Agent Breaking Changes_

OpenClaw openclaw 2026.10.10-beta.4

securitymodelpre
2026-10-27 · official notes
Summary

Automations: preserve authenticated operator authority for explicit same-conversation scheduled follow-ups, including one-shot nextcheck rearming, while retaining role, session, cancellation, target,
Gateway security: keep an environment-referenced hooks.token out of agent host-exec and CLI child environments at startup and across config reloads, while preserving explicit per-command overrides. (#
Memory Wiki: preserve human-authored Notes when OKF concept pages are re-imported or removed from the producer bundle, including changed producer content and legacy pages without a marked Notes slot.
Full notes

## 2026.10.10-beta.4

### Highlights

### Changes

### Fixes

- Automations: preserve authenticated operator authority for explicit same-conversation scheduled follow-ups, including one-shot `next_check` rearming, while retaining role, session, cancellation, target, and tool-policy revocation boundaries. (#176422) Thanks @RomneyDa.
- Gateway security: keep an environment-referenced `hooks.token` out of agent host-exec and CLI child environments at startup and across config reloads, while preserving explicit per-command overrides. (#179199) Thanks @VACInc and @RomneyDa.
- Memory Wiki: preserve human-authored Notes when OKF concept pages are re-imported or removed from the producer bundle, including changed producer content and legacy pages without a marked Notes slot. (#175707, #179657; related #175700) Thanks @YangManBOBO and @RomneyDa.
- Claude CLI: keep the native Claude session and its context when subagent completions or channel turns run in a Control UI-started session, instead of reseeding from saved history each time. (#178955; fixes #178953) Thanks @Marvinthebored and @RomneyDa.
- Model catalogs: honor a configured primary account pin when deciding model readiness, so native Claude CLI models no longer appear as missing auth when the selected token profile is ready. (#178522; related #178502) Thanks @ericcaiwx-star, @RomneyDa, and @eduardonunesfreire-rgb.
- Backup and restore: preserve supported legacy exec-approval allowlists when sanitizing snapshots instead of replacing them with deny-all; malformed policies remain fail-closed. (#164297) Thanks @wangmiao0668000666, @RomneyDa, @shanselman, @dor-sr, @cristianoc, and @brucemccurdy.
- Linux companion: persist each saved Gateway dashboard's private browser identity across restarts, while removing storage for deleted Gateways so re-added endpoints pair as fresh devices. (#158908) Thanks @dor-sr, @RomneyDa, @shanselman, @wangmiao0668000666, and @brucemccurdy.
- Agent database lifecycle: keep peer readers and borrowers alive when maintenance or PostgreSQL opening is refused, preserve the original refusal and clean-restart seal, and retain pre-dispatch recovery behavior when a worker generation disappears. (#175987, #163258, #179320) Thanks @RomneyDa, @shanselman, @dor-sr, @wangmiao0668000666, @brucemccurdy, @goutamadwant, and @hawkit.
- macOS bundled Gateway: show the actual installed Gateway version, keep failed or incomplete recovery actionable, and prevent stale or pending update receipts from blocking a valid repair. (#181389) Thanks @shanselman, @RomneyDa, @dor-sr, @wangmiao0668000666, and @brucemccurdy.
- Model refresh: let explicit catalog refreshes use their existing extended discovery budget through HTTP acquisition while ordinary preparation remains bounded. (#177313) Thanks @jlapenna and @RomneyDa.
- Webhooks and scheduled scripts: classify trusted immediate producers as events, retain each webhook's own automation scope, and refresh disposed script hooks before execution without replaying completed effects. (#172775, #177825, #178904) Thanks @RomneyDa, @jlapenna, and @jalehman.
- Runtime security: backport patched embedded runtimes to the 2026.10.10 line. (#181074) Thanks @RomneyDa and @joshavant.
- Update finalization: keep a verified healthy target successful when a recognized late restart-health or legacy-wrapper maintenance step fails, while authority, data-at-risk, deferred-admission, and unknown failures remain fatal. (#181166; fixes #181020) Thanks @najef1979-code.
- Package update recovery: automatically settle verified interrupted publications or retire untouched preparations, preserve the installed candidate and original Gateway recovery evidence, and keep live update ownership and restart authority fenced. (#181307; fixes #181235) Thanks @agroman1993.
- CLI config writes and setup with a running Gateway: `openclaw config set`, `config unset`, and `openclaw setup` now send their change through the running Gateway as one `config.patch` instead of refusing, with the same result as an offline write, no restart while reload is off, and a success acknowledgement when the Gateway accepts a restart, so Windows companion setup completes again. (#182951, #184194, #184392, #184532, #185109) Thanks @RomneyDa.
- Codex native subagents: unblock parent replies after native children finish, are interrupted, or complete follow-ups; stop resurrecting undeliverable child completions; replay completed grandchildren correctly after Gateway restarts; keep native tool declarations across completion turns; and let Stop succeed after parent thread reuse. (#173018, #175246, #177577, #179050, #179099, #183286, #181475; fixes #178395) Thanks @quqi1599, @Stronggenetics, @linancn, @mmartoccia, @wtfichigo, @Marvinthebored, and @RomneyDa.
- Claude CLI: stop prompt-cache prefix churn after a child completion. (#172026) Thanks @Marvinthebored and @VACInc.
- Scheduled runs: wait for tool results before answering, so cron run summaries report the real result instead of a premature "no results" reply. (#179690) Thanks @obviyus.
- Agent restart recovery: release restart-recovery fences for killed runs so their conversations no longer stay blocked. (#181992; fixes #181952) Thanks @najef1979-code.
- Windows exec: restore command execution for Gateways running as an S4U scheduled task when Store PowerShell is installed. (#182898; fixes #182652) Thanks @RomneyDa and @tre1d.
- Kimi: give Kimi K3.1 Pro the K3 thinking and video controls. (#181923) Thanks @obviyus.

### Complete contribution record

This audited record covers the complete v2026.10.10-beta.3..ed2b311521579d51523c9e31f1c326310e2c2922 history: 60 in-range PRs + 0 retained seed-only PRs = 60 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

#### Pull requests

- **PR #175707** Related #175700. Thanks @YangManBOBO and @RomneyDa.
- **PR #178522** Related #178502. Thanks @ericcaiwx-star and @RomneyDa and @eduardonunesfreire-rgb.
- **PR #179199** Thanks @VACInc and @RomneyDa.
- **PR #179657** Thanks @RomneyDa.
- **PR #179933** Thanks @RomneyDa.
- **PR #179951** Thanks @RomneyDa.
- **PR #179987** Thanks @RomneyDa.
- **PR #180027** Thanks @RomneyDa.
- **PR #181447** Thanks @RomneyDa.
- **PR #181074** Thanks @RomneyDa and @joshavant.
- **PR #164297** Related #164146, #156945. Thanks @wangmiao0668000666 and @RomneyDa and @shanselman and @dor-sr and @cristianoc and @brucemccurdy.
- **PR #158908** Related #156945. Thanks @dor-sr and @RomneyDa and @shanselman and @wangmiao0668000666 and @brucemccurdy.
- **PR #175987** Related #156945. Thanks @RomneyDa and @shanselman and @dor-sr and @wangmiao0668000666 and @brucemccurdy.
- **PR #179320** Related #156945. Thanks @RomneyDa and @shanselman and @dor-sr and @wangmiao0668000666 and @brucemccurdy.
- **PR #181389** Related #156945. Thanks @shanselman and @RomneyDa and @dor-sr and @wangmiao0668000666 and @brucemccurdy.
- **PR #163258** Related #163151, #156945. Thanks @goutamadwant and @RomneyDa and @shanselman and @dor-sr and @wangmiao0668000666 and @hawkit and @brucemccurdy.
- **PR #180250** Thanks @RomneyDa.
- **PR #180238** Thanks @RomneyDa.
- **PR #180257** Thanks @RomneyDa.
- **PR #180245** Thanks @RomneyDa.
- **PR #180249** Thanks @RomneyDa.
- **PR #179085** Thanks @RomneyDa.
- **PR #179097** Thanks @RomneyDa.
- **PR #179104** Thanks @RomneyDa.
- **PR #179125** Thanks @RomneyDa.
- **PR #179077** Thanks @RomneyDa.
- **PR #179112** Thanks @RomneyDa.
- **PR #179109** Thanks @RomneyDa.
- **PR #179083** Thanks @RomneyDa.
- **PR #179093** Thanks @RomneyDa.
- **PR #179079** Thanks @RomneyDa.
- **PR #177313** Thanks @jlapenna.
- **PR #172775** Thanks @RomneyDa.
- **PR #177825** Thanks @jlapenna.
- **PR #178904** Thanks @jalehman.
- **PR #181166** Related #181020. Thanks @najef1979-code.
- **PR #181307** Related #181235. Thanks @agroman1993.
- **PR #180270** Thanks @RomneyDa.
- **PR #181866** Thanks @RomneyDa.
- **PR #178955** Related #178953. Thanks @Marvinthebored and @RomneyDa.
- **PR #180396** Thanks @shakkernerd.
- **PR #182047** Thanks @RomneyDa.
- **PR #179690** Thanks @obviyus.
- **PR #182114** Thanks @RomneyDa.
- **PR #182951** Thanks @RomneyDa.
- **PR #172026** Thanks @Marvinthebored and @VACInc.
- **PR #182898** Related #182652. Thanks @RomneyDa and @tre1d.
- **PR #181992** Related #181952. Thanks @najef1979-code.
- **PR #183286** Thanks @Marvinthebored.
- **PR #181475** Thanks @RomneyDa.
- **PR #181923** Thanks @obviyus.
- **PR #173018** Thanks @quqi1599 and @Stronggenetics.
- **PR #175246** Thanks @quqi1599 and @Stronggenetics.
- **PR #179050** Related #178395. Thanks @mmartoccia.
- **PR #179099** Thanks @wtfichigo.
- **PR #177577** Thanks @linancn.
- **PR #184194** Thanks @RomneyDa.
- **PR #184392** Thanks @RomneyDa.
- **PR #184532** Thanks @RomneyDa.
- **PR #185109** Thanks @RomneyDa.

### Release verification

- npm package: https://www.npmjs.com/package/openclaw/v/2026.10.10-beta.4
- registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.10.10-beta.4.tgz
- integrity: `sha512-SvFneXtEsOy3BXtGIdvLgsAEuY/ElqR2iqD4XPaAlqOR6YIdpkoonY9FWCYzkwtPqbNw5ruR4GAkgJRbcQU2Lw==`
- release SHA: `5a94eab2146e558b3ebcd41cb174fc5adc469c2a`
- full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.10.10-beta.4/release-evidence.md
- release publish: https://github.com/openclaw/openclaw/actions/runs/40453877500
- npm preflight: https://github.com/openclaw/openclaw/actions/runs/40437831425
- full release validation: https://github.com/openclaw/openclaw/actions/runs/40437065455
- plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/40454694030
- plugin ClawHub publish: no normal OIDC candidates
- plugin ClawHub bootstrap: not needed
- OpenClaw npm publish: https://github.com/openclaw/openclaw/actions/runs/40451197520/attempts/1
- npm Telegram beta E2E: not supplied
Weekly digest: every breaking change, retirement and price change across 23 coding agents, one email.
Form not loading? Subscribe here.