release aidev PRERELEASE SIG 3/5

OpenClaw 2026.6.9-beta.1: provider plugins externalized, Codex Spark OAuth

Beta cut of 2026.6.9. Official provider packages become independent npm releases loaded at Gateway startup, Codex regains GPT-5.3 Spark OAuth routing and remote-node exec as a dynamic tool, and a security round redacts secrets from debug/config output. Note StepFun is npm-only in this beta because its ClawHub package name is unavailable.

PUBLISHED2026-06-19
OBSERVED2026-08-11
AGE1mo
SOURCES1
  • Providers/plugins: externalized official providers publish as independent npm packages; Gateway discovers installed channel plugins at startup; StepFun installs exclusively from npm (ClawHub name unavailable)
  • Codex: automatic plugin approvals, GPT-5.3 Spark OAuth routing, remote-node exec as a dynamic tool, more reliable app-server teardown and terminal outcomes
  • Search/skills: Codex Hosted Search added, key-free providers stay deliberate opt-ins, ClawHub skill installs retain verified source provenance
  • Telegram: rich HTML, rich markdown and sticker paths, progress drafts, command output fidelity, mention and spooled-handler routing
  • Agent recovery: retries, terminal outcomes, usage after compaction, session history repair, reply reconciliation
  • Security: secrets redacted from debug/config output, internal HTTP session overrides blocked, open-DM tool exposure audited, plugin write ownership checks retained
  • Storage: no SQLite WAL on network filesystems, reindex artifacts cleaned, setup state out of workspace dot-directories, default-agent auth profiles imported into SQLite
  • Clients: Control UI session workspace rail and extension health, iOS Watch controls, Android chat context
  • CLI/TUI: global flags accepted after subcommands, terminal output and activity indicators stay visible, CJK IME composition preserved
  • Release audits the complete v2026.6.8..HEAD~1 range: 375 merged PRs
featurefixsecuritymodel-support

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.