OpenClaw v2026.10.4 - 更新日志

## 2026.10.4 ### 亮点 - Gateway 在计算机休眠或系统时钟跳变后会继续运行，不再因为其所有权心跳看起来已过期而自行重启。 (#170790) 感谢 @AnvinaLI、@sgh6688、@waynegault 和 @RomneyDa。 - Gateway 关闭和重启不再因卡住的转录工作进程或正在处理的会话生命周期事件而挂起。 (#170493, #170555) 感谢 @Oldrich333。 - Tlon 群组私信不再将其他参与者视为所有者，从而封堵了冒充所有者的途径。 (#165801) 感谢 @eleqtrizit。 - 当网站等待通行密钥时，无头浏览器页面仍可响应点击。 (#170857) 感谢 @trukhinyuri。 - 手动执行 `/compact` 时，会先等待当前运行完成再进行压缩，而不是将其中止并丢弃待处理的请求。 (#166163) 感谢 @holny 和 @alexph-dev。 ### 变更 - 针对 2026.10.3 的稳定性补丁，不包含新功能或配置变更。感谢 @RomneyDa。 ### 修复 - Gateway：在长时间的带回复标签流式响应期间保持响应；引用工具调用 XML 的长回复也不再对每个 token 都重新解析 Markdown。 (#166782, #171573) 感谢 @boeingchoco。 - Gateway：被阻止的持久化上下文引擎轮次仅记录一次，而不再每次运行都记录。 (#167595) 感谢 @jalehman。 - 控制界面：延迟的应用心跳不再强制触发重新连接。 (#171253) - Gateway：在休眠和系统时钟变更后恢复状态所有权，并允许从经过验证的 macOS 外部终端执行 `openclaw gateway restart`。 (#170790, #170354) 感谢 @AnvinaLI、@sgh6688、@waynegault 和 @RomneyDa。 - Gateway：限制等待转录工作进程关闭的时间，并在关闭期间等待会话生命周期事件发布完成。 (#170493, #170555) 感谢 @Oldrich333。 - Gateway：随 Gateway 启动已启用的独立插件文件；当托管服务设置进程级堆标志时，继续强制执行工作进程的堆限制。 (#171330, #166581) 感谢 @holgergruenhagen、@valkyriweb、@xydigitLybnnnn、@goslingmanagment、@waynegault 和 @obviyus。 - Agent：已启动的插件轮次不再因写入者声明错误而失败；Claude CLI 会话也不再跨消息路由产生分叉历史。 (#170077, #167241) 感谢 @cmatrx0。 - Agent：手动压缩会先等待当前运行完成，而不是将其中止。 (#166163) 感谢 @holny 和 @alexph-dev。 - OpenAI：推理模型在 api.openai.com Completions 路由上的工具轮次不再以 400 错误失败。 (#166182) 感谢 @obviyus 和 @AsTutoAI。 - 更新：捕获快照期间不再将 Agent 数据库标记为已更改；成功摘要不再把已经完成的插件数据/设置升级重复列为待处理；元数据清单在进度输出产生背压时仍会继续运行。 (#170351, #170413, #168493) 感谢 @DonnieFi、@RomneyDa 和 @vincentkoc。 - 更新：较慢的主机准入过程不再占用数据库写入器并干扰 Gateway 工作；临时执行 Doctor 维护时仍会继续报告进度；快照失败现在会显示准确的标题和恢复建议；Linux 更新可以清理由受保护的 systemd 用户管理器管理的废弃运行时目录。 (#171493, #171454, #171457, #171488, #170783, #166335) 感谢 @RomneyDa、@DonnieFi 和 @vincentkoc。 - 更新：候选版本验证不再放大线上安装中的私有 SQLite 快照；旧版驱动程序不再读取由候选版本迁移后的状态，并会清除过期的重启判定；可选的 cron 检查或快照清理失败不再导致更新停滞。 (#167451, #170130, #170754) 感谢 @angeliti999 和 @RomneyDa。 - 更新：在较慢的主机上，`openclaw update repair` 轮次不再于运行工具之前超时；嵌套权限检查会复用当前状态快照，而不是再次复制数据库。 (#166847) - Doctor：更新不再拒绝未被引用且已停用的 OAuth sidecar；离线状态修复现在适用于由应用所有的 Gateway。 (#165420, #170768) 感谢 @obviyus 和 @RomneyDa。 - Tailscale：启动中断时会停止其 serve 进程；当 tailnet 拒绝 Serve 时，本地访问仍然可用；Doctor 会检查已配置的 Tailscale 启动前置条件。 (#167514, #171509, #166947) 感谢 @pandysp 和 @RomneyDa。 - macOS：应用恢复会保留兼容且更新的 Gateway，而不是将其降级；修复流程会接受已经在进行中的、经过验证的 LaunchAgent bootstrap。 (#170766, #170740) 感谢 @RomneyDa。 - 会话：`/tmp` 和 `/private/tmp` 等价的 POSIX 路径别名不再导致频道重启。 (#166462) 感谢 @ericcaiwx-star。 - MCP：当授权服务器注册的是不带端口的回环重定向 URI 时，OAuth 登录可以正常完成。 (#170876) 感谢 @9fw2pq8sgb-art。 - 浏览器：当网站等待通行密钥时，无头页面可以接受点击。 (#170857) 感谢 @trukhinyuri。 - 控制界面：更新后的聊天可以通过当前提供的文档恢复。 (#168941) - Tlon：绝不会将群组私信的发送者视为所有者。 (#165801) 感谢 @eleqtrizit。 - Telegram：轮询工作进程现在可在源码构建和软件包构建中正确解析。 (#154286) 感谢 @xydt-juyaohui 和 @markfietje。 - Discord：语音变更后，Agent 咨询仍可继续工作。 (#171029) 感谢 @ericcaiwx-star 和 @brainmonger。 - 飞书：配置热重载不再遗留失去关联的对话绑定。 (#169226) 感谢 @ruel225、@junniar 和 @obviyus。 - IRC：服务器转发较长的非 ASCII 回复时，不再丢失这些回复。 (#159730) 感谢 @rodricksz4h5。 - 发布：插件 npm 发布现在可以容忍重复的制品分页条目；使用托管运行器凭据发起自动请求后会触发 Linux 构建；ratchet 检查可以读取较大的 Git 基线。 (#171044, #167087, #167237, #164743) 感谢 @RomneyDa 和 @shakkernerd。 ### 完整贡献记录此审计记录涵盖完整的 v2026.10.3..d58dd3ceef67f10eab31d93387d2c90866b3ec93 历史：范围内 61 个 PR + 0 个保留的仅种子 PR = 61 个唯一 PR。生成清单还提供了直接提交作为编辑输入；上方的分组说明优先突出对用户的影响。 #### 拉取请求 - **PR #166581** 关联 #157575, #157630。感谢 @valkyriweb、@xydigitLybnnnn、@goslingmanagment 和 @waynegault。 - **PR #164743** 关联 #164741。感谢 @shakkernerd。 - **PR #166163** 关联 #166038。感谢 @holny 和 @alexph-dev。 - **PR #166182** 关联 #166125。感谢 @obviyus 和 @AsTutoAI。 - **PR #167087** 感谢 @RomneyDa。 - **PR #167241** 关联 #167077。感谢 @cmatrx0。 - **PR #168493** 感谢 @vincentkoc。 - **PR #168941** - **PR #169226** 关联 #169190。感谢 @ruel225、@obviyus 和 @junniar。 - **PR #170351** 感谢 @DonnieFi 和 @RomneyDa。 - **PR #171029** 关联 #171013。感谢 @ericcaiwx-star 和 @brainmonger。 - **PR #171044** 感谢 @RomneyDa。 - **PR #171330** 感谢 @holgergruenhagen 和 @obviyus。 - **PR #166462** 关联 #166456。感谢 @ericcaiwx-star。 - **PR #170857** 感谢 @trukhinyuri。 - **PR #170413** 关联 #170334。感谢 @RomneyDa 和 @DonnieFi。 - **PR #170702** 感谢 @RomneyDa。 - **PR #170790** 关联 #169829, #170525, #170597。感谢 @AnvinaLI、@sgh6688 和 @waynegault。 - **PR #170354** 感谢 @RomneyDa。 - **PR #165801** 感谢 @eleqtrizit。 - **PR #170876** 关联 #170848。感谢 @9fw2pq8sgb-art。 - **PR #159730** 感谢 @rodricksz4h5。 - **PR #154286** 关联 #154180。感谢 @xydt-juyaohui 和 @markfietje。 - **PR #170077** - **PR #170493** 关联 #169777。感谢 @Oldrich333。 - **PR #170555** - **PR #167237** - **PR #171493** 关联 #169260。感谢 @RomneyDa 和 @DonnieFi。 - **PR #171457** 关联 #171408。感谢 @RomneyDa 和 @DonnieFi。 - **PR #170783** - **PR #171454** 关联 #171409。感谢 @RomneyDa 和 @DonnieFi。 - **PR #166335** 感谢 @vincentkoc。 - **PR #171488** 关联 #171410。感谢 @RomneyDa 和 @DonnieFi。 - **PR #170766** 感谢 @RomneyDa。 - **PR #170740** 感谢 @RomneyDa。 - **PR #167514** 关联 #167436。感谢 @pandysp。 - **PR #171509** 感谢 @RomneyDa。 - **PR #166947** 感谢 @RomneyDa。 - **PR #167451** - **PR #170130** 关联 #169422。感谢 @angeliti999。 - **PR #170754** 感谢 @RomneyDa。 - **PR #165420** 感谢 @obviyus。 - **PR #170768** 感谢 @RomneyDa。 - **PR #160056** 关联 #159926, #159927。感谢 @oscarsixsecllc。 - **PR #171715** 感谢 @RomneyDa。 - **PR #171747** 感谢 @RomneyDa。 - **PR #163177** 感谢 @RomneyDa。 - **PR #171928** 感谢 @RomneyDa。 - **PR #166847** - **PR #166782** 关联 #166781。感谢 @boeingchoco。 - **PR #171573** 关联 #171363。感谢 @boeingchoco。 - **PR #167595** 感谢 @jalehman。 - **PR #171253** - **PR #172666** 感谢 @RomneyDa。 - **PR #166218** 感谢 @RomneyDa。 - **PR #161543** - **PR #168922** - **PR #172038** 感谢 @vincentkoc。 - **PR #172596** 感谢 @RomneyDa。 - **PR #171952** 感谢 @RomneyDa。 - **PR #172786** 感谢 @RomneyDa。 ### 发布验证 - npm 软件包：https://www.npmjs.com/package/openclaw/v/2026.10.4 - 注册表 tarball：https://registry.npmjs.org/openclaw/-/openclaw-2026.10.4.tgz - 完整性校验：`sha512-+FH0StZF1tlTazM7JJGY6JePeJmhFNSRByi2Q3jXPRiLO7o4dJh2xa9Vy4Dk8Cd2ic8B7Zkf5NfEaCCWUkgqnQ==` - 发布 SHA：`383c124cc32ffee3f8e56f549b88da94d269a4af` - 完整发布 CI 报告：https://github.com/openclaw/releases/blob/main/evidence/2026.10.4/release-evidence.md - 发布流程：https://github.com/openclaw/openclaw/actions/runs/38827593754 - npm 预检：https://github.com/openclaw/openclaw/actions/runs/38775953219 - 完整发布验证：https://github.com/openclaw/openclaw/actions/runs/38774938703 - 插件 npm 发布：https://github.com/openclaw/openclaw/actions/runs/38828956361 - 插件 ClawHub 发布：没有常规 OIDC 候选项 - 插件 ClawHub bootstrap：不需要 - OpenClaw npm 发布：https://github.com/openclaw/openclaw/actions/runs/38824408033/attempts/1 - npm Telegram beta 端到端测试：未提供 - Android APK：已跳过，因为 apps/android/version.json 为 2026.8.2，而发布序列为 2026.10.4；请在下一个标签发布前运行 `pnpm android:version:pin -- --from-gateway`。

## 2026.10.4 ### Highlights - The Gateway keeps running after the computer sleeps or the system clock jumps, instead of restarting itself because its ownership heartbeat looked stale. (#170790) Thanks @AnvinaLI, @sgh6688, @waynegault, and @RomneyDa. - Gateway shutdown and restart no longer hang on a stalled transcript worker or in-flight session lifecycle events. (#170493, #170555) Thanks @Oldrich333. - Tlon group DMs no longer treat other participants as the owner, closing an owner-impersonation path. (#165801) Thanks @eleqtrizit. - Headless browser pages keep responding to clicks while a site waits for a passkey. (#170857) Thanks @trukhinyuri. - Manual `/compact` settles the active run before compacting instead of aborting it and dropping the pending request. (#166163) Thanks @holny and @alexph-dev. ### Changes - Stability patch for 2026.10.3 with no new features or configuration changes. Thanks @RomneyDa. ### Fixes - Gateway: stays responsive during long reply-tagged streams, and long replies that quote tool-call XML no longer re-parse Markdown on every token. (#166782, #171573) Thanks @boeingchoco. - Gateway: blocked durable context-engine turns are logged once instead of on every run. (#167595) Thanks @jalehman. - Control UI: delayed application heartbeats no longer force a reconnect. (#171253) - Gateway: recover state ownership after sleep and wall-clock changes, and allow `openclaw gateway restart` from verified external macOS terminals. (#170790, #170354) Thanks @AnvinaLI, @sgh6688, @waynegault, and @RomneyDa. - Gateway: bound transcript-worker shutdown waits and wait for session lifecycle publication during shutdown. (#170493, #170555) Thanks @Oldrich333. - Gateway: start enabled standalone plugin files with the Gateway, and keep worker heap limits enforced when the managed service sets a process-wide heap flag. (#171330, #166581) Thanks @holgergruenhagen, @valkyriweb, @xydigitLybnnnn, @goslingmanagment, @waynegault, and @obviyus. - Agents: launched plugin turns no longer fail with writer-claim errors, and Claude CLI sessions no longer fork history across message routes. (#170077, #167241) Thanks @cmatrx0. - Agents: manual compaction settles the active run instead of aborting it. (#166163) Thanks @holny and @alexph-dev. - OpenAI: tool turns for reasoning models on api.openai.com Completions routes no longer fail with a 400. (#166182) Thanks @obviyus and @AsTutoAI. - Updates: agent databases are no longer flagged as changed during snapshot capture, the success summary stops repeating settled plugin data/settings upgrades as pending, and metadata inventory keeps running under progress-output backpressure. (#170351, #170413, #168493) Thanks @DonnieFi, @RomneyDa, and @vincentkoc. - Updates: slow host admission no longer holds the database writer and disrupts Gateway work, progress keeps reporting through temporary Doctor maintenance, snapshot failures get an accurate headline and recovery advice, and Linux updates can clean up abandoned runtime directories under protected systemd user managers. (#171493, #171454, #171457, #171488, #170783, #166335) Thanks @RomneyDa, @DonnieFi, and @vincentkoc. - Updates: candidate validation no longer amplifies private SQLite snapshots on live installs, older drivers stop reading candidate-migrated state and stale restart verdicts clear, and optional cron inspection or snapshot cleanup failures no longer stall updates. (#167451, #170130, #170754) Thanks @angeliti999 and @RomneyDa. - Updates: `openclaw update repair` turns no longer time out before running tools on slower hosts; nested authority checks reuse the current state snapshot instead of copying the database again. (#166847) - Doctor: updates no longer refuse unreferenced retired OAuth sidecars, and offline state repair works for app-owned Gateways. (#165420, #170768) Thanks @obviyus and @RomneyDa. - Tailscale: an interrupted start stops its serve process, local access stays available when the tailnet denies Serve, and Doctor checks configured Tailscale startup prerequisites. (#167514, #171509, #166947) Thanks @pandysp and @RomneyDa. - macOS: app recovery keeps compatible newer Gateways instead of downgrading them, and repair accepts a verified LaunchAgent bootstrap that is already in progress. (#170766, #170740) Thanks @RomneyDa. - Sessions: equivalent POSIX path aliases such as `/tmp` and `/private/tmp` no longer restart channels. (#166462) Thanks @ericcaiwx-star. - MCP: OAuth login completes when the authorization server registers loopback redirect URIs without a port. (#170876) Thanks @9fw2pq8sgb-art. - Browser: headless pages accept clicks while a site waits for a passkey. (#170857) Thanks @trukhinyuri. - Control UI: updated chats recover through the serving document. (#168941) - Tlon: never treat group DM authors as the owner. (#165801) Thanks @eleqtrizit. - Telegram: polling workers resolve in both source and package builds. (#154286) Thanks @xydt-juyaohui and @markfietje. - Discord: agent consults keep working after voice changes. (#171029) Thanks @ericcaiwx-star and @brainmonger. - Feishu: config hot-reload no longer orphans conversation bindings. (#169226) Thanks @ruel225, @junniar, and @obviyus. - IRC: long non-ASCII replies are no longer lost when the server relays them. (#159730) Thanks @rodricksz4h5. - Release: plugin npm publish tolerates repeated artifact pagination entries, Linux builds trigger after automatic requests with hosted-runner credentials, and ratchet checks read large Git baselines. (#171044, #167087, #167237, #164743) Thanks @RomneyDa and @shakkernerd. ### Complete contribution record This audited record covers the complete v2026.10.3..d58dd3ceef67f10eab31d93387d2c90866b3ec93 history: 61 in-range PRs + 0 retained seed-only PRs = 61 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact. #### Pull requests - **PR #166581** Related #157575, #157630. Thanks @valkyriweb and @xydigitLybnnnn and @goslingmanagment and @waynegault. - **PR #164743** Related #164741. Thanks @shakkernerd. - **PR #166163** Related #166038. Thanks @holny and @alexph-dev. - **PR #166182** Related #166125. Thanks @obviyus and @AsTutoAI. - **PR #167087** Thanks @RomneyDa. - **PR #167241** Related #167077. Thanks @cmatrx0. - **PR #168493** Thanks @vincentkoc. - **PR #168941** - **PR #169226** Related #169190. Thanks @ruel225 and @obviyus and @junniar. - **PR #170351** Thanks @DonnieFi and @RomneyDa. - **PR #171029** Related #171013. Thanks @ericcaiwx-star and @brainmonger. - **PR #171044** Thanks @RomneyDa. - **PR #171330** Thanks @holgergruenhagen and @obviyus. - **PR #166462** Related #166456. Thanks @ericcaiwx-star. - **PR #170857** Thanks @trukhinyuri. - **PR #170413** Related #170334. Thanks @RomneyDa and @DonnieFi. - **PR #170702** Thanks @RomneyDa. - **PR #170790** Related #169829, #170525, #170597. Thanks @AnvinaLI and @sgh6688 and @waynegault. - **PR #170354** Thanks @RomneyDa. - **PR #165801** Thanks @eleqtrizit. - **PR #170876** Related #170848. Thanks @9fw2pq8sgb-art. - **PR #159730** Thanks @rodricksz4h5. - **PR #154286** Related #154180. Thanks @xydt-juyaohui and @markfietje. - **PR #170077** - **PR #170493** Related #169777. Thanks @Oldrich333. - **PR #170555** - **PR #167237** - **PR #171493** Related #169260. Thanks @RomneyDa and @DonnieFi. - **PR #171457** Related #171408. Thanks @RomneyDa and @DonnieFi. - **PR #170783** - **PR #171454** Related #171409. Thanks @RomneyDa and @DonnieFi. - **PR #166335** Thanks @vincentkoc. - **PR #171488** Related #171410. Thanks @RomneyDa and @DonnieFi. - **PR #170766** Thanks @RomneyDa. - **PR #170740** Thanks @RomneyDa. - **PR #167514** Related #167436. Thanks @pandysp. - **PR #171509** Thanks @RomneyDa. - **PR #166947** Thanks @RomneyDa. - **PR #167451** - **PR #170130** Related #169422. Thanks @angeliti999. - **PR #170754** Thanks @RomneyDa. - **PR #165420** Thanks @obviyus. - **PR #170768** Thanks @RomneyDa. - **PR #160056** Related #159926, #159927. Thanks @oscarsixsecllc. - **PR #171715** Thanks @RomneyDa. - **PR #171747** Thanks @RomneyDa. - **PR #163177** Thanks @RomneyDa. - **PR #171928** Thanks @RomneyDa. - **PR #166847** - **PR #166782** Related #166781. Thanks @boeingchoco. - **PR #171573** Related #171363. Thanks @boeingchoco. - **PR #167595** Thanks @jalehman. - **PR #171253** - **PR #172666** Thanks @RomneyDa. - **PR #166218** Thanks @RomneyDa. - **PR #161543** - **PR #168922** - **PR #172038** Thanks @vincentkoc. - **PR #172596** Thanks @RomneyDa. - **PR #171952** Thanks @RomneyDa. - **PR #172786** Thanks @RomneyDa. ### Release verification - npm package: https://www.npmjs.com/package/openclaw/v/2026.10.4 - registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.10.4.tgz - integrity: `sha512-+FH0StZF1tlTazM7JJGY6JePeJmhFNSRByi2Q3jXPRiLO7o4dJh2xa9Vy4Dk8Cd2ic8B7Zkf5NfEaCCWUkgqnQ==` - release SHA: `383c124cc32ffee3f8e56f549b88da94d269a4af` - full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.10.4/release-evidence.md - release publish: https://github.com/openclaw/openclaw/actions/runs/38827593754 - npm preflight: https://github.com/openclaw/openclaw/actions/runs/38775953219 - full release validation: https://github.com/openclaw/openclaw/actions/runs/38774938703 - plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/38828956361 - plugin ClawHub publish: no normal OIDC candidates - plugin ClawHub bootstrap: not needed - OpenClaw npm publish: https://github.com/openclaw/openclaw/actions/runs/38824408033/attempts/1 - npm Telegram beta E2E: not supplied - Android APK: skipped — apps/android/version.json is 2026.8.2, release train is 2026.10.4; run pnpm android:version:pin -- --from-gateway before the next tag.