innotive.app
Sign in
Back to discover
TypeScriptListed by innotive

openclaw

openclaw/openclaw

387,611 stars81,374 forks

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

aiassistantcrustaceanmoltyopenclawown-your-datapersonal

Project page

This project has not published an innotive.md page yet.

Repo-native content, AI-friendly workflow

Create innotive.md at the repository root. innotive renders that file as the project page — we do not host an editor.

Keep the content in your repo so it stays versioned with your code. Many teams already run AI in their repositories; drafting innotive.md with your usual AI workflow is usually the fastest path.

Create innotive.md on GitHub
# openclaw

One-line summary of what this project does.

## What it solves

Explain the problem and who it's for.

## Quick start

```bash
# install / run commands
```

## Key features

- Feature one
- Feature two

Latest release

Most recent version synced from GitHub.

openclaw 2026.6.34

v2026.6.34

## 2026.6.34 ### Highlights - **Safer browser and network boundaries:** sandboxed browser routes, trusted DNS targets, custom browser origins, and loopback provider endpoints now reject unsafe access paths. (#97958, #38290, #103075, #110693) Thanks @eleqtrizit, @brunowowk, @mosidevv, @pgondhi987, and @lsr911. - **More resilient agent and provider runs:** retained session writes, provider fallbacks, stream progress handling, and stdio failures now recover without silently ending active work. (#96100, #97128, #90908, #99803, #100521) Thanks @xialonglee, @sallyom, @richwilson-bloom, @LiuwqGit, @vincentkoc, @yetval, @shengting, and @cxbAsDev. - **Stronger channel recovery:** pending channel work resumes after recovery, acknowledgements are idempotent, and sustained Discord gateway bursts stay bounded. (#79811, #97041, #104919, #109108, #110954, #103793, #94016) Thanks @indulgeback, @cuiyuxin-gif, @Pick-cat, @Glucksberg, @evan-YM, @zhangguiping-xydt, @yetval, @sheyanmin, and @thomasthelen-kibeauftragter. - **Safer operator diagnostics:** command and status surfaces keep owner-only actions protected and prevent credentials from appearing in account URLs or summaries. (#98260, #107754, #105017) Thanks @eleqtrizit, @joshavant, @ooiuuii, @aniruddhaadak80, and @tzy-17. - **More robust local runtime state:** SQLite checkpoints, workspace reads, gateway process signalling, plugin HTTP responses, and dependency handling no longer turn transient host conditions into failed runs. (#99067, #100910, #102125, #109590, #112406) Thanks @ooiuuii, @masatohoshino, @vincentkoc, @mushuiyu886, and @krissding. ### Changes - **Extended-stable hardening:** this maintenance release carries targeted security and reliability repairs without adding new release-line features. ### Fixes - **OpenCode Go:** use the documented `hy3` model identifier instead of the failing `hy3-preview` alias. - **Codex native subagents:** retain the parent app-server subscription and recognize multi-agent V2 child activity until a yielded child completion reaches its requester. - **Dependency security:** updates production dependency resolutions for patched `brace-expansion`, PostCSS, `fast-uri`, `ip-address`, and Undici versions. (#113428, #118804) - **Execution and transport safety:** browser, sandbox, exec, MCP, and secret-resolution paths reject unsafe inputs and handle stream failures without crashing the host process. - **Delivery and channel stability:** outbound receipts, delivery evidence, channel lifecycle, health monitoring, and gateway queues recover cleanly under retries, restarts, and overload. - **Gateway and storage reliability:** plugin responses, process probes, workspace bootstrap reads, and SQLite writes tolerate expected transient failures while preserving correct state. ### Upcoming deprecations - **Plugin SDK migration:** `before_agent_start`, root `openclaw/plugin-sdk` imports, `providerAuthEnvVars`, and `channelEnvVars` are scheduled for removal after July 24. Migrate to the modern hook stages, focused SDK subpath imports, and manifest setup descriptors. See [Plugin SDK migration](/plugins/sdk-migration) and [plugin manifests](/plugins/manifest). ### Complete contribution record This audited record covers the complete v2026.6.33..496c84bf6159bd09ce2c2a261c354ea641757b19 history plus release-validation backports: 25 merged PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact. #### Pull requests - **PR #96100** Related #95915. Thanks @xialonglee, @sallyom, and @richwilson-bloom. - **PR #79811** Related #79753. Thanks @indulgeback and @cuiyuxin-gif. - **PR #97041** Thanks @Pick-cat and @vincentkoc. - **PR #97128** Related #96518. Thanks @LiuwqGit, @vincentkoc, and @yetval. - **PR #90908** Thanks @shengting. - **PR #97958** Thanks @eleqtrizit. - **PR #98260** Thanks @eleqtrizit. - **PR #99803** Thanks @cxbAsDev and @vincentkoc. - **PR #99067** Related #99066. Thanks @ooiuuii. - **PR #100521** Thanks @cxbAsDev. - **PR #100910** Thanks @masatohoshino and @vincentkoc. - **PR #102125** Thanks @mushuiyu886. - **PR #38290** Related #46520. Thanks @brunowowk and @mosidevv. - **PR #103075** Thanks @pgondhi987. - **PR #104919** Related #104903. Thanks @Glucksberg and @evan-YM. - **PR #107754** Related #98633, #102932, #105427. Thanks @joshavant, @ooiuuii, and @aniruddhaadak80. - **PR #109108** Thanks @zhangguiping-xydt. - **PR #105017** Thanks @tzy-17. - **PR #109590** Thanks @krissding. - **PR #110693** Thanks @lsr911. - **PR #110954** Thanks @zhangguiping-xydt. - **PR #103793** Thanks @yetval. - **PR #94016** Related #94008. Thanks @sheyanmin and @thomasthelen-kibeauftragter. - **PR #112406** Thanks @vincentkoc. - **PR #107938**. ### Release verification Extended-stable Gateway release: npm and container images only. GitHub Releases has one repository-wide Latest flag, not a per-channel Latest; this page is intentionally not Latest. The npm and container `extended-stable` selectors currently resolve to `2026.6.34`. - npm package: [`openclaw@2026.6.34`](https://www.npmjs.com/package/openclaw/v/2026.6.34) - npm registry tarball: [`openclaw-2026.6.34.tgz`](https://registry.npmjs.org/openclaw/-/openclaw-2026.6.34.tgz) - npm integrity: `sha512-Rm4khBrWn9HYqE99NBryCFgjwlsIuwBqK5jIANn2773CGXJ1JIZkDn5twEHB+8SVFdh0FPNPHRVgZepzNJDfHg==` - npm signatures and [SLSA provenance attestation](https://registry.npmjs.org/-/npm/v1/attestations/openclaw@2026.6.34) are published - Container images: [GHCR](https://github.com/openclaw/openclaw/pkgs/container/openclaw) and [Docker Hub](https://hub.docker.com/r/openclaw/openclaw/tags?name=2026.6.34), with exact tags `2026.6.34`, `2026.6.34-slim`, and `2026.6.34-browser` for amd64 and arm64 - Container manifest digests: default/slim `sha256:47d342bafe83bd3b2dca6f1d8d8b608ba7b542a1952564960648943346206759`; browser `sha256:55203a7abced818c0378aac0a128a2fceee5448c08f36be7e0058762a3b3ff41`. The matching `extended-stable`, `extended-stable-slim`, and `extended-stable-browser` aliases resolve to those same digests in both registries. - Release commit: [`5c38f996d4059ebd9080cf74dc611ec3a17f4d50`](https://github.com/openclaw/openclaw/commit/5c38f996d4059ebd9080cf74dc611ec3a17f4d50) - Successful release workflows: [npm preflight](https://github.com/openclaw/openclaw/actions/runs/30904124224), [Full Release Validation](https://github.com/openclaw/openclaw/actions/runs/30904149739), [plugin npm publish](https://github.com/openclaw/openclaw/actions/runs/30916791876), and [Docker Release](https://github.com/openclaw/openclaw/actions/runs/30916780768)