OpenClaw 2026.7.2-beta.5: Claude Opus 5 and Kimi K3 support, MCP Apps host, session rewind/fork

• Models: Claude Opus 5 added across catalog and runtime; Kimi K3; GPT Live via Codex OAuth
• Local inference: in-process RAM-gated llama.cpp/Gemma GGUF path, Baseten Model API, local-provider detection during onboarding, model downloads from web/macOS setup
• State safety: quarantine store surviving primary-database damage, crash-recoverable SQLite snapshots, crash-durable filesystem publication, schema-upgrade data-loss rejection, rollback-writer snapshot recovery
• Durable delivery: accepted messages recoverable across gateway restarts and local crashes via shared ingress drain + dead-letter recovery — Telegram, Signal, Slack, QQBot, Twitch, Synology Chat, Tlon, IRC, Zalo User
• Sessions: rewind/fork from individual messages, branch switching on web and native, forking upstream Codex sessions, branch-safe queued sends, stale-pane write rejection, session boards/dashboards, archived/draft/incognito states
• MCP Apps: ticketed host with bound tools/resources and bounded context updates, openable from channel replies, pinnable to dashboards, hardened shared sandbox, manifest-declared apps for native plugins
• Questions/approvals: structured option-card questions across web, channels, macOS and native; approvals gain push notifications, history, fair queuing, headless resolution, Claude tool-request relay
• Meetings/Talk: Teams, Zoom and Google Meet plugins on by default with durable transcript collection; realtime Talk gains OpenAI and Gemini video
• Wear OS companion (phone-proxied) with agent/session/model selection and instant-talk tile
• Memory: fast active-memory recall, default cross-conversation recall for personal installs, guided imports from Claude Code/Codex/Hermes
• Scheduling: per-job dynamic cadence, gated script payloads, cron-backed heartbeat monitors, /loop
• Security fixes: channel allowlists no longer grant owner access; session exports kept inside the workspace; a forged-marker/web-search boundary bypass closed

Note: the source notes are truncated mid-sentence in the Fixes section, so the fix list here is partial.