[Release] openclaw/openclaw v2026.6.6-beta.2: openclaw 2026.6.6-beta.2

OpenClaw v2026.6.6-beta.2 is a security-focused beta release that substantially tightens security boundaries across transcripts, sandboxing, and MCP integrations while improving Telegram delivery reliability, iMessage recovery, browser/MCP connectivity, and Control UI startup performance. The release expands provider support with OpenRouter OAuth and Claude Fable 5, introduces observability enhancements for diagnostics, and fixes critical issues in agent session recovery, channel delivery, and authentication. Multiple infrastructure improvements address performance bottlenecks, plugin management, and build reliability.

Key Points

• •Security hardening across 14+ subsystems including transcripts, sandbox binds, MCP stdio, Codex HTTP access, and exec approvals that now fail closed on timeout
• •Telegram delivery improvements: account-scoped topic routing, streamed text preservation through tool calls, safer callback handling, and unauthorized DM text exclusion from cache
• •iMessage recovery enhancements covering always-on inbound restart, durable echo markers, block streaming, and hardened outbound transport with actionable diagnostics
• •Browser and MCP connectivity gains: existing-session CDP support, WebSocket validation, safer output boundaries, and corrected OAuth/SSE authorization handling
• •Control UI startup latency reduction through cached model metadata, removed startup catalog wait, lazy slash-command loading, and first-event tracing with slow-reply diagnostics
• •Provider expansion: OpenRouter OAuth onboarding, Claude Fable 5 adaptive thinking support, Gemma 4 reasoning replay preservation, and local model guardian review bypass
• •Agent/session recovery fixes: stale approval cleanup, drained reply-queue removal, Codex context-engine compaction ownership preservation, and improved rate-limit retry logic
• •Channel delivery reliability: WhatsApp reply attachment preservation, Feishu rate-limit retry, Mattermost thread preservation, Discord reply hydration, and OpenAI Realtime WebRTC transcript support
• •Observability enhancements: trusted diagnostics channels can capture tool input/output, first-assistant-event traces added, and slow initial reply warnings implemented
• •Performance optimizations: TUI runtime plugin prewarming, plugin auto-enable deduplication, `/models` registry rescan elimination, and prepared startup model metadata reuse

Workflow Diagram

Concepts

Artifacts (1)

npm package: https://www.npmjs.com/package/openclaw/v/2026.6.6-beta.2
registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.6.6-beta.2.tgz
integrity: sha512-617ITjTL0UxtQK4qGOc248nQBJjExX43/RR7CBr+0rEpqnA88i/VWABfTPrUnNT25181uZkOyzgguZjMW0u4Ug==
release SHA: 3129eed4de92d0ddc0209fbf195c790c3d73ab03