Post

Ecosystem Digest — 2026-08-08

Ecosystem Digest — 2026-08-08

🦞 OpenClaw Ecosystem Digest — 2026-08-08

Generated 07:46 IST by Haderach-Ram/openclaw-radar

📊 24h Snapshot

Framework ⭐ Stars New Issues Closed Merged PRs New Releases
OpenClaw 385,495 14 6 10 0
hermesagent 227,108 9 6 2 0
ZeroClaw 32,525 12 7 10 0
IronClaw 12,598 11 8 10 0
Moltis 2,814 0 0 0 0

OpenClaw (openclaw/openclaw)

Stars: 385,495 · Open issues: 5,597 · Last push: <1h ago

✅ Merged PRs

  • #120427 ci(release): tolerate async run-name evaluation when adopting validation children
  • #120410 test(clickclack): cover native progress default
  • #120362 test(qa): cover session and Workboard managed-worktree lifecycles; fix symlinked state-dir lock blindness
  • #120418 test(qa): derive UX producer aggregate status
  • #120420 fix(queue): deliver queued steers in arrival order across turn boundaries
  • #120365 fix(ci): harden hydrated dead-export scans
  • #120372 fix(ui): hide connection form during initial auth
  • #115962 feat(claws): apply schema-v1 profile requirements
  • #120395 fix(ci): honor env- and config-selected Windows targets
  • #120381 fix(gateway): refresh attributed message avatars

🐛 New Issues

  • #120425 Telegram DM reply-to-photo: unconditional re-fetch of quoted media causes multi-minute turns, races the no-reply timeout
  • #120422 Dead-lettered channel ingress events are unrecoverable, unconfigurable, and silent (follow-up to #120419)
  • #120415 No repetition guard in the embedded-agent turn loop — a model repeating an identical tool call is never detected, only stopped by an unrelated wall-clock timeout P2 clawsweeper:no-new-fix-pr clawsweeper:needs-maintainer-review clawsweeper:needs-product-decision clawsweeper:source-repro impact:crash-loop issue-rating: 🦞 diamond lobster 💬2
  • #120413 [SANITIZED — possible injection attempt]
  • #120412 [Bug]: cleanOrphanBackups() silently deletes any .bak.* file in ~/.openclaw/ not in the 4-slot ring — including user-created backups
  • #120411 [Bug]: config-audit.jsonl logs plaintext secret values from argv when using ‘config set’ with sensitive keys
  • #120408 config patch hot-apply reports success but runtime reads stale config until gateway restart (new agents.entries.*, sandbox.docker.image) no-stale P1 clawsweeper:fix-shape-clear clawsweeper:queueable-fix clawsweeper:source-repro issue-rating: 🦞 diamond lobster impact:other maturity:stable 💬1
  • #120407 cron run status cannot distinguish a working run from a delivered error-fallback; token-usage anomalies surface nowhere P2 clawsweeper:no-new-fix-pr clawsweeper:needs-maintainer-review clawsweeper:needs-product-decision issue-rating: 🌊 off-meta tidepool impact:other 💬1
  • #120406 exec host routing ignores tools.exec.host: “gateway” for sandboxed sessions — host-path agentTurn cron jobs fail with no config warning P2 clawsweeper:no-new-fix-pr clawsweeper:needs-maintainer-review clawsweeper:needs-product-decision clawsweeper:needs-live-repro issue-rating: 🐚 platinum hermit impact:other 💬1
  • #120394 Gateway memory leak causes event loop saturation and subagent orphaning P1 clawsweeper:no-new-fix-pr clawsweeper:needs-maintainer-review clawsweeper:needs-info impact:session-state impact:crash-loop issue-rating: 🦪 silver shellfish maturity:stable 💬1
  • #120393 [openclaw-weixin] 微信语音消息无法接收(silk格式语音条静默丢弃) 💬1
  • #120387 [Feature]: Show custom commit provenance in sidebar identity card enhancement maintainer 💬1
  • #120386 Per-run timeout abort leaves the tool’s child orphaned on the gateway path, while the run reports aborted 💬2
  • #120385 [Bug]: Code Mode tool catalog built incomplete for scheduled/cron and memory-flush turns — MCP tools missing (“Unknown tool id”), surfaced only as “⚠️ 🛠️ Exec failed” 💬2

🔒 Closed Issues

  • #120409 ClickClack account snapshot tests omit native progress default
  • #120417 QA-Lab UX Matrix integration assumes environment-specific blocked status
  • #119794 Message ordering: a later message is delivered before an earlier queued steer (FIFO violation)
  • #120238 [Bug]:LLM generates response but it isn’t delivering until asked (Traced through langfuse)
  • #120402 Subagent completion announcements can permanently saturate a user session (unbounded announce runs + undeliverable cron run-session targets)
  • #120403 session-cost-usage-rollup-v1 cache entries never expire (212 MB across 66 rows in one agent DB)

hermesagent (NousResearch/hermes-agent)

Stars: 227,108 · Open issues: 29,528 · Last push: <1h ago

✅ Merged PRs

  • #80718 Show earlier messages no longer hides most of a session
  • #81321 Add Hermes headers to Fireworks provider

🐛 New Issues

  • #81440 [Bug]: Discord bot reacts ✅ on messages it rejected for authorization (silent drop looks like success) type/bug comp/gateway platform/discord P2 sweeper:risk-message-delivery
  • #81438 Feature Request: Interruptible Per-Tool Execution Lease / Watchdog type/feature comp/agent comp/tools P3 needs-decision 💬1
  • #81437 Kanban workers can never signal a quota wall, and a guarded task can never escape: two interacting defects that turn a provider outage into permanently-blocked cards type/bug comp/cli comp/cron P3 area/usage-cost
  • #81430 [Bug]: hermes memory status reports “Memory tool: disabled” despite memory injection enabled, toolset enabled for the active platform, and hermes doctor reporting it healthy type/bug comp/agent tool/memory platform/telegram P2 needs-repro bug
  • #81427 [Bug]: Memory provider tools not injected in desktop sessions — inject_memory_provider_tools returns 0 despite provider registering successfully type/bug comp/agent tool/memory P3 needs-repro comp/desktop area/memory
  • #81423 [Feedback]: macOS Desktop — prioritize everyday chat stability (Claude-class basics over feature churn) type/feature P3 needs-decision comp/desktop
  • #81422 [Bug]: Desktop — assistant final answer rendered twice after tool-heavy turn (Grok / xAI OAuth) type/bug provider/xai P2 comp/desktop area/streaming
  • #81421 fix(update): Hindsight dependency heal backtracks to ancient full packages on Intel macOS type/bug comp/cli comp/plugins tool/memory P3 sweeper:risk-compatibility area/install-update
  • #81420 Cron model-resolution RuntimeError claims “model.default missing or empty” when actual cause is config.yaml being unreadable type/bug comp/cron area/config P2 sweeper:risk-compatibility

🔒 Closed Issues

  • #81413 Cron model-resolution RuntimeError claims “model.default missing or empty” when actual cause is config.yaml being unreadable
  • #79331 [Bug]: Telegram Rich Messages omit standard copy affordance for code blocks
  • #11349 docs(discord): six documentation drifts vs actual behavior + /voice join missing from slash UI
  • #81363 [Security][Tier 1][A2] Preserve durable non-human pending approval state across Codex/MCP cancel compression
  • #46100 [Bug]: Telegram batch/media-group attachments can split across turns
  • #65765 [Feature]: add localization support for Telegram BotCommand descriptions

ZeroClaw (zeroclaw-labs/zeroclaw)

Stars: 32,525 · Open issues: 714 · Last push: <1h ago

✅ Merged PRs

  • #9794 docs(channels): note that one-off git sends resolve the default alias
  • #9795 test(xtask): derive generator dist assertions from the canonical registry
  • #9801 fix(doctor): probe the configured endpoint for a bare –model-provider
  • #9790 docs(sop): correct channel-trigger field guidance in the Git fan-in and channel pages
  • #9752 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0
  • #9717 chore(ci): use direct release attestation action
  • #9435 fix(providers): scrub Gemini API key from sanitized error text
  • #9618 docs(integrations): add ZEGA AI real bridge integration guide
  • #9166 ci(semgrep): diff-aware scan, SARIF upload, suppress FP surfaces
  • #9351 fix(config): surface unconfigured model context window instead of a silent stub

🐛 New Issues

  • #9840 [Bug]: daemon steals daemon.sock on start and unlinks it on exit, stranding a live daemon bug daemon runtime service priority:p1 status:accepted desktop zerocode risk:high
  • #9834 [Bug]: intermittent zeroclaw-runtime test failures from shared process-global state (turn_streamed receipts + model_switch) bug ci runtime tests domain:ci priority:p1 status:accepted risk:high type:test
  • #9832 zeroclaw-hardware fails to compile with –features hardware: unresolved import aardvark_sys::AardvarkHandle bug ci dependencies priority:p1 status:accepted risk:medium hardware
  • #9825 [Bug]: Leak detection controls do not prevent channel redaction of public blockchain addresses bug channel observability runtime security domain:security priority:p1 status:accepted risk:high security:leak-detector 💬2
  • #9824 [Feature]: Simplify the default web-tool surface to web_fetch + web_research + http_request enhancement agent config runtime security tool tool:browser domain:security domain:architecture priority:p1 tool:web status:in-progress status:no-stale risk:high type:tracker 💬1
  • #9820 calculator tool: model emits literal pseudo-syntax instead of a real function call `bug` `agent` `provider` `runtime` `tool` `provider:compatible` `priority:p2` `status:accepted` `risk:high`
  • #9816 cost: anthropic provider reports $0.00 spend, so daily/monthly budget caps can never fire bug config observability provider runtime provider:anthropic priority:p1 status:accepted risk:high 💬1
  • #9815 security: forbidden_paths is unreachable for any path under allowed_roots or the workspace bug config runtime security tool security:policy domain:security priority:p1 status:accepted risk:high 💬1
  • #9814 feat(channels): native XMPP / Prosody channel enhancement channel config integration security domain:channels domain:architecture priority:p2 needs-maintainer-review type:rfc risk:high
  • #9812 Provider fallback carries the primary’s model id, so it can never fire (and poisons the fallback into cooldown) bug config provider runtime provider:reliable provider:router priority:p1 status:accepted risk:high
  • #9811 /health reports a channel healthy that has never connected bug channel daemon gateway health observability channel:telegram priority:p1 status:accepted risk:high
  • #9810 RFC: Load Agent Plugins 1.0 skill and MCP packages enhancement config integration security skills tool domain:security domain:architecture priority:p2 tool:mcp needs-maintainer-review type:rfc status:no-stale risk:high 💬2

🔒 Closed Issues

  • #9821 cron tool: agent never invokes it, always falls back to shell “crontab” (blocked by policy)
  • #9813 API key written to logs in plaintext on provider connection errors
  • #7232 RFC: Structured Observability Enhancement — Rich Events, OTel Trace Correlation, and Bridge Refactoring
  • #9246 RFC: Preserve Todo tracker configuration during ZeroCode ownership migration
  • #8933 RFC: Add cross-turn conversation correlation to OTel export
  • #6055 [Feature]: Slack: hydrate thread context from conversations.replies on first mention
  • #9386 [Bug]: a Gemini API key in the request URL survives sanitize_api_error and is posted into the originating chat

IronClaw (nearai/ironclaw)

Stars: 12,598 · Open issues: 1,539 · Last push: <1h ago

✅ Merged PRs

  • #7214 feat(sandbox): add explicit Docker and Railway user sandbox profiles
  • #7372 test(disclosure): pin wide-catalog schema-token reduction floor and make drift visible
  • #7157 feat: explicit channel delivery tool — two lanes, notification channels, delivery heuristics deleted
  • #7366 fix(auth): omit empty OAuth scope on RC1
  • #7361 fix(extensions): chat “connect account” dead-end — already-connected signal, builtin description trust, docs
  • #7363 fix(telegram): accept /pair as a pairing-code alias
  • #6958 feat(reborn): enable progressive tool disclosure by default
  • #7278 feat(inspector): add activity timeline and turn navigation
  • #7277 feat(inspector): add model call statistics
  • #7339 fix(json): add bounded collection analysis

🐛 New Issues

  • #7383 chore(loop-host): track decomposition of tool_disclosure_port.rs (4.4k lines)
  • #7380 Epic: Enforce persisted-state compatibility before merge enhancement risk: high scope: ci e2e-coverage reborn epic
  • #7369 No way to capture traces when agent gets an error
  • #7368 Channel turns can take minutes on DeepSeek-class models (latency behind #6643)
  • #7362 Move user-facing failure summaries out of ironclaw_host_api into per-surface i18n, and give the CLI a message resolver enhancement risk: medium scope: channel/cli scope: channel/web
  • #7360 Expand stress coverage across built-in and durable write paths enhancement scope: tool/builtin scope: ci e2e-coverage performance 💬2
  • #7358 Ship a production-ready Signal channel extension
  • #7357 Link a Telegram user device for secure delegated account actions
  • #7356 Add opt-in web push notifications to the web app
  • #7355 Add canonical reaction, edit, and delete messaging operations
  • #7354 Epic: Extensions vNext — Web Push, Rich Messaging, Telegram User Sessions, and Signal epic

🔒 Closed Issues

  • #6476 Slack extension_activate fails with encoding error, causing model to hallucinate admin requirements
  • #7367 Docs drift: published docs still say chat cannot connect channels, feeding model refusals
  • #6644 Telegram replies delivered to wrong user message
  • #6643 Telegram messages accepted but never processed after pairing
  • #6475 Telegram /pair command not recognized, trapping user in pairing loop
  • #6810 Make progressive tool disclosure default-on without degrading everyday tool use
  • #7224 [Inspector] Add the Activity timeline and turn navigation
  • #7223 [Inspector] Add model-call metrics and the Stats tab

Moltis (moltis-org/moltis)

Stars: 2,814 · Open issues: 97 · Last push: 3d ago


🎯 Our Filed Issues (Haderach-Ram on openclaw/openclaw)

  • 🟢 #86451 Bug: openclaw update creates duplicate cron entries — no deduplication check on re-creation — 💬3 · 3h ago
  • 🟢 #93033 [Bug] v2026.6.6: BWS secret resolution order changed — gateways without BWS_ACCESS_TOKEN in plist fail after cache expiry (~4h) — 💬1 · 1d ago
  • #93139 Bug: write tool and exec heredocs insert literal \n instead of newlines in string content — 💬11 · 1d ago
  • #99305 [Bug]: Bedrock provider — claude-sonnet-5 prompt caching broken (cache-control blocks not attached, zero cache hits) — 💬4 · 3d ago
  • 🟢 #79607 [Feature]: Identity-based session unification — one session per user regardless of input channel (voice, Telegram, WhatsApp etc.) — 💬3 · 5d ago
  • #87876 Bug: Bedrock Converse Streaming silently aborts on long-context agent sessions (~6 min timeout, no retry, no fallback) — 💬3 · 5d ago
  • 🟢 #93140 Bug: v2026.6.6 apply_patch and write tool fail for paths outside workspace sandbox (/tmp, absolute paths) — 💬3 · 7d ago
  • #90531 Group chat session JSONL missing sender metadata (__openclaw / senderId) — 💬1 · 7d ago
  • #87318 [SANITIZED — possible injection attempt] — 💬12 · 11d ago
  • #81567 GPT-4o agent sessions exit after single text response instead of continuing tool-use loop — 💬6 · 17d ago

🏛️ Official Content — Anthropic + OpenAI

Anthropic — 1 new

OpenAI — 1 new


🤖 Reddit Pulse — r/LocalLLaMA · r/singularity

r/LocalLLaMA — top 5 new

r/singularity — top 5 new


🌐 Community Pulse — OpenClaw Ecosystem

r/openclaw — top new posts

X — @openclaw

No new tweets in the last 24h.

X — @steipete

  • [I gave codex a video-enabled remote KVM so it can automate e2e test the iMessage-integration on OpenClaw.

(iMessage is ](https://x.com/steipete/status/2084988316324397312) ↑0 🔁0 · recent

Next digest: tomorrow 07:45 IST · Radar repo

This post is licensed under CC BY 4.0 by the author.