## 2026.6.2
### 亮点
- 插件和技能安装现已使用操作者安装策略，取代了原有的危险代码扫描路径，并在医生、CLI、ClawHub 以及故障排查界面中，为包、归档、源代码、上传和市场安装提供了更清晰的说明。(#89516) 感谢 @joshavant。
- Telegram、飞书、Discord、WhatsApp 以及外发投递路径在重复会话镜像、Telegram 管理员回写、流式最终预览、审批白名单、设置运行时状态、投票修饰符、Discord 语音错误以及内部进度跟踪方面变得更加安全。(#88973, #89626, #89812, #89035, #89814, #89813, #89601) 感谢 @pgondhi987, @Petru2224, @zhangguiping-xydt, @codezz 和 @takhoffman。
- 聊天、控制界面、技能工坊、工作板、Android 伴侣外壳以及 WebChat 流程现在能够保留可见的流式文本、协调已完成的发送、暴露 ACK 时序、增加工作板键盘移动、增强对话框无障碍性、延迟加载使用视图、保持当前聊天开关正常工作，并改进 Android 伴侣优先的外壳导航。(#89801, #89777, #89802) 感谢 @vincentkoc。
- 安全、策略和配置恢复现在会拒绝损坏的外壳快照、不受支持的策略键、不安全的执行预检环境、格式错误的脚本限制以及可疑的网关启动配置，同时增加了数据处理合规性检查。(#89701, #87074, #81488, #87056, #89480) 感谢 @RomneyDa, @giodl73-repo 和 @mmaps。
- 网关、代理、Codex、提供者、模型和记忆路径现在能够恢复会话写锁释放失败、废弃的 Codex 应用服务器启动、流到父级 ACP 生成、自定义提供者运行时扇出、捆绑提供者别名、提示缓存边界、Gemini 停止序列、Kimi 缓存标记以及观察者压力警告。(#89811, #89244) 感谢 @RomneyDa 和 @takhoffman。
- 发布、CI、Docker、Crabbox/Testbox、包和端到端验证流水线现在对更多网络调用、格式错误的数值限制、进程组、清理泄漏、包水合路径、Windows 安装程序发布、发布资产验证和日志排放进行了限制，从而让失败产生有界证据而非挂起。
### 变更
- 插件/安全：用操作者安装策略、安装策略上下文、医生检查、安装/更新 CLI 连接、ClawHub 元数据路径以及包/归档/源代码/上传生命周期覆盖，取代了危险代码扫描强制策略。(#89516) 感谢 @joshavant。
- 策略：增加数据处理合规性检查，并拒绝不受支持的策略键。(#87056, #87074) 感谢 @giodl73-repo。
- Telegram/频道：在进度草稿中显示评论和推理，跨频道插件共享进度草稿编写器，并使 Telegram 轮询停止/重置边界更便宜、更可靠。
- UI/移动端：增加工作板键盘移动控制，收紧工作板卡片操作，改进 Android 伴侣优先的外壳用户体验，并记录聊天 ACK 时序元数据。(#89802) 感谢 @vincentkoc。
- 发布元数据：使根包、可发布的插件清单、生成的 shrinkwrap、appcast、iOS、Android、macOS、Matrix 插件变更日志以及文档/生成的基线，与 2026.6.2 测试版列车对齐。
- 发布/打包：推广 Windows 节点安装程序发布，要求已验证的 Windows 发布资产链接，并记录 GitHub 发布说明编辑。
- 文档：刷新 Windows Hub 设置指南，并记录网关、CLI 和插件 SDK 辅助合约。
### 修复
- 渠道/外发：在会话镜像失败时保持渠道发送持久性，阻止填充模式的投票修饰符阻塞正常发送，保留 WebChat `sessions_send` 交接，在隐藏内部代理失败跟踪的同时保留 Discord 频道标签抑制，匹配 Discord libopus 错误形态，并清理 Discord 工具进度脚手架。(#89626, #89812, #89601) 感谢 @Petru2224, @codezz 和 @takhoffman。
- Telegram/飞书：要求 Telegram 目标回写具有管理员权限，保持 Telegram DM 执行审批白名单在 `ask:off` 下正常工作，防止跨流模式的 Telegram 预览重复，在流式最终消息后隔离详细状态，取消干净的重新启动停止计时器，减缓轮询重启风暴，并连接飞书设置运行时设置器。(#88973, #89035, #89813, #89814) 感谢 @pgondhi987, @zhangguiping-xydt 和 @takhoffman。
- 聊天/UI/网关：保留可见的聊天流文本，在终端提交前清除过期的流缓冲区，协调已完成的发送，将待发送内容滚动到视图中，增强工作板对话框无障碍性，稳定 WebChat 提示缓存亲和性，重叠聊天目录启动，增量渲染聊天历史，延迟加载使用仪表板，并报告网关健康认证诊断。(#89337) 感谢 @RomneyDa。
- 代理/Codex/提供者/模型：在提示释放栅栏读取失败时释放会话写锁，退休废弃的 Codex 应用服务器启动，保持流到父级 ACP 生成注册状态，超时时关闭 Codex 启动客户端，恢复捆绑的提供者别名，避免自定义提供者运行时扇出，保留提供者提示缓存边界，转发 Gemini 停止序列，并移除 Kimi 不兼容的 Anthropic 缓存标记。(#89811) 感谢 @takhoffman。
- 记忆/构建/更新：在启动观察者压力检查后发出警告，外化可选的 Baileys 图片后端，恢复并固定 Canvas A2UI 兼容性资产，保持插件修复获取失败非阻塞，恢复技能工坊视图切换，并在等待会话切换后保持当前聊天开关激活状态。(#89244) 感谢 @RomneyDa。
- 安全/配置/工具：拒绝损坏的外壳快照、可疑的网关启动配置、格式错误的发布/测试/工具/Docker/性能数值限制、过大的审计响应、不安全的执行预检环境以及无效的待处理代理 SQLite 脚手架拒绝。(#89701, #89705, #89480, #81488) 感谢 @RomneyDa 和 @mmaps。
- 发布/CI/端到端：在 2026.6.1 版本号提升后恢复包变更日志提取，保持水合后的 pnpm 模块在 ARM/Linux 包生命周期脚本的 `node_modules` 下，保持 OpenAI 实时缓存先决条件为建议性，而 Anthropic 先决条件保持阻塞性，在临时文件锁定错误时重试 Windows Parallels 后台日志追加，对候选 GitHub 和跨操作系统 Discord 获取进行限制，增强 ARM 冒烟/浏览器检查，显示 Docker 构建心跳，重置 Crabbox pnpm 水合状态，并隔离 Testbox/Docker/发布旅程产物。
### 发布验证
- npm 包：https://www.npmjs.com/package/openclaw/v/2026.6.2-beta.1
- 注册表 tarball：https://registry.npmjs.org/openclaw/-/openclaw-2026.6.2-beta.1.tgz
- 完整性校验：sha512-0lugviNlRNrTTK3Az+aJ/1f9bu7lo1WHwqHO2lkW4GJIV5LT58XhpoXXL3TKzosqJjAjvW4JXJstrK6nhZwpHg==
- 完整发布验证：https://github.com/openclaw/openclaw/actions/runs/26918960809
- npm 预检：https://github.com/openclaw/openclaw/actions/runs/26918964585
- 发布发布：https://github.com/openclaw/openclaw/actions/runs/26920144100
- 发布检查：https://github.com/openclaw/openclaw/actions/runs/26919202085
- CI：https://github.com/openclaw/openclaw/actions/runs/26919201946
- 插件预发布验证：https://github.com/openclaw/openclaw/actions/runs/26919202959
- 性能：https://github.com/openclaw/openclaw/actions/runs/26918932463
- 插件 npm 发布：https://github.com/openclaw/openclaw/actions/runs/26920331316
- 插件 ClawHub 发布：https://github.com/openclaw/openclaw/actions/runs/26920332148（工作流因 pixverse 已发布的竞态条件而结束；所有预期的 ClawHub 版本已验证在线）
- 已发布包冒烟测试：`node --import tsx scripts/openclaw-npm-postpublish-verify.ts 2026.6.2-beta.1` 通过
- npm Telegram 测试版端到端：https://github.com/openclaw/openclaw/actions/runs/26921311123
## 2026.6.2
### Highlights
- Plugin and skill installs now use an operator install policy instead of the old dangerous-code scanner path, with clearer doctor, CLI, ClawHub, and troubleshooting surfaces for package, archive, source, upload, and marketplace installs. (#89516) Thanks @joshavant.
- Telegram, Feishu, Discord, WhatsApp, and outbound delivery paths got safer around duplicate transcript mirrors, Telegram admin writeback, streamed-final previews, approval allowlists, setup runtime state, poll modifiers, Discord voice errors, and internal progress traces. (#88973, #89626, #89812, #89035, #89814, #89813, #89601) Thanks @pgondhi987, @Petru2224, @zhangguiping-xydt, @codezz, and @takhoffman.
- Chat, Control UI, Skill Workshop, Workboard, Android companion shell, and WebChat flows now preserve visible streaming text, reconcile completed sends, expose ACK timing, add Workboard keyboard movement, harden dialog accessibility, lazy-load usage views, keep current chat toggles working, and improve Android companion-first shell navigation. (#89801, #89777, #89802) Thanks @vincentkoc.
- Security, policy, and config recovery now reject corrupt shell snapshots, unsupported policy keys, unsafe exec approval precheck environments, malformed script limits, and suspicious gateway startup configs while adding data-handling conformance checks. (#89701, #87074, #81488, #87056, #89480) Thanks @RomneyDa, @giodl73-repo, and @mmaps.
- Gateway, agent, Codex, provider, model, and memory paths now recover session write-lock release failures, abandoned Codex app-server startups, stream-to-parent ACP spawns, custom-provider runtime fanout, bundled provider aliases, prompt-cache boundaries, Gemini stop sequences, Kimi cache markers, and watcher pressure warnings. (#89811, #89244) Thanks @RomneyDa and @takhoffman.
- Release, CI, Docker, Crabbox/Testbox, package, and E2E validation lanes now bound more network calls, malformed numeric limits, process groups, cleanup leaks, package hydration paths, Windows installer publishing, release asset verification, and log drains so failures produce bounded proof instead of hanging.
### Changes
- Plugins/security: replace dangerous-code scanner enforcement with operator install policy, install-policy context, doctor checks, install/update CLI wiring, ClawHub metadata paths, and package/archive/source/upload lifecycle coverage. (#89516) Thanks @joshavant.
- Policy: add data-handling conformance checks and reject unsupported policy keys. (#87056, #87074) Thanks @giodl73-repo.
- Telegram/channels: show commentary and reasoning in progress drafts, share progress draft compositors across channel plugins, and keep Telegram polling stop/reset boundaries cheaper and more reliable.
- UI/mobile: add Workboard keyboard movement controls, tighten Workboard card operations, improve Android companion-first shell UX, and document chat ACK timing metadata. (#89802) Thanks @vincentkoc.
- Release metadata: align the root package, publishable plugin manifests, generated shrinkwraps, appcast, iOS, Android, macOS, Matrix plugin changelog, and docs/generated baselines with the 2026.6.2 beta train.
- Release/packaging: promote Windows node installer publishing, require verified Windows release asset links, and document GitHub release-note edits.
- Docs: refresh Windows Hub setup guidance and document Gateway, CLI, and plugin SDK helper contracts.
### Fixes
- Channels/outbound: keep channel sends durable when transcript mirroring fails, stop schema-padded poll modifiers from blocking normal sends, preserve WebChat `sessions_send` handoffs, preserve Discord channel-label suppression while hiding internal agent failure traces, match Discord libopus error shapes, and sanitize Discord tool progress scaffolding. (#89626, #89812, #89601) Thanks @Petru2224, @codezz, and @takhoffman.
- Telegram/Feishu: require admin rights for Telegram target writeback, keep Telegram DM exec approval allowlists working with `ask:off`, prevent Telegram preview duplication across streaming modes, isolate verbose status after streamed finals, cancel clean restart stop timers, slow polling restart storms, and wire Feishu setup runtime setters. (#88973, #89035, #89813, #89814) Thanks @pgondhi987, @zhangguiping-xydt, and @takhoffman.
- Chat/UI/Gateway: preserve visible chat stream text, clear stale stream buffers before terminal commits, reconcile completed sends, scroll pending sends into view, harden Workboard dialog accessibility, stabilize WebChat prompt-cache affinity, overlap chat catalog startup, render chat history incrementally, lazy-load usage dashboard, and report gateway health auth diagnostics. (#89337) Thanks @RomneyDa.
- Agents/Codex/providers/models: release session write locks when prompt-release fence reads fail, retire abandoned Codex app-server startups, keep stream-to-parent ACP spawns registered, close Codex startup clients on timeout, recover bundled provider aliases, avoid custom-provider runtime fanout, preserve provider prompt-cache boundaries, forward Gemini stop sequences, and strip Kimi-incompatible Anthropic cache markers. (#89811) Thanks @takhoffman.
- Memory/build/update: warn after startup watcher pressure checks, externalize optional Baileys image backends, restore and pin Canvas A2UI compatibility assets, keep plugin repair fetch failures nonblocking, restore Skill Workshop view switching, and keep the current chat toggle active after awaited session switches. (#89244) Thanks @RomneyDa.
- Security/config/tooling: reject corrupt shell snapshots, suspicious gateway startup configs, malformed release/test/tooling/Docker/perf numeric limits, oversized audit responses, unsafe exec precheck env, and invalid pending-agent SQLite scaffold denials. (#89701, #89705, #89480, #81488) Thanks @RomneyDa and @mmaps.
- Release/CI/E2E: restore package changelog extraction after the post-2026.6.1 version bump, keep hydrated pnpm modules under `node_modules` for ARM/Linux package lifecycle scripts, keep OpenAI live-cache prerequisites advisory while Anthropic prerequisites stay blocking, retry Windows Parallels background log appends on transient file-lock errors, bound candidate GitHub and cross-OS Discord fetches, harden ARM smoke/browser checks, show Docker build heartbeats, reset Crabbox pnpm hydrate state, and isolate Testbox/Docker/release journey artifacts.
### Release verification
- npm package: https://www.npmjs.com/package/openclaw/v/2026.6.2-beta.1
- registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.6.2-beta.1.tgz
- integrity: sha512-0lugviNlRNrTTK3Az+aJ/1f9bu7lo1WHwqHO2lkW4GJIV5LT58XhpoXXL3TKzosqJjAjvW4JXJstrK6nhZwpHg==
- full release validation: https://github.com/openclaw/openclaw/actions/runs/26918960809
- npm preflight: https://github.com/openclaw/openclaw/actions/runs/26918964585
- release publish: https://github.com/openclaw/openclaw/actions/runs/26920144100
- release checks: https://github.com/openclaw/openclaw/actions/runs/26919202085
- CI: https://github.com/openclaw/openclaw/actions/runs/26919201946
- plugin prerelease validation: https://github.com/openclaw/openclaw/actions/runs/26919202959
- performance: https://github.com/openclaw/openclaw/actions/runs/26918932463
- plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/26920331316
- plugin ClawHub publish: https://github.com/openclaw/openclaw/actions/runs/26920332148 (workflow ended with pixverse already-published race; all expected ClawHub versions verified live)
- published package smoke: `node --import tsx scripts/openclaw-npm-postpublish-verify.ts 2026.6.2-beta.1` passed
- npm Telegram beta E2E: https://github.com/openclaw/openclaw/actions/runs/26921311123