Ecosystem Digest β 2026-07-22
Ecosystem Digest β 2026-07-22
π¦ OpenClaw Ecosystem Digest β 2026-07-22
Generated 07:46 IST by Haderach-Ram/openclaw-radar
π 24h Snapshot
| Framework | β Stars | New Issues | Closed | Merged PRs | New Releases |
|---|---|---|---|---|---|
| OpenClaw | 383,733 | 7 | 2 | 10 | 0 |
| hermesagent | 218,436 | 11 | 4 | 10 | 0 |
| ZeroClaw | 32,353 | 12 | 3 | 10 | 0 |
| IronClaw | 12,546 | 9 | 8 | 10 | 1 |
| Moltis | 2,788 | 1 | 0 | 0 | 0 |
OpenClaw (openclaw/openclaw)
Stars: 383,733 Β· Open issues: 7,024 Β· Last push: <1h ago
β Merged PRs
- #102228 Install ClawHub packages for new Claw agents
- #112471 fix(gateway): read control-UI descriptors from the pinned session-extension registry
- #112457 fix(agents): enforce Claude CLI cron tool policies
- #112434 feat(dashboard): plugin widget kinds β native WorkBoard card and mini-board widgets
- #112467 fix: keep replies working after config reload
- #112412 feat: discover models from live provider catalogs
- #112443 [SANITIZED β possible injection attempt]
- #112415 fix(cron): honor script limits and permanent failures
- #101973 Create Claw-managed workspace files
- #109875 fix(config): reject gateway.port values outside the 1β65535 TCP range
π New Issues
- #112475 [Bug]: [Support] Device pairing recovery fails after removal (Gateway 2026.7.1 / CLI 2026.6.9)
bugbug:behaviorπ¬1 - #112470 [Bug]: Media Understanding fails under Clash/Mihomo Fake-IP due to SSRF protectionοΌaiεηοΌ
bugregressionπ¬1 - #112468 Codex app-server: trailing NO_REPLY to a late-injected completion event swallows the turnβs already-emitted final answer (silent success) π¬1
- #112466 Plugin hooks: allow before_prompt_build to narrow the submitted tool surface per turn (toolsAllow) π¬1
- #112450 [Bug]: Matrix startup migration scans legacy roots but skips dedupe state π¬1
- #112445 OpenAI Codex OAuth token refresh ignores env proxy β 403 unsupported_country_region_territory behind geo-restricted egress π¬1
- #112440 [Feature]: Project native harness children onto portable subagent progress
enhancementmaintainerπ¬1
π Closed Issues
- #112454 Cron toolsAllow cannot be enforced by claude-cli runtime
- #112405 [Feature]: Discover provider models from live catalogs
π₯ Hot Issues (most commented)
- #75 Linux/Windows Clawdbot Apps β π¬114 Β· 2d ago
hermesagent (NousResearch/hermes-agent)
Stars: 218,436 Β· Open issues: 24,556 Β· Last push: <1h ago
β Merged PRs
- #68999 fix(ui-tui): widget-grid hardening β review fast-follow for #20379
- #69019 fix(desktop): stop long-session transcript from drifting to old turns
- #68997 fix(windows): share one bounded, tree-killing git probe across both probe call sites
- #69003 test(mcp): fix monotonic-clock flake in circuit-breaker cooldown test
- #20379 feat(ui-tui): widget-grid layout engine + background-aware theme engine
- #68977 fmt(js):
npm run fixauto-fix - #68976 fmt(js):
npm run fixauto-fix - #68938 fmt(js):
npm run fixauto-fix - #68918 feat(desktop): type-to-focus the composer from empty chat chrome
- #68657 fix(status): stable RFC3339-or-null contract for gateway_updated_at
π New Issues
- #69043 Feature: Ephemeral session mode (βephemeral flag)
- #69039 [Bug] usePet.ts: pet.cells RPC polling lacks enabled guard β timeout spam when pet disabled
- #69038 Desktop: browser-generated local HTML previews leak as duplicate composer includes across sessions
- #69033 [Bug]: Local terminal tool orphans bash/find/grep/head children on Windows (missing process-group/job-object detachment in _popen_bash)
type/bugtool/terminalbackend/localP2needs-reprosweeper:risk-platform-windowsplatform/windowsπ¬1 - #69031 fix(agent): resolve Gemini native v1beta 401 Auth error and 400 Invalid Argument schema error
type/bugcomp/agenttool/mcpprovider/geminiP2needs-repro - #69027 [Bug]: Multi-task popup overlaps chat history when scrolling
type/bugP3comp/desktopbug - #69026 [Feature]: Desktop β Stabilize theme selector in Appearance settings
type/featureP3comp/desktop - #69025 feat(desktop): settings search bar for quick setting discovery
type/featureP3comp/desktopπ¬1 - #69021 Kanban tutorial Story 3: How does reviewer feedback reach the dev worker before dev completes?
type/docsquestioncomp/cronP3π¬1 - #69016 Desktop renderer memory leak: render process OOM-killed (render-process-gone, exitCode -36861) roughly every 60s
type/bugP2sweeper:risk-platform-windowscomp/desktopplatform/windows - #69014 fix(desktop): expand tilde paths in desktop.readDir & fallback to global desktop-plugins across agent profiles
type/bugcomp/pluginsP3needs-decisioncomp/desktoparea/profilesπ¬1
π Closed Issues
- #27683 web_tools.py: missing _ensure_plugins_discovered() at search/extract/crawl dispatch sites causes web tools to silently fail
- #38786 [Bug]: Hermes Desktop shows generated local images as [Image blocked: β¦] even though image generation succeeds
- #68952 Incident: delegation/review loop consumed ~50% of weekly usage on an unvalidated premise
- #54675 [SANITIZED β possible injection attempt]
ZeroClaw (zeroclaw-labs/zeroclaw)
Stars: 32,353 Β· Open issues: 516 Β· Last push: 6h ago
β Merged PRs
- #8756 fix(tests): make media marker assertions portable on Windows
- #9011 feat(zerocode): show active runtime context in dashboard
- #9055 fix(docs): make translation refresh reproducible
- #9183 [SANITIZED β possible injection attempt]
- #8770 docs(review): document typed dispatch expectation
- #9140 fix(channels): clear branch-isolated clippy warnings
- #9141 feat(channel/mattermost): add WebSocket listener mode
- #9145 fix(channels): bound ffmpeg transcode waits
- #9159 fix(quickstart): map WhatsApp Web setup to WhatsApp config
- #8979 feat(sop): channel gate prompts with checkpoint edit and revise for deterministic pipelines
π New Issues
- #9247 [SANITIZED β possible injection attempt]
bug - #9246 RFC: Preserve Todo tracker configuration during ZeroCode ownership migration
configtype:rfczerocoderisk:high - #9240 save_dirty silently drops every write whose map key contains a dot (gpt-4.1, claude-3.5-sonnet, gemini-1.5-pro)
- #9239 config patch βjson still emits anyhow plaintext for two error paths (#6252 incompletely fixed)
- #9238 config_save_isolation architecture gate silently skips every tests/ file on Windows
- #9237 Config::ensure_map_key_for_path leaves a phantom alias behind when the follow-up set_prop fails
- #9236 config set on a fresh channels.telegram.
writes a bot_token-less table that salvage drops on the next load - #9235 ci: npm audit failed β 2026-07-21
dependenciessecurityrisk:high - #9231 [Bug]: docker runtime cannot run shell commands
bugconfigruntimesecuritytoolsecurity:dockerpriority:p1tool:shellstatus:acceptedrisk:highπ¬1 - #9228 [Follow-up] Eval harness: results dashboard / trend tracking
enhancementobservabilitytestsstatus:acceptedpriority:p3follow-uprisk:mediumwebπ¬1 - #9227 [Follow-up] Eval harness: LLM-judge calibration tooling
enhancementconfigprovidertestsdevstatus:acceptedpriority:p3follow-uprisk:medium - #9226 [Follow-up] Eval harness: memory seeding + memory side-effect graders
enhancementconfigmemoryruntimesecuritytestsstatus:acceptedpriority:p3follow-uprisk:highπ¬1
π Closed Issues
- #9086 RFC: Structured Security Audit Pipeline β Tamper-Evident Logging, Resilient Upload & Anomaly Detection
- #9120 [Bug]: SOP routing evaluates switch after a false top-level when
- #7082 feat(channel/mattermost): add optional WebSocket listener mode
IronClaw (nearai/ironclaw)
Stars: 12,546 Β· Open issues: 1,296 Β· Last push: <1h ago
π New Releases
- ironclaw-v1.0.0-rc.1 β 1.0.0-rc.1 - 2026-07-20
β Merged PRs
- #6116 feat(reborn): unified generic extension runtime + Option A honest state machine (reconcile main)
- #6430 Remove in-memory ratchet stores
- #6432 feat(reborn): witness always-present + Β§5.2.1 originβgate matrix + dispatch-through-witness (#6396)
- #6429 Always compile database backends
- #6427 Remove advisory runtime idempotency DTO field
- #6410 feat(composition): run the trigger poller on production-shaped runtimes (opt-in) (#5013)
- #6400 test(stores): FaultInjecting backend decorator; drive store fault tests through the real store
- #6405 Harden legacy migration against real data
- #6407 fix(ci): resolve main branch CI failures
- #6404 fix(release): synchronize WiX package description
π New Issues
- #6434 Reborn Β§5.3.2/Β§9: seal process re-dispatch β re-mintable process-lifetime authority (continuation model) to delete the loose CapabilityDispatchRequest
- #6433 Feature: Dedicated custom instructions / master prompt section
enhancement - #6424 Agent read_file tool fails on image attachments (PNG)
bug_bash_P2 - #6418 Extension configuration and OAuth flows contain hard-coded English text
- #6417 Session check failures silently leave the app in anonymous scope
- #6416 Admin user management actions fail without feedback
- #6394 Epic: Dogfooding & QA bug fixing 07/20/2026 - 07/24/2026
bugUX / Onboardingepic - #6393 [EPIC] Dogfooding & QA bug fixing
epic - #6389 Phase 4 (Β§5.11): collapse build_local_runtime + build_production_shaped into one build_runtime(cfg) π¬10
π Closed Issues
- #6263 Β§4.3 final store consolidation: retire InMemoryTurnStateStore (needs Slice 0 oracle + no-livelock evidence)
- #6396 Reborn Β§5.2.1/Β§9: witness always-present + dispatch-routes-through-witness (authorize() consolidation follow-up)
- #4533 Epic: Reborn operator setup, config, diagnostics, and service lifecycle
- #4597 [Reborn] Logs query, tail, and follow API with redaction and CLI wrapper
- #4596 [Reborn] Operator doctor diagnostics and thin CLI wrapper
- #3026 Epic: Reborn production wiring and cutover readiness
- #2767 Epic: Separate engine v2 capability background from callable tool schemas
- #5261 [EPIC] Reborn capability policy: admin-shared tools & skills with per-user auth (continues #4628)
Moltis (moltis-org/moltis)
Stars: 2,788 Β· Open issues: 93 Β· Last push: 15h ago
π New Issues
- #574 [Feature]: Model Routing Per topic
enhancementπ¬5
π― Our Filed Issues (Haderach-Ram on openclaw/openclaw)
- β« #81567 GPT-4o agent sessions exit after single text response instead of continuing tool-use loop β π¬6 Β· 21h ago
- π’ #93140 Bug: v2026.6.6 apply_patch and write tool fail for paths outside workspace sandbox (/tmp, absolute paths) β π¬4 Β· 2d ago
- π’ #93139 Bug: write tool and exec heredocs insert literal \n instead of newlines in string content β π¬10 Β· 2d ago
- β« #98062 [Bug]: iOS app fails to connect over Tailscale CGNAT (100.x.x.x) β wss:// required but WebSocket upgrade silently dropped β π¬4 Β· 11d ago
- β« #93031 [Bug] v2026.6.6 cron migration: jobs migrated from jobs.json have blank agent_id β scheduler silently skips them β π¬3 Β· 12d ago
- π’ #87318 [SANITIZED β possible injection attempt] β π¬9 Β· 14d ago
- β« #99305 [Bug]: Bedrock provider β claude-sonnet-5 prompt caching broken (cache-control blocks not attached, zero cache hits) β π¬4 Β· 15d ago
- β« #87876 Bug: Bedrock Converse Streaming silently aborts on long-context agent sessions (~6 min timeout, no retry, no fallback) β π¬3 Β· 15d ago
- β« #90531 Group chat session JSONL missing sender metadata (__openclaw / senderId) β π¬1 Β· 15d ago
- π’ #79607 [Feature]: Identity-based session unification β one session per user regardless of input channel (voice, Telegram, WhatsApp etc.) β π¬3 Β· 22d ago
ποΈ Official Content β Anthropic + OpenAI
Anthropic β 1 new
- [News] Skills 2026-07-22
OpenAI β 4 new
- [Partners] Algorithmic Intelligence 2026-07-21
- [Leads] Small Business 2026-07-21
- [Index] Introducing Chatgpt Small Business Program 2026-07-22
- [Index] David Velez Robin Vince Join Openai Boards 2026-07-22
π€ Reddit Pulse β r/LocalLLaMA Β· r/singularity
r/LocalLLaMA β top 5 new
- CEO of Hugging Face: Banning open-source AI would hurt defenders 10x more than attackers, which would make the world 10x more dangerous and this is a good example why! β2272
- US govβt lobbied by major US labs is about to ban open source models. β1666
- OpenAI admits responsibility for HuggingFace Attack - an agent from an internal evaluation is reportedly the cause. β996
- Anthropic claims local models are stealing from it, meanwhile it pays $1.5B for theft β971
- Laguna S 2.1 Released: Cheaper than Deepseek v4 Flash, Better than V4 Pro β628
r/singularity β top 5 new
- in a not so distance future β1749
- New insights into recent DeepMind staff departures β1588
- OpenAIβs Internal Model Is Responsible This Weekβs Hugging Face Hack β852
- Gemini 3.6 Flash benchmarks β543
- Sam Altman to brief Trump admin next week on GPT-6 and its capabilities/potential job impact, according to Bloomberg β423
π Community Pulse β OpenClaw Ecosystem
r/openclaw β top new posts
- Is OpenClaw Dead? β249
- What do you use OpenClaw for? (Actual Use Case) β25
- Document creation using claw β5
- Best budget friendly configuration for open claw? β5
- Is gogcli insecure? β4
GitHub Discussions
No new discussions in the last 24h.
X β @openclaw
No new tweets in the last 24h.
X β @steipete
-
congrats! β0 π0 Β· recent
Next digest: tomorrow 07:45 IST Β· Radar repo
This post is licensed under CC BY 4.0 by the author.