播放以及有保护的 WebSocket ping 路径，以实现更可靠的移动端会话。（#88096, #88105, #88231） - 工作面板：新增编排原语和代理协调工具，用于多代理规划和运行跟踪。（#87469） - 代码模式：为限定作用域的代理/全局会话及精确命名空间工具调度添加内部命名空间。（#88043） - 控制 UI：添加“梦境”标签页代理选择器，并将所选代理传播到梦境状态、日记及日记操作中。（#78748）感谢 @stevenepalmer。 - 插件：添加 SecretRef 提供商集成清单合约，并提取共享 LLM 核心包以供提供商/插件复用。（#82326, #88117） - 技能：添加核心技能索引，集中化技能运行时加载、状态、过滤及提示格式化。 ### 修复 - 代理/媒体：防止异步图像、音乐和视频生成开始导致 Codex 回合结束，以便混合请求可在媒体后台渲染的同时继续处理摘要或其他工作。 - 代理/Codex：防止公共 OpenAI API 密钥配置被当作原生 Codex 应用服务器认证，同时保留持久化的 Codex OAuth 会话。 - 控制 UI：保持折叠的工具卡片以工具名称和操作进行标注，而非普通输出文本。感谢 @shakkernerd。 - 代理/Codex：当 `skill_workshop` 可用时，在 Codex 应用服务器提示中展示技能工作坊指南。感谢 @shakkernerd。 - CLI：将 `plugins list --json` 保持在仅快照路径上，以便插件扫描避免加载完整运行时状态图。 - 插件：使 PixVerse 外部插件的 ClawHub 元数据显式化，并将其排除在捆绑的发布构建之外。 - Cron：使 SQLite cron 迁移兼容旧版运行日志表、归档任务存储、诊断 cron 名称及旧版一次性运行后删除行为。（#88285） - 提供商：对来自 OpenAI、Runway、xAI、MiniMax、BytePlus、兼容 DashScope、FAL、OpenRouter、Google、Vydra 和 Comfy 提供商的生成媒体下载进行绑定。 - 提供商：在创建中止信号前，对 GitHub Copilot OAuth 请求超时设置上限。 - Cron：在瞬态模型速率限制后重试周期性任务，无需等待下一个预定时间槽。 - 代理/Codex：在清理期间保持实时会话锁定，恢复中断的 CLI 工具转录，保留 Codex 认证和压缩会话身份，清除孤立工具状态，设置应用服务器空闲计时器上限，并使媒体完成投递可重试。（#88129, #88136, #88141, #88162, #88182） - 聊天/UI：将网关聊天失败显示为控制 UI 中可见的助手消息，而非仅设置不可见的错误状态。 - 频道：对 Telegram、Discord、WhatsApp、Signal、飞书、Google Chat、Microsoft Teams、QQBot、Nostr、Zalo、Zalouser 及 Nextcloud 风格的请求/重试计时器设置上限；保留 SMS 审批回复路由；重试 WhatsApp QR 登录的 408 超时。（#88183） - 安全/配置解析：拒绝不安全的 OAuth/令牌生命周期、重试后延迟、入站时间戳、响应体大小、命令超时配置、沙箱观察者令牌 TTL 以及关闭后的网关 WebSocket 调用。 - 提供商/媒体：对跨托管和本地提供商的本地服务、模型、用量、队列、生成媒体、TTS、音乐、工作流轮询及提供商 OAuth 请求计时器设置上限。 - 发布/CI/E2E：对发布候选读取、Beta 烟雾 REST 调用、变更日志恢复、完整测试及捆绑插件就绪探测、密钥提供商探测、Vitest 路由及主线测试不稳定问题进行绑定。（#88127, #88137, #88155, #88160） - 发布/CI/E2E：通过仓库 pnpm 运行器运行密钥提供商集成证明，以便原生 macOS 和 Windows 验证使用完整的包管理器填充程序。 - 发布/CI/E2E：通过仓库 pnpm 运行器运行 Telegram 桌面证明网关，以便原生 macOS 证明使用完整的包管理器填充程序。 - 文档/CI：通过仓库 pnpm 运行器运行 Mintlify 锚点检查，以便在 pnpm 仅通过完整包管理器填充程序可用时，文档链接验证正常工作。 - 代理：使配置的备用模型元数据保持类型安全，以便提供商参数、上下文令牌上限及媒体输入限制不会破坏更改网关的类型检查。 - 代理：在接受隐藏的 `sessions_send` 体别名后验证之前，保持面向模型的 `message` 模式为规范模式。（#88229）感谢 @zhangguiping-xydt。 - CI/Crabbox：将默认运行器容量保持为仅竞价实例且提供商中立，以便 OpenClaw 远程验证不会静默回退到按需租赁或过时的 AWS 区域提示。 - CI/Crabbox：将 Crabbox 包装器和 Testbox 工作流编辑路由至其回归测试，以便更改测试门不会静默运行零规范。 - CI/工作流：将工作流健全性辅助编辑路由至其守卫测试，并覆盖复合操作输入插值检查。 - CI/工具：将 CI 范围、依赖、变更日志及文档辅助编辑路由至其所有者测试，而非静默跳过更改测试覆盖率。 - CI/工具：将包、发布及安装辅助编辑路由至其所有者测试，以便更改测试门覆盖发布和安装脚本更改。 - CI/工具：通过其所有者测试路由共享脚本库编辑，以便锁定、进程、安全及扫描辅助程序不会跳过更改测试覆盖率。 - CI/工具：一旦更改的差异已需要广泛回退，则跳过昂贵的导入图扫描，在保持本地更改测试规划快速的同时仍收集显式所有者测试。 - CI/工具：当 `test/scripts` 或 `src/scripts` 覆盖率已存在时，通过常规所有者测试路由脚本编辑。 - CI/工具：在内存 FD 重制脚本中尊重选项终止符，以便后续参数不会被重新解析。 - 发布/CI/E2E：断言插件生命周期运行时检查输出，而非仅捕获它。 - 发布/CI/E2E：使网关网络证明所宣称的健康 RPC，并重试早期 WebSocket 关闭而无需耗尽完全打开超时。 - 发布/CI/E2E：在发布、Parallels 烟雾、插件挑战及扩展内存脚本中尊重选项终止符。 - 发布/CI/E2E：当请求的套件摘要缺失或无效时，使插件网关挑战 QA 块失败。 - 性能：使用生成的插件资产预构建 QA 运行时探测，但不包含 CLI 启动元数据。 - 性能：对仅运行时的 CLI 启动和网关监视构建配置文件跳过声明打包。 - 性能：复用准备好的提供商句柄、严格工具模式、网关运行时元数据、会话维护配置、插件元数据、捆绑技能允许列表、包本地插件工件、单入口存储写入以及已验证/序列化的会话提示 blob。

## 2026.5.31 ### Highlights - Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141, #88162, #88182) - Channels and mobile delivery are steadier across Telegram, WhatsApp, iMessage, Slack, Discord, Microsoft Teams, Google Chat, Google Meet, and iOS realtime Talk. (#88096, #88105, #88183, #88231) - Provider and plugin requests now bound more timers, retries, OAuth/device-code lifetimes, media downloads, local service probes, and generated-content polling paths before they can hang a run. - Skills, session metadata, gateway runtime state, plugin metadata, and store writes do less repeated work on hot paths while keeping config and dispatch behavior stable. - Workboard, SecretRef plugin manifests, hosted iOS push relay, and external Copilot/Tokenjuice packaging add broader orchestration, integration, and plugin delivery surfaces. (#82326, #87469, #87796, #88107, #88117) - Release, CI, Docker, E2E, and diagnostics lanes now cap more logs, response bodies, readiness probes, artifact checks, and status polling so failures report bounded proof instead of stalling. ### Changes - Docs: add a dedicated Skill Workshop guide covering governed skill creation, reviewable proposals, CLI, Gateway, agent tool behavior, approval policy, support files, and recovery. Thanks @shakkernerd. - Skills: let the `skill_workshop` agent tool apply, reject, and quarantine explicit proposals through the guarded review flow. Thanks @shakkernerd. - Skills: let proposals carry approved support files under standard skill folders, with scanner, hash, and rollback safeguards. Thanks @shakkernerd. - Skills: let pending proposals be revised in place with versioned, dated proposal frontmatter before approval. Thanks @shakkernerd. - Skills: add Skill Workshop with pending proposals, CLI/Gateway review actions, rollback metadata, and the `skill_workshop` agent tool. Thanks @shakkernerd. - Plugins: externalize Tokenjuice as the official `@openclaw/tokenjuice` plugin with npm and ClawHub publish metadata. - Plugins: externalize the GitHub Copilot agent runtime as the official `@openclaw/copilot` plugin with npm and ClawHub publish metadata. - iOS: add hosted push relay defaults, realtime Talk playback, and a guarded WebSocket ping path for more reliable mobile sessions. (#88096, #88105, #88231) - Workboard: add orchestration primitives and agent coordination tools for multi-agent planning and run tracking. (#87469) - Code mode: add internal namespaces for scoped agent/global sessions and exact namespace tool dispatch. (#88043) - Control UI: add a Dreaming-tab agent selector and propagate the selected agent through Dreaming status, diary, and diary actions. (#78748) Thanks @stevenepalmer. - Plugins: add a SecretRef provider integration manifest contract and extract shared LLM core packages for provider/plugin reuse. (#82326, #88117) - Skills: add the core skills index and centralize skills runtime loading, status, filtering, and prompt formatting. ### Fixes - Agents/media: keep async image, music, and video generation starts from ending the Codex turn, so mixed requests can continue with summaries or other work while media renders in the background. - Agents/Codex: keep public OpenAI API-key profiles from being treated as native Codex app-server auth while preserving persisted Codex OAuth sessions. - Control UI: keep collapsed tool cards labeled with the tool name and action instead of generic output text. Thanks @shakkernerd. - Agents/Codex: surface Skill Workshop guidance in Codex app-server prompts when `skill_workshop` is available. Thanks @shakkernerd. - CLI: keep `plugins list --json` on the snapshot-only path so plugin sweeps avoid loading the full runtime status graph. - Plugins: make PixVerse external-plugin ClawHub metadata explicit and keep it out of bundled dist builds. - Cron: keep SQLite cron migrations compatible with legacy run-log tables, archived job stores, diagnostic cron names, and legacy one-shot delete-after-run behavior. (#88285) - Providers: bound generated media downloads from OpenAI, Runway, xAI, MiniMax, BytePlus, DashScope-compatible, FAL, OpenRouter, Google, Vydra, and Comfy providers. - Providers: cap GitHub Copilot OAuth request timeouts before creating abort signals. - Cron: retry recurring jobs after transient model rate limits before waiting for the next scheduled slot. - Agents/Codex: keep live session locks during cleanup, recover interrupted CLI tool transcripts, preserve Codex auth and compaction session identity, clear orphan tool state, cap app-server idle timers, and keep media completion delivery retryable. (#88129, #88136, #88141, #88162, #88182) - Chat/UI: show Gateway chat failures as visible assistant messages in the Control UI instead of only setting an invisible error state. - Channels: cap Telegram, Discord, WhatsApp, Signal, Feishu, Google Chat, Microsoft Teams, QQBot, Nostr, Zalo, Zalouser, and Nextcloud-style request/retry timers; preserve SMS approval reply routes; and retry WhatsApp QR login 408 timeouts. (#88183) - Security/config parsing: reject unsafe OAuth/token lifetimes, retry-after delays, inbound timestamps, response body sizes, command timeout config, sandbox observer token TTLs, and gateway WebSocket calls after close. - Providers/media: cap local service, model, usage, queue, generated media, TTS, music, workflow polling, and provider OAuth request timers across hosted and local providers. - Release/CI/E2E: bound release candidate reads, beta smoke REST calls, changelog restore, kitchen-sink and bundled plugin readiness probes, secret-provider probes, Vitest routing, and mainline test flakes. (#88127, #88137, #88155, #88160) - Release/CI/E2E: run the secret-provider integration proof through the repo pnpm runner so native macOS and Windows validation use the hydrated package-manager shim. - Release/CI/E2E: run the Telegram desktop proof gateway through the repo pnpm runner so native macOS proof uses the hydrated package-manager shim. - Docs/CI: run Mintlify anchor checks through the repo pnpm runner so docs link validation works when pnpm is only available through the hydrated package-manager shim. - Agents: keep configured fallback model metadata typed so provider params, context-token caps, and media input limits do not break changed-gate typechecks. - Agents: accept hidden `sessions_send` body aliases before validation while keeping the model-facing `message` schema canonical. (#88229) Thanks @zhangguiping-xydt. - CI/Crabbox: keep default runner capacity spot-only and provider-neutral so OpenClaw remote validation does not silently fall back to on-demand leases or stale AWS region hints. - CI/Crabbox: route Crabbox wrapper and Testbox workflow edits to their regression tests so changed-test gates do not silently run zero specs. - CI/workflows: route workflow sanity helper edits to their guard tests and cover composite-action input interpolation checks. - CI/tooling: route CI scope, dependency, changelog, and docs helper edits to their owner tests instead of silently skipping changed-test coverage. - CI/tooling: route package, release, and install helper edits to their owner tests so changed-test gates cover publish and installer script changes. - CI/tooling: route shared script library edits through their owner tests so lock, process, safety, and scan helpers do not skip changed-test coverage. - CI/tooling: skip expensive import-graph scans once a changed diff already requires broad fallback, keeping local changed-test planning fast while still collecting explicit owner tests. - CI/tooling: route script edits through conventional owner tests when matching `test/scripts` or `src/scripts` coverage already exists. - CI/tooling: honor option terminators in the memory FD repro script so follow-on arguments are not reparsed. - Release/CI/E2E: assert plugin lifecycle runtime inspect output instead of only capturing it. - Release/CI/E2E: make gateway-network prove the advertised health RPC and retry early WebSocket closes without burning full open timeouts. - Release/CI/E2E: honor option terminators across release, Parallels smoke, plugin gauntlet, and extension-memory scripts. - Release/CI/E2E: fail plugin gateway gauntlet QA chunks when the requested suite summary is missing or invalid. - Performance: prebuild QA runtime probes with generated plugin assets but without CLI startup metadata. - Performance: skip declaration bundling for runtime-only CLI startup and gateway watch build profiles. - Performance: reuse prepared provider handles, strict tool schemas, gateway runtime metadata, session maintenance config, plugin metadata, bundled skill allowlists, package-local plugin artifacts, single-entry store writes, and validated/serialized session prompt blobs.

OpenClaw v2026.5.31-beta.2 预发布