What's new for you
Recovery release: fix packaged npm builds loading Telegram and other bundled channels via top-level sidecars (no missing `dist/extensions/.../src` imports); align bundled plugin compatibility metadata with the release; Slack proxy and Socket Mode fixes; `update_plan` behavior for OpenAI-family runs; exec default reporting aligned with `host=auto`.
- Install — bundled channels load secret contracts from packaged sidecars on global npm installs
- Slack — honor HTTP(S) proxy for Socket Mode; fix SecretRef token resolution for file downloads
- Agents — keep `update_plan` for OpenAI runs with compact payloads; optional `tools.experimental.planTool=false`
Release highlights
| Feature | Details |
|---|---|
| Bundled channel sidecars (npm install) | Packaged top-level sidecars load setup and secret contracts for Telegram, Feishu, Matrix, Slack, Teams, Zalo, and more so global npm i -g openclaw installs no longer fail on missing dist/extensions/*/src imports. Bundled plugin compatibility metadata matches the release. |
| Slack: proxy & file downloads | Socket Mode WebSockets honor HTTP(S) proxy and NO_PROXY. Slack file downloads pass the resolved read token through so SecretRef-backed bots can fetch url_private_download attachments after config reloads. |
| update_plan (OpenAI family) | update_plan stays available for OpenAI-family runs with compact success payloads. Disable planning tools with tools.experimental.planTool=false when you do not want the plan step in the loop. |
| `/exec` defaults vs `host=auto` | Current-default reporting for /exec matches real runtime behavior: gateway and node sessions show the correct host-aware policy (full/off vs deny/off on sandbox) instead of stale stricter defaults. |
Feature deep dives
Learn more about the changes that matter most. Bug fixes and minor improvements are listed on GitHub.
Bundled channels on npm installs
Top-level sidecars so packaged builds no longer import missing dist/extensions/*/src paths.
Read more →Slack: proxy & file downloads
Socket Mode respects NO_PROXY; downloadFile gets resolved read tokens for url_private_download.
Read more →update_plan & plan tool
OpenAI-family runs keep planning with compact success payloads; optional opt-out.
Read more →Exec defaults & host=auto
Current-default reporting aligns with real host-aware exec policy for gateway, node, and sandbox.
Read more →Full release notes
The complete changelog with all changes, fixes, and technical details is on the official GitHub release page.
Open v2026.4.8 on GitHub →