# OpenClaw 2026.6.9: official provider plugins split to npm, Codex Spark OAuth restored

> Stable release that makes official provider packages independent npm releases discovered at Gateway startup, restores GPT-5.3 Spark OAuth routing for Codex, and adds OpenTelemetry log export. Also a security round covering secret redaction in debug/config output and blocked internal HTTP session overrides.

| | |
|---|---|
| **Tool** | OpenClaw |
| **Version** | v2026.6.9 |
| **Kind** | release |
| **Published** | 2026-06-21 |
| **Observed** | 2026-08-11 |
| **Significance** | 3/5 |
| **Breaking** | no |
| **Categories** | feature, fix, security, model-support |

## What changed


- Providers: external provider packages ship as first-class npm releases; Gateway discovers installed channel plugins at startup; StepFun installable from npm or ClawHub
- Codex: automatic plugin approvals, SecretRefs, GPT-5.3 Spark OAuth routing restored, remote-node `exec` exposed as a dynamic tool when a node is connected, more reliable app-server teardown
- Search: Codex Hosted Search added; key-free search providers stay explicit opt-ins; ClawHub skill installs retain verified source provenance
- Telegram: rich HTML send, preserved rich markdown and sticker paths, progress drafts and command output rendering, safe HTML table normalization, mention and spooled-handler routing
- Agent runtime: retry thinking-only and empty post-tool turns, no duplicate hook execution, pending subagent delivery preserved, usage preserved through compaction, partial JSON/history artifacts repaired
- Security: secrets redacted from debug/config output, internal HTTP session overrides blocked, open-DM tool exposure audited, plugin write ownership checks retained
- Storage: no SQLite WAL on network filesystems, reindex artifacts cleaned, setup state kept out of workspace dot-directories, default-agent auth profiles imported into SQLite
- Model fixes: Gemini CLI OAuth behind proxies, corrected Bedrock embedding model IDs, configured defaults preserved in embedded runs
- Observability: OpenTelemetry log export; Control UI gains a session workspace rail and extension health; iOS Watch controls; Android chat context


## Sources

- [github_release](https://github.com/openclaw/openclaw/releases/tag/v2026.6.9) — retrieved 2026-08-11

## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/openclaw/v2026-6-9
Entity: https://changelogs.info/openclaw
Event ID: `evt_2026-06-21_openclaw_v2026-6-9`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.