OpenClaw v2026.10.5-beta.2

## 2026.10.5-beta.2 ### 亮点 - **更新流程完成并可恢复：** `openclaw update` 现在会处理过期的交接租约、已完成的回执，以及旧版 2026.9.8 恢复记录，不再因 `update-recovery-pending` 而停止；同时保留服务堆限制和 webhook 监听器，处理 Windows 短名称路径，并且不再将已接受的交接或成功的更新报告为失败。(#169038, #169027, #168388, #168889, #169035, #169292, #168927, #168993, #169037, #169454, #168905) 感谢 @mkdelta221、@waynegault、@chedong、@k94118、@bluet、@sirius1024、@RomneyDa、@sayitfast 和 @hannesrudolph。 - **Doctor 保留插件和数据：** 当路径安全检查阻止已安装插件时，Doctor 会保留这些插件的配置；对于格式错误的 UTF-8 根记忆文件会保持原样；恢复副本会在迁移移动 Canvas 和 Memory Core 文件之前先捕获它们，即使安装中没有配置任何代理也是如此。(#168111, #169029, #169436, #169516) 感谢 @obviyus、@wangmiao0668000666 和 @RomneyDa。 - **已批准的工具调用保持批准状态：** hook 不再能够在受信任的内联批准之后更改工具参数；会转换参数的插件必须针对最终参数重新请求批准。(#142700) 感谢 @giodl73-repo 和 @giodl73。 - **子代理消息来源追踪：** 跨会话消息从首次请求到重放都会保留其 `[Inter-session message]` 安全封装，因此父会话发送的指令不会被呈现给子会话，仿佛它们是直接的用户指令。(#169130, #169238) 感谢 @RomneyDa。 - **控制界面的会话轮次持续运行：** 配对设备发起的聊天轮次能够经受普通的配对活动，例如节点心跳、其他设备的更新和标签页重新连接；真正的撤销操作仍会停止这些轮次。(#169457, #169134) 感谢 @Oldrich333。 ### 变更 - **工具批准 hook：** 普通 hook 不再能够在受信任的内联批准后重写工具参数而无需再次批准；转换参数的插件必须针对最终参数请求单独批准，否则调用会被阻止。迁移说明见 `docs/plugins/hooks/tool-policy.md`。(#142700) 感谢 @giodl73-repo 和 @giodl73。 - **Codex 运行时兼容性：** 插件准入检查会拒绝低于 2026.9.7 的官方 Codex 运行时，并提供更新和修复指导；不兼容的插件仍可供检查，但不会被导入。(#168930, #168748, #168749, #168977) 感谢 @ezimerman。 - **会话通知：** 创建大量会话时，主会话现在只会收到一条新会话摘要，不再发送多条通知挤占提醒和唤醒消息。(#168239) - **更新性能：** 更新时不再重复计算未发生变化的运行时文件，同时保留正在运行的更新器并发布候选版本，从而减少更新 I/O。(#168958) ### 修复 - **Tool Search 来源追踪：** 通过 Tool Search 和 Code Mode 获取的网络结果现在会像直接的网络工具调用一样污染当前轮次。(#169560, #169332) 感谢 @RomneyDa 和 @farisoftfry。 - **子代理来源追踪：** 子会话在每次重放的轮次中都会保留跨会话安全封装；跨会话轮次在后续轮次和 Gateway 重启后也会保持稳定的提供商提示词前缀。(#169130, #169238) 感谢 @RomneyDa。 - **节点命令和批准：** 当准备好的计划缺少会话身份时，已批准的节点命令仍会在重放时执行；Windows 节点 shell 命令会保留带引号的参数；安全二进制命令接受末尾空白；当登录 shell 重置 PATH 时，Linux 节点服务仍会保留其 PATH。(#161980, #151622, #158160, #142847, #168120, #136677, #134354) 感谢 @Program-123、@gaojian125、@Dimitri-lcht、@igs-rogenlo、@yetval、@harjothkhara 和 @abacha。 - **私有推理：** 工具调用后，如果回复因达到 token 限制或触发内容过滤器而未完成，模型推理内容仍会保持私有。(#168294) - **Doctor 数据安全：** Doctor 会保留被阻止插件的作者条目、启用状态、策略和插槽；拒绝合并格式错误的 UTF-8 根记忆；在新的恢复副本中捕获 Canvas 和 Memory Core 文件，并支持没有配置代理的安装；对于未发生变化的一次性任务，跳过冗余的 cron 备份；恢复 SQLite 快照时遵循 Windows 权限。(#168111, #168066, #169029, #168567, #169436, #169516, #168938, #168838, #169397) 感谢 @obviyus、@wangmiao0668000666、@RomneyDa、@harshitgupta31415 和 @WG-Mojo。 - **记忆：** 每日笔记刷新会拒绝复制的已保存内容，避免重复写入区块；修正 embedding 提供商的端点或凭据后，会刷新缓存的索引管理器，无需重启 Gateway。(#168123, #151263, #151055) 感谢 @ruel225 和 @Mirksen。 - **重启恢复：** Gateway 重启期间处于进行中的主会话会在下一次启动时恢复；被中断的完成回复会被发送而不会丢失；新回复会等待其代理完成启动，而不会因 `prepared reply dispatch runtime owner was not published` 失败。(#168651, #167814, #167766, #168826, #157814) 感谢 @goutamadwant、@marknilsn 和 @xiaozishan。 - **回复路由：** WebChat 任务完成结果会继续留在 WebChat 中；镜像发送到外部渠道不再改变会话记录的回复目标；Reef 会携带 GitHub 提交链接，同时不会将其修订 ID 误判为凭据。(#168248) - **提示词缓存：** 首条消息以空白字符结尾的对话会保持字节稳定的提示词前缀；兼容 OpenAI 的端点和本地端点会将运行时上下文保留在 user-role 消息中。(#168725, #168546, #164791) 感谢 @flanker-stack。 - **压缩：** 在仅使用原生压缩后，会话会跳过冗余的主机压缩；安全压缩会保留已配置的 AGENTS.md 区块；记忆刷新流程会关闭提供商原生压缩。(#168051, #168015, #168446, #168131, #168164) 感谢 @ruel225、@xydigitLybnnnn、@robertoronderosjr、@jakeaadams 和 @obviyus。 - **控制界面：** 聊天轮次能够经受无关的配对活动；输入 `/stop` 也会取消该会话中排队的轮次；Gateway 更新或恢复重新加载后，打开的聊天会恢复到原先位置，不再卡在 **Server updated → Retry now**。(#169457, #169134, #167860, #167859, #168941, #169194) 感谢 @Oldrich333 和 @masatohoshino。 - **Telegram：** 当 ingress worker 从源代码检出目录或打包的插件构建中运行时，轮询可以重新连接；引号或列表旁的表格会保留正确的边界和值。(#154286, #154180, #168383, #168366) 感谢 @xydt-juyaohui、@markfietje、@dhruv1220 和 @barry-ssb。 - **频道和语音：** 频道在 Tailscale 停止导致失败后可以重新启动；Matrix 探测在检查身份后会停止其客户端；`openclaw voicecall steer` 会继续输出机器可读的 JSON。(#162266, #168587) 感谢 @RomneyDa。 - **代理轮次：** 计划轮次和普通轮次在提供商超时后会到达配置的备用提供商；切换模型的排队后续任务会清除自动备用探测；取消的 CLI 排队任务不会执行；空的流心跳不再被计为模型进度；参数长度为 401 或 403 的格式错误工具调用不会被报告为身份验证失败；有效的工具参数联合值会保留其类型；某个插件重新加载后，其他插件的完成流程仍可继续工作。(#168605, #160440, #160428, #169303, #145850, #168500, #168450, #158974, #168916, #156026) 感谢 @hxy91819、@changeroa、@RileyJJY、@TYY-2005、@r3n3x、@Shenrui-Ma 和 @jalehman。 - **Claude CLI：** 在其他插件配置发生变化后，Claude CLI 模型仍会显示；exec-completion 轮次会保留其原生工具和 MCP 工具；已保存会话中的 MCP 服务器选择会应用到下一轮。(#168315, #168670, #168342, #168393, #168207) 感谢 @obviyus、@Oldrich333 和 @dprev。 - **OpenRouter 提示词缓存：** 对于 OpenRouter 上的 Grok 和 Gemini 2.5+ 模型，缓存 TTL 上下文裁剪现在会被启用。(#169548, #169133) 感谢 @RomneyDa 和 @gregb100。 - **模型和提供商：** 使用 API 密钥登录后会立即发现提供商的模型；共享 OAuth 凭据会与历史代理存储一起刷新；切换回 OpenAI 模型时无需 Codex 插件即可正常工作；超时的 Codex 发现客户端会被回收；LM Studio 会等待缓慢的模型加载，而不是导致新会话溢出；模型重新加载期间移除凭据不再留下重启警告。(#168617, #168957, #169412, #168365, #168044) 感谢 @obviyus。 - **模型目录内存：** 对于长期运行的 Gateway，模型目录 worker 会在每个工作区中对未发生变化的已安装原生 ESM 插件只执行一次评估，而不会在每次配置变化时都保留一份额外的模块图副本；原生刷新失败后，会在下一次请求时重新注册所请求的配置。(#169272, #169321, #159662) 感谢 @obviyus、@mcooks-cmd、@RomneyDa 和 @svdinu-jpg。 - **MCP 计算机控制：** 计算机控制会随其运行一起释放，因此后续调用不再因 `COMPUTER_HOST_BUSY` 失败。(#151127, #147420) 感谢 @ylcn91 和 @vovarbv。 - **自动化：** cron 目标和负载验证错误会报告为无效请求；Workboard 备用运行会持续保持活动状态，直到整体结果确定。(#169102, #168215, #167574) 感谢 @obviyus、@skyzhao1223 和 @asikorskiy。 - **Agents API 会话：** 已保存的远程会话在绑定升级后仍会使用相同的会话 ID 继续运行。(#168150) - **大型 Gateway：** 大型节点集群在预留会话存储时不会发生栈溢出；拥有进程的 Gateway 停止时不再等待原生 skills watcher 清理。(#168354, #168160, #168273) 感谢 @609NFT 和 @obviyus。 - **更新和恢复：** 在交接租约数据库丢失或被替换后，托管更新会处理符合条件的过期软件包恢复，并在下一次准备之前归档已完成的回执；`--dry-run` 只会报告计划进行的处理。(#169038, #167506, #167771) 感谢 @mkdelta221 和 @waynegault。 - **旧版更新记录：** 2026.9.8 软件包恢复记录会在元数据发生漂移后根据身份和版本完成处理；已完成回执的身份漂移不再阻止更新；当日志仍处于待处理状态时，公共修复命令会以非零状态退出并提供指导。(#169027, #168856, #168388, #168092) 感谢 @chedong、@k94118 和 @RomneyDa。 - **更新结果：** 已接受的 Gateway 更新交接不会被报告为失败；已记录的成功状态会继续保持成功，同时针对已停止的频道给出警告；即使清理报告不可用，原始失败结果仍会保留；修复后的迁移不再产生过期警告；软件包验证可以容忍时钟跳变；迁移状态失败会指向 `openclaw update repair`。(#168993, #168870, #169037, #169454, #169004, #168835, #168905) 感谢 @sayitfast、@hannesrudolph 和 @WG-Mojo。 - **更新内存和 webhook：** 更新子进程会继承托管服务的堆限制，因此 Doctor 可以完成大型代理数据库的处理；在候选版本 Doctor 阶段被延迟的官方 webhook 插件会保留其监听器，包括 Teams 历史使用的 3978 端口。(#168889, #168729, #169035, #168872) 感谢 @bluet 和 @sirius1024。 - **更新运行时：** 更新器 worker 会继续使用保留的运行时；当安装路径使用 Windows 短名称（8.3）或不同大小写时，`openclaw doctor --fix` 会回收保留的运行时；更新时不再将无关依赖复制到保留的运行时中。(#169292, #168927) 感谢 @RomneyDa。 - **更新诊断：** 未封存的原始状态捕获警告会指出受影响的数据库；候选配置读取失败警告会包含失败原因。(#169282, #169259, #169284, #169261) 感谢 @DonnieFi。 - **Codex Ultrafast：** ChatGPT 登录会话在恢复后的轮次中会继续使用 Ultrafast，而不会在第一轮之后降级为 Fast。(#169265, #169264) 感谢 @SanderHelgesen。 - **npm 全局更新：** 更新器运行时只保留 OpenClaw 自身的依赖，而不会保留全局 `node_modules` 中所有无关的软件包。(#169551, #169373) 感谢 @RomneyDa 和 @holgergruenhagen。 - **更新退出处理：** 当已完成的更新无法报告结果时，程序会带着警告退出，而不会进入交互式失败处理流程。(#168587) - **Doctor 维护：** 即使检查大型状态数据库耗时较长，Doctor 和更新修复也会在运行中的 systemd Gateway 上进入维护模式。(#168161, #168031) 感谢 @obviyus 和 @Tosko4。 ### 完整贡献记录这份经过审核的记录涵盖完整的 v2026.10.5-beta.1..8ed6123845921594f4643c1914e8ceb8cfb42c07 历史：范围内 PR 91 个 + 保留的仅种子 PR 0 个 = 唯一 PR 共 91 个。生成清单还提供了直接提交，作为编辑输入；上方的分组说明优先呈现对用户的影响。已发布基线排除项：v2026.10.5-beta.1（3 个 PR：#134837、#144420、#167460）。 #### Pull requests - **PR #169281** 感谢 @RomneyDa。 - **PR #169292** 感谢 @RomneyDa。 - **PR #169268** 感谢 @RomneyDa。 - **PR #168103** - **PR #168161** 关联 #168031。感谢 @obviyus 和 @Tosko4。 - **PR #168388** 关联 #168092。感谢 @k94118。 - **PR #168605** - **PR #168826** 关联 #157814。感谢 @xiaozishan。 - **PR #168889** 关联 #168729。感谢 @bluet。 - **PR #168958** - **PR #169035** 关联 #168872。感谢 @sirius1024。 - **PR #154286** 关联 #154180。感谢 @xydt-juyaohui 和 @markfietje。 - **PR #169027** 关联 #168856。感谢 @chedong。 - **PR #169038** 关联 #167506、#167771。感谢 @mkdelta221 和 @waynegault。 - **PR #169084** 感谢 @RomneyDa。 - **PR #168941** - **PR #169272** 感谢 @obviyus 和 @mcooks-cmd。 - **PR #169257** 感谢 @RomneyDa。 - **PR #169321** 感谢 @RomneyDa。 - **PR #169436** 感谢 @RomneyDa。 - **PR #169457** 关联 #169134。感谢 @Oldrich333。 - **PR #168150** - **PR #168097** 感谢 @RomneyDa。 - **PR #168111** 关联 #168066。感谢 @obviyus。 - **PR #168128** - **PR #168123** - **PR #168264** 感谢 @obviyus。 - **PR #168248** - **PR #168239** - **PR #168215** 关联 #167574。感谢 @obviyus、@skyzhao1223 和 @asikorskiy。 - **PR #167814** 关联 #167766。感谢 @goutamadwant 和 @marknilsn。 - **PR #168273** 感谢 @obviyus。 - **PR #151263** 关联 #151055。感谢 @ruel225 和 @Mirksen。 - **PR #168294** - **PR #168354** 关联 #168160。感谢 @609NFT。 - **PR #168315** 感谢 @obviyus。 - **PR #168365** - **PR #167860** 关联 #167859。感谢 @masatohoshino。 - **PR #168051** 关联 #168015。感谢 @ruel225、@xydigitLybnnnn 和 @robertoronderosjr。 - **PR #168330** 感谢 @RomneyDa。 - **PR #168546** 关联 #164791。感谢 @flanker-stack。 - **PR #168500** 关联 #168450。感谢 @TYY-2005 和 @r3n3x。 - **PR #158974** 感谢 @Shenrui-Ma。 - **PR #168617** 感谢 @obviyus。 - **PR #168383** 关联 #168366。感谢 @dhruv1220 和 @barry-ssb。 - **PR #168120** 感谢 @yetval。 - **PR #168670** 关联 #168342。感谢 @Oldrich333。 - **PR #168725** - **PR #151127** 关联 #147420。感谢 @ylcn91 和 @vovarbv。 - **PR #142700** 感谢 @giodl73-repo 和 @giodl73。 - **PR #158160** 关联 #142847。感谢 @Dimitri-lcht 和 @igs-rogenlo。 - **PR #168927** - **PR #161980** 关联 #151622。感谢 @Program-123 和 @gaojian125。 - **PR #168930** 关联 #168748、#168749。感谢 @ezimerman。 - **PR #168938** 关联 #168838。感谢 @harshitgupta31415 和 @WG-Mojo。 - **PR #168957** 感谢 @obviyus。 - **PR #168993** 关联 #168870。感谢 @sayitfast。 - **PR #169004** 关联 #168835。感谢 @WG-Mojo。 - **PR #169029** 关联 #168567。感谢 @wangmiao0668000666。 - **PR #169037** - **PR #136677** 关联 #134354。感谢 @harjothkhara 和 @abacha。 - **PR #168916** 关联 #156026。感谢 @jalehman。 - **PR #168977** - **PR #169130** 感谢 @RomneyDa。 - **PR #169194** - **PR #169225** 感谢 @RomneyDa。 - **PR #169238** 感谢 @RomneyDa。 - **PR #145850** 感谢 @RileyJJY。 - **PR #169303** 感谢 @changeroa。 - **PR #169397** - **PR #169412** 感谢 @obviyus。 - **PR #169454** 感谢 @hannesrudolph。 - **PR #169516** 感谢 @RomneyDa。 - **PR #169479** 感谢 @RomneyDa。 - **PR #168651** - **PR #168044** - **PR #168446** 关联 #168131。感谢 @jakeaadams。 - **PR #168164** 感谢 @obviyus。 - **PR #168393** 关联 #168207。感谢 @dprev。 - **PR #160440** 关联 #160428。感谢 @hxy91819。 - **PR #169102** - **PR #169430** - **PR #162266** 感谢 @RomneyDa。 - **PR #168905** - **PR #168587** - **PR #169265** 关联 #169264。感谢 @SanderHelgesen。 - **PR #169282** 关联 #169259。感谢 @DonnieFi。 - **PR #169284** 关联 #169261。感谢 @DonnieFi。 - **PR #169548** 关联 #169133。感谢 @RomneyDa 和 @gregb100。 - **PR #169551** 关联 #169373。感谢 @RomneyDa 和 @holgergruenhagen。 - **PR #169560** 关联 #169332。感谢 @RomneyDa 和 @farisoftfry。 ### 发布验证 - npm 软件包：https://www.npmjs.com/package/openclaw/v/2026.10.5-beta.2 - registry tarball：https://registry.npmjs.org/openclaw/-/openclaw-2026.10.5-beta.2.tgz - 完整性校验值：`sha512-9OgCXW1ZUmMdBdtojEIp7P9qRh9hTHhTARNQfTLPTtKQViuNenvcjgJh6JaJsZx9b20J0FL4qXA4q1dkw795eg==` - 发布 SHA：`467e83dea27c0d9ade8e999d688de2ed656b2225` - 完整发布 CI 报告：https://github.com/openclaw/releases/blob/main/evidence/2026.10.5-beta.2/release-evidence.md - 发布流程：https://github.com/openclaw/openclaw/actions/runs/38244441645 - npm 预检：https://github.com/openclaw/openclaw/actions/runs/38227708658 - 完整发布验证：https://github.com/openclaw/openclaw/actions/runs/38226906077 - 插件 npm 发布：https://github.com/openclaw/openclaw/actions/runs/38245185150 - 插件 ClawHub 发布：没有常规 OIDC 候选项 - 插件 ClawHub 引导：不需要 - OpenClaw npm 发布：https://github.com/openclaw/openclaw/actions/runs/38241099968/attempts/1 - npm Telegram beta E2E：未提供

## 2026.10.5-beta.2 ### Highlights - **Updates finish and recover:** `openclaw update` settles stale handoff leases, completed receipts, and legacy 2026.9.8 recovery records instead of stopping on `update-recovery-pending`, keeps the service heap limit and webhook listeners, handles Windows short-name paths, and no longer reports accepted handoffs or successful updates as failures. (#169038, #169027, #168388, #168889, #169035, #169292, #168927, #168993, #169037, #169454, #168905) Thanks @mkdelta221, @waynegault, @chedong, @k94118, @bluet, @sirius1024, @RomneyDa, @sayitfast, and @hannesrudolph. - **Doctor keeps your plugins and data:** Doctor preserves installed plugins' configuration when path safety checks block them, leaves malformed UTF-8 root memory files untouched, and recovery copies capture Canvas and Memory Core files before migrations move them, including on installs with no configured agents. (#168111, #169029, #169436, #169516) Thanks @obviyus, @wangmiao0668000666, and @RomneyDa. - **Approved tool calls stay as approved:** hooks can no longer change tool arguments after a trusted inline approval; plugins that transform arguments must request approval for their final arguments. (#142700) Thanks @giodl73-repo and @giodl73. - **Subagent message provenance:** inter-session messages keep their `[Inter-session message]` safety envelope from the first request and through replay, so parent-sent instructions are never presented to a child as direct user instructions. (#169130, #169238) Thanks @RomneyDa. - **Control UI turns keep running:** chat turns from paired devices survive ordinary pairing activity such as node heartbeats, other devices' updates, and tab reconnects; real revocations still stop them. (#169457, #169134) Thanks @Oldrich333. ### Changes - **Tool approval hooks:** ordinary hooks can no longer rewrite trusted-inline-approved tool arguments without another approval, and transforming plugins must request separate approval for their final arguments or the call is blocked; see `docs/plugins/hooks/tool-policy.md` for migration. (#142700) Thanks @giodl73-repo and @giodl73. - **Codex runtime compatibility:** plugin admission rejects official Codex runtimes below 2026.9.7 with update and repair guidance, and incompatible plugins stay inspectable without being imported. (#168930, #168748, #168749, #168977) Thanks @ezimerman. - **Session notices:** creating many sessions gives the main session one summary of new sessions instead of separate notices that crowd out reminders and wakes. (#168239) - **Update performance:** updates stop rehashing unchanged runtime files while retaining the running updater and publishing the candidate, reducing update I/O. (#168958) ### Fixes - **Tool Search provenance:** network results reached through Tool Search and Code Mode now taint the turn the same way direct network tool calls do. (#169560, #169332) Thanks @RomneyDa and @farisoftfry. - **Subagent provenance:** child sessions keep the inter-session safety envelope on every replayed turn, and inter-session turns keep a stable provider prompt prefix across later turns and Gateway restarts. (#169130, #169238) Thanks @RomneyDa. - **Node commands and approvals:** approved node commands replay when their prepared plan omitted session identity, Windows node shell commands keep quoted arguments, safe-bin commands accept trailing whitespace, and the Linux node service keeps its PATH when the login shell resets it. (#161980, #151622, #158160, #142847, #168120, #136677, #134354) Thanks @Program-123, @gaojian125, @Dimitri-lcht, @igs-rogenlo, @yetval, @harjothkhara, and @abacha. - **Private reasoning:** unfinished model reasoning stays private when a reply hits a token limit or content filter after a tool call. (#168294) - **Doctor data safety:** Doctor keeps blocked plugins' authored entries, enablement, policy, and slots; refuses to merge malformed UTF-8 root memory; captures Canvas and Memory Core files in new recovery copies (and works on installs with no configured agents); skips redundant cron backups for unchanged one-shot jobs; and honors Windows permissions for SQLite recovery snapshots. (#168111, #168066, #169029, #168567, #169436, #169516, #168938, #168838, #169397) Thanks @obviyus, @wangmiao0668000666, @RomneyDa, @harshitgupta31415, and @WG-Mojo. - **Memory:** daily-note flushes reject copied saved content instead of repeating blocks, and correcting an embedding provider's endpoint or credential refreshes cached index managers without a Gateway restart. (#168123, #151263, #151055) Thanks @ruel225 and @Mirksen. - **Restart recovery:** main sessions that were mid-turn during a Gateway restart resume on the next boot, interrupted completion replies are delivered instead of lost, and new replies wait for their agent to finish starting instead of failing with `prepared reply dispatch runtime owner was not published`. (#168651, #167814, #167766, #168826, #157814) Thanks @goutamadwant, @marknilsn, and @xiaozishan. - **Reply routing:** WebChat task completions stay in WebChat, mirrored external sends no longer change a transcript's reply destination, and Reef carries GitHub commit links without flagging their revision IDs as credentials. (#168248) - **Prompt caching:** conversations whose first message ends in whitespace keep a byte-stable prompt prefix, and OpenAI-compatible and local endpoints keep runtime context in a user-role message. (#168725, #168546, #164791) Thanks @flanker-stack. - **Compaction:** sessions skip a redundant host compaction after native-only compaction, safeguard compaction keeps configured AGENTS.md sections, and memory-flush runs keep provider-native compaction off. (#168051, #168015, #168446, #168131, #168164) Thanks @ruel225, @xydigitLybnnnn, @robertoronderosjr, @jakeaadams, and @obviyus. - **Control UI:** chat turns survive unrelated pairing activity, typed `/stop` also cancels queued turns for the session, and open chats recover after a Gateway update or recovery reload instead of sticking on **Server updated → Retry now**, keeping their place. (#169457, #169134, #167860, #167859, #168941, #169194) Thanks @Oldrich333 and @masatohoshino. - **Telegram:** polling connects again when the ingress worker runs from a source checkout or packaged plugin build, and tables next to quotes or lists keep their boundaries and values. (#154286, #154180, #168383, #168366) Thanks @xydt-juyaohui, @markfietje, @dhruv1220, and @barry-ssb. - **Channels and voice:** channels start again after a stopped-Tailscale failure, the Matrix probe stops its client after checking identity, and `openclaw voicecall steer` keeps stdout machine-readable JSON. (#162266, #168587) Thanks @RomneyDa. - **Agent turns:** scheduled and ordinary turns reach the configured fallback after a provider timeout, queued follow-ups that switch model clear the auto-fallback probe, cancelled queued CLI work never runs, empty stream heartbeats no longer count as model progress, malformed tool calls whose argument length is 401 or 403 are not reported as auth failures, valid tool argument union values keep their type, and plugin completions keep working after another plugin reloads. (#168605, #160440, #160428, #169303, #145850, #168500, #168450, #158974, #168916, #156026) Thanks @hxy91819, @changeroa, @RileyJJY, @TYY-2005, @r3n3x, @Shenrui-Ma, and @jalehman. - **Claude CLI:** Claude CLI models stay listed after another plugin's config changes, exec-completion turns keep their native and MCP tools, and saved session MCP server selections apply on the next turn. (#168315, #168670, #168342, #168393, #168207) Thanks @obviyus, @Oldrich333, and @dprev. - **OpenRouter prompt caching:** cache-TTL context pruning now arms for Grok and Gemini 2.5+ models on OpenRouter. (#169548, #169133) Thanks @RomneyDa and @gregb100. - **Models and providers:** API-key sign-in discovers the provider's models immediately, shared OAuth credentials refresh with historical agent stores, switching back to an OpenAI model works without the Codex plugin, timed-out Codex discovery clients are reaped, LM Studio waits for slow model loads instead of overflowing a fresh session, and credential removal during a model reload no longer leaves a restart warning. (#168617, #168957, #169412, #168365, #168044) Thanks @obviyus. - **Model catalog memory:** a long-running Gateway's model-catalog worker evaluates an unchanged installed native ESM plugin once per workspace instead of retaining another copy of its module graph on every config change, and a failed native refresh re-registers the requested config on the next request. (#169272, #169321, #159662) Thanks @obviyus, @mcooks-cmd, @RomneyDa, and @svdinu-jpg. - **MCP computer control:** computer control is released with its run, so later calls no longer fail with `COMPUTER_HOST_BUSY`. (#151127, #147420) Thanks @ylcn91 and @vovarbv. - **Automations:** cron target and payload validation errors are reported as invalid requests, and Workboard fallback runs stay active until the overall outcome settles. (#169102, #168215, #167574) Thanks @obviyus, @skyzhao1223, and @asikorskiy. - **Agents API sessions:** saved remote sessions continue with the same session ID across binding upgrades. (#168150) - **Large Gateways:** large fleets reserve session stores without stack overflows, and process-owning Gateway stops no longer wait on native skills watcher cleanup. (#168354, #168160, #168273) Thanks @609NFT and @obviyus. - **Updates and recovery:** managed updates settle eligible stale package recovery after a lost or replaced handoff lease database and archive completed receipts before the next preparation; `--dry-run` only reports the planned settlement. (#169038, #167506, #167771) Thanks @mkdelta221 and @waynegault. - **Legacy update records:** 2026.9.8 package recovery records settle by identity and version after metadata drift, completed-receipt identity drift no longer blocks updates, and public repair exits nonzero with guidance when a journal stays pending. (#169027, #168856, #168388, #168092) Thanks @chedong, @k94118, and @RomneyDa. - **Update outcomes:** accepted Gateway update handoffs are not reported as failures, recorded successes stay successful with a warning about stopped channels, original failures survive unavailable cleanup reporting, repaired migrations stop producing stale warnings, package verification tolerates clock jumps, and migrated-state failures point to `openclaw update repair`. (#168993, #168870, #169037, #169454, #169004, #168835, #168905) Thanks @sayitfast, @hannesrudolph, and @WG-Mojo. - **Update memory and webhooks:** update children inherit the managed service's heap limits so Doctor finishes on large agent databases, and official webhook plugins deferred during candidate Doctor keep their listeners, including Teams' historical port 3978. (#168889, #168729, #169035, #168872) Thanks @bluet and @sirius1024. - **Update runtimes:** updater workers stay on the retained runtime and `openclaw doctor --fix` reclaims retained runtimes when the install path uses a Windows short (8.3) name or different casing, and updates no longer copy unrelated dependencies into the retained runtime. (#169292, #168927) Thanks @RomneyDa. - **Update diagnostics:** an unsealed original-state capture warning names the affected database, and a candidate config read failure warning includes its reason. (#169282, #169259, #169284, #169261) Thanks @DonnieFi. - **Codex Ultrafast:** ChatGPT sign-in sessions keep Ultrafast on resumed turns instead of dropping to Fast after the first turn. (#169265, #169264) Thanks @SanderHelgesen. - **npm-global updates:** the updater runtime keeps only OpenClaw's own dependencies instead of every unrelated package in the global `node_modules`. (#169551, #169373) Thanks @RomneyDa and @holgergruenhagen. - **Update exit handling:** a completed update whose result reporting fails exits with its warning instead of opening interactive failure triage. (#168587) - **Doctor maintenance:** Doctor and update repair enter maintenance on a running systemd Gateway even when checking a large state database is slow. (#168161, #168031) Thanks @obviyus and @Tosko4. ### Complete contribution record This audited record covers the complete v2026.10.5-beta.1..8ed6123845921594f4643c1914e8ceb8cfb42c07 history: 91 in-range PRs + 0 retained seed-only PRs = 91 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact. Shipped baseline exclusions: v2026.10.5-beta.1 (3 PRs: #134837, #144420, #167460). #### Pull requests - **PR #169281** Thanks @RomneyDa. - **PR #169292** Thanks @RomneyDa. - **PR #169268** Thanks @RomneyDa. - **PR #168103** - **PR #168161** Related #168031. Thanks @obviyus and @Tosko4. - **PR #168388** Related #168092. Thanks @k94118. - **PR #168605** - **PR #168826** Related #157814. Thanks @xiaozishan. - **PR #168889** Related #168729. Thanks @bluet. - **PR #168958** - **PR #169035** Related #168872. Thanks @sirius1024. - **PR #154286** Related #154180. Thanks @xydt-juyaohui and @markfietje. - **PR #169027** Related #168856. Thanks @chedong. - **PR #169038** Related #167506, #167771. Thanks @mkdelta221 and @waynegault. - **PR #169084** Thanks @RomneyDa. - **PR #168941** - **PR #169272** Thanks @obviyus and @mcooks-cmd. - **PR #169257** Thanks @RomneyDa. - **PR #169321** Thanks @RomneyDa. - **PR #169436** Thanks @RomneyDa. - **PR #169457** Related #169134. Thanks @Oldrich333. - **PR #168150** - **PR #168097** Thanks @RomneyDa. - **PR #168111** Related #168066. Thanks @obviyus. - **PR #168128** - **PR #168123** - **PR #168264** Thanks @obviyus. - **PR #168248** - **PR #168239** - **PR #168215** Related #167574. Thanks @obviyus and @skyzhao1223 and @asikorskiy. - **PR #167814** Related #167766. Thanks @goutamadwant and @marknilsn. - **PR #168273** Thanks @obviyus. - **PR #151263** Related #151055. Thanks @ruel225 and @Mirksen. - **PR #168294** - **PR #168354** Related #168160. Thanks @609NFT. - **PR #168315** Thanks @obviyus. - **PR #168365** - **PR #167860** Related #167859. Thanks @masatohoshino. - **PR #168051** Related #168015. Thanks @ruel225 and @xydigitLybnnnn and @robertoronderosjr. - **PR #168330** Thanks @RomneyDa. - **PR #168546** Related #164791. Thanks @flanker-stack. - **PR #168500** Related #168450. Thanks @TYY-2005 and @r3n3x. - **PR #158974** Thanks @Shenrui-Ma. - **PR #168617** Thanks @obviyus. - **PR #168383** Related #168366. Thanks @dhruv1220 and @barry-ssb. - **PR #168120** Thanks @yetval. - **PR #168670** Related #168342. Thanks @Oldrich333. - **PR #168725** - **PR #151127** Related #147420. Thanks @ylcn91 and @vovarbv. - **PR #142700** Thanks @giodl73-repo and @giodl73. - **PR #158160** Related #142847. Thanks @Dimitri-lcht and @igs-rogenlo. - **PR #168927** - **PR #161980** Related #151622. Thanks @Program-123 and @gaojian125. - **PR #168930** Related #168748, #168749. Thanks @ezimerman. - **PR #168938** Related #168838. Thanks @harshitgupta31415 and @WG-Mojo. - **PR #168957** Thanks @obviyus. - **PR #168993** Related #168870. Thanks @sayitfast. - **PR #169004** Related #168835. Thanks @WG-Mojo. - **PR #169029** Related #168567. Thanks @wangmiao0668000666. - **PR #169037** - **PR #136677** Related #134354. Thanks @harjothkhara and @abacha. - **PR #168916** Related #156026. Thanks @jalehman. - **PR #168977** - **PR #169130** Thanks @RomneyDa. - **PR #169194** - **PR #169225** Thanks @RomneyDa. - **PR #169238** Thanks @RomneyDa. - **PR #145850** Thanks @RileyJJY. - **PR #169303** Thanks @changeroa. - **PR #169397** - **PR #169412** Thanks @obviyus. - **PR #169454** Thanks @hannesrudolph. - **PR #169516** Thanks @RomneyDa. - **PR #169479** Thanks @RomneyDa. - **PR #168651** - **PR #168044** - **PR #168446** Related #168131. Thanks @jakeaadams. - **PR #168164** Thanks @obviyus. - **PR #168393** Related #168207. Thanks @dprev. - **PR #160440** Related #160428. Thanks @hxy91819. - **PR #169102** - **PR #169430** - **PR #162266** Thanks @RomneyDa. - **PR #168905** - **PR #168587** - **PR #169265** Related #169264. Thanks @SanderHelgesen. - **PR #169282** Related #169259. Thanks @DonnieFi. - **PR #169284** Related #169261. Thanks @DonnieFi. - **PR #169548** Related #169133. Thanks @RomneyDa and @gregb100. - **PR #169551** Related #169373. Thanks @RomneyDa and @holgergruenhagen. - **PR #169560** Related #169332. Thanks @RomneyDa and @farisoftfry. ### Release verification - npm package: https://www.npmjs.com/package/openclaw/v/2026.10.5-beta.2 - registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.10.5-beta.2.tgz - integrity: `sha512-9OgCXW1ZUmMdBdtojEIp7P9qRh9hTHhTARNQfTLPTtKQViuNenvcjgJh6JaJsZx9b20J0FL4qXA4q1dkw795eg==` - release SHA: `467e83dea27c0d9ade8e999d688de2ed656b2225` - full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.10.5-beta.2/release-evidence.md - release publish: https://github.com/openclaw/openclaw/actions/runs/38244441645 - npm preflight: https://github.com/openclaw/openclaw/actions/runs/38227708658 - full release validation: https://github.com/openclaw/openclaw/actions/runs/38226906077 - plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/38245185150 - plugin ClawHub publish: no normal OIDC candidates - plugin ClawHub bootstrap: not needed - OpenClaw npm publish: https://github.com/openclaw/openclaw/actions/runs/38241099968/attempts/1 - npm Telegram beta E2E: not supplied

OpenClaw v2026.10.5-beta.2 预发布