OpenClaw 2026.6.6: fail-closed security boundaries, OpenRouter OAuth, Claude Fable 5
Stable release. Security-sensitive paths — transcript, sandbox, MCP, browser, channel, exec-approval — now fail closed on unsafe access, timed-out approvals, and malformed boundary input. Adds OpenRouter OAuth and Claude Fable 5 support, and lowers the default compaction timeout to 180 seconds for anyone not setting it explicitly.
PUBLISHED2026-06-12
OBSERVED2026-08-11
AGE2mo
SOURCES1
- Security: transcript, sandbox, MCP, browser, channel, and exec-approval paths fail closed around unsafe access, timed-out approvals, and malformed boundary input; transcript images redacted; browser and LanceDB memory media directives neutralized
- Providers: OpenRouter OAuth, Claude Fable 5, Gemma 4 reasoning replay, local model execution, normalized tool progress; local llama.cpp runtime moved into its provider plugin
- Default compaction timeout lowered to 180 seconds; explicit configuration still respected
- Telegram: account-scoped topics route to the correct agent, streamed text survives tool calls, unauthorized DM text is kept out of cache and prompt context
- iMessage: always-on inbound recovery, durable echo markers, block streaming, and outbound transport survive restarts and idle periods
- Browser/MCP connectivity: existing browser sessions, CDP/WebSocket discovery, default-profile URLs, OAuth/SSE transport, and tool schemas connect through clearer paths
- Startup: Control UI no longer waits on broad model loading; cached model metadata, lazy slash-command work, first-assistant-event traces and slow-first-reply warnings
- Channel fixes: WhatsApp captured replies reattach to the successor controller after restart, Feishu rate-limit retries, Mattermost thread replies, canonical LINE webhook paths, Discord reply hydration, OpenAI Realtime WebRTC transcripts
- Plugins/ClawHub: reusable package publishing, dry runs skip publish approval, managed plugin version drift reporting, retired Skill Workshop config warns instead of failing
- Gateway/config: shared approval runtime socket token, explicit array replacement in
config.patch, SQLite auth migration verified before cleanup
COMMUNITY
No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.