2026.2.26MINOR✓ STABLEReleased: 2026-02-26

External Secrets Management + ACP Thread Agents + Routing CLI

/** Full secrets management workflow. ACP agents as thread runtimes. New agent routing CLI. Dozens of security hardening fixes. */

#Secrets#ACP#Android#CLI#Security

whats_new.md

✨ What's New

External Secrets Management

Full openclaw secrets workflow: audit, configure, apply, reload. Runtime snapshot activation, strict apply target-path validation, ref-only auth-profile support, and dedicated docs.

ACP Thread-Bound Agents

ACP agents are now first-class runtimes for thread sessions with acp spawn/send dispatch integration, acpx backend bridging, lifecycle controls, startup reconciliation, and coalesced thread replies.

Agent Routing CLI

New openclaw agents bindings, openclaw agents bind, and openclaw agents unbind for account-scoped route management. Includes channel-only to account-scoped binding upgrades and role-aware binding identity handling.

OpenAI Codex WebSocket Transport

openai-codex is now WebSocket-first by default (transport: 'auto' with SSE fallback). Explicit per-model/runtime transport overrides preserved.

Android Device Capabilities

New device capability plus device.status and device.info node commands. notifications.list support added on Android nodes.

fixes.md

⚡ Fixes & Improvements

✓FS tools: honor tools.fs.workspaceOnly=false for host write/edit operations

✓Telegram DM allowlist runtime inheritance: enforce dmPolicy: 'allowlist' allowFrom across account-capable channels

✓Google Chat lifecycle: startAccount now stays pending until abort in webhook mode

✓Microsoft Teams file uploads: acknowledge fileConsent/invoke immediately to prevent false error banners

✓Typing indicators: unified run-scoped typing suppression for cross-channel and internal-webchat routes

✓Security: gateway auth requires pairing for operator device-identity shared-token sessions

upgrade.sh

📦 Upgrade to 2026.2.26

$ npm install -g openclaw@2026.2.26

# or

$ openclaw update

✓ No breaking changes from 2026.2.25 — safe to upgrade

← Previous:

2026.2.25 — Security Patch

All Releases →