[Release] openclaw/openclaw v2026.2.23: openclaw 2026.2.23

OpenClaw v2026.2.23 release adds first-class Kilo Gateway and Moonshot provider support, introduces prompt caching documentation and per-agent parameter overrides, and hardens session maintenance with disk-budget controls and security headers. The release includes numerous fixes for browser SSRF policies, Telegram polling/reactions, context overflow detection, and agent reasoning/compaction behavior.

Key Points

• •Added first-class Kilo Gateway provider support with kilocode/anthropic/claude-opus-4.6 as default model, including auth, onboarding, and implicit provider detection
• •Implemented prompt caching reference documentation covering cacheRetention, per-agent params merge precedence, and cache-ttl + heartbeat tuning across Bedrock/OpenRouter
• •Enhanced session maintenance with `openclaw sessions cleanup` command supporting per-agent store targeting and disk-budget controls (maxDiskBytes/highWaterBytes)
• •Added Moonshot (Kimi) provider support for web_search tool with two-step flow and citation extraction, plus native Moonshot video provider with auto-detection
• •Introduced per-agent `params` overrides for mixed-traffic agents to independently tune cache behavior and model defaults
• •Fixed critical browser SSRF policy default to trusted-network mode with automatic legacy key migration via `openclaw doctor --fix`
• •Resolved context pruning eligibility for Moonshot/Kimi and ZAI/GLM providers to prevent silent skipping of cache-ttl mode
• •Hardened Telegram polling with per-bot identity offset scoping and single runner-stop path to prevent cross-token bleed and overlapping pollers
• •Improved reasoning suppression in Telegram and agent configs to prevent internal reasoning leakage while preserving answer delivery
• •Enhanced context overflow detection with additional provider error shapes, Chinese pattern detection, and HTTP 502/503/504 failover eligibility

Workflow Diagram

Concepts