# OpenClaw 2026.6.9-beta.1: provider plugins externalized, Codex Spark OAuth

> Beta cut of 2026.6.9. Official provider packages become independent npm releases loaded at Gateway startup, Codex regains GPT-5.3 Spark OAuth routing and remote-node `exec` as a dynamic tool, and a security round redacts secrets from debug/config output. Note StepFun is npm-only in this beta because its ClawHub package name is unavailable.

| | |
|---|---|
| **Tool** | OpenClaw |
| **Version** | v2026.6.9-beta.1 |
| **Kind** | release |
| **Published** | 2026-06-19 |
| **Observed** | 2026-08-11 |
| **Significance** | 3/5 |
| **Breaking** | no |
| **Categories** | feature, fix, security, model-support |

## What changed


- Providers/plugins: externalized official providers publish as independent npm packages; Gateway discovers installed channel plugins at startup; StepFun installs exclusively from npm (ClawHub name unavailable)
- Codex: automatic plugin approvals, GPT-5.3 Spark OAuth routing, remote-node `exec` as a dynamic tool, more reliable app-server teardown and terminal outcomes
- Search/skills: Codex Hosted Search added, key-free providers stay deliberate opt-ins, ClawHub skill installs retain verified source provenance
- Telegram: rich HTML, rich markdown and sticker paths, progress drafts, command output fidelity, mention and spooled-handler routing
- Agent recovery: retries, terminal outcomes, usage after compaction, session history repair, reply reconciliation
- Security: secrets redacted from debug/config output, internal HTTP session overrides blocked, open-DM tool exposure audited, plugin write ownership checks retained
- Storage: no SQLite WAL on network filesystems, reindex artifacts cleaned, setup state out of workspace dot-directories, default-agent auth profiles imported into SQLite
- Clients: Control UI session workspace rail and extension health, iOS Watch controls, Android chat context
- CLI/TUI: global flags accepted after subcommands, terminal output and activity indicators stay visible, CJK IME composition preserved
- Release audits the complete v2026.6.8..HEAD~1 range: 375 merged PRs


## Sources

- [github_release](https://github.com/openclaw/openclaw/releases/tag/v2026.6.9-beta.1) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/openclaw/v2026-6-9-beta-1
Entity: https://changelogs.info/openclaw
Event ID: `evt_2026-06-19_openclaw_v2026-6-9-beta-1`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.