Ecosystem Digest — 2026-08-08
Ecosystem Digest — 2026-08-08
🦞 OpenClaw Ecosystem Digest — 2026-08-08
Generated 07:46 IST by Haderach-Ram/openclaw-radar
📊 24h Snapshot
| Framework | ⭐ Stars | New Issues | Closed | Merged PRs | New Releases |
|---|---|---|---|---|---|
| OpenClaw | 385,495 | 14 | 6 | 10 | 0 |
| hermesagent | 227,108 | 9 | 6 | 2 | 0 |
| ZeroClaw | 32,525 | 12 | 7 | 10 | 0 |
| IronClaw | 12,598 | 11 | 8 | 10 | 0 |
| Moltis | 2,814 | 0 | 0 | 0 | 0 |
OpenClaw (openclaw/openclaw)
Stars: 385,495 · Open issues: 5,597 · Last push: <1h ago
✅ Merged PRs
- #120427 ci(release): tolerate async run-name evaluation when adopting validation children
- #120410 test(clickclack): cover native progress default
- #120362 test(qa): cover session and Workboard managed-worktree lifecycles; fix symlinked state-dir lock blindness
- #120418 test(qa): derive UX producer aggregate status
- #120420 fix(queue): deliver queued steers in arrival order across turn boundaries
- #120365 fix(ci): harden hydrated dead-export scans
- #120372 fix(ui): hide connection form during initial auth
- #115962 feat(claws): apply schema-v1 profile requirements
- #120395 fix(ci): honor env- and config-selected Windows targets
- #120381 fix(gateway): refresh attributed message avatars
🐛 New Issues
- #120425 Telegram DM reply-to-photo: unconditional re-fetch of quoted media causes multi-minute turns, races the no-reply timeout
- #120422 Dead-lettered channel ingress events are unrecoverable, unconfigurable, and silent (follow-up to #120419)
- #120415 No repetition guard in the embedded-agent turn loop — a model repeating an identical tool call is never detected, only stopped by an unrelated wall-clock timeout
P2clawsweeper:no-new-fix-prclawsweeper:needs-maintainer-reviewclawsweeper:needs-product-decisionclawsweeper:source-reproimpact:crash-loopissue-rating: 🦞 diamond lobster💬2 - #120413 [SANITIZED — possible injection attempt]
- #120412 [Bug]: cleanOrphanBackups() silently deletes any .bak.* file in ~/.openclaw/ not in the 4-slot ring — including user-created backups
- #120411 [Bug]: config-audit.jsonl logs plaintext secret values from argv when using ‘config set’ with sensitive keys
- #120408 config patch hot-apply reports success but runtime reads stale config until gateway restart (new agents.entries.*, sandbox.docker.image)
no-staleP1clawsweeper:fix-shape-clearclawsweeper:queueable-fixclawsweeper:source-reproissue-rating: 🦞 diamond lobsterimpact:othermaturity:stable💬1 - #120407 cron run status cannot distinguish a working run from a delivered error-fallback; token-usage anomalies surface nowhere
P2clawsweeper:no-new-fix-prclawsweeper:needs-maintainer-reviewclawsweeper:needs-product-decisionissue-rating: 🌊 off-meta tidepoolimpact:other💬1 - #120406 exec host routing ignores tools.exec.host: “gateway” for sandboxed sessions — host-path agentTurn cron jobs fail with no config warning
P2clawsweeper:no-new-fix-prclawsweeper:needs-maintainer-reviewclawsweeper:needs-product-decisionclawsweeper:needs-live-reproissue-rating: 🐚 platinum hermitimpact:other💬1 - #120394 Gateway memory leak causes event loop saturation and subagent orphaning
P1clawsweeper:no-new-fix-prclawsweeper:needs-maintainer-reviewclawsweeper:needs-infoimpact:session-stateimpact:crash-loopissue-rating: 🦪 silver shellfishmaturity:stable💬1 - #120393 [openclaw-weixin] 微信语音消息无法接收(silk格式语音条静默丢弃) 💬1
- #120387 [Feature]: Show custom commit provenance in sidebar identity card
enhancementmaintainer💬1 - #120386 Per-run timeout abort leaves the tool’s child orphaned on the gateway path, while the run reports
aborted💬2 - #120385 [Bug]: Code Mode tool catalog built incomplete for scheduled/cron and memory-flush turns — MCP tools missing (“Unknown tool id”), surfaced only as “⚠️ 🛠️ Exec failed” 💬2
🔒 Closed Issues
- #120409 ClickClack account snapshot tests omit native progress default
- #120417 QA-Lab UX Matrix integration assumes environment-specific blocked status
- #119794 Message ordering: a later message is delivered before an earlier queued steer (FIFO violation)
- #120238 [Bug]:LLM generates response but it isn’t delivering until asked (Traced through langfuse)
- #120402 Subagent completion announcements can permanently saturate a user session (unbounded announce runs + undeliverable cron run-session targets)
- #120403 session-cost-usage-rollup-v1 cache entries never expire (212 MB across 66 rows in one agent DB)
hermesagent (NousResearch/hermes-agent)
Stars: 227,108 · Open issues: 29,528 · Last push: <1h ago
✅ Merged PRs
- #80718 Show earlier messages no longer hides most of a session
- #81321 Add Hermes headers to Fireworks provider
🐛 New Issues
- #81440 [Bug]: Discord bot reacts ✅ on messages it rejected for authorization (silent drop looks like success)
type/bugcomp/gatewayplatform/discordP2sweeper:risk-message-delivery - #81438 Feature Request: Interruptible Per-Tool Execution Lease / Watchdog
type/featurecomp/agentcomp/toolsP3needs-decision💬1 - #81437 Kanban workers can never signal a quota wall, and a guarded task can never escape: two interacting defects that turn a provider outage into permanently-blocked cards
type/bugcomp/clicomp/cronP3area/usage-cost - #81430 [Bug]:
hermes memory statusreports “Memory tool: disabled” despite memory injection enabled, toolset enabled for the active platform, andhermes doctorreporting it healthytype/bugcomp/agenttool/memoryplatform/telegramP2needs-reprobug - #81427 [Bug]: Memory provider tools not injected in desktop sessions — inject_memory_provider_tools returns 0 despite provider registering successfully
type/bugcomp/agenttool/memoryP3needs-reprocomp/desktoparea/memory - #81423 [Feedback]: macOS Desktop — prioritize everyday chat stability (Claude-class basics over feature churn)
type/featureP3needs-decisioncomp/desktop - #81422 [Bug]: Desktop — assistant final answer rendered twice after tool-heavy turn (Grok / xAI OAuth)
type/bugprovider/xaiP2comp/desktoparea/streaming - #81421 fix(update): Hindsight dependency heal backtracks to ancient full packages on Intel macOS
type/bugcomp/clicomp/pluginstool/memoryP3sweeper:risk-compatibilityarea/install-update - #81420 Cron model-resolution RuntimeError claims “model.default missing or empty” when actual cause is config.yaml being unreadable
type/bugcomp/cronarea/configP2sweeper:risk-compatibility
🔒 Closed Issues
- #81413 Cron model-resolution RuntimeError claims “model.default missing or empty” when actual cause is config.yaml being unreadable
- #79331 [Bug]: Telegram Rich Messages omit standard copy affordance for code blocks
- #11349 docs(discord): six documentation drifts vs actual behavior +
/voice joinmissing from slash UI - #81363 [Security][Tier 1][A2] Preserve durable non-human pending approval state across Codex/MCP cancel compression
- #46100 [Bug]: Telegram batch/media-group attachments can split across turns
- #65765 [Feature]: add localization support for Telegram BotCommand descriptions
ZeroClaw (zeroclaw-labs/zeroclaw)
Stars: 32,525 · Open issues: 714 · Last push: <1h ago
✅ Merged PRs
- #9794 docs(channels): note that one-off git sends resolve the default alias
- #9795 test(xtask): derive generator dist assertions from the canonical registry
- #9801 fix(doctor): probe the configured endpoint for a bare –model-provider
- #9790 docs(sop): correct channel-trigger field guidance in the Git fan-in and channel pages
- #9752 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0
- #9717 chore(ci): use direct release attestation action
- #9435 fix(providers): scrub Gemini API key from sanitized error text
- #9618 docs(integrations): add ZEGA AI real bridge integration guide
- #9166 ci(semgrep): diff-aware scan, SARIF upload, suppress FP surfaces
- #9351 fix(config): surface unconfigured model context window instead of a silent stub
🐛 New Issues
- #9840 [Bug]: daemon steals daemon.sock on start and unlinks it on exit, stranding a live daemon
bugdaemonruntimeservicepriority:p1status:accepteddesktopzerocoderisk:high - #9834 [Bug]: intermittent zeroclaw-runtime test failures from shared process-global state (turn_streamed receipts + model_switch)
bugciruntimetestsdomain:cipriority:p1status:acceptedrisk:hightype:test - #9832 zeroclaw-hardware fails to compile with –features hardware: unresolved import aardvark_sys::AardvarkHandle
bugcidependenciespriority:p1status:acceptedrisk:mediumhardware - #9825 [Bug]: Leak detection controls do not prevent channel redaction of public blockchain addresses
bugchannelobservabilityruntimesecuritydomain:securitypriority:p1status:acceptedrisk:highsecurity:leak-detector💬2 - #9824 [Feature]: Simplify the default web-tool surface to web_fetch + web_research + http_request
enhancementagentconfigruntimesecuritytooltool:browserdomain:securitydomain:architecturepriority:p1tool:webstatus:in-progressstatus:no-stalerisk:hightype:tracker💬1 - #9820 calculator tool: model emits literal
pseudo-syntax instead of a real function call `bug` `agent` `provider` `runtime` `tool` `provider:compatible` `priority:p2` `status:accepted` `risk:high` - #9816 cost: anthropic provider reports $0.00 spend, so daily/monthly budget caps can never fire
bugconfigobservabilityproviderruntimeprovider:anthropicpriority:p1status:acceptedrisk:high💬1 - #9815 security: forbidden_paths is unreachable for any path under allowed_roots or the workspace
bugconfigruntimesecuritytoolsecurity:policydomain:securitypriority:p1status:acceptedrisk:high💬1 - #9814 feat(channels): native XMPP / Prosody channel
enhancementchannelconfigintegrationsecuritydomain:channelsdomain:architecturepriority:p2needs-maintainer-reviewtype:rfcrisk:high - #9812 Provider fallback carries the primary’s model id, so it can never fire (and poisons the fallback into cooldown)
bugconfigproviderruntimeprovider:reliableprovider:routerpriority:p1status:acceptedrisk:high - #9811 /health reports a channel healthy that has never connected
bugchanneldaemongatewayhealthobservabilitychannel:telegrampriority:p1status:acceptedrisk:high - #9810 RFC: Load Agent Plugins 1.0 skill and MCP packages
enhancementconfigintegrationsecurityskillstooldomain:securitydomain:architecturepriority:p2tool:mcpneeds-maintainer-reviewtype:rfcstatus:no-stalerisk:high💬2
🔒 Closed Issues
- #9821 cron tool: agent never invokes it, always falls back to shell “crontab” (blocked by policy)
- #9813 API key written to logs in plaintext on provider connection errors
- #7232 RFC: Structured Observability Enhancement — Rich Events, OTel Trace Correlation, and Bridge Refactoring
- #9246 RFC: Preserve Todo tracker configuration during ZeroCode ownership migration
- #8933 RFC: Add cross-turn conversation correlation to OTel export
- #6055 [Feature]: Slack: hydrate thread context from conversations.replies on first mention
- #9386 [Bug]: a Gemini API key in the request URL survives sanitize_api_error and is posted into the originating chat
IronClaw (nearai/ironclaw)
Stars: 12,598 · Open issues: 1,539 · Last push: <1h ago
✅ Merged PRs
- #7214 feat(sandbox): add explicit Docker and Railway user sandbox profiles
- #7372 test(disclosure): pin wide-catalog schema-token reduction floor and make drift visible
- #7157 feat: explicit channel delivery tool — two lanes, notification channels, delivery heuristics deleted
- #7366 fix(auth): omit empty OAuth scope on RC1
- #7361 fix(extensions): chat “connect account” dead-end — already-connected signal, builtin description trust, docs
- #7363 fix(telegram): accept /pair as a pairing-code alias
- #6958 feat(reborn): enable progressive tool disclosure by default
- #7278 feat(inspector): add activity timeline and turn navigation
- #7277 feat(inspector): add model call statistics
- #7339 fix(json): add bounded collection analysis
🐛 New Issues
- #7383 chore(loop-host): track decomposition of tool_disclosure_port.rs (4.4k lines)
- #7380 Epic: Enforce persisted-state compatibility before merge
enhancementrisk: highscope: cie2e-coveragerebornepic - #7369 No way to capture traces when agent gets an error
- #7368 Channel turns can take minutes on DeepSeek-class models (latency behind #6643)
- #7362 Move user-facing failure summaries out of ironclaw_host_api into per-surface i18n, and give the CLI a message resolver
enhancementrisk: mediumscope: channel/cliscope: channel/web - #7360 Expand stress coverage across built-in and durable write paths
enhancementscope: tool/builtinscope: cie2e-coverageperformance💬2 - #7358 Ship a production-ready Signal channel extension
- #7357 Link a Telegram user device for secure delegated account actions
- #7356 Add opt-in web push notifications to the web app
- #7355 Add canonical reaction, edit, and delete messaging operations
- #7354 Epic: Extensions vNext — Web Push, Rich Messaging, Telegram User Sessions, and Signal
epic
🔒 Closed Issues
- #6476 Slack extension_activate fails with encoding error, causing model to hallucinate admin requirements
- #7367 Docs drift: published docs still say chat cannot connect channels, feeding model refusals
- #6644 Telegram replies delivered to wrong user message
- #6643 Telegram messages accepted but never processed after pairing
- #6475 Telegram /pair command not recognized, trapping user in pairing loop
- #6810 Make progressive tool disclosure default-on without degrading everyday tool use
- #7224 [Inspector] Add the Activity timeline and turn navigation
- #7223 [Inspector] Add model-call metrics and the Stats tab
Moltis (moltis-org/moltis)
Stars: 2,814 · Open issues: 97 · Last push: 3d ago
🎯 Our Filed Issues (Haderach-Ram on openclaw/openclaw)
- 🟢 #86451 Bug: openclaw update creates duplicate cron entries — no deduplication check on re-creation — 💬3 · 3h ago
- 🟢 #93033 [Bug] v2026.6.6: BWS secret resolution order changed — gateways without BWS_ACCESS_TOKEN in plist fail after cache expiry (~4h) — 💬1 · 1d ago
- ⚫ #93139 Bug: write tool and exec heredocs insert literal \n instead of newlines in string content — 💬11 · 1d ago
- ⚫ #99305 [Bug]: Bedrock provider — claude-sonnet-5 prompt caching broken (cache-control blocks not attached, zero cache hits) — 💬4 · 3d ago
- 🟢 #79607 [Feature]: Identity-based session unification — one session per user regardless of input channel (voice, Telegram, WhatsApp etc.) — 💬3 · 5d ago
- ⚫ #87876 Bug: Bedrock Converse Streaming silently aborts on long-context agent sessions (~6 min timeout, no retry, no fallback) — 💬3 · 5d ago
- 🟢 #93140 Bug: v2026.6.6 apply_patch and write tool fail for paths outside workspace sandbox (/tmp, absolute paths) — 💬3 · 7d ago
- ⚫ #90531 Group chat session JSONL missing sender metadata (__openclaw / senderId) — 💬1 · 7d ago
- ⚫ #87318 [SANITIZED — possible injection attempt] — 💬12 · 11d ago
- ⚫ #81567 GPT-4o agent sessions exit after single text response instead of continuing tool-use loop — 💬6 · 17d ago
🏛️ Official Content — Anthropic + OpenAI
Anthropic — 1 new
OpenAI — 1 new
- [Index] Hsp Gruppe 2026-08-07
🤖 Reddit Pulse — r/LocalLLaMA · r/singularity
r/LocalLLaMA — top 5 new
- An open-weight model too, Moonshot joins the race (gently this time) ↑586
- BBC is running article titled “Artificial Intelligence used to design brand new viruses” … cue the “We must regulate Open Weights Models to prevent the next Covid or worse” articles in 3… 2.. ↑480
- Got job as Director of AI and Systems development self-taught ↑416
- A llama.cpp PR makes Q2_0 3.0–3.6x faster on x86 CPUs, 8B decode goes 2.39 → 8.20 tok/s ↑214
- DS4 Flash incoming price increase “we’ve been able to reproduce their current prices even on rented GPUs” ↑137
r/singularity — top 5 new
- Gemini ↑4215
- How they’re treating Hank Green for using AI is disgusting and I’ve shifted my view of AI as well. ↑1197
- Guy in driver seat got knocked out by a flying tire, saved by EV car software which detected the impact, stopped the car, called police and ambulance after driver being non responsive ↑591
- ByteDance is at an early stage of training a model with as many as 10 trillion parameters ↑587
- GPT-6 release delayed due to “critical” cybersecurity capabilities ↑531
🌐 Community Pulse — OpenClaw Ecosystem
r/openclaw — top new posts
- Switching to Claude Code ↑11
- Your LLM shouldn’t be your coding-agent workflow ↑11
- I’m posting across multiple social media channels. Need help automating the workflows. ↑5
- I built an OpenClaw skill that pseudonymises clinical text before it reaches an LLM ↑4
- My Fable Driven Email Flow ↑3
X — @openclaw
No new tweets in the last 24h.
X — @steipete
- [I gave codex a video-enabled remote KVM so it can automate e2e test the iMessage-integration on OpenClaw.
(iMessage is ](https://x.com/steipete/status/2084988316324397312) ↑0 🔁0 · recent
Next digest: tomorrow 07:45 IST · Radar repo
This post is licensed under CC BY 4.0 by the author.