[Release] openclaw/openclaw v2026.5.12-beta.1: openclaw 2026.5.12-beta.1

OpenClaw v2026.5.12-beta.1 is a maintenance and feature release addressing security, UI/UX, and provider integrations. Key improvements include memory-wiki admin scope requirements, subagent session hierarchy visualization, Gemini 3 model normalization, enhanced tool policies, and expanded Slack/iMessage channel support. The release also upgrades build infrastructure to pnpm 11 and refines plugin SDK public APIs.

Key Points

• •Security: Require admin scope for memory-wiki ingest and write scope for Obsidian search to restrict unauthorized access
• •UI/UX: Nest subagent sessions under parent sessions in dropdown with visual `└─ ` prefix for clearer hierarchy (fixes #77628)
• •Models: Normalize retired Gemini 3 Pro Preview IDs to `google/gemini-3.1-pro-preview` across SDK OAuth, CLI auth, and provider catalogs
• •Tool Policies: Add per-sender tool policies with channel-scoped sender keys to restrict dangerous tools by requester identity across all tool surfaces
• •Agent-to-Agent: Increase `session.agentToAgent.maxPingPongTurns` limit to 20 (default 5) for longer reply chains (fixes #52382)
• •Slack Enhancements: Add `unfurlLinks`/`unfurlMedia` config, explicit `replyBroadcast` support, and preserve mention metadata in inbound context
• •Build Infrastructure: Upgrade to pnpm 11 workspace management and enable stricter oxlint/Vitest/TypeScript compiler checks
• •Plugin SDK: Deprecate unused public subpaths and remove owner/provider-specific helpers; expose active model metadata to native plugin factories
• •Cron/Channels: Add direct `cron.get` inspection and `channels status --channel` filtering for iMessage/BlueBubbles cutover
• •Diagnostics: Add targeted model transport, payload, SSE, and code-mode logging with redacted URL handling

Workflow Diagram

Concepts

Artifacts (6)

session:
  agentToAgent:
    maxPingPongTurns: 20  # increased from default 5 for longer reply chains

slack:
  chat:
    postMessage:
      unfurlLinks: false  # suppress link previews
      unfurlMedia: false  # suppress media previews
  # per-account overrides supported

tools:
  policies:
    - sender: "channel:slack:C123456"  # channel-scoped sender key
      restrictions:
        - tool: "dangerous_tool"
          allow: false
    - sender: "user:slack:U789012"
      restrictions:
        - tool: "file_delete"
          allow: false

# Get single cron job by ID
openclaw cron get <id>

# List all cron jobs
openclaw cron list

# Agent tool support for cron inspection
# Use in agent definitions for automated cron management

# Filter channel status by name
openclaw channels status --channel <name>

# Example: Check iMessage channel without starting both monitors
openclaw channels status --channel imsg

# Upgraded to pnpm 11
# Update workflows: Docker, install, update, release
# QA workflows: Telegram aligned with pnpm 11 allowlist
# Git source installs: use pnpm 11 config surface