NVIDIAN

fix(codex): trace app-server thread lifecycle timing · fix(status): resolve gateway auth secrets for deep audit

fix(agents): persist CLI user turns before attempts · fix(memory-core): cap Dreaming short-term recall growth

fix(commitments): serialize load-modify-save with in-process queue + cross-process file lock · fix(agents): keep cron media completions run-scoped · fix(update): allow package-manager hardlinks in swaps

fix(status): bound sandbox browser Docker audit probes

fix(codex): unsubscribe app-server thread after runs

perf(plugins): reuse compatible gateway startup registry on dispatch

[Bug]: `logs.tail` likely fails to redact several credential formats before returning log lines to `operator.read` clients.

fix: preserve pending subagent sessions during maintenance (#81498)

fix: preserve pending subagent sessions during maintenance

fix(config): reject auto-managed meta.lastTouched* paths in config set/unset · fix(commitments): serialize load-modify-save with in-process queue + cross-process file lock · fix(doctor): render legacy migration panel as preview when --fix is not passed

fix(browser): add pageReady to Chrome MCP existing-session status

fix(plugins): fail unresolved openclaw peer installs

fix(cli): canonicalize infer model refs safely · fix(whatsapp): ignore outbound echoes for inbound activity · fix(cli): canonicalize infer model run refs · fix(whatsapp): dedupe captioned MEDIA auto-replies (#78770)

[Bug]: plugins uninstall can crash with exit 13 when confirmation stdin is closed · fix(cli): handle closed plugin uninstall prompt (#73566) · feat(gateway): add SDK environment discovery RPCs (#74867) thanks @ai-hpc

fix(feishu): keep group_topic message-tool replies inside the topic

fix(cli): block gateway-owned package updates

feat(gateway): add SDK environment discovery RPCs · feat(gateway): add SDK-facing tools.invoke RPC · fix(build): write runtime-postbuild stamp during build

fix(cron): keep recurring backoff stable after reload · [Bug]: pnpm install --no-optional reports false broken-lockfile error for optional deps

fix(cli): canonicalize infer model run refs · fix(cli): handle closed plugin uninstall prompt · [Bug]: plugins uninstall can crash with exit 13 when confirmation stdin is closed · fix(cli): reject missing plugin ids before config writes

fix(deepseek): expose V4 max thinking levels · [Bug]: device.token.rotate returns plaintext device tokens in gateway RPC response · [Bug]: skills.update echoes raw apiKey and env secrets in gateway response

fix: clean up bundled LSP process trees on shutdown

[Bug]: agents.files.get allows operator.read callers to read arbitrary agent workspace files

[Bug]: pnpm install --no-optional reports false broken-lockfile error for optional deps

[Bug]: `logs.tail` likely fails to redact several credential formats before returning log lines to `operator.read` clients. · [Bug]: agents.files.get allows operator.read callers to read arbitrary agent workspace files · [Bug]: device.token.rotate returns plaintext device tokens in gateway RPC response · [Bug]: skills.update echoes raw apiKey and env secrets in gateway response