ci: add process exec codeql security shard

fix(agents): narrow sessions_send active-run fallback
Limit sessions_send active-run queue delivery to run-scoped targets, keep stranded cron-run fallback for valid cron run keys, and report unsafe queue rejections without rerouting through durable sessions. Fixes #91420.
2026-06-25 00:34:16 +08:00 · 2026-06-13 20:38:21 +08:00 · 2026-06-13 20:31:50 +08:00 · 2026-06-13 20:16:13 +08:00 · 2026-06-13 19:57:09 +08:00 · 2026-06-13 19:55:37 +08:00
273 changed files with 5654 additions and 896 deletions
--- a/.github/codeql/codeql-process-exec-boundary-critical-security.yml
+++ b/.github/codeql/codeql-process-exec-boundary-critical-security.yml
@@ -0,0 +1,61 @@
+name: openclaw-codeql-process-exec-boundary-critical-security
+
+disable-default-queries: true
+
+queries:
+  - uses: security-extended
+
+query-filters:
+  - include:
+      precision:
+        - high
+        - very-high
+      tags contain: security
+      security-severity: /([7-9]|10)\.(\d)+/
+
+paths:
+  - src/process
+  - src/tui/tui-local-shell.ts
+  - src/tui/tui.ts
+  - src/plugin-sdk/windows-spawn.ts
+  - packages/agent-core/src/harness/env
+  - packages/memory-host-sdk/src/host
+  - extensions/acpx/src
+  - extensions/bonjour/src/advertiser.ts
+  - extensions/browser/src/browser/chrome-mcp.ts
+  - extensions/browser/src/browser/chrome.executables.ts
+  - extensions/browser/src/browser/chrome.ts
+  - extensions/codex/src/app-server/sandbox-exec-server
+  - extensions/codex/src/app-server/transport-stdio.ts
+  - extensions/codex/src/node-cli-sessions.ts
+  - extensions/codex-supervisor/src/json-rpc-client.ts
+  - extensions/file-transfer/src
+  - extensions/google-meet/src
+  - extensions/imessage/src
+  - extensions/memory-core/src/memory/qmd-manager.ts
+  - extensions/memory-wiki/src/obsidian.ts
+  - extensions/microsoft-foundry/cli.ts
+  - extensions/ollama/src/wsl2-crash-loop-check.ts
+  - extensions/qa-lab/src
+  - extensions/signal/src/daemon.ts
+  - extensions/tts-local-cli/speech-provider.ts
+  - extensions/voice-call/src
+  - scripts
+
+paths-ignore:
+  - "**/node_modules"
+  - "**/coverage"
+  - "**/*.generated.ts"
+  - "**/*.bundle.js"
+  - "**/*-runtime.js"
+  - "**/*.test.ts"
+  - "**/*.test.tsx"
+  - "**/*.spec.ts"
+  - "**/*.spec.tsx"
+  - "**/*.e2e.test.ts"
+  - "**/*.e2e.test.tsx"
+  - "**/*test-support*"
+  - "**/*test-helper*"
+  - "**/*mock*"
+  - "**/*fixture*"
+  - "**/*bench*"
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -17,7 +17,28 @@ on:
      - ".github/actions/**"
      - ".github/codeql/**"
      - ".github/workflows/**"
+      - "extensions/acpx/src/**"
+      - "extensions/bonjour/src/advertiser.ts"
+      - "extensions/browser/src/browser/chrome-mcp.ts"
+      - "extensions/browser/src/browser/chrome.executables.ts"
+      - "extensions/browser/src/browser/chrome.ts"
+      - "extensions/codex/src/app-server/sandbox-exec-server/**"
+      - "extensions/codex/src/app-server/transport-stdio.ts"
+      - "extensions/codex/src/node-cli-sessions.ts"
+      - "extensions/codex-supervisor/src/json-rpc-client.ts"
+      - "extensions/file-transfer/src/**"
+      - "extensions/google-meet/src/**"
+      - "extensions/imessage/src/**"
+      - "extensions/memory-core/src/memory/qmd-manager.ts"
+      - "extensions/memory-wiki/src/obsidian.ts"
+      - "extensions/microsoft-foundry/cli.ts"
+      - "extensions/ollama/src/wsl2-crash-loop-check.ts"
+      - "extensions/qa-lab/src/**"
+      - "extensions/signal/src/daemon.ts"
+      - "extensions/tts-local-cli/speech-provider.ts"
+      - "extensions/voice-call/src/**"
      - "packages/**"
+      - "scripts/**"
      - "src/**"
  push:
    branches:
@@ -26,7 +47,28 @@ on:
      - ".github/actions/**"
      - ".github/codeql/**"
      - ".github/workflows/**"
+      - "extensions/acpx/src/**"
+      - "extensions/bonjour/src/advertiser.ts"
+      - "extensions/browser/src/browser/chrome-mcp.ts"
+      - "extensions/browser/src/browser/chrome.executables.ts"
+      - "extensions/browser/src/browser/chrome.ts"
+      - "extensions/codex/src/app-server/sandbox-exec-server/**"
+      - "extensions/codex/src/app-server/transport-stdio.ts"
+      - "extensions/codex/src/node-cli-sessions.ts"
+      - "extensions/codex-supervisor/src/json-rpc-client.ts"
+      - "extensions/file-transfer/src/**"
+      - "extensions/google-meet/src/**"
+      - "extensions/imessage/src/**"
+      - "extensions/memory-core/src/memory/qmd-manager.ts"
+      - "extensions/memory-wiki/src/obsidian.ts"
+      - "extensions/microsoft-foundry/cli.ts"
+      - "extensions/ollama/src/wsl2-crash-loop-check.ts"
+      - "extensions/qa-lab/src/**"
+      - "extensions/signal/src/daemon.ts"
+      - "extensions/tts-local-cli/speech-provider.ts"
+      - "extensions/voice-call/src/**"
      - "packages/**"
+      - "scripts/**"
      - "src/**"
  schedule:
    - cron: "0 6 * * *"
@@ -73,6 +115,11 @@ jobs:
            runs_on: blacksmith-4vcpu-ubuntu-2404
            timeout_minutes: 25
            config_file: ./.github/codeql/codeql-mcp-process-tool-boundary-critical-security.yml
+          - language: javascript-typescript
+            category: process-exec-boundary
+            runs_on: blacksmith-4vcpu-ubuntu-2404
+            timeout_minutes: 25
+            config_file: ./.github/codeql/codeql-process-exec-boundary-critical-security.yml
          - language: javascript-typescript
            category: plugin-trust-boundary
            runs_on: blacksmith-4vcpu-ubuntu-2404
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,30 +2,6 @@

 Docs: https://docs.openclaw.ai

-## 2026.6.7
-
-### Highlights
-
- Channel delivery is tighter across Slack, Telegram, outbound media, silent replies, progress drafts, and paged action results: same-channel Slack finals persist in transcripts, top-level `image` message-tool sends attach media, expandable Telegram blockquotes and spooled replay survive delivery, explicit silent assistant replies stay silent, progress draft startup failures are reported, and channel action result pages can be fetched incrementally. (#92498, #92407, #92416, #92281, #92073, #92083, #88993) Thanks @TurboTheTurtle, @ichirokyoto, @xydigit-sj, @joshavant, @sallyom, @hansraj316, and @fuller-stack-dev.
- Provider and model handling is more resilient: Kimi K2.7 Code is available, Kimi native tool-call ids and replayed `reasoning_content` are repaired, Mistral skips unreadable tool schemas, Fireworks catalog parameters come from manifests, DeepSeek keeps configured static transport, provider fallbacks resolve correctly, Anthropic thinking replay is repaired, and Anthropic Vertex stops re-marking transport-budgeted cache control. (#92554, #92396, #90242, #90326, #92265, #92293, #92286, #92387) Thanks @xialonglee, @vincentkoc, @obuchowski, @joshavant, and @openperf.
- User-visible context and auth boundaries are safer: Feishu no longer leaks prompt-preface runtime context into replies, WebSocket payload handling is hardened, CLI-backed `/btw` fallback fails closed, local setup trust is hardened, and Skill Workshop symlink writes are gated and validated before rollback metadata is written. (#92589, #92593, #92226, #92175) Thanks @jovi2014-cyber, @zhangqueping, and @joshavant.
- Agent, memory, Codex, cron, and update recovery paths preserve the useful failure now: invalid plugin model catalogs are isolated, QMD startup failures survive fallback errors, Codex memory prompts remain registered, source message tool replies no longer stop agent progress, structured unsupported-model errors are classified, heartbeat/cron terminal state is preserved, Linux service updates hand off cleanly, and cron status reports the SQLite store path. (#92564, #92218, #92618, #92350, #92343, #92280, #92231, #92225, #92144) Thanks @tangtaizong666, @zhbcher, @mushuiyu886, @rubencu, @joshavant, and @liuhao1024.
- UI, docs, QA, Docker, and release proof are easier to trust: accessibility contrast/focus/font fixes landed, empty Workboard columns can hide, the design-system docs are documented, uptime monitors are pointed at `/health`, Windows Hub docs pin the verified stable installer links, QA evidence and scorecard taxonomy artifacts are produced, QA Lab is bundled into Docker images, and lifecycle timeout cleanup survives leader exit. (#89822, #89615, #89827, #55768, #92608, #92605, #91484, #91500, #92087, #92566) Thanks @BunsDev, @faahim, @liuhao1024, @lzyyzznl, @RomneyDa, and @jesse-merhi.
-
-### Changes
-
- QA and release validation now emit scorecard taxonomy and evidence artifacts, split plugin ClawHub publishing paths, use trusted plugin npm publishing, keep plugin publish checks authoritative, and align the root package, publishable plugin manifests, generated baselines, and native app versions for the 2026.6.7 beta train. (#91484, #91500) Thanks @RomneyDa.
- Docs and operator guidance now cover Gateway uptime monitoring, design-system guidance, Windows Hub stable download pins, removed stale ClawHub navigation, WhatsApp inbound compatibility, and doctor/update progress behavior. (#55768, #92608, #89827, #92605) Thanks @faahim, @liuhao1024, @BunsDev, and @lzyyzznl.
- Matrix plugin release metadata is aligned with the core beta train and records the version-alignment changelog entry for package publication.
-
-### Fixes
-
- Channels and outbound flows preserve user intent across Slack transcript mirrors, Telegram polling conflicts and transient draft-preview failures, outbound image sends, explicit silent assistant replies, progress-draft startup errors, paged action results, WhatsApp inbound aliases, local setup trust, and heartbeat commitment delivery. (#92498, #92281, #92407, #92416, #92073, #92083, #88993, #92175, #92231) Thanks @TurboTheTurtle, @joshavant, @ichirokyoto, @xydigit-sj, @sallyom, @hansraj316, and @fuller-stack-dev.
- Provider, model, and tool replay fixes cover unreadable Mistral schemas, Fireworks manifest model parameters, Kimi K2.7 Code/tool-call/reasoning replay, DeepSeek transport inheritance, managed SecretRef auth, static model fallbacks, rejected Anthropic thinking replay, Anthropic Vertex cache control, and OTLP trace correlation. (#90242, #90326, #92554, #92396, #92265, #92235, #92293, #92286, #92387, #92276) Thanks @vincentkoc, @obuchowski, @xialonglee, @joshavant, and @openperf.
- Agent/runtime recovery now isolates invalid plugin model catalogs, preserves Codex memory prompt registration, continues after source message tool replies, classifies structured unsupported-model errors, reports QMD startup failures beside fallback errors, preserves cron timeout/cancel state, keeps disabled heartbeat one-shot retries working, and keeps Linux service auto-updates readable and handed off. (#92564, #92350, #92343, #92280, #92218, #92618, #92225, #92282, #92144) Thanks @tangtaizong666, @rubencu, @joshavant, @zhbcher, @mushuiyu886, and @liuhao1024.
- Install, sandbox, doctor, and security surfaces render CLI skill prompts from materialized paths, fail closed for CLI-backed `/btw`, resolve doctor SecretRef previews, diagnose blocked external channel plugins, validate and gate Skill Workshop symlink writes, stop after failed Node package installs, and keep unsupported daemon service status readable. (#92508, #92226, #92229, #86629) Thanks @brokemac79, @joshavant, and @brokemac79.
- Release, CI, E2E, Docker, and dependency gates keep lifecycle timeout cleanup alive, bundle QA Lab runtime in Docker images, update the esbuild audit pin, harden Docker process cleanup, keep plugin publish checks authoritative, and remove noisy redundant proof scripts so release failures stay bounded. (#92566, #92087, #92540) Thanks @RomneyDa and @jesse-merhi.
-
 ## 2026.6.6

 ### Highlights
--- a/apps/android/app/build.gradle.kts
+++ b/apps/android/app/build.gradle.kts
@@ -65,8 +65,8 @@ android {
    applicationId = "ai.openclaw.app"
    minSdk = 31
    targetSdk = 36
-    versionCode = 2026060701
-    versionName = "2026.6.7"
+    versionCode = 2026060201
+    versionName = "2026.6.2"
    ndk {
      // Support all major ABIs — native libs are tiny (~47 KB per ABI)
      abiFilters += listOf("armeabi-v7a", "arm64-v8a", "x86", "x86_64")
--- a/apps/ios/CHANGELOG.md
+++ b/apps/ios/CHANGELOG.md
@@ -1,9 +1,5 @@
 # OpenClaw iOS Changelog

-## 2026.6.7 - 2026-06-13
-
-Maintenance update for the current OpenClaw beta release.
-
 ## 2026.6.2 - 2026-06-02

 OpenClaw is now available on iPhone.
--- a/apps/ios/Config/Version.xcconfig
+++ b/apps/ios/Config/Version.xcconfig
@@ -2,8 +2,8 @@
 // Source of truth: apps/ios/version.json
 // Generated by scripts/ios-sync-versioning.ts.

-OPENCLAW_IOS_VERSION = 2026.6.7
-OPENCLAW_MARKETING_VERSION = 2026.6.7
+OPENCLAW_IOS_VERSION = 2026.6.2
+OPENCLAW_MARKETING_VERSION = 2026.6.2
 OPENCLAW_BUILD_VERSION = 1

 #include? "../build/Version.xcconfig"
--- a/apps/ios/fastlane/metadata/en-US/release_notes.txt
+++ b/apps/ios/fastlane/metadata/en-US/release_notes.txt
@@ -1 +1,3 @@
-Maintenance update for the current OpenClaw beta release.
+OpenClaw is now available on iPhone.
+
+Connect to your OpenClaw Gateway to chat with your assistant, use realtime Talk mode, review approvals, share content from iOS, and bring device capabilities like camera, location, screen, and notifications into your private automation workflows.
--- a/apps/ios/version.json
+++ b/apps/ios/version.json
@@ -1,3 +1,3 @@
 {
-  "version": "2026.6.7"
+  "version": "2026.6.2"
 }
--- a/apps/macos/Sources/OpenClaw/Resources/Info.plist
+++ b/apps/macos/Sources/OpenClaw/Resources/Info.plist
@@ -15,9 +15,9 @@
    <key>CFBundlePackageType</key>
    <string>APPL</string>
    <key>CFBundleShortVersionString</key>
-    <string>2026.6.7</string>
+    <string>2026.6.2</string>
    <key>CFBundleVersion</key>
-    <string>2026060700</string>
+    <string>2026060200</string>
    <key>CFBundleIconFile</key>
    <string>OpenClaw</string>
    <key>CFBundleURLTypes</key>
--- a/docs/.generated/config-baseline.sha256
+++ b/docs/.generated/config-baseline.sha256
@@ -1,4 +1,4 @@
-325e16b4b72af24ba1f3f0fe47de9f1ef33b519ec9c3c397d36ca32a0f5d30fe  config-baseline.json
-98d89baead00fad00143fbc7361d16b824d077e4c52cc00c2e6fc9c5f9e27237  config-baseline.core.json
-7641a0edd1f7ddb904d394381017cb645d2c2c1a86d875df30e9bf11f8dd012e  config-baseline.channel.json
-b0dec5acfe60557e728e5ad03cc36d19d2432d51f755656c97846afa7fbe374a  config-baseline.plugin.json
+37b56008790612b8293930b6a29d74490e98daa90f954fca9d133fcc28645c4c  config-baseline.json
+75b64c2ea081369ba4306493313a8a4cd48b784145f92fed995e6b77a5df350d  config-baseline.core.json
+17d64c9799dfa239a49493413f1100bdd9237e9b67aaeae331a4604dbc227023  config-baseline.channel.json
+f9d1f50bfa8403891e76cd99dc1357cdece4a71e8ae18a39b190c2a14e6f97b0  config-baseline.plugin.json
--- a/docs/.generated/plugin-sdk-api-baseline.sha256
+++ b/docs/.generated/plugin-sdk-api-baseline.sha256
@@ -1,2 +1,2 @@
-71fc42f55453e3a28e135afe87db1fff55f3c1cfa3d6f5edba137f65ba91d1d0  plugin-sdk-api-baseline.json
-e572926ea66060e142ea93c3d26352b74b13e24e26c6df02e0b9e5145f9c9dec  plugin-sdk-api-baseline.jsonl
+2c783beea6b3cda3d79060739a923f9f39e7e8b5942123dd6b08a09143a587ca  plugin-sdk-api-baseline.json
+0b33af2cffb42abb46682fb71c8f214da220793f13d10a34d332e75ff99e8ce9  plugin-sdk-api-baseline.jsonl
--- a/docs/ci.md
+++ b/docs/ci.md
@@ -452,7 +452,7 @@ For normal PRs, follow scoped CI/check evidence instead of treating parity as a

 The `CodeQL` workflow is intentionally a narrow first-pass security scanner, not the full repository sweep. Daily, manual, and non-draft pull request guard runs scan Actions workflow code plus the highest-risk JavaScript/TypeScript surfaces with high-confidence security queries filtered to high/critical `security-severity`.

-The pull request guard stays light: it only starts for changes under `.github/actions`, `.github/codeql`, `.github/workflows`, `packages`, or `src`, and it runs the same high-confidence security matrix as the scheduled workflow. Android and macOS CodeQL stay out of PR defaults.
+The pull request guard stays light: it only starts for changes under `.github/actions`, `.github/codeql`, `.github/workflows`, `packages`, `scripts`, `src`, or process-owning bundled plugin runtime paths, and it runs the same high-confidence security matrix as the scheduled workflow. Android and macOS CodeQL stay out of PR defaults.

 ### Security categories

@@ -462,6 +462,7 @@ The pull request guard stays light: it only starts for changes under `.github/ac
 | `/codeql-security-high/channel-runtime-boundary`  | Core channel implementation contracts plus the channel plugin runtime, gateway, Plugin SDK, secrets, audit touchpoints              |
 | `/codeql-security-high/network-ssrf-boundary`     | Core SSRF, IP parsing, network guard, web-fetch, and Plugin SDK SSRF policy surfaces                                                |
 | `/codeql-security-high/mcp-process-tool-boundary` | MCP servers, process execution helpers, outbound delivery, and agent tool-execution gates                                           |
+| `/codeql-security-high/process-exec-boundary`     | Local shell, process spawn helpers, subprocess-owning bundled plugin runtimes, and workflow script glue                             |
 | `/codeql-security-high/plugin-trust-boundary`     | Plugin install, loader, manifest, registry, package-manager install, source-loading, and Plugin SDK package contract trust surfaces |

 ### Platform-specific security shards
--- a/docs/cli/wiki.md
+++ b/docs/cli/wiki.md
@@ -35,6 +35,7 @@ openclaw wiki status
 openclaw wiki doctor
 openclaw wiki init
 openclaw wiki ingest ./notes/alpha.md
+openclaw wiki okf import ./knowledge-catalog/okf/bundles/ga4
 openclaw wiki compile
 openclaw wiki lint
 openclaw wiki search "alpha"
@@ -104,6 +105,31 @@ Notes:
 - imported source pages keep provenance in frontmatter
 - auto-compile can run after ingest when enabled

+### `wiki okf import <path>`
+
+Import an unpacked Open Knowledge Format bundle into wiki concept pages.
+
+The importer reads every non-reserved `.md` concept document in the OKF
+directory tree, requires a non-empty `type` field, and treats unknown OKF
+`type` values as generic concepts. Reserved OKF `index.md` and `log.md` files
+are not imported as concepts.
+
+Imported pages are flattened under `concepts/` so existing wiki compile,
+search, get, digest, and dashboard flows see them immediately. The original OKF
+concept ID, `type`, `resource`, `tags`, timestamp, source path, and full
+frontmatter are preserved in the page frontmatter. Internal OKF markdown links
+are rewritten to the generated wiki pages; broken or external links are left
+unchanged.
+
+Examples:
+
+```bash
+openclaw wiki okf import ./bundles/ga4
+openclaw wiki okf import ./bundles/ga4 --json
+openclaw wiki search "BigQuery Table" --mode source-evidence --json
+openclaw wiki get <path-from-json-result>
+```
+
 ### `wiki compile`

 Rebuild indexes, related blocks, dashboards, and compiled digests.
@@ -233,6 +259,8 @@ These require the official `obsidian` CLI on `PATH` when
 - Use `wiki lint` before trusting contradictory or low-confidence content.
 - Use `wiki compile` after bulk imports or source changes when you want fresh
  dashboards and compiled digests immediately.
+- Use `wiki okf import` when a data catalog, documentation export, or agent
+  enrichment pipeline already emits OKF markdown bundles.
 - Use `wiki bridge import` when bridge mode depends on newly exported memory
  artifacts.

--- a/docs/concepts/usage-tracking.md
+++ b/docs/concepts/usage-tracking.md
@@ -30,6 +30,23 @@ title: "Usage tracking"
 - CLI: `openclaw channels list` prints the same usage snapshot alongside provider config (use `--no-usage` to skip).
 - macOS menu bar: "Usage" section under Context (only if available).

+## Custom `/usage full` footer
+
+Set `messages.usageTemplate` to customize the per-response `/usage full`
+footer. The value can be an inline template object or a JSON file path:
+
+```json
+{
+  "messages": {
+    "usageTemplate": "~/.openclaw/usage-footer.json"
+  }
+}
+```
+
+Templates read the `openclaw.usageLine.v1` contract and can use `scales`,
+`aliases`, and `output.surfaces` to render channel-specific footers. Missing,
+unreadable, invalid, or empty templates fall back to the built-in usage line.
+
 ## Providers + credentials

 - **Anthropic (Claude)**: OAuth tokens in auth profiles.
--- a/docs/gateway/openai-http-api.md
+++ b/docs/gateway/openai-http-api.md
@@ -75,6 +75,7 @@ Auth matrix:
  - honor `x-openclaw-scopes` when the header is present
  - fall back to the normal operator default scope set when the header is absent
  - only lose owner semantics when the caller explicitly narrows scopes and omits `operator.admin`
+  - require `operator.admin` for owner-level request controls such as `x-openclaw-model`

 See [Security](/gateway/security) and [Remote access](/gateway/remote).

@@ -96,7 +97,7 @@ OpenClaw treats the OpenAI `model` field as an **agent target**, not a raw provi

 Optional request headers:

- `x-openclaw-model: <provider/model-or-bare-id>` overrides the backend model for the selected agent.
+- `x-openclaw-model: <provider/model-or-bare-id>` overrides the backend model for the selected agent. Shared-secret bearer callers can use this header. Identity-bearing callers, such as trusted-proxy or private no-auth ingress requests with `x-openclaw-scopes`, need `operator.admin`; write-only callers get `403 missing scope: operator.admin`.
 - `x-openclaw-agent-id: <agentId>` remains supported as a compatibility override.
 - `x-openclaw-session-key: <sessionKey>` fully controls session routing.
 - `x-openclaw-message-channel: <channel>` sets the synthetic ingress channel context for channel-aware prompts and policies.
@@ -178,7 +179,7 @@ This is the highest-leverage compatibility set for self-hosted frontends and too

  </Accordion>
  <Accordion title="How do I override the backend model?">
-    Use `x-openclaw-model`.
+    Use `x-openclaw-model`. This is an owner-level override: it works with the Gateway shared-secret bearer token/password path, and it requires `operator.admin` on identity-bearing HTTP paths such as trusted proxy auth.

    Examples:
    `x-openclaw-model: openai/gpt-5.4`
@@ -191,7 +192,7 @@ This is the highest-leverage compatibility set for self-hosted frontends and too
    `/v1/embeddings` uses the same agent-target `model` ids.

    Use `model: "openclaw/default"` or `model: "openclaw/<agentId>"`.
-    When you need a specific embedding model, send it in `x-openclaw-model`.
+    When you need a specific embedding model, send it in `x-openclaw-model` from a shared-secret caller or an identity-bearing caller with `operator.admin`.
    Without that header, the request passes through to the selected agent's normal embedding setup.

  </Accordion>
@@ -285,7 +286,7 @@ Expected behavior:

 - `GET /v1/models` should list `openclaw/default`
 - Open WebUI should use `openclaw/default` as the chat model id
- If you want a specific backend provider/model for that agent, set the agent's normal default model or send `x-openclaw-model`
+- If you want a specific backend provider/model for that agent, set the agent's normal default model or send `x-openclaw-model` from a shared-secret caller or an identity-bearing caller with `operator.admin`

 Quick smoke:

@@ -370,7 +371,7 @@ Notes:

 - `/v1/models` returns OpenClaw agent targets, not raw provider catalogs.
 - `openclaw/default` is always present so one stable id works across environments.
- Backend provider/model overrides belong in `x-openclaw-model`, not the OpenAI `model` field.
+- Backend provider/model overrides belong in `x-openclaw-model`, not the OpenAI `model` field. On identity-bearing HTTP auth paths, this header requires `operator.admin`.
 - `/v1/embeddings` supports `input` as a string or array of strings.

 ## Related
--- a/docs/gateway/security/index.md
+++ b/docs/gateway/security/index.md
@@ -951,7 +951,7 @@ Important boundary note:
 - Treat credentials that can call `/v1/chat/completions`, `/v1/responses`, plugin routes such as `/api/v1/admin/rpc`, or `/api/channels/*` as full-access operator secrets for that gateway.
 - On the OpenAI-compatible HTTP surface, shared-secret bearer auth restores the full default operator scopes (`operator.admin`, `operator.approvals`, `operator.pairing`, `operator.read`, `operator.talk.secrets`, `operator.write`) and owner semantics for agent turns; narrower `x-openclaw-scopes` values do not reduce that shared-secret path.
 - Per-request scope semantics on HTTP only apply when the request comes from an identity-bearing mode such as trusted proxy auth, or from an explicitly no-auth private ingress.
- In those identity-bearing modes, omitting `x-openclaw-scopes` falls back to the normal operator default scope set; send the header explicitly when you want a narrower scope set.
+- In those identity-bearing modes, omitting `x-openclaw-scopes` falls back to the normal operator default scope set; send the header explicitly when you want a narrower scope set. Owner-level OpenAI-compatible headers such as `x-openclaw-model` require `operator.admin` when scopes are narrowed.
 - `/tools/invoke` and HTTP session history endpoints follow the same shared-secret rule: token/password bearer auth is treated as full operator access there too, while identity-bearing modes still honor declared scopes.
 - Do not share these credentials with untrusted callers; prefer separate gateways per trust boundary.

--- a/docs/plugins/hooks.md
+++ b/docs/plugins/hooks.md
@@ -425,6 +425,10 @@ even when the channel payload has no visible text/caption. Rewriting that
 `content` updates the hook-visible transcript only; it is not rendered as a
 media caption.

+`reply_payload_sending` events may include `usageState`, a best-effort live
+per-turn model/usage/context snapshot. Durable delivery, recovered replay, and
+replies without exact run correlation omit it.
+
 Message hook contexts expose stable correlation fields when available:
 `ctx.sessionKey`, `ctx.runId`, `ctx.messageId`, `ctx.senderId`, `ctx.trace`,
 `ctx.traceId`, `ctx.spanId`, `ctx.parentSpanId`, and `ctx.callDepth`. Inbound
--- a/docs/plugins/memory-wiki.md
+++ b/docs/plugins/memory-wiki.md
@@ -25,6 +25,7 @@ less like a pile of Markdown files.
 - Page-level provenance, confidence, contradictions, and open questions
 - Compiled digests for agent/runtime consumers
 - Wiki-native search/get/apply/lint tools
+- Open Knowledge Format imports into compiled wiki concepts
 - Optional bridge mode that imports public artifacts from the active memory plugin
 - Optional Obsidian-friendly render mode and CLI integration

@@ -135,6 +136,34 @@ The main page groups are:
 - `syntheses/` for compiled summaries and maintained rollups
 - `reports/` for generated dashboards

+## Open Knowledge Format imports
+
+`memory-wiki` can import unpacked Open Knowledge Format bundles with:
+
+```bash
+openclaw wiki okf import ./bundles/ga4
+```
+
+This is the cleanest fit when a data catalog, documentation crawler, or
+enrichment agent already produces OKF: keep OKF as the portable exchange
+artifact, then let `memory-wiki` turn it into OpenClaw-native concept pages and
+compiled digests.
+
+The importer follows the OKF v0.1 shape:
+
+- non-reserved `.md` files are concept documents
+- each imported concept needs a non-empty `type` frontmatter field
+- unknown OKF `type` values are accepted
+- reserved `index.md` and `log.md` files are not imported as concepts
+- broken or external markdown links are preserved
+
+Imported concept pages are flattened under `concepts/` so the existing compile,
+search, get, dashboard, and prompt-digest paths see them without adding a second
+wiki tree. Each page keeps the original OKF concept ID, source path, `type`,
+`resource`, `tags`, timestamp, and full producer frontmatter. Internal OKF links
+are rewritten to the generated wiki concept pages and also emitted as structured
+`relationships` entries with `kind: okf-link`.
+
 ## Structured claims and evidence

 Pages can carry structured `claims` frontmatter, not just freeform text.
--- a/extensions/acpx/npm-shrinkwrap.json
+++ b/extensions/acpx/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/acpx",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/acpx",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@agentclientprotocol/claude-agent-acp": "0.39.0",
        "@zed-industries/codex-acp": "0.15.0",
--- a/extensions/acpx/package.json
+++ b/extensions/acpx/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/acpx",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw ACP runtime backend with plugin-owned session and transport management.",
  "repository": {
    "type": "git",
@@ -26,10 +26,10 @@
      "minHostVersion": ">=2026.4.25"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "staticAssets": [
        {
          "source": "./src/runtime-internals/mcp-proxy.mjs",
--- a/extensions/admin-http-rpc/package.json
+++ b/extensions/admin-http-rpc/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/admin-http-rpc",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw admin HTTP RPC endpoint",
  "type": "module",
--- a/extensions/alibaba/package.json
+++ b/extensions/alibaba/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/alibaba-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Alibaba Model Studio video provider plugin",
  "type": "module",
--- a/extensions/amazon-bedrock-mantle/npm-shrinkwrap.json
+++ b/extensions/amazon-bedrock-mantle/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/amazon-bedrock-mantle-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/amazon-bedrock-mantle-provider",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@anthropic-ai/sdk": "0.100.1",
        "@aws/bedrock-token-generator": "1.1.0"
--- a/extensions/amazon-bedrock-mantle/package.json
+++ b/extensions/amazon-bedrock-mantle/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/amazon-bedrock-mantle-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Amazon Bedrock Mantle provider plugin for OpenAI-compatible model routing.",
  "repository": {
    "type": "git",
@@ -24,10 +24,10 @@
      "minHostVersion": ">=2026.5.12-beta.1"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "bundledDist": false
    },
    "release": {
--- a/extensions/amazon-bedrock/npm-shrinkwrap.json
+++ b/extensions/amazon-bedrock/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/amazon-bedrock-provider",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@aws-sdk/client-bedrock": "3.1056.0",
        "@aws-sdk/client-bedrock-runtime": "3.1056.0",
--- a/extensions/amazon-bedrock/package.json
+++ b/extensions/amazon-bedrock/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Amazon Bedrock provider plugin with model discovery, embeddings, and guardrail support.",
  "repository": {
    "type": "git",
@@ -28,10 +28,10 @@
      "minHostVersion": ">=2026.5.12-beta.1"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "bundledDist": false
    },
    "release": {
--- a/extensions/anthropic-vertex/npm-shrinkwrap.json
+++ b/extensions/anthropic-vertex/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/anthropic-vertex-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/anthropic-vertex-provider",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@anthropic-ai/vertex-sdk": "0.16.1"
      }
--- a/extensions/anthropic-vertex/package.json
+++ b/extensions/anthropic-vertex/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/anthropic-vertex-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Anthropic Vertex provider plugin for Claude models on Google Vertex AI.",
  "repository": {
    "type": "git",
@@ -23,10 +23,10 @@
      "minHostVersion": ">=2026.5.12-beta.1"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "bundledDist": false
    },
    "release": {
--- a/extensions/anthropic/openclaw.plugin.json
+++ b/extensions/anthropic/openclaw.plugin.json
@@ -101,6 +101,28 @@
            "contextWindow": 200000,
            "maxTokens": 64000
          },
+          {
+            "id": "claude-haiku-4-5",
+            "name": "Claude Haiku 4.5",
+            "reasoning": true,
+            "input": ["text", "image"],
+            "mediaInput": {
+              "image": { "maxSidePx": 1568, "preferredSidePx": 1568, "tokenMode": "provider" }
+            },
+            "contextWindow": 200000,
+            "maxTokens": 64000
+          },
+          {
+            "id": "claude-haiku-4-5-20251001",
+            "name": "Claude Haiku 4.5",
+            "reasoning": true,
+            "input": ["text", "image"],
+            "mediaInput": {
+              "image": { "maxSidePx": 1568, "preferredSidePx": 1568, "tokenMode": "provider" }
+            },
+            "contextWindow": 200000,
+            "maxTokens": 64000
+          },
          {
            "id": "claude-sonnet-4-6",
            "name": "Claude Sonnet 4.6",
--- a/extensions/anthropic/openclaw.plugin.test.ts
+++ b/extensions/anthropic/openclaw.plugin.test.ts
@@ -0,0 +1,57 @@
+// Anthropic tests cover provider manifest model catalog behavior.
+import { readFileSync } from "node:fs";
+import { describe, expect, it } from "vitest";
+
+type AnthropicManifest = {
+  modelCatalog?: {
+    providers?: {
+      anthropic?: {
+        models?: Array<{
+          id?: string;
+          name?: string;
+          reasoning?: boolean;
+          input?: string[];
+          mediaInput?: {
+            image?: {
+              maxSidePx?: number;
+              preferredSidePx?: number;
+              tokenMode?: string;
+            };
+          };
+          contextWindow?: number;
+          maxTokens?: number;
+        }>;
+      };
+    };
+    discovery?: Record<string, string>;
+  };
+};
+
+const manifest = JSON.parse(
+  readFileSync(new URL("./openclaw.plugin.json", import.meta.url), "utf8"),
+) as AnthropicManifest;
+
+describe("Anthropic plugin manifest", () => {
+  it("resolves both official Claude Haiku 4.5 API identifiers from the static catalog", () => {
+    expect(manifest.modelCatalog?.discovery?.anthropic).toBe("static");
+
+    const models = manifest.modelCatalog?.providers?.anthropic?.models ?? [];
+    for (const id of ["claude-haiku-4-5", "claude-haiku-4-5-20251001"]) {
+      expect(models.find((model) => model.id === id)).toEqual({
+        id,
+        name: "Claude Haiku 4.5",
+        reasoning: true,
+        input: ["text", "image"],
+        mediaInput: {
+          image: {
+            maxSidePx: 1568,
+            preferredSidePx: 1568,
+            tokenMode: "provider",
+          },
+        },
+        contextWindow: 200000,
+        maxTokens: 64000,
+      });
+    }
+  });
+});
--- a/extensions/anthropic/package.json
+++ b/extensions/anthropic/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/anthropic-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Anthropic provider plugin",
  "type": "module",
--- a/extensions/arcee/package.json
+++ b/extensions/arcee/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/arcee-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Arcee provider plugin",
  "type": "module",
--- a/extensions/azure-speech/package.json
+++ b/extensions/azure-speech/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/azure-speech",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Azure Speech plugin",
  "type": "module",
--- a/extensions/bonjour/package.json
+++ b/extensions/bonjour/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/bonjour",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Bonjour/mDNS gateway discovery",
  "type": "module",
  "dependencies": {
--- a/extensions/brave/npm-shrinkwrap.json
+++ b/extensions/brave/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/brave-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/brave-plugin",
-      "version": "2026.6.7-beta.1"
+      "version": "2026.6.2"
    }
  }
 }
--- a/extensions/brave/package.json
+++ b/extensions/brave/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/brave-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Brave Search provider plugin for web search.",
  "repository": {
    "type": "git",
@@ -21,10 +21,10 @@
      "allowInvalidConfigRecovery": true
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/browser/package.json
+++ b/extensions/browser/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/browser-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw browser tool plugin",
  "type": "module",
--- a/extensions/byteplus/package.json
+++ b/extensions/byteplus/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/byteplus-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw BytePlus provider plugin",
  "type": "module",
--- a/extensions/canvas/package.json
+++ b/extensions/canvas/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/canvas-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Canvas plugin",
  "type": "module",
--- a/extensions/cerebras/package.json
+++ b/extensions/cerebras/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/cerebras-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Cerebras provider plugin",
  "type": "module",
--- a/extensions/chutes/package.json
+++ b/extensions/chutes/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/chutes-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Chutes.ai provider plugin",
  "type": "module",
--- a/extensions/clickclack/package.json
+++ b/extensions/clickclack/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/clickclack",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw ClickClack channel plugin",
  "type": "module",
@@ -18,7 +18,7 @@
    "openclaw": "2026.5.28"
  },
  "peerDependencies": {
-    "openclaw": ">=2026.6.7-beta.1"
+    "openclaw": ">=2026.6.2"
  },
  "peerDependenciesMeta": {
    "openclaw": {
--- a/extensions/cloudflare-ai-gateway/package.json
+++ b/extensions/cloudflare-ai-gateway/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/cloudflare-ai-gateway-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Cloudflare AI Gateway provider plugin",
  "type": "module",
--- a/extensions/codex-supervisor/package.json
+++ b/extensions/codex-supervisor/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/codex-supervisor",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Codex app-server fleet supervision plugin.",
  "type": "module",
--- a/extensions/codex/npm-shrinkwrap.json
+++ b/extensions/codex/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/codex",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/codex",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@openai/codex": "0.139.0",
        "typebox": "1.1.39",
--- a/extensions/codex/package.json
+++ b/extensions/codex/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/codex",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Codex app-server harness and model provider plugin with a Codex-managed GPT catalog.",
  "repository": {
    "type": "git",
@@ -26,10 +26,10 @@
      "minHostVersion": ">=2026.5.1-beta.1"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/comfy/package.json
+++ b/extensions/comfy/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/comfy-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw ComfyUI provider plugin",
  "type": "module",
--- a/extensions/copilot-proxy/package.json
+++ b/extensions/copilot-proxy/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/copilot-proxy",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Copilot Proxy provider plugin",
  "type": "module",
--- a/extensions/copilot/npm-shrinkwrap.json
+++ b/extensions/copilot/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/copilot",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/copilot",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@github/copilot-sdk": "1.0.0-beta.9"
      }
--- a/extensions/copilot/package.json
+++ b/extensions/copilot/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/copilot",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw GitHub Copilot agent runtime plugin (registers a `github-copilot` AgentHarness backed by @github/copilot-sdk over JSON-RPC to the GitHub Copilot CLI)",
  "repository": {
    "type": "git",
@@ -25,10 +25,10 @@
      "minHostVersion": ">=2026.5.28"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "bundledDist": false
    },
    "release": {
--- a/extensions/deepgram/package.json
+++ b/extensions/deepgram/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/deepgram-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Deepgram media-understanding provider",
  "type": "module",
--- a/extensions/deepinfra/package.json
+++ b/extensions/deepinfra/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/deepinfra-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw DeepInfra provider plugin",
  "type": "module",
--- a/extensions/deepseek/package.json
+++ b/extensions/deepseek/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/deepseek-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw DeepSeek provider plugin",
  "type": "module",
--- a/extensions/diagnostics-otel/npm-shrinkwrap.json
+++ b/extensions/diagnostics-otel/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/diagnostics-otel",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/diagnostics-otel",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@opentelemetry/api": "1.9.1",
        "@opentelemetry/api-logs": "0.218.0",
--- a/extensions/diagnostics-otel/package.json
+++ b/extensions/diagnostics-otel/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/diagnostics-otel",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw diagnostics OpenTelemetry exporter for metrics and traces.",
  "repository": {
    "type": "git",
@@ -34,10 +34,10 @@
      "minHostVersion": ">=2026.4.25"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/diagnostics-prometheus/npm-shrinkwrap.json
+++ b/extensions/diagnostics-prometheus/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/diagnostics-prometheus",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/diagnostics-prometheus",
-      "version": "2026.6.7-beta.1"
+      "version": "2026.6.2"
    }
  }
 }
--- a/extensions/diagnostics-prometheus/package.json
+++ b/extensions/diagnostics-prometheus/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/diagnostics-prometheus",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw diagnostics Prometheus exporter for runtime metrics.",
  "repository": {
    "type": "git",
@@ -21,10 +21,10 @@
      "minHostVersion": ">=2026.4.25"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/diffs-language-pack/npm-shrinkwrap.json
+++ b/extensions/diffs-language-pack/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/diffs-language-pack",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/diffs-language-pack",
-      "version": "2026.6.7-beta.1"
+      "version": "2026.6.2"
    }
  }
 }
--- a/extensions/diffs-language-pack/package.json
+++ b/extensions/diffs-language-pack/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/diffs-language-pack",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw diffs viewer syntax highlighting language pack",
  "repository": {
    "type": "git",
@@ -22,13 +22,13 @@
      "minHostVersion": ">=2026.5.27"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "assetScripts": {
      "build": "node ../../scripts/build-diffs-viewer-runtime.mjs full"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "staticAssets": [
        {
          "source": "./assets/viewer-runtime.js",
--- a/extensions/diffs/npm-shrinkwrap.json
+++ b/extensions/diffs/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/diffs",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/diffs",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@pierre/diffs": "1.2.4",
        "@pierre/theme": "1.0.3",
--- a/extensions/diffs/package.json
+++ b/extensions/diffs/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/diffs",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw read-only diff viewer plugin and file renderer for agents.",
  "repository": {
    "type": "git",
@@ -29,13 +29,13 @@
      "minHostVersion": ">=2026.4.30"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "assetScripts": {
      "build": "node ../../scripts/build-diffs-viewer-runtime.mjs curated"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1",
+      "openclawVersion": "2026.6.2",
      "staticAssets": [
        {
          "source": "./assets/viewer-runtime.js",
--- a/extensions/discord/npm-shrinkwrap.json
+++ b/extensions/discord/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/discord",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/discord",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@discordjs/voice": "0.19.2",
        "discord-api-types": "0.38.48",
@@ -16,7 +16,7 @@
        "ws": "8.21.0"
      },
      "peerDependencies": {
-        "openclaw": ">=2026.6.7-beta.1"
+        "openclaw": ">=2026.6.2"
      },
      "peerDependenciesMeta": {
        "openclaw": {
--- a/extensions/discord/package.json
+++ b/extensions/discord/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/discord",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Discord channel plugin for channels, DMs, commands, and app events.",
  "repository": {
    "type": "git",
@@ -20,7 +20,7 @@
    "openclaw": "2026.5.28"
  },
  "peerDependencies": {
-    "openclaw": ">=2026.6.7-beta.1"
+    "openclaw": ">=2026.6.2"
  },
  "peerDependenciesMeta": {
    "openclaw": {
@@ -67,10 +67,10 @@
      "allowInvalidConfigRecovery": true
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/document-extract/package.json
+++ b/extensions/document-extract/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/document-extract-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw local document extraction plugin",
  "type": "module",
--- a/extensions/duckduckgo/package.json
+++ b/extensions/duckduckgo/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/duckduckgo-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw DuckDuckGo plugin",
  "type": "module",
--- a/extensions/elevenlabs/package.json
+++ b/extensions/elevenlabs/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/elevenlabs-speech",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw ElevenLabs speech plugin",
  "type": "module",
--- a/extensions/exa/package.json
+++ b/extensions/exa/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/exa-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Exa plugin",
  "type": "module",
--- a/extensions/fal/package.json
+++ b/extensions/fal/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/fal-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw fal provider plugin",
  "type": "module",
--- a/extensions/feishu/npm-shrinkwrap.json
+++ b/extensions/feishu/npm-shrinkwrap.json
@@ -1,19 +1,19 @@
 {
  "name": "@openclaw/feishu",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/feishu",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@larksuiteoapi/node-sdk": "1.66.0",
        "typebox": "1.1.39",
        "zod": "4.4.3"
      },
      "peerDependencies": {
-        "openclaw": ">=2026.6.7-beta.1"
+        "openclaw": ">=2026.6.2"
      },
      "peerDependenciesMeta": {
        "openclaw": {
--- a/extensions/feishu/package.json
+++ b/extensions/feishu/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/feishu",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Feishu/Lark channel plugin for chats and workplace tools (community maintained by @m1heng).",
  "repository": {
    "type": "git",
@@ -17,7 +17,7 @@
    "openclaw": "2026.5.28"
  },
  "peerDependencies": {
-    "openclaw": ">=2026.6.7-beta.1"
+    "openclaw": ">=2026.6.2"
  },
  "peerDependenciesMeta": {
    "openclaw": {
@@ -51,10 +51,10 @@
      "minHostVersion": ">=2026.5.29"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/file-transfer/package.json
+++ b/extensions/file-transfer/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/file-transfer",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw file transfer plugin (file_fetch, dir_list, dir_fetch, file_write)",
  "type": "module",
  "dependencies": {
--- a/extensions/firecrawl/package.json
+++ b/extensions/firecrawl/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/firecrawl-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Firecrawl plugin",
  "type": "module",
--- a/extensions/fireworks/package.json
+++ b/extensions/fireworks/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/fireworks-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Fireworks provider plugin",
  "type": "module",
--- a/extensions/github-copilot/model-metadata.ts
+++ b/extensions/github-copilot/model-metadata.ts
@@ -56,6 +56,10 @@ function isCopilotGeminiModelId(modelId: string): boolean {
  return /(?:^|[-_.])gemini(?:$|[-_.])/.test(modelId);
 }

+function isCopilotClaude45ModelId(modelId: string): boolean {
+  return /^claude-(?:haiku|opus|sonnet)-4[.-]5(?:$|[-.])/.test(modelId);
+}
+
 export function resolveCopilotTransportApi(modelId: string): CopilotRuntimeApi {
  const normalized = normalizeOptionalLowercaseString(modelId) ?? "";
  if (normalized.includes("claude")) {
@@ -71,7 +75,15 @@ export function resolveCopilotModelCompat(
  modelId: string,
 ): ModelDefinitionConfig["compat"] | undefined {
  const normalized = normalizeOptionalLowercaseString(modelId) ?? "";
-  return isCopilotGeminiModelId(normalized) ? { ...COPILOT_CHAT_COMPLETIONS_COMPAT } : undefined;
+  if (isCopilotGeminiModelId(normalized)) {
+    return { ...COPILOT_CHAT_COMPLETIONS_COMPAT };
+  }
+  // Copilot's Claude 4.5 endpoints reject Anthropic's eager tool extension,
+  // while current Claude 4.6+ endpoints accept it.
+  if (isCopilotClaude45ModelId(normalized)) {
+    return { supportsEagerToolInputStreaming: false };
+  }
+  return undefined;
 }

 function compatSupportsEffort(
--- a/extensions/github-copilot/models.test.ts
+++ b/extensions/github-copilot/models.test.ts
@@ -90,8 +90,18 @@ describe("github-copilot model defaults", () => {
      const def = buildCopilotModelDefinition("claude-sonnet-4.6");
      expect(def.id).toBe("claude-sonnet-4.6");
      expect(def.api).toBe("anthropic-messages");
+      expect(def.compat).toBeUndefined();
    });

+    it.each(["claude-haiku-4.5", "claude-sonnet-4-5"])(
+      "disables eager tool streaming for Copilot Claude 4.5 model %s",
+      (modelId) => {
+        expect(buildCopilotModelDefinition(modelId).compat).toEqual({
+          supportsEagerToolInputStreaming: false,
+        });
+      },
+    );
+
    it("uses static metadata overrides for gpt-5.5 fallback rows", () => {
      const def = buildCopilotModelDefinition("gpt-5.5");
      expect(def).toEqual({
@@ -243,6 +253,12 @@ describe("resolveCopilotForwardCompatModel", () => {
    expect((result as unknown as Record<string, unknown>).input).toEqual(["text", "image"]);
  });

+  it("disables eager tool streaming for synthetic Copilot Claude 4.5 models", () => {
+    const result = requireResolvedModel(createMockCtx("claude-haiku-4.5"));
+    expect(result.api).toBe("anthropic-messages");
+    expect(result.compat).toEqual({ supportsEagerToolInputStreaming: false });
+  });
+
  it("creates synthetic Gemini models with Chat Completions compatibility", () => {
    const result = requireResolvedModel(createMockCtx("gemini-3.1-pro-preview"));
    expect((result as unknown as Record<string, unknown>).api).toBe("openai-completions");
@@ -620,6 +636,7 @@ describe("fetchCopilotModelCatalog", () => {
    const opus45 = out.find((m) => m.id === "claude-opus-4-5");
    expect(opus45?.thinkingLevelMap).toEqual({ xhigh: null, max: null });
    expect(opus45?.compat).toEqual({
+      supportsEagerToolInputStreaming: false,
      supportedReasoningEfforts: ["low", "medium", "high", "max"],
    });
  });
--- a/extensions/github-copilot/package.json
+++ b/extensions/github-copilot/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/github-copilot-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw GitHub Copilot provider plugin",
  "type": "module",
--- a/extensions/gmi/package.json
+++ b/extensions/gmi/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/gmi-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw GMI Cloud provider plugin",
  "type": "module",
--- a/extensions/google-meet/npm-shrinkwrap.json
+++ b/extensions/google-meet/npm-shrinkwrap.json
@@ -1,18 +1,18 @@
 {
  "name": "@openclaw/google-meet",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/google-meet",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "commander": "14.0.3",
        "typebox": "1.1.39"
      },
      "peerDependencies": {
-        "openclaw": ">=2026.6.7-beta.1"
+        "openclaw": ">=2026.6.2"
      },
      "peerDependenciesMeta": {
        "openclaw": {
--- a/extensions/google-meet/package.json
+++ b/extensions/google-meet/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/google-meet",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Google Meet participant plugin for joining calls through Chrome or Twilio transports.",
  "repository": {
    "type": "git",
@@ -16,7 +16,7 @@
    "openclaw": "2026.5.28"
  },
  "peerDependencies": {
-    "openclaw": ">=2026.6.7-beta.1"
+    "openclaw": ">=2026.6.2"
  },
  "peerDependenciesMeta": {
    "openclaw": {
@@ -33,10 +33,10 @@
      "minHostVersion": ">=2026.4.20"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/google/package.json
+++ b/extensions/google/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/google-plugin",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Google plugin",
  "type": "module",
--- a/extensions/googlechat/npm-shrinkwrap.json
+++ b/extensions/googlechat/npm-shrinkwrap.json
@@ -1,19 +1,19 @@
 {
  "name": "@openclaw/googlechat",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/googlechat",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "gaxios": "7.1.4",
        "google-auth-library": "10.6.2",
        "zod": "4.4.3"
      },
      "peerDependencies": {
-        "openclaw": ">=2026.6.7-beta.1"
+        "openclaw": ">=2026.6.2"
      },
      "peerDependenciesMeta": {
        "openclaw": {
--- a/extensions/googlechat/package.json
+++ b/extensions/googlechat/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/googlechat",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw Google Chat channel plugin for spaces and direct messages.",
  "repository": {
    "type": "git",
@@ -17,7 +17,7 @@
    "openclaw": "2026.5.28"
  },
  "peerDependencies": {
-    "openclaw": ">=2026.6.7-beta.1"
+    "openclaw": ">=2026.6.2"
  },
  "peerDependenciesMeta": {
    "openclaw": {
@@ -75,10 +75,10 @@
      "minHostVersion": ">=2026.4.10"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/gradium/package.json
+++ b/extensions/gradium/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/gradium-speech",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Gradium speech plugin",
  "type": "module",
--- a/extensions/groq/package.json
+++ b/extensions/groq/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/groq-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Groq media-understanding provider",
  "type": "module",
--- a/extensions/huggingface/package.json
+++ b/extensions/huggingface/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/huggingface-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Hugging Face provider plugin",
  "type": "module",
--- a/extensions/image-generation-core/package.json
+++ b/extensions/image-generation-core/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/image-generation-core",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw image generation runtime package",
  "type": "module",
--- a/extensions/imessage/package.json
+++ b/extensions/imessage/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/imessage",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw iMessage channel plugin using imsg on a signed-in Mac",
  "type": "module",
@@ -43,10 +43,10 @@
      ]
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    }
  },
  "pluginInspector": {
--- a/extensions/inworld/package.json
+++ b/extensions/inworld/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/inworld-speech",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Inworld speech plugin",
  "type": "module",
--- a/extensions/irc/package.json
+++ b/extensions/irc/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/irc",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw IRC channel plugin",
  "type": "module",
  "devDependencies": {
--- a/extensions/kilocode/package.json
+++ b/extensions/kilocode/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/kilocode-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Kilo Gateway provider plugin",
  "type": "module",
--- a/extensions/kimi-coding/package.json
+++ b/extensions/kimi-coding/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/kimi-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw Kimi provider plugin",
  "type": "module",
--- a/extensions/line/npm-shrinkwrap.json
+++ b/extensions/line/npm-shrinkwrap.json
@@ -1,18 +1,18 @@
 {
  "name": "@openclaw/line",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/line",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@line/bot-sdk": "11.0.1",
        "zod": "4.4.3"
      },
      "peerDependencies": {
-        "openclaw": ">=2026.6.7-beta.1"
+        "openclaw": ">=2026.6.2"
      },
      "peerDependenciesMeta": {
        "openclaw": {
--- a/extensions/line/package.json
+++ b/extensions/line/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/line",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw LINE channel plugin for LINE Bot API chats.",
  "repository": {
    "type": "git",
@@ -16,7 +16,7 @@
    "openclaw": "2026.5.28"
  },
  "peerDependencies": {
-    "openclaw": ">=2026.6.7-beta.1"
+    "openclaw": ">=2026.6.2"
  },
  "peerDependenciesMeta": {
    "openclaw": {
@@ -46,10 +46,10 @@
      "minHostVersion": ">=2026.4.10"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/extensions/litellm/package.json
+++ b/extensions/litellm/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/litellm-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw LiteLLM provider plugin",
  "type": "module",
--- a/extensions/llama-cpp/npm-shrinkwrap.json
+++ b/extensions/llama-cpp/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/llama-cpp-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/llama-cpp-provider",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "node-llama-cpp": "3.18.1"
      }
--- a/extensions/llama-cpp/package.json
+++ b/extensions/llama-cpp/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/llama-cpp-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "OpenClaw llama.cpp embedding provider plugin",
  "repository": {
    "type": "git",
@@ -23,10 +23,10 @@
      "minHostVersion": ">=2026.6.2"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "bundleRuntimeDependencies": false,
--- a/extensions/llm-task/package.json
+++ b/extensions/llm-task/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/llm-task",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw JSON-only LLM task plugin",
  "type": "module",
--- a/extensions/lmstudio/package.json
+++ b/extensions/lmstudio/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/lmstudio-provider",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "private": true,
  "description": "OpenClaw LM Studio provider plugin",
  "type": "module",
--- a/extensions/lobster/npm-shrinkwrap.json
+++ b/extensions/lobster/npm-shrinkwrap.json
@@ -1,12 +1,12 @@
 {
  "name": "@openclaw/lobster",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@openclaw/lobster",
-      "version": "2026.6.7-beta.1",
+      "version": "2026.6.2",
      "dependencies": {
        "@clawdbot/lobster": "2026.5.22",
        "typebox": "1.1.39"
--- a/extensions/lobster/package.json
+++ b/extensions/lobster/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@openclaw/lobster",
-  "version": "2026.6.7-beta.1",
+  "version": "2026.6.2",
  "description": "Lobster workflow tool plugin for typed pipelines and resumable approvals.",
  "repository": {
    "type": "git",
@@ -24,10 +24,10 @@
      "minHostVersion": ">=2026.4.25"
    },
    "compat": {
-      "pluginApi": ">=2026.6.7-beta.1"
+      "pluginApi": ">=2026.6.2"
    },
    "build": {
-      "openclawVersion": "2026.6.7-beta.1"
+      "openclawVersion": "2026.6.2"
    },
    "release": {
      "publishToClawHub": true,
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Mason Huang	93fc591af9	ci: add process exec codeql security shard	2026-06-13 20:38:21 +08:00
zhang-guiping	4c23d1d597	fix(agents): narrow sessions_send active-run fallback Limit sessions_send active-run queue delivery to run-scoped targets, keep stranded cron-run fallback for valid cron run keys, and report unsafe queue rejections without rerouting through durable sessions. Fixes #91420.	2026-06-13 20:31:50 +08:00
zhang-guiping	8eb1fa09c6	fix(gateway): reject unknown OpenAI agent selectors Reject explicit unknown or malformed OpenAI-compatible agent selectors before creating gateway request/session state. Default aliases remain compatible; chat completions, Responses, and embeddings now return structured invalid_request_error responses for bad explicit selectors. Fixes #92504.	2026-06-13 20:16:13 +08:00
Vincent Koc	2d2c1e63f0	test(test): align source full-suite sharding assertion	2026-06-13 19:57:09 +08:00
mushuiyu_xydt	6cdbccaa9e	fix #73713 : surface nested embedding fetch failures (#92628 ) * fix(cli): surface nested fetch failure details * fix(cli): preserve error prefixes in runtime output	2026-06-13 19:55:37 +08:00
Kailigithub	9f522ee7df	fix(copilot): disable eager tool streaming for Claude 4.5 (#75393 ) Disable Anthropic eager tool streaming only for GitHub Copilot Claude 4.5 proxy routes, preserving newer Claude behavior. Fixes #75348 Co-authored-by: Kailigithub <Kailigithub@users.noreply.github.com>	2026-06-13 04:52:02 -07:00
lundog	7404b2b5b4	fix(channels): keep contributed message-tool schema properties optional (#91137 ) Co-authored-by: Lundog <jeremy.lundy@lifebeacon.com>	2026-06-13 19:39:01 +08:00
Vincent Koc	73aabcceda	fix(test): split local full-suite shards when throttled	2026-06-13 19:36:35 +08:00
dongdong	b1fc8673df	fix(anthropic): add Claude Haiku 4.5 catalog entries (#90116 ) Add both official Claude Haiku 4.5 API identifiers to the Anthropic static catalog and cover their metadata with a focused regression test. Fixes #90088 Co-authored-by: Jasmine Zhang <jasminezhang@JasminedeMac-mini.local>	2026-06-13 04:31:57 -07:00
Vincent Koc	4cf4e54179	feat(memory-wiki): import OKF bundles	2026-06-13 19:27:52 +08:00
WhatsSkiLL	84519f7e3c	fix(cron): preserve yielded media completions (#92146 ) * fix(agents): preserve sessions_yield media pauses * fix(agents): resume cron media completions * fix(agents): restore cron media wait predicate import --------- Co-authored-by: WhatsSkiLL <284122573+IWhatsskill@users.noreply.github.com>	2026-06-13 19:23:25 +08:00
liuhao1024	6314c377bb	fix(openrouter): normalize provider-qualified model IDs (#92627 ) Normalize provider-qualified OpenRouter model IDs before capability lookup and transport while preserving native OpenRouter namespace IDs. Fixes #92611. Co-authored-by: liuhao1024 <sunsky.lau@gmail.com>	2026-06-13 12:05:28 +01:00
Andy Ye	d3e7e03669	fix(ui): preserve WebChat backscroll during streaming (#92622 ) * fix(ui): preserve webchat backscroll during streaming * fix(ui): keep forced chat scroll above follow lock --------- Co-authored-by: Vincent Koc <vincentkoc@ieee.org>	2026-06-13 18:40:31 +08:00
Vincent Koc	64f9f3c278	fix(models): stabilize vertex marker regression tests	2026-06-13 18:28:50 +08:00
Chunyue Wang	cd3eb438f0	fix(agents): pause yielded subagent runs whose terminal also signals abort (#92631 ) * fix(agents): pause yielded subagent runs whose terminal also signals abort (#92448) * fix(agents): clear yielded subagent grace timers --------- Co-authored-by: Vincent Koc <vincentkoc@ieee.org>	2026-06-13 18:23:10 +08:00
Alix-007	26281a8a11	fix(slack): diagnose invalid channel map keys (#89438 ) Diagnose Slack channel-map keys that cannot route as configured, including account inheritance, open-policy overrides, malformed room identifiers, and DM identifiers. Fixes #81665 Co-authored-by: Alix-007 <li.long15@xydigit.com>	2026-06-13 03:13:14 -07:00
Vincent Koc	4208c89ec4	test(qa-lab): align bootstrap selection assertion	2026-06-13 18:11:46 +08:00
Peter Steinberger	c9c19a1106	test(models): stabilize plugin auth marker fixtures (#92652 ) Stabilizes model auth marker tests against the current manifest-metadata discovery seam and isolated Vitest environment. Runtime behavior is unchanged; provider-owned non-secret markers remain declared in plugin manifests.	2026-06-13 02:58:02 -07:00
Peter Steinberger	f78d7b52d8	fix: require admin for HTTP session kills (#92651 ) Co-authored-by: Peter Steinberger <steipete@gmail.com>	2026-06-13 02:57:15 -07:00
Ayaan Zaidi	ff6940036b	fix(usage): reload missing usage templates (#89835 ) (thanks @Marvinthebored)	2026-06-13 15:25:14 +05:30
Ayaan Zaidi	b477bfe84b	fix(usage): tighten usage footer template handling	2026-06-13 15:25:14 +05:30
Peter Lindsey	d4237cb14d	test(vitest): align scoped-config expectation with usage-bar shard include Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	20bc546d94	test(usage): register usage-bar tests in auto-reply-core shard; fix unused-var lint The usage-bar subdirectory was not covered by any full-suite shard glob (template.test.ts is disqualified from unit-fast by filesystem-state), failing the shard coverage check. Extend autoReplyCoreTestInclude to the subdir; unit-fast-eligible files are auto-excluded by the scoped config. Also create the temp dir explicitly in the missing-file test instead of binding an unused tmpFile result, which tripped oxlint no-unused-vars. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	069cb8d636	perf(usage): load the footer template off the reply-delivery path loadUsageBarTemplate ran a synchronous statSync on every reply (and readFileSync on mtime change) to check template freshness — synchronous filesystem I/O in the latency-sensitive reply path, which on a slow / networked / blocked filesystem can stall /usage full delivery (and the single-threaded event loop with it). Read the template once into memory and keep it fresh with a filesystem watcher (persistent: false), so the per-reply path is filesystem-free. A missing file is not cached (a later-created template is still picked up on a subsequent call); a watch failure leaves the one-time load in place. Adds template.test.ts covering inline / file / invalid-JSON / missing-then-created and the FS-free hot path. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	8cc5d2d85c	feat(usage): render real context occupancy + last-call usage atoms Consume the usageState contract's contextUsedTokens (populated by #89629) so the context gauge reflects real end-of-turn window occupancy instead of the multi-call turn aggregate, which overstates it (often past 100%) and pins the meter full while /status shows the true figure. Fall back to the aggregate when contextUsedTokens is absent (single-call turns, where they coincide). Also expose the final model call's usage as usage.last.* (input/output/cache + cache_hit_pct) so a template can render the last exchange vs the turn aggregate. Adds the consumed fields (contextUsedTokens, lastUsage) to PluginHookReplyUsageState as the renderer's type dependency; their population lands in #89629. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	690f27749c	feat(usage): add fixed:N decimal-format verb to usage-bar translator num truncates sub-1000 values to integers, so monetary fields like cost.turn_usd rendered as 0 (or with full float noise when piped raw). Add a fixed:N verb that formats a number to N decimal places (default 2), returning empty string for non-numeric input — matching the other formatters' guard style. {cost.turn_usd\|fixed:4} 0.03771985 -> 0.0377 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	7af8153388	fix(usage): clear type-aware oxlint in usage-bar translator - no-misused-spread: use Array.from for code-point glyph split (same behavior, astral glyphs intact) instead of string spread. - no-base-to-string: return the case glyph only when it is a string. - no-unnecessary-type-assertion: drop redundant cast already narrowed by isObject. No behavior change (render output byte-identical; tsgo clean). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	a66a065ffb	style(usage): satisfy oxfmt + oxlint for native renderer Formatting (import order, indentation) and bracket-notation access for reserved template keys (_aliases/_default) to satisfy no-underscore-dangle. No behavior change. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Peter Lindsey	64d0fc8336	feat(usage): native templated /usage full renderer (retires the footer plugin) Render the per-reply /usage full footer in core from a declarative template (the openclaw.usageBar.v1 format) when messages.usageTemplate is set; fall back to the built-in line otherwise. Ports the reference usage_bar.py engine to TS so no external process is involved (the external surface is just template data). - usage-bar/translator.ts: engine (verbs num/dur/pct/inv/alias/meter, segment forms text/when/map/each, output.surfaces, item_scales). Codepoint-correct glyph indexing; fail-open (empty render -> boring fallback). - usage-bar/contract.ts: buildUsageContract (snapshot -> openclaw.usageLine.v1). - usage-bar/template.ts: resolve from a path (mtime-cached) or inline object. - agent-runner: capture the per-turn usage snapshot and render the template at the /usage full branch in place of the built-in line when configured. - messages.usageTemplate config (string path \| inline object) + strict schema. - translator.test.ts: verb parity, segment forms, astral glyphs, e2e render. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 15:25:14 +05:30
Rohit	f3df863aff	fix(gateway): honor profile auth for SecretRef model entries (#90686 ) Fixes #90685 by allowing models.list availability to use matching auth-profile credentials when provider config contains a non-env SecretRef, while preserving unavailable results for unresolved SecretRef-only providers. Adds isolated regression coverage for file SecretRefs and secretref-managed provider markers. Co-authored-by: Rohit <rohitjavvadi2@gmail.com>	2026-06-13 02:39:06 -07:00
Peter Steinberger	26b9736922	fix: require admin for HTTP model overrides Co-authored-by: Peter Steinberger <steipete@gmail.com>	2026-06-13 02:08:20 -07:00
samson910022	44f45d8729	fix(models): bound model browse discovery (#92247 ) Bounds default model browsing to configured/read-only discovery while preserving explicit full-catalog browsing. Reuses prepared plugin metadata and auth state without triggering external CLI discovery on the picker hot path, while retaining provider normalization and canonical runtime aliases. Verified with focused model tests, official OpenAI and Anthropic transport suites, fresh live tool calls for both providers, a full build, AWS check:changed, remote Docker OpenAI tools E2E, and green PR CI. Fixes #91809. Co-authored-by: samson1357924 <98934496+samson1357924@users.noreply.github.com>	2026-06-13 02:04:55 -07:00
Ayaan Zaidi	1c655008cd	fix(hooks): tighten reply usage state correlation	2026-06-13 14:25:24 +05:30
Peter Lindsey	618d78144e	fix(usage): don't resolve subscription windows for an absent auth signal A missing per-turn authMode was mapped to "oauth", so an OpenAI api-key turn that arrived without an explicit auth mechanism could resolve and display ChatGPT subscription windows that aren't its own — served straight from the 60s limits cache, which the "re-checked at fetch time" guard does not cover. Treat a genuinely absent signal as non-eligible (same as api-key): no usage provider resolves and the footer omits limit windows. Present mechanisms are unchanged — oauth/auth-profile/token stay eligible, and only OpenAI is gated on the credential type so other providers are unaffected. A real oauth/profile turn always carries its mechanism; one arriving blank is an upstream tagging bug to fix at the source. Inverts the now-incorrect "absent => oauth-eligible" test into regression coverage for the absent/api-key case. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 14:25:24 +05:30
Peter Lindsey	56f2102c28	fix(usage): thread real context occupancy + last-call usage into usageState context.used_tokens / pct_used were derived from the snapshot's aggregate prompt total (cacheRead+cacheWrite+input). Over a multi-call tool-loop turn that is the run AGGREGATE, overstating window occupancy (often past 100%) so a footer's context gauge pins full while /status shows the true ~7%. Add two optional fields to PluginHookReplyUsageState and populate them in the reply path: - contextUsedTokens: the final call's prompt size (agentMeta.promptTokens) = real end-of-turn occupancy, a point-in-time state, not the aggregate. - lastUsage: the final model call's usage only (vs `usage`, the turn aggregate), so a footer can render the last exchange's i/o + cache. Both optional and additive; consumers fall back to the aggregate when absent (correct for single-call turns). Renderer consumption lands separately (#89835). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 14:25:24 +05:30
Peter Lindsey	99db98a7ce	fix(usage): map auth mechanism to usage-credential type for provider limits requestShaping.authMode is the auth mechanism (e.g. "auth-profile" for a configured auth profile), not the credential type resolveUsageProviderId expects. Gating limits on it === "oauth"/"token" dropped 📊 for legit OAuth (profile-based) turns. Map it: api-key/aws-sdk -> no usage provider (cannot borrow cached oauth windows); oauth/token/auth-profile/absent -> usage-eligible, with the real credential re-checked at fetch time. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 14:25:24 +05:30
Peter Lindsey	0dbfa1f6be	fix(hooks): make usageState limits credential-aware + document best-effort delivery Addresses review feedback on #89629. 1) Provider-limit resolution no longer defaults to OAuth. getProviderUsageLimits and getProviderUsageLimitsCached resolved with `credentialType ?? "oauth"`, and the agent-runner snapshot call passed no credential type, so an api-key OpenAI turn could borrow cached OAuth/ChatGPT usage windows. Drop the "oauth" default (missing credential type => no OpenAI usage provider) and thread the turn's authMode through at the call site. Adds provider-usage.limits.test.ts covering api-key/no-credential (no fetch), oauth/token (resolves), and non-OpenAI. 2) usageState is documented as best-effort, present only on live dispatcher delivery. Routed durable and recovered queue replays re-run this hook as a stateless transform over the original payload (see QueuedDeliveryPayload); a point-in-time usage snapshot is not stateless and would replay stale after a restart, so it is intentionally omitted there. Consumers must treat the field as optional. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 14:25:24 +05:30
Peter Lindsey	f06f2f17c2	feat(hooks): per-turn usageState (with provider limits + rich atoms) on reply_payload_sending Attach a per-turn execution snapshot to the reply_payload_sending hook as `usageState`, so a plugin (or the future in-core /usage renderer) can render a per-response usage readout as a pure consumer of the contract — no side calls. Recorded in agent-runner, consumed in dispatch. Fields: provider, model, resolvedRef/requested, reasoningEffort, fastMode, fallbackUsed, is_override (overrideSource), authMode, compactionCount, contextTokenBudget, token usage, turn cost (USD), duration, owning agentId/sessionId, chatType, the agent identity (name/emoji), and the active provider's subscription `limits` windows. reply_payload_sending is the one reply hook universal across every surface (incl. the Codex app-server, which emits no llm_output/agent_end), so it is the correct harness-agnostic place for per-turn usage. Limits are resolved by a core-internal non-blocking SWR helper (src/infra/provider-usage.limits.ts) and attached to the snapshot — no new plugin-SDK accessor. All fields optional/additive. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-13 14:25:24 +05:30