### Changes

- Browser/config: support per-profile `browser.profiles.<name>.headless` overrides for locally launched browser profiles, so one profile can run headless without forcing all browser profiles headless. Thanks @nakamotoliu.

- Plugins/PDF: move local PDF extraction into a bundled `document-extract` plugin so core no longer owns `pdfjs-dist` or PDF image-rendering dependencies. Thanks @vincentkoc.

- Matrix: require full cross-signing identity trust for self-device verification and add `openclaw matrix verify self` so operators can establish that trust from the CLI. (#70401) Thanks @gumadeiras.

52af51e35e05d0cbaa1a79fb415f2c2fe56ad5d52a62efa9cbb9c32489d517f5 config-baseline.json

642b4e2c9891e710790313df097b4e0db75a197ec0908e9c03bdc76f5bbdf9b0 config-baseline.core.json

8f23e853ccde6cd021b84b32fe205f456f8516667683d16c9b56d6598f608989 config-baseline.json

037bf4a873587adb8349f531c0ad79cd4f90e01712f5aa5d8b4387be73538a7f config-baseline.core.json

22d7cd6d8279146b2d79c9531a55b80b52a2c99c81338c508104729154fdd02d config-baseline.channel.json

d47a574045a47356e513ab308d7dcad9fa0b389f50e93c5cf0f820fab858e70e config-baseline.plugin.json

86f615b7d267b03888af0af7ccb3f8232a6b636f8a741d522ff425e46729ba81 config-baseline.plugin.json

executablePath: "/Applications/Brave Browser.app/Contents/MacOS/Brave Browser",

profiles: {

openclaw: { cdpPort: 18800, color: "#FF4500" },

work: { cdpPort: 18801, color: "#0066CC" },

work: { cdpPort: 18801, color: "#0066CC", headless: true },

user: {

driver: "existing-session",

attachOnly: true,

<Accordion title="Profile behavior">

- `attachOnly: true` means never launch a local browser; only attach if one is already running.

- `headless` can be set globally or per local managed profile. Per-profile values override `browser.headless`, so one locally launched profile can stay headless while another remains visible.

- `color` (top-level and per-profile) tints the browser UI so you can see which profile is active.

- Default profile is `openclaw` (managed standalone). Use `defaultProfile: "user"` to opt into the signed-in user browser.

- Auto-detect order: system default browser if Chromium-based; otherwise Chrome → Brave → Edge → Chromium → Chrome Canary.

- **Remote control (node host):** run a node host on the machine that has the browser; the Gateway proxies browser actions to it.

- **Remote CDP:** set `browser.profiles.<name>.cdpUrl` (or `browser.cdpUrl`) to

attach to a remote Chromium-based browser. In this case, OpenClaw will not launch a local browser.

- `headless` only affects local managed profiles that OpenClaw launches. It does not restart or change existing-session or remote CDP browsers.

Stopping behavior differs by profile mode:

driver: "openclaw",

attachOnly: false,

...overrides,

headless: overrides.headless ?? false,

};

}

cdpIsLoopback: true,

color: "#FF4500",

driver: "openclaw",

headless: false,

attachOnly: false,

};

cdpPort: 19222,

cdpUrl: "http://127.0.0.1:19222",

cdpIsLoopback: true,

headless: false,

} as unknown as ResolvedBrowserProfile;

it("toggles headless args", () => {

const args = buildOpenClawChromeLaunchArgs({

resolved: baseResolved({ headless: true }),

profile: baseProfile,

resolved: baseResolved({ headless: false }),

profile: { ...baseProfile, headless: true },

userDataDir: "/tmp/foo",

});

expect(args).toContain("--headless=new");

expect(args).toContain("--disable-gpu");

});

it("lets profile headless=false override global headless=true", () => {

const args = buildOpenClawChromeLaunchArgs({

resolved: baseResolved({ headless: true }),

profile: { ...baseProfile, headless: false },

userDataDir: "/tmp/foo",

});

expect(args).not.toContain("--headless=new");

expect(args).not.toContain("--disable-gpu");

});

it("toggles no-sandbox args", () => {

const args = buildOpenClawChromeLaunchArgs({

resolved: baseResolved({ noSandbox: true }),

cdpIsLoopback: true,

color: "#FF4500",

driver: "openclaw",

headless: false,

attachOnly: false,

},

userDataDir: "/tmp/openclaw-test-user-data",

"--password-store=basic",

];

if (resolved.headless) {

if (profile.headless) {

args.push("--headless=new");

args.push("--disable-gpu");

}

expect(remote?.attachOnly).toBe(true);

});

it("inherits headless from global browser config when profile override is not set", () => {

const resolved = resolveBrowserConfig({

headless: true,

profiles: {

remote: { cdpUrl: "http://127.0.0.1:9222", color: "#0066CC" },

},

});

const remote = resolveProfile(resolved, "remote");

expect(remote?.headless).toBe(true);

});

it("allows profile headless to override global browser headless", () => {

const resolved = resolveBrowserConfig({

headless: false,

profiles: {

remote: { cdpUrl: "http://127.0.0.1:9222", headless: true, color: "#0066CC" },

},

});

const remote = resolveProfile(resolved, "remote");

expect(remote?.headless).toBe(true);

});

it("allows profile headless=false to override global browser headless=true", () => {

const resolved = resolveBrowserConfig({

headless: true,

profiles: {

remote: { cdpUrl: "http://127.0.0.1:9222", headless: false, color: "#0066CC" },

},

});

const remote = resolveProfile(resolved, "remote");

expect(remote?.headless).toBe(false);

});

it("uses base protocol for profiles with only cdpPort", () => {

const resolved = resolveBrowserConfig({

cdpUrl: "https://example.com:9443",

userDataDir?: string;

color: string;

driver: "openclaw" | "existing-session";

headless: boolean;

attachOnly: boolean;

};

let cdpPort = profile.cdpPort ?? 0;

let cdpUrl = "";

const driver = profile.driver === "existing-session" ? "existing-session" : "openclaw";

const headless = profile.headless ?? resolved.headless;

if (driver === "existing-session") {

return {

userDataDir: resolveUserPath(profile.userDataDir?.trim() || "") || undefined,

color: profile.color,

driver,

headless,

attachOnly: true,

};

}

cdpIsLoopback: isLoopbackHost(cdpHost),

color: profile.color,

driver,

headless,

attachOnly: profile.attachOnly ?? resolved.attachOnly,

};

}