- Plugins/runtime-deps: cache unchanged bundled runtime mirror dist-file materialization decisions and close file-lock handles on owner-write failures, reducing repeated startup chunk scans and avoiding FileHandle-GC recovery stalls. Refs #73532. Thanks @oadiazp and @bstanbury.

- CLI/TUI: keep `chat.history` off model-catalog discovery so initial Gateway-backed TUI history loads cannot block behind slow provider/plugin model scans on low-core hosts. Refs #73524. Thanks @harshcatsystems-collab.

- Channels/WhatsApp: flag recently reconnected linked accounts in channel status even when the socket is currently healthy, so flapping WhatsApp Web sessions no longer look clean after a brief reconnect. Refs #73602. Thanks @Vksh07.

- Gateway: expose `gateway.handshakeTimeoutMs` in config, schema, and docs while preserving `OPENCLAW_HANDSHAKE_TIMEOUT_MS` precedence, so loaded or low-powered hosts can tune local WebSocket pre-auth handshakes without patching dist files. Supersedes #51282; refs #73592 and #73652. Thanks @henry-the-frog.

- Agents/model selection: resolve slash-form aliases before provider/model parsing and keep alias-resolved primary models subject to transient provider cooldowns, so cron and persisted sessions do not retry cooled-down raw aliases. Fixes #73573 and #73657. Thanks @akai-shuuichi and @hashslingers.

- Agents/Claude CLI: reuse already-cached macOS Keychain credentials for no-prompt Claude credential reads, so doctor/runtime checks do not miss fresh interactive Claude auth. Fixes #73682. Thanks @RyanSandoval.

- Agents/transcripts: strip empty assistant text blocks while preserving valid text, images, and signatures, so Anthropic-style providers no longer reject sanitized transcript turns. Fixes #73640. Thanks @jowhee327.

1265c4249f2740b6786b295d5a88391ba7eb0c30bdf460c60dfb4dfcb4153685 config-baseline.json

805bd3f63ff7327da45c01b78dbc990ed53bd13b89e0cbf50f319aa99334ba92 config-baseline.core.json

d4c98bce7b547349b9cbbe08ec1018eafce9900502d7794df993d07fdec0e2e0 config-baseline.json

6ce74b2ab3544e5375009a435a2360a3095e6bd759bb7dd8114293fb8a0e2b25 config-baseline.core.json

0e38bad86bdc96c38573f6d51ac9e6fc5306cc20fb4a454399c57c105a61ba87 config-baseline.channel.json

0dd6583fafae6c9134e46c4cf9bddee9822d6436436dcb1a6dcba6d012962e51 config-baseline.plugin.json

- Relay-backed registrations are delegated to a specific gateway identity. The paired iOS app fetches `gateway.identity.get`, includes that identity in the relay registration, and forwards a registration-scoped send grant to the gateway. Another gateway cannot reuse that stored registration.

- `OPENCLAW_APNS_RELAY_BASE_URL` / `OPENCLAW_APNS_RELAY_TIMEOUT_MS`: temporary env overrides for the relay config above.

- `OPENCLAW_APNS_RELAY_ALLOW_HTTP=true`: development-only escape hatch for loopback HTTP relay URLs. Production relay URLs should stay on HTTPS.

- `gateway.handshakeTimeoutMs`: pre-auth Gateway WebSocket handshake timeout in milliseconds. Default: `15000`. `OPENCLAW_HANDSHAKE_TIMEOUT_MS` takes precedence when set. Increase this on loaded or low-powered hosts where local clients can connect while startup warmup is still settling.

- `gateway.channelHealthCheckMinutes`: channel health-monitor interval in minutes. Set `0` to disable health-monitor restarts globally. Default: `5`.

- `gateway.channelStaleEventThresholdMinutes`: stale-socket threshold in minutes. Keep this greater than or equal to `gateway.channelHealthCheckMinutes`. Default: `30`.

- `gateway.channelMaxRestartsPerHour`: maximum health-monitor restarts per channel/account in a rolling hour. Default: `10`.

</Accordion>

<Accordion title="Tune gateway WebSocket handshake timeout">

Give local clients more time to complete the pre-auth WebSocket handshake on

loaded or low-powered hosts:

```json5

{

gateway: {

handshakeTimeoutMs: 30000,

},

}

```

- Default is `15000` milliseconds.

- `OPENCLAW_HANDSHAKE_TIMEOUT_MS` still takes precedence for one-off service or shell overrides.

- Prefer fixing startup/event-loop stalls first; this knob is for hosts that are healthy but slow during warmup.

</Accordion>

<Accordion title="Configure sessions and resets">

Sessions control conversation continuity and isolation:

});

describe("gateway.channelHealthCheckMinutes", () => {

it("accepts preauth handshake timeout tuning", () => {

const res = validateConfigObject({

gateway: {

handshakeTimeoutMs: 30_000,

},

});

expect(res.ok).toBe(true);

});

it("rejects non-positive preauth handshake timeouts", () => {

const res = validateConfigObject({

gateway: {

handshakeTimeoutMs: 0,

},

});

expect(res.ok).toBe(false);

if (!res.ok) {

expect(res.issues[0]?.path).toBe("gateway.handshakeTimeoutMs");

}

});

it("accepts zero to disable monitor", () => {

const res = validateConfigObject({

gateway: {

},

additionalProperties: false,

},

handshakeTimeoutMs: {

type: "integer",

minimum: 1,

maximum: 9007199254740991,

title: "Gateway Handshake Timeout",

description:

"Pre-auth Gateway WebSocket handshake timeout in milliseconds. Use higher values on loaded or low-powered hosts where local clients can connect during startup warmup. OPENCLAW_HANDSHAKE_TIMEOUT_MS still takes precedence.",

},

channelHealthCheckMinutes: {

type: "integer",

minimum: 0,

help: "Explicit gateway-level tool denylist to block risky tools even if lower-level policies allow them. Use deny rules for emergency response and defense-in-depth hardening.",

tags: ["access", "network"],

},

"gateway.handshakeTimeoutMs": {

label: "Gateway Handshake Timeout",

help: "Pre-auth Gateway WebSocket handshake timeout in milliseconds. Use higher values on loaded or low-powered hosts where local clients can connect during startup warmup. OPENCLAW_HANDSHAKE_TIMEOUT_MS still takes precedence.",

tags: ["network", "performance"],

},

"gateway.channelHealthCheckMinutes": {

label: "Gateway Channel Health Check Interval (min)",

help: "Interval in minutes for automatic channel health probing and status updates. Use lower intervals for faster detection, or higher intervals to reduce periodic probe noise.",

"Explicit gateway-level tool allowlist when you want a narrow set of tools available at runtime. Use this for locked-down environments where tool scope must be tightly controlled.",

"gateway.tools.deny":

"Explicit gateway-level tool denylist to block risky tools even if lower-level policies allow them. Use deny rules for emergency response and defense-in-depth hardening.",

"gateway.handshakeTimeoutMs":

"Pre-auth Gateway WebSocket handshake timeout in milliseconds. Use higher values on loaded or low-powered hosts where local clients can connect during startup warmup. OPENCLAW_HANDSHAKE_TIMEOUT_MS still takes precedence.",

"gateway.channelHealthCheckMinutes":

"Interval in minutes for automatic channel health probing and status updates. Use lower intervals for faster detection, or higher intervals to reduce periodic probe noise.",

"gateway.channelStaleEventThresholdMinutes":

"gateway.tools": "Gateway Tool Exposure Policy",

"gateway.tools.allow": "Gateway Tool Allowlist",

"gateway.tools.deny": "Gateway Tool Denylist",

"gateway.handshakeTimeoutMs": "Gateway Handshake Timeout",

"gateway.channelHealthCheckMinutes": "Gateway Channel Health Check Interval (min)",

"gateway.channelStaleEventThresholdMinutes": "Gateway Channel Stale Event Threshold (min)",

"gateway.channelMaxRestartsPerHour": "Gateway Channel Max Restarts Per Hour",

tools?: GatewayToolsConfig;

/** WebChat display/history settings. */

webchat?: GatewayWebchatConfig;

/**

* Pre-auth Gateway WebSocket handshake timeout in milliseconds.

* Env var OPENCLAW_HANDSHAKE_TIMEOUT_MS takes precedence. Default: 15000.

*/

handshakeTimeoutMs?: number;

/**

* Channel health monitor interval in minutes.

* Periodically checks channel health and restarts unhealthy channels.

})

.strict()

.optional(),

handshakeTimeoutMs: z.number().int().min(1).optional(),

channelHealthCheckMinutes: z.number().int().min(0).optional(),

channelStaleEventThresholdMinutes: z.number().int().min(1).optional(),

channelMaxRestartsPerHour: z.number().int().min(1).optional(),