[Release] openclaw/openclaw v2026.5.3-beta.2: OpenClaw 2026.5.3 beta 2

OpenClaw v2026.5.3-beta.2 introduces a bundled file-transfer plugin with secure binary file operations, hardens plugin installation and updates, and improves gateway performance through lazy-loading. The release enhances channel reliability across Discord, WhatsApp, Telegram, and other platforms, while fixing critical issues in agent runtime, memory status reporting, and macOS upgrades. Key improvements focus on security (path policies, symlink traversal), performance (startup optimization), and reliability (streamed replies, session recovery).

Key Points

• •New file-transfer plugin provides `file_fetch`, `dir_list`, `dir_fetch`, and `file_write` tools with default-deny per-node path policies, 16 MB byte ceiling, and optional symlink traversal
• •Gateway startup performance improved via lazy-loading of plugin discovery, cron, schema, sessions, and model metadata only when needed
• •Plugin installation hardened: official plugins behave as first-class packages with improved ClawHub fallback, npm dependency reporting, and beta-channel update paths
• •Channel reliability enhanced: improved Discord status reactions, added WhatsApp Channel/Newsletter targets, tightened Telegram/Feishu/Matrix/Teams/Slack delivery behavior
• •Agent runtime reliability: preserved streamed provider replies, delayed A2A session replies, prompt/tool delivery, and memory recall across edge cases
• •Fixed macOS LaunchAgent upgrade recovery and invalid config handling—invalid configs now fail closed with `openclaw doctor --fix` owning repairs
• •Memory status split into sqlite-vec store readiness and embedding-provider readiness to prevent false provider failure warnings
• •Sandbox container/browser registry entries stored as per-runtime shard files to reduce session lock contention
• •Added tree-sitter-backed shell command explainer for approval and command-review surfaces
• •CLI improvements: plugin beta updates prioritized, better error messaging for missing plugin commands, and cleaner exit status handling

Workflow Diagram

Concepts

Artifacts (7)

channels:
  whatsapp:
    targets:
      - type: "newsletter"
        sessionMetadata:
          channelId: "@newsletter"
          outboundTarget: "explicit"
      - type: "dm"
        sessionMetadata:
          routing: "direct"

plugins:
  entries:
    file-transfer:
      config:
        nodes:
          - nodeId: "node-1"
            paths:
              - "/allowed/path"
            followSymlinks: false
            byteCeiling: 16777216
          - nodeId: "node-2"
            paths:
              - "/data/exports"
            followSymlinks: true
            byteCeiling: 16777216

channels:
  discord:
    statusReactions:
      trackToolCalls: true
      toolEmojiMapping:
        file_fetch: "📥"
        dir_list: "📂"
        apply_patch: "🔧"
      degradedTransportReporting: true

# Recover broken macOS LaunchAgent and repair stale state
openclaw doctor --fix

# Non-interactive repair during dev Gateway startup
openclaw doctor --fix --non-interactive

# Migrate legacy monolithic registry files to per-runtime shards
openclaw doctor --fix --migrate-sandbox-registry

# List plugins with dependency install state
openclaw plugins list --json

# Enable bundled plugin
openclaw plugins enable <plugin-name>

# Update plugins (tries @beta first on beta channel)
openclaw plugins update

# Install optional official plugins during setup
openclaw plugins install --official

# Check memory status (cheap read-only path)
openclaw memory status
openclaw memory status --json

# Deep memory diagnostics (includes vector/embedding provider probes)
openclaw memory status --deep
openclaw memory status --index

# Run Mantis Discord bot smoke test
pnpm openclaw qa mantis discord-smoke

# Manual GitHub workflow verification
# Verifies:
# - Configured guild/channel visibility
# - Smoke message posting
# - Reaction addition
# - Artifact upload