OpenClaw
Crabbox hardens secret redaction, redirect guards, and artifact validation
Crabbox shipped five fixes that close security and correctness gaps across providers, runners, and artifact handling.
read --wire →
$ tail -f topics/ai-agents.log
AI Agents news, every morning.
Daily updates from the AI-agent and agentic-coding ecosystem - LangChain, OpenHands, Cline, and LlamaIndex. What shipped this week in the frameworks and coding agents developers are building on.
58 updates across 2 projects this week.
Your week in AI Agents, every Monday.
One calm review of what shipped across AI Agents - the commits, releases, and security advisories that matter. Every Monday, with security advisories same-day. Free, unsubscribe in one click.
We'll start you on the top AI Agents projects - refine anytime. · Read a sample issue →
Recent wires
OpenClaw
Crabbox revokes Code viewer sessions on logout, adds Scaleway SSH leases
Crabbox now revokes Code viewer sessions server-side on GitHub portal logout and adds a direct Scaleway SSH-lease provider, with Cloudflare Access key fetches bounded behind admin auth.
read --wire →
OpenClaw
CLI typo suggestions, iOS notification fix, axios internals cleanup
OpenClaw improves CLI error handling with close-command suggestions, fixes iOS notification settings behavior, and stops poking at axios private internals in the Feishu extension.
read --wire →
OpenClaw
OpenClaw prunes stale agent APIs, Clownfish tightens security review routing
OpenClaw dropped five stale agent APIs while Clownfish hardened its security review pipeline against false positives and Clownfish docs replaced a vulnerable parser.
read --wire →
OpenClaw
Docs translation CI throttled, queue fixes prioritize fresh canaries
Docs translation CI now stays under GitHub's job limits while queue and publish fixes tighten behavior on fresh artifacts.
read --wire →
OpenClaw
Authenticated adapter ingress, release hardening across OpenClaw
Crabbox shipped an authenticated reverse proxy for loopback services and ClawSweeper cut 0.3.0, while OpenClaw fixed a desktop quota pill regression and a 700ms debounce that was hiding Discord tool emojis.
read --wire →
OpenClaw
Apple container inspect parsing hardened, QA scenarios move to YAML
Crabbox now tolerates Apple container 1.0.0's inspect JSON shape, and OpenClaw's QA corpus has migrated from Markdown to direct YAML files.
read --wire →
OpenClaw
Copilot replay thinking blocks stripped, WhatsApp login persistence fixed
GitHub Copilot Claude replay turns now strip thinking blocks, and a P1 WhatsApp login regression is fixed so Docker rebuilds no longer force relinks.
read --wire →
OpenClaw
Gateway mirrors commentary events, docs builder reusable for ClawHub
Gateway now forwards commentary-phase assistant events to session subscribers, while Crabbox adds host bind mounts and new providers, and the docs builder is reusable for ClawHub.
read --wire →
OpenClaw
Crabbox gains Hyper-V and OpenComputer providers, Islo adds Tailscale egress
Crabbox's provider portfolio expands with a Hyper-V local-Windows provider and an OpenComputer REST-API sandbox, while Islo leases gain opt-in Tailscale egress.
read --wire →
OpenClaw
ClickClack explicit enable, durable auto-reply summaries
ClickClack can now be explicitly enabled even with a nonempty plugin allowlist, and CLI-backed auto-reply runs now record durable tool summaries.
read --wire →
OpenClaw
OpenClaw security remediation and gateway fixes lead the day
OpenClaw merged a set of security fixes and gateway improvements, with the worker in clownfish now recovering terminal results and preserving branch metadata.
read --wire →
OpenClaw
Feishu rate-limit retries, Telegram /compact restored
OpenClaw's Feishu connector now retries rate-limited sends while Telegram's /compact command is fixed to actually produce a visible reply.
read --wire →
OpenClaw
Leaner tool catalogs, cleaner Anthropic replays
openclaw/openclaw compacted default local tool catalogs and dropped persistent reasoning signatures from Anthropic replays.
read --wire →
OpenClaw
Zalo and Matrix media stores move to SQLite, MiniMax M3 exempted from thinking wrapper
Two plugin refactors persist hosted media and sync caches in SQLite, and a MiniMax fix stops M3 from returning empty content.
read --wire →
OpenClaw
iMessage RPC framing fixed after head-of-line jam
OpenClaw fixes iMessage RPC framing that caused a receive jam, plus Codex timeout diagnostics and reply preservation.
read --wire →
OpenClaw
CI guard fixed, iOS attachment and gateway polish
OpenClaw fixes main CI guard drift and cleans up iOS UI details while docs sync churns.
read --wire →
OpenClaw
RTT release coverage backfilled and hardened
openclaw-rtt backfills missing RPC and Control UI coverage for the 2026.6.1 beta while making release imports rebase against their workflow ref, closing a known coverage gap.
read --wire →
OpenClaw
Control UI chat startup coalesces model and command metadata
A new negotiated chat.metadata Gateway RPC coalesces model catalog and slash command loading for Control UI chat startup, cutting the first-message path free of that dependency graph.
read --wire →
OpenClaw
Channel model overrides now honored in agent ingress
OpenClaw now applies channel-level model overrides before the default model reaches fallback or auth in agent-command ingress.
read --wire →