Josh Avant

fix(sessions): prevent maintenance from deleting active sessions · fix(anthropic): interrupted thinking no longer bricks replay · fix(slack): apply sender policy to group DMs · fix(channels): honor configured read target policies

fix(agents): prevent transcript redaction from corrupting signed reasoning · fix(android): show Canvas outside Settings · fix(agents): preserve provider replay signatures (#103628) · docs(security): clarify computer act authorization

fix(comfy): allow private service hostnames · Add Vault SecretRef plugin · Add Vault SecretRef plugin (#89255) · chore(android): bump 2026.7.1 Play build

chore(ios): prepare 2026.7.1 release notes · fix(ios): satisfy SwiftFormat in session filter · chore(android): prepare 2026.7.1 Play release · fix(channels): honor configured read target policies

fix(android): handle hardware Enter without breaking IME input · fix(mobile): clarify gateway connection security setup · fix ios qr scanner lifecycle · fix(qa): use valid Convex module filename

fix(channels): honor configured read target policies · fix: keep Codex delegation controls directly available · fix(config): preserve recovery state during config-health migration · fix: keep OpenClaw control tools available when tool_search misroutes

feat(android): add licenses settings screen · feat(ios): add licenses settings screen · feat(ios): implement branded typography design system · test(discord): clarify and guardrail gateway proxy selection

fix: ignore test-only network CI guard lines · [codex] fix(memory-lancedb): align apache arrow peer dependency · fix: strict guarded fetch fails before managed proxy DNS · docs: update mobile app release messaging

fix: diagnose Windows LAN Gateway firewall blocks · fix: Android QR scan starts gateway pairing · fix: advertise route-aware LAN Control UI links · fix: Android setup codes accept local mDNS gateway hosts

fix: /pair qr fails to show QR code in chat surfaces · fix(android): require installed-apps disclosure consent · fix: prevent stale skill snapshots blocking Discord replies · fix: make inbound document attachments readable by runners

fix: scanned PDF pages reach chat vision models · fix: scanned PDF pages reach chat vision models (#97354) · fix(media): forward scanned PDF page images as current-turn images · fix(media): forward scanned PDF page images

fix: prevent daily rollover splitting active transcripts · Scope agent cron operations to the calling agent · fix(trajectory): preserve usage in truncated events · test: relax local TUI PTY startup wait

Fix Telegram spooled claim refresh · Stabilize Google Meet chrome-node launch configuration · Scope agent cron operations to the calling agent · Fix Signal approval reactions for structured delivery

Bound successful provider response reads

Add local-only issue and PR review mode · Add local-only issue and PR review mode (#357) · fix(openshell): pin local mirror fs mutations · fix(cron): omit failed webhook output summaries

Defer iOS local network permission until onboarding · Add iOS push sandbox profiles and relay tooling · fix: route Android exec approvals to in-app inbox · [fastlane] Updated development and platform ios

fix: /status is too verbose for pinned model sessions · Consolidate iOS notification permission UX · improve: refresh Android overview control surface · Harden relay for production launch

fix: route mobile exec approvals to reviewer device · docs: record sandbox push validation · fix: avoid APNs proxy bridge gateway IP · docs: document APNs proxy isolation

fix: route mobile exec approvals to reviewer device · fix: prune review image source builds · fix: serialize review image package downloads · fix: build review image with host networking

fix: migrate watch app to single-target app (Xcode 27+ compat) · Update OpenClaw App Store profiles for app group · fix: seed host approval runtime pairing · fix: preserve approval visibility after review reconnect

Update Android release signing assets · docs: record share extension validation blocker · docs: record app review walkthrough validation · fix: avoid review network gateway address

fix(feishu): enforce account tool family gates · Document default Azure host identity · Default Azure resource identity · Default Azure image alias

feat(ios): add watch action surface · Repackage match distribution identity · Convert signing assets to Fastlane match layout · Add host health validation

Update signing assets for ai.openclawfoundation.app.watchkitapp.extension (IOS_APP_STORE) · Update signing assets for ai.openclawfoundation.app.watchkitapp (IOS_APP_STORE) · Update signing assets for ai.openclawfoundation.app.activitywidget (IOS_APP_STORE) · Update signing assets for ai.openclawfoundation.app.share (IOS_APP_STORE)

feat: support /btw in CLI-backed sessions · fix(ios): force stale foreground gateway reconnects · fix(ios): force stale foreground gateway reconnects (#92552) · feat: support /btw in CLI-backed sessions (#92669)

fix(agent): continue after source message tool replies · Fix provider static model fallback resolution · fix: clarify gateway SecretRef auth diagnostics · fix: repair rejected Anthropic thinking replay

Route app-owned web egress through managed proxy path · Fix Telegram spooled buffered replay · fix: repair rejected Anthropic thinking replay · fix: clarify gateway SecretRef auth diagnostics

Fix stale visible reply recovery · Fix context-engine compaction ownership for Codex sessions · Improve iPad and iPhone control surfaces · chore: remove temporary auth identity cleanup tool

Refactor HTTP egress around external proxy enforcement · Fix context-engine compaction ownership for Codex sessions · Fix stale main session startup recovery · fix(openai): require api-key auth for realtime voice

chore: bump Codex app-server to 0.137.0

feat(android): add theme mode selection · fix: gate owner-only HTTP tools · fix(android): remove inert appearance palette preview

feat(android): brand onboarding welcome screen · fix(android): clarify nearby gateway discovery state · chore(android): simplify onboarding entry actions · fix(android): show configured provider readiness

fix(ios): use dynamic settings bottom margin · fix(ios): keep diagnostics action reachable · fix(ios): keep gateway row grouped and tappable · fix(ios): keep talk unavailable without config

fix ios canvas presentation · fix ios gateway forced reconnect

Add operator install policy and remove dangerous-code install scanners · Update Josh Avant author profile · fix: harden mobile a2ui bridge trust · docs: warn about install policy plugin update footguns

Add operator install policy and remove dangerous-code install scanners

Update Josh Avant author profile · fix(blog): expand Josh author title

Fix subagent DM completion delivery after yield · Preserve agent hard timeout attribution · Fix restart sentinel internal continuations · Fix Codex raw image generation media projection

Preserve agent hard timeout attribution · Fix restart sentinel internal continuations · fix: probe stale rate-limit cooldown primaries · test(release): repair live matrix expectations

Fix Claude live tool progress for watchdog recovery · fix(agents): preserve signed thinking payloads · Fix Claude live tool progress for watchdog recovery (#87546)

fix: load Claude CLI OAuth for PI auth profiles · Fix embedded session file ownership race · fix: load Claude CLI OAuth for PI auth profiles (#87167) · Fix embedded session file ownership race (#87159)

fix(config): narrow profiled tool section doctor repair · fix(agents): guard duplicate tool display metadata · fix: mark ios watch app as watchkit app · fix: restore ios build stability

fix(discord): restore bare numeric channel sends · fix(discord): restore bare numeric channel sends (#86571)

Fix Telegram missing harness spool poison · fix(codex): honor node exec policy for native surfaces · Fix context pressure preflight for tool-heavy sessions · fix(codex): add API key paste auth

Preserve authored config intent during update · fix(codex): surface native compaction failures · Fix inherited XDG env for exec subprocesses · Fix heartbeat message-tool delivery policy

Handle Codex turns missing completion · Fix Telegram isolated polling stall watchdog · Fix Discord session recovery abort ownership · fix(slack): suppress reasoning payloads in non-streaming delivery paths

Harden Codex native execution in OpenClaw sandboxes · fix(agents): provenance-bound Codex reasoning replay · fix: prompt Codex to send visible channel replies · Fix node approval scope requests

fix(discord): preserve streamed replies after tool warnings · fix: constrain wildcard subagent targets · fix(codex): honor Docker bind write policy · Fix memory plugin CLI help dispatch

Reject empty CLI subprocess replies · Fix Telegram hot reload polling restarts · Load provider owner for Codex harness runtime · fix(native-pi): pass Telegram images to Ollama

fix: probe Codex app-server status · fix(gateway): harden usage cache background refreshes · fix(discord): recover truncated progress finals · Fix infer SecretRef resolution for provider-backed commands

Remove OAuth sidecar credential runtime support · fix(codex): enforce native tool policy · Fix session reset files and ACPX orphan reaping · fix(telegram): drop expired approval callbacks

Fix session fallback provenance across reloads · Fix gateway auth logout aborting active runs · fix(codex): yield app-server notification projection · Fix gateway auth logout aborting active runs (#82346)

Fix Telegram polling lease cleanup on restart · Fix gateway handling for undici HTTP2 session teardown · fix(discord): honor threadName when sending to threads · Fix native Ollama num_ctx doctor migration

Add dependency release safety evidence and PR awareness · Add dependency release safety evidence and PR awareness (#81325)

fix(google): retry stalled Gemini first response · Fix doctor Codex alias routing · fix: preserve Cloudflare gateway auth transport · fix(codex): ignore account updates for turn liveness

Clarify exec filesystem policy drift

fix(gateway): keep startup resilient for optional plugin capabilities · fix(agents): bound live exec output events · fix gateway optional plugin startup (#78642) · fix(agents): bound live exec output events (#78645)

fix(secrets): preserve auth profile key refs during provider scrub

fix(secretrefs): resolve external channel contracts in dist/ sidecars · go install v0.14.0 binary reports stale dev version · fix: infer module version for source builds

fix(discord): handle SecretRef runtime status · test(secrets): audit externalized channel SecretRefs · fix(discord): surface stalled transport health · fix(secretrefs): resolve external channel contracts

Wizard: bound hatch TUI timeout · fix(gateway): memoize plugin descriptor config keys · Wizard: bound hatch TUI timeout (#76241) · fix: memoize plugin descriptor config keys (#76240)

test: strengthen published upgrade survivor lane · fix: use generic dev version fallback

feat(security): support operator-managed network proxy routing

Support SecretRef for voice-call credentials and bundled plugin SecretInputs · fix: use runtime snapshot for TTS SecretRefs · fix(runtime): resolve web search SecretRefs from snapshots · fix: resolve local TTS SecretRefs before conversion

Add maintainer-gated Telegram live QA workflow with Convex redaction hardening

qa-lab: make live lanes CI-ready for v1 E2E automation

fix(secrets): align SecretRef inspect/strict behavior across preload/runtime paths · fix(reply): resolve active channel/account SecretRefs in reply runs · fix(secrets): align SecretRef inspect/strict behavior across preload/runtime paths (#66818) · fix(reply): resolve active channel/account SecretRefs in reply runs (#66796)

feat(qa-lab): add Convex credential broker and admin CLI · Outbound: centralize payload normalization semantics

Docs: add incident response plan · Browser: unify /act route action execution and contract errors · UI: consolidate control-ui refresh and controller flows · Browser: consolidate duplicate helper surfaces via facade delegation

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes · Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift · fix(tts): restore 3.28 schema compatibility and fallback observability · feat(tts): add structured provider diagnostics and fallback attempt analytics

fix(exec): harden async approval followup delivery in webchat-only sessions · Tests: stabilize extension-fast inferable lane harnesses