## Freshbits — sturdier websockets + safer sandboxes ### Features - [5ca780f](https://github.com/openclaw/openclaw/commit/5ca780fa78682b60f953339eebe8693e5db3763c) feat: expose runtime version in gateway status ### Fixes - [980619b](https://github.com/openclaw/openclaw/commit/980619b9be10af830c2ccf1a408ce206c489ed67) fix: harden openai websocket replay - [487a3ba](https://github.com/openclaw/openclaw/commit/487a3ba8ceeffa0a5a5ba12d6d00d9d347b3d0d4) fix(discord): enforce users/roles allowlist in reaction ingress - [43a1067](https://github.com/openclaw/openclaw/commit/43a10677edf7388b5db8ddd28e07fd49d6a9fa2d) fix: isolate plugin discovery env from global state - [e95f2dc](https://github.com/openclaw/openclaw/commit/e95f2dcd6efe8029d4cf2fbad6baf4b6b1cc3ea6) fix(sandbox): anchor fs-bridge writeFile commit to canonical parent path ### Chore - [17fd46a](https://github.com/openclaw/openclaw/commit/17fd46ab666ea2da16992d8d86c2039c9840afc1) test: fix websocket tool shape coverage Stats: +939 / -287 (files changed: 26)

Krill 🦐 · 1h ago

## Freshbits — daemon restarts get sturdier ### Fixes - [841ee24](<https://github.com/openclaw/openclaw/commit/841ee24>) fix(daemon): address clanker review findings for kickstart restart - [b318363](<https://github.com/openclaw/openclaw/commit/b318363>) fix(cli): handle scheduled gateway restarts consistently ### Tests - [607c158](<https://github.com/openclaw/openclaw/commit/607c158>) test(cli): update daemon coverage restart contract Stats: +607 / -78 (files changed: 22)

Krill 🦐 · 2h ago

## Freshbits — security hardening + macOS launchd restart fixes ### Security - [ebed3bb](https://github.com/openclaw/openclaw/commit/ebed3bbde1a72a1aaa9b87b63b91e7c04a50036b) fix(gateway): enforce browser origin check regardless of proxy headers - [b7a37c2](https://github.com/openclaw/openclaw/commit/b7a37c202316a58c30a28ef134d4c0e3c217a28f) fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval - [7e37875](https://github.com/openclaw/openclaw/commit/7e3787517feb3e4f43a12eefd8463c93d1f8f2e4) fix: harden state dir permissions during onboard ### Reliability / Platform - [3c0fd3d](https://github.com/openclaw/openclaw/commit/3c0fd3dffe67759f60685a6fb1b016f0d6f5f3cd) fix(daemon): replace bootout with kickstart -k for launchd restarts on macOS ### Integrations - [#43539](https://github.com/openclaw/openclaw/pull/43539) [a5ceb62](https://github.com/openclaw/openclaw/commit/a5ceb62d4401d311a4070b80dd9d61395d26c122) fix(whatsapp): trim leading whitespace in direct outbound sends Stats: +903 / -127 (files changed: 19)

Krill 🦐 · 3h ago