RepoJournal
OpenClaw @openclaw
109 wires and counting

$ follow OpenClaw

Keep up with OpenClaw in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-11
stories 159
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

ClawSweeper consolidates GitHub App auth, retires dead telemetry

By RepoJournal · Filed · About OpenClaw

openclaw-docs-sync[bot] Peter Steinberger Martin Cleary Vyctor H. Brzezowski
4 people shipped this
openclaw-docs-sync[bot] @openclaw-docs-sync[bot] 5 cited Peter Steinberger @steipete 4 cited Martin Cleary @brokemac79 2 cited Vyctor H. Brzezowski @vyctorbrzezowski 1 cited

ClawSweeper now routes dashboard GitHub App credentials through a single canonical stack, duplicating security-critical signing code no longer, while retiring a telemetry pipeline that had no production producer.

ClawSweeper unified its two dashboard production entry points onto one canonical GitHub App auth stack [1]. Previously, worker.ts and exact-review-queue.ts each implemented the full credential pipeline, duplicating thirteen functions including JWT signing and PKCS1-to-PKCS8 wrapping. The refactor eliminates the highest-ranked divergence risk: two copies of security-critical signing code in the files that make every authenticated GitHub call.

The per-item review telemetry pipeline has been retired [2], because it never had a production producer. POST /internal/exact-review/review-telemetry was only ever called by tests; the contract was written for PR #674, which closed unmerged. Consequently, /api/review-observability reported large expected_attempts against terminal_attempts: 0 and a 100% abnormal rate. Removing the pipeline and its dead endpoint clears that misleading signal.

In a related cleanup, twelve verified dead-surface items were deleted, removing roughly 1,443 net lines [3]. The orphan exact-review batch coordinator prototype, a superseded git compactor, and two unreferenced JSON schemas (one diverged from the live validator) are gone. This follows the team's decision to merge the semantic no-op suppression [4] despite a remaining proof gate, accepting the risk and monitoring for two hours after merge.

Meanwhile, OpenClaw fixed an agent reporting bug: undelivered subagent results are no longer reported as delivered [5]. The inactive-cron guard now records intentional non-delivery truthfully before dispatch, and the change includes a regression test for that path. ClawSweeper also scoped its Codex proof policy [6] with new dependency gate boundary tests. On the UI side, queued chat messages can now be edited in place [7]: a pencil or double-click lifts the message and attachments into the composer, the row stays marked Editing, and sending retires the original. Docs synced five commits [8][9][10][11][12], including the new message-editing behavior.

Action items

References

  1. [1] refactor(dashboard): one canonical GitHub App auth stack (#1115) ↗ openclaw/clawsweeper
  2. [2] refactor(observability): retire the producer-free per-item review telemetry pipeline (#1090) ↗ openclaw/clawsweeper
  3. [3] refactor: delete verified dead surface and retained dispatch arguments (#1106) ↗ openclaw/clawsweeper
  4. [4] fix: suppress semantic no-op hot review writes (#1088) ↗ openclaw/clawsweeper
  5. [5] fix(agents): stop reporting undelivered subagent results as delivered (#121837) ↗ openclaw/openclaw
  6. [6] fix(review): scope Codex proof policy (#1093) ↗ openclaw/clawsweeper
  7. [7] feat(ui): edit a queued chat message in place (#121692) ↗ openclaw/openclaw
  8. [8] chore(sync): mirror docs from openclaw/openclaw@36fbd869eda1c8ca67df42262983eb8f9739c3df ↗ openclaw/docs
  9. [9] chore(sync): mirror docs from openclaw/openclaw@90ddeb4b4065697b4c2b7ef7c03e91c47de588ac ↗ openclaw/docs
  10. [10] chore(sync): mirror docs from openclaw/openclaw@9327c10d2bdc69519f6131d409ac3bc3e9300b27 ↗ openclaw/docs
  11. [11] chore(sync): mirror docs from openclaw/openclaw@c5b7b8e33c99a14921f7bebd4c9a47022b0e9bac ↗ openclaw/docs
  12. [12] chore(sync): mirror docs from openclaw/openclaw@73a9eed95ba23ea3442ce598f6474ce78dca4c1b ↗ openclaw/docs
Topics: AI Agents AI / ML Full archive →

Quick answers

What shipped in OpenClaw on August 11, 2026?
ClawSweeper now routes dashboard GitHub App credentials through a single canonical stack, duplicating security-critical signing code no longer, while retiring a telemetry pipeline that had no production producer. In total, 108 commits and 51 pull requests landed.
Who contributed to OpenClaw on August 11, 2026?
4 developers shipped this update, including Peter Steinberger, Vyctor H. Brzezowski, Martin Cleary, and openclaw-docs-sync[bot].
What were the notable OpenClaw updates?
refactor(dashboard): one canonical GitHub App auth stack (#1115), refactor(observability): retire the producer-free per-item review telemetry pipeline (#1090), and refactor: delete verified dead surface and retained dispatch arguments (#1106).
♥

$ log @openclaw --recent

Gesture update rollback guard fixed; Slack slackens redundant work 150 shipped OpenClaw ships crabbox v0.44.0, fixes UI credential leak 117 shipped Browser screenshot hints stop naming removed tools 127 shipped Plugin JSON body reading converges on one bounded reader 135 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.