OpenClaw v2026.10.10-beta.4

## 2026.10.10-beta.4 ### 亮点 ### 变更 ### 修复 - 自动化：对于明确的同一会话定时后续任务，保留已认证操作员的权限，包括一次性 `next_check` 重新启用，同时继续保留角色、会话、取消、目标和工具策略撤销边界。（#176422）感谢 @RomneyDa。 - 网关安全：在启动时以及配置重新加载期间，避免将环境变量引用的 `hooks.token` 传递到代理主机执行和 CLI 子进程环境中，同时保留显式的单命令覆盖设置。（#179199）感谢 @VACInc 和 @RomneyDa。 - Memory Wiki：OKF 概念页面重新导入，或从生产者包中移除时，保留人工编写的 Notes，包括生产者内容发生变化，以及没有标记 Notes 插槽的旧页面。（#175707、#179657；相关 #175700）感谢 @YangManBOBO 和 @RomneyDa。 - Claude CLI：当子代理完成任务或频道轮次在由 Control UI 启动的会话中运行时，保留原生 Claude 会话及其上下文，而不是每次都从保存的历史记录重新初始化。（#178955；修复 #178953）感谢 @Marvinthebored 和 @RomneyDa。 - 模型目录：在判断模型是否就绪时，遵循已配置的主账户绑定，因此当选定的令牌配置文件已准备就绪时，原生 Claude CLI 模型不再显示为缺少身份验证。（#178522；相关 #178502）感谢 @ericcaiwx-star、@RomneyDa 和 @eduardonunesfreire-rgb。 - 备份与恢复：清理快照时保留受支持的旧版执行审批白名单，而不是将其替换为全部拒绝；格式错误的策略仍保持故障关闭。（#164297）感谢 @wangmiao0668000666、@RomneyDa、@shanselman、@dor-sr、@cristianoc 和 @brucemccurdy。 - Linux 伴侣应用：跨重启持久化保存的每个 Gateway 面板的私有浏览器身份，同时删除已删除 Gateway 的存储数据，使重新添加的端点作为新设备进行配对。（#158908）感谢 @dor-sr、@RomneyDa、@shanselman、@wangmiao0668000666 和 @brucemccurdy。 - 代理数据库生命周期：当维护操作或 PostgreSQL 打开操作被拒绝时，让对等读取者和借用者保持存活；保留原始拒绝原因和干净重启封印；当工作进程世代消失时，保留分发前的恢复行为。（#175987、#163258、#179320）感谢 @RomneyDa、@shanselman、@dor-sr、@wangmiao0668000666、@brucemccurdy、@goutamadwant 和 @hawkit。 - macOS 内置 Gateway：显示实际安装的 Gateway 版本；让失败或不完整的恢复操作仍可继续处理；并防止过期或待处理的更新收据阻塞有效修复。（#181389）感谢 @shanselman、@RomneyDa、@dor-sr、@wangmiao0668000666 和 @brucemccurdy。 - 模型刷新：允许显式的目录刷新通过 HTTP 获取使用现有的扩展发现预算，同时让普通准备流程仍受限于既定范围。（#177313）感谢 @jlapenna 和 @RomneyDa。 - Webhook 和定时脚本：将受信任的即时生产者归类为事件；保留每个 webhook 自身的自动化范围；并在执行前刷新已释放的脚本钩子，而不重复执行已完成的效果。（#172775、#177825、#178904）感谢 @RomneyDa、@jlapenna 和 @jalehman。 - 运行时安全：将修补后的内置运行时回移植到 2026.10.10 系列。（#181074）感谢 @RomneyDa 和 @joshavant。 - 更新最终化：当已识别的延迟重启健康检查或旧版包装器维护步骤失败时，只要经过验证的目标仍然健康，就将其保持为成功；权限、数据风险、延迟接纳和未知错误仍视为致命错误。（#181166；修复 #181020）感谢 @najef1979-code。 - 软件包更新恢复：自动完成已验证的中断发布，或清理未触碰的准备项；保留已安装候选版本和原始 Gateway 恢复证据；并继续隔离实时更新所有权和重启权限。（#181307；修复 #181235）感谢 @agroman1993。 - CLI 配置写入及运行中的 Gateway 设置：`openclaw config set`、`config unset` 和 `openclaw setup` 现在会通过运行中的 Gateway，以一次 `config.patch` 发送变更，而不再拒绝操作；其结果与离线写入一致。关闭重新加载时不会重启；当 Gateway 接受重启时会返回成功确认，因此 Windows 伴侣应用的设置流程得以恢复。（#182951、#184194、#184392、#184532、#185109）感谢 @RomneyDa。 - Codex 原生子代理：在原生子代理完成、被中断或完成后续任务后，解除对父级回复的阻塞；停止重新唤起无法投递的子代理完成结果；在 Gateway 重启后正确重放已完成的孙级任务；在完成轮次之间保留原生工具声明；并允许在父线程复用后成功执行 Stop。（#173018、#175246、#177577、#179050、#179099、#183286、#181475；修复 #178395）感谢 @quqi1599、@Stronggenetics、@linancn、@mmartoccia、@wtfichigo、@Marvinthebored 和 @RomneyDa。 - Claude CLI：停止在子任务完成后发生提示缓存前缀抖动。（#172026）感谢 @Marvinthebored 和 @VACInc。 - 定时运行：在回答前等待工具结果，使 cron 运行摘要报告真实结果，而不是过早回复“无结果”。（#179690）感谢 @obviyus。 - 代理重启恢复：为被终止的运行释放重启恢复隔离栏，使其对话不再保持阻塞。（#181992；修复 #181952）感谢 @najef1979-code。 - Windows 执行：当 Gateway 作为 S4U 计划任务运行且系统安装了 Store PowerShell 时，恢复命令执行功能。（#182898；修复 #182652）感谢 @RomneyDa 和 @tre1d。 - Kimi：为 Kimi K3.1 Pro 提供 K3 思考和视频控制功能。（#181923）感谢 @obviyus。 ### 完整贡献记录此审计记录涵盖完整的 v2026.10.10-beta.3..ed2b311521579d51523c9e31f1c326310e2c2922 历史：范围内 PR 60 个 + 保留的仅种子 PR 0 个 = 唯一 PR 共 60 个。生成清单还提供了直接提交记录作为编辑输入；上面的分组说明优先介绍对用户的影响。 #### Pull requests - **PR #175707** 相关 #175700。感谢 @YangManBOBO 和 @RomneyDa。 - **PR #178522** 相关 #178502。感谢 @ericcaiwx-star、@RomneyDa 和 @eduardonunesfreire-rgb。 - **PR #179199** 感谢 @VACInc 和 @RomneyDa。 - **PR #179657** 感谢 @RomneyDa。 - **PR #179933** 感谢 @RomneyDa。 - **PR #179951** 感谢 @RomneyDa。 - **PR #179987** 感谢 @RomneyDa。 - **PR #180027** 感谢 @RomneyDa。 - **PR #181447** 感谢 @RomneyDa。 - **PR #181074** 感谢 @RomneyDa 和 @joshavant。 - **PR #164297** 相关 #164146、#156945。感谢 @wangmiao0668000666、@RomneyDa、@shanselman、@dor-sr、@cristianoc 和 @brucemccurdy。 - **PR #158908** 相关 #156945。感谢 @dor-sr、@RomneyDa、@shanselman、@wangmiao0668000666 和 @brucemccurdy。 - **PR #175987** 相关 #156945。感谢 @RomneyDa、@shanselman、@dor-sr、@wangmiao0668000666 和 @brucemccurdy。 - **PR #179320** 相关 #156945。感谢 @RomneyDa、@shanselman、@dor-sr、@wangmiao0668000666 和 @brucemccurdy。 - **PR #181389** 相关 #156945。感谢 @shanselman、@RomneyDa、@dor-sr、@wangmiao0668000666 和 @brucemccurdy。 - **PR #163258** 相关 #163151、#156945。感谢 @goutamadwant、@RomneyDa、@shanselman、@dor-sr、@wangmiao0668000666、@hawkit 和 @brucemccurdy。 - **PR #180250** 感谢 @RomneyDa。 - **PR #180238** 感谢 @RomneyDa。 - **PR #180257** 感谢 @RomneyDa。 - **PR #180245** 感谢 @RomneyDa。 - **PR #180249** 感谢 @RomneyDa。 - **PR #179085** 感谢 @RomneyDa。 - **PR #179097** 感谢 @RomneyDa。 - **PR #179104** 感谢 @RomneyDa。 - **PR #179125** 感谢 @RomneyDa。 - **PR #179077** 感谢 @RomneyDa。 - **PR #179112** 感谢 @RomneyDa。 - **PR #179109** 感谢 @RomneyDa。 - **PR #179083** 感谢 @RomneyDa。 - **PR #179093** 感谢 @RomneyDa。 - **PR #179079** 感谢 @RomneyDa。 - **PR #177313** 感谢 @jlapenna。 - **PR #172775** 感谢 @RomneyDa。 - **PR #177825** 感谢 @jlapenna。 - **PR #178904** 感谢 @jalehman。 - **PR #181166** 相关 #181020。感谢 @najef1979-code。 - **PR #181307** 相关 #181235。感谢 @agroman1993。 - **PR #180270** 感谢 @RomneyDa。 - **PR #181866** 感谢 @RomneyDa。 - **PR #178955** 相关 #178953。感谢 @Marvinthebored 和 @RomneyDa。 - **PR #180396** 感谢 @shakkernerd。 - **PR #182047** 感谢 @RomneyDa。 - **PR #179690** 感谢 @obviyus。 - **PR #182114** 感谢 @RomneyDa。 - **PR #182951** 感谢 @RomneyDa。 - **PR #172026** 感谢 @Marvinthebored 和 @VACInc。 - **PR #182898** 相关 #182652。感谢 @RomneyDa 和 @tre1d。 - **PR #181992** 相关 #181952。感谢 @najef1979-code。 - **PR #183286** 感谢 @Marvinthebored。 - **PR #181475** 感谢 @RomneyDa。 - **PR #181923** 感谢 @obviyus。 - **PR #173018** 感谢 @quqi1599 和 @Stronggenetics。 - **PR #175246** 感谢 @quqi1599 和 @Stronggenetics。 - **PR #179050** 相关 #178395。感谢 @mmartoccia。 - **PR #179099** 感谢 @wtfichigo。 - **PR #177577** 感谢 @linancn。 - **PR #184194** 感谢 @RomneyDa。 - **PR #184392** 感谢 @RomneyDa。 - **PR #184532** 感谢 @RomneyDa。 - **PR #185109** 感谢 @RomneyDa。 ### 发布验证 - npm 软件包：https://www.npmjs.com/package/openclaw/v/2026.10.10-beta.4 - registry tarball：https://registry.npmjs.org/openclaw/-/openclaw-2026.10.10-beta.4.tgz - 完整性校验：`sha512-SvFneXtEsOy3BXtGIdvLgsAEuY/ElqR2iqD4XPaAlqOR6YIdpkoonY9FWCYzkwtPqbNw5ruR4GAkgJRbcQU2Lw==` - 发布 SHA：`5a94eab2146e558b3ebcd41cb174fc5adc469c2a` - 完整发布 CI 报告：https://github.com/openclaw/releases/blob/main/evidence/2026.10.10-beta.4/release-evidence.md - 发布流程：https://github.com/openclaw/openclaw/actions/runs/40453877500 - npm 预检：https://github.com/openclaw/openclaw/actions/runs/40437831425 - 完整发布验证：https://github.com/openclaw/openclaw/actions/runs/40437065455 - 插件 npm 发布：https://github.com/openclaw/openclaw/actions/runs/40454694030 - 插件 ClawHub 发布：没有常规 OIDC 候选项 - 插件 ClawHub 引导：不需要 - OpenClaw npm 发布：https://github.com/openclaw/openclaw/actions/runs/40451197520/attempts/1 - npm Telegram beta E2E：未提供

## 2026.10.10-beta.4 ### Highlights ### Changes ### Fixes - Automations: preserve authenticated operator authority for explicit same-conversation scheduled follow-ups, including one-shot `next_check` rearming, while retaining role, session, cancellation, target, and tool-policy revocation boundaries. (#176422) Thanks @RomneyDa. - Gateway security: keep an environment-referenced `hooks.token` out of agent host-exec and CLI child environments at startup and across config reloads, while preserving explicit per-command overrides. (#179199) Thanks @VACInc and @RomneyDa. - Memory Wiki: preserve human-authored Notes when OKF concept pages are re-imported or removed from the producer bundle, including changed producer content and legacy pages without a marked Notes slot. (#175707, #179657; related #175700) Thanks @YangManBOBO and @RomneyDa. - Claude CLI: keep the native Claude session and its context when subagent completions or channel turns run in a Control UI-started session, instead of reseeding from saved history each time. (#178955; fixes #178953) Thanks @Marvinthebored and @RomneyDa. - Model catalogs: honor a configured primary account pin when deciding model readiness, so native Claude CLI models no longer appear as missing auth when the selected token profile is ready. (#178522; related #178502) Thanks @ericcaiwx-star, @RomneyDa, and @eduardonunesfreire-rgb. - Backup and restore: preserve supported legacy exec-approval allowlists when sanitizing snapshots instead of replacing them with deny-all; malformed policies remain fail-closed. (#164297) Thanks @wangmiao0668000666, @RomneyDa, @shanselman, @dor-sr, @cristianoc, and @brucemccurdy. - Linux companion: persist each saved Gateway dashboard's private browser identity across restarts, while removing storage for deleted Gateways so re-added endpoints pair as fresh devices. (#158908) Thanks @dor-sr, @RomneyDa, @shanselman, @wangmiao0668000666, and @brucemccurdy. - Agent database lifecycle: keep peer readers and borrowers alive when maintenance or PostgreSQL opening is refused, preserve the original refusal and clean-restart seal, and retain pre-dispatch recovery behavior when a worker generation disappears. (#175987, #163258, #179320) Thanks @RomneyDa, @shanselman, @dor-sr, @wangmiao0668000666, @brucemccurdy, @goutamadwant, and @hawkit. - macOS bundled Gateway: show the actual installed Gateway version, keep failed or incomplete recovery actionable, and prevent stale or pending update receipts from blocking a valid repair. (#181389) Thanks @shanselman, @RomneyDa, @dor-sr, @wangmiao0668000666, and @brucemccurdy. - Model refresh: let explicit catalog refreshes use their existing extended discovery budget through HTTP acquisition while ordinary preparation remains bounded. (#177313) Thanks @jlapenna and @RomneyDa. - Webhooks and scheduled scripts: classify trusted immediate producers as events, retain each webhook's own automation scope, and refresh disposed script hooks before execution without replaying completed effects. (#172775, #177825, #178904) Thanks @RomneyDa, @jlapenna, and @jalehman. - Runtime security: backport patched embedded runtimes to the 2026.10.10 line. (#181074) Thanks @RomneyDa and @joshavant. - Update finalization: keep a verified healthy target successful when a recognized late restart-health or legacy-wrapper maintenance step fails, while authority, data-at-risk, deferred-admission, and unknown failures remain fatal. (#181166; fixes #181020) Thanks @najef1979-code. - Package update recovery: automatically settle verified interrupted publications or retire untouched preparations, preserve the installed candidate and original Gateway recovery evidence, and keep live update ownership and restart authority fenced. (#181307; fixes #181235) Thanks @agroman1993. - CLI config writes and setup with a running Gateway: `openclaw config set`, `config unset`, and `openclaw setup` now send their change through the running Gateway as one `config.patch` instead of refusing, with the same result as an offline write, no restart while reload is off, and a success acknowledgement when the Gateway accepts a restart, so Windows companion setup completes again. (#182951, #184194, #184392, #184532, #185109) Thanks @RomneyDa. - Codex native subagents: unblock parent replies after native children finish, are interrupted, or complete follow-ups; stop resurrecting undeliverable child completions; replay completed grandchildren correctly after Gateway restarts; keep native tool declarations across completion turns; and let Stop succeed after parent thread reuse. (#173018, #175246, #177577, #179050, #179099, #183286, #181475; fixes #178395) Thanks @quqi1599, @Stronggenetics, @linancn, @mmartoccia, @wtfichigo, @Marvinthebored, and @RomneyDa. - Claude CLI: stop prompt-cache prefix churn after a child completion. (#172026) Thanks @Marvinthebored and @VACInc. - Scheduled runs: wait for tool results before answering, so cron run summaries report the real result instead of a premature "no results" reply. (#179690) Thanks @obviyus. - Agent restart recovery: release restart-recovery fences for killed runs so their conversations no longer stay blocked. (#181992; fixes #181952) Thanks @najef1979-code. - Windows exec: restore command execution for Gateways running as an S4U scheduled task when Store PowerShell is installed. (#182898; fixes #182652) Thanks @RomneyDa and @tre1d. - Kimi: give Kimi K3.1 Pro the K3 thinking and video controls. (#181923) Thanks @obviyus. ### Complete contribution record This audited record covers the complete v2026.10.10-beta.3..ed2b311521579d51523c9e31f1c326310e2c2922 history: 60 in-range PRs + 0 retained seed-only PRs = 60 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact. #### Pull requests - **PR #175707** Related #175700. Thanks @YangManBOBO and @RomneyDa. - **PR #178522** Related #178502. Thanks @ericcaiwx-star and @RomneyDa and @eduardonunesfreire-rgb. - **PR #179199** Thanks @VACInc and @RomneyDa. - **PR #179657** Thanks @RomneyDa. - **PR #179933** Thanks @RomneyDa. - **PR #179951** Thanks @RomneyDa. - **PR #179987** Thanks @RomneyDa. - **PR #180027** Thanks @RomneyDa. - **PR #181447** Thanks @RomneyDa. - **PR #181074** Thanks @RomneyDa and @joshavant. - **PR #164297** Related #164146, #156945. Thanks @wangmiao0668000666 and @RomneyDa and @shanselman and @dor-sr and @cristianoc and @brucemccurdy. - **PR #158908** Related #156945. Thanks @dor-sr and @RomneyDa and @shanselman and @wangmiao0668000666 and @brucemccurdy. - **PR #175987** Related #156945. Thanks @RomneyDa and @shanselman and @dor-sr and @wangmiao0668000666 and @brucemccurdy. - **PR #179320** Related #156945. Thanks @RomneyDa and @shanselman and @dor-sr and @wangmiao0668000666 and @brucemccurdy. - **PR #181389** Related #156945. Thanks @shanselman and @RomneyDa and @dor-sr and @wangmiao0668000666 and @brucemccurdy. - **PR #163258** Related #163151, #156945. Thanks @goutamadwant and @RomneyDa and @shanselman and @dor-sr and @wangmiao0668000666 and @hawkit and @brucemccurdy. - **PR #180250** Thanks @RomneyDa. - **PR #180238** Thanks @RomneyDa. - **PR #180257** Thanks @RomneyDa. - **PR #180245** Thanks @RomneyDa. - **PR #180249** Thanks @RomneyDa. - **PR #179085** Thanks @RomneyDa. - **PR #179097** Thanks @RomneyDa. - **PR #179104** Thanks @RomneyDa. - **PR #179125** Thanks @RomneyDa. - **PR #179077** Thanks @RomneyDa. - **PR #179112** Thanks @RomneyDa. - **PR #179109** Thanks @RomneyDa. - **PR #179083** Thanks @RomneyDa. - **PR #179093** Thanks @RomneyDa. - **PR #179079** Thanks @RomneyDa. - **PR #177313** Thanks @jlapenna. - **PR #172775** Thanks @RomneyDa. - **PR #177825** Thanks @jlapenna. - **PR #178904** Thanks @jalehman. - **PR #181166** Related #181020. Thanks @najef1979-code. - **PR #181307** Related #181235. Thanks @agroman1993. - **PR #180270** Thanks @RomneyDa. - **PR #181866** Thanks @RomneyDa. - **PR #178955** Related #178953. Thanks @Marvinthebored and @RomneyDa. - **PR #180396** Thanks @shakkernerd. - **PR #182047** Thanks @RomneyDa. - **PR #179690** Thanks @obviyus. - **PR #182114** Thanks @RomneyDa. - **PR #182951** Thanks @RomneyDa. - **PR #172026** Thanks @Marvinthebored and @VACInc. - **PR #182898** Related #182652. Thanks @RomneyDa and @tre1d. - **PR #181992** Related #181952. Thanks @najef1979-code. - **PR #183286** Thanks @Marvinthebored. - **PR #181475** Thanks @RomneyDa. - **PR #181923** Thanks @obviyus. - **PR #173018** Thanks @quqi1599 and @Stronggenetics. - **PR #175246** Thanks @quqi1599 and @Stronggenetics. - **PR #179050** Related #178395. Thanks @mmartoccia. - **PR #179099** Thanks @wtfichigo. - **PR #177577** Thanks @linancn. - **PR #184194** Thanks @RomneyDa. - **PR #184392** Thanks @RomneyDa. - **PR #184532** Thanks @RomneyDa. - **PR #185109** Thanks @RomneyDa. ### Release verification - npm package: https://www.npmjs.com/package/openclaw/v/2026.10.10-beta.4 - registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.10.10-beta.4.tgz - integrity: `sha512-SvFneXtEsOy3BXtGIdvLgsAEuY/ElqR2iqD4XPaAlqOR6YIdpkoonY9FWCYzkwtPqbNw5ruR4GAkgJRbcQU2Lw==` - release SHA: `5a94eab2146e558b3ebcd41cb174fc5adc469c2a` - full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.10.10-beta.4/release-evidence.md - release publish: https://github.com/openclaw/openclaw/actions/runs/40453877500 - npm preflight: https://github.com/openclaw/openclaw/actions/runs/40437831425 - full release validation: https://github.com/openclaw/openclaw/actions/runs/40437065455 - plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/40454694030 - plugin ClawHub publish: no normal OIDC candidates - plugin ClawHub bootstrap: not needed - OpenClaw npm publish: https://github.com/openclaw/openclaw/actions/runs/40451197520/attempts/1 - npm Telegram beta E2E: not supplied

OpenClaw v2026.10.10-beta.4 预发布