OpenClaw Files

Changes

• CLI: add completion command (Zsh/Bash/PowerShell/Fish) and auto-setup during postinstall/onboarding.
• CLI: add per-agent models status (--agent filter). (#4780) Thanks @jlowin.
• Agents: add Kimi K2.5 to the synthetic model catalog. (#4407) Thanks @manikv12.
• Auth: switch Kimi Coding to built-in provider; normalize OAuth profile email.
• Auth: add MiniMax OAuth plugin + onboarding option. (#4521) Thanks @Maosghoul.
• Agents: update pi SDK/API usage and dependencies.
• Web UI: refresh sessions after chat commands and improve session display names.
• Build: move TypeScript builds to tsdown + tsgo (faster builds, CI typechecks), update tsconfig target, and clean up lint rules.
• Build: align npm tar override and bin metadata so the openclaw CLI entrypoint is preserved in npm publishes.
• Docs: add pi/pi-dev docs and update OpenClaw branding + install links.

Fixes

• Security: restrict local path extraction in media parser to prevent LFI. (#4880)
• Gateway: prevent token defaults from becoming the literal "undefined". (#4873) Thanks @Hisleren.
• Control UI: fix assets resolution for npm global installs. (#4909) Thanks @YuriNachos.
• macOS: avoid stderr pipe backpressure in gateway discovery. (#3304) Thanks @abhijeet117.
• Telegram: normalize account token lookup for non-normalized IDs. (#5055) Thanks @jasonsschin.
• Telegram: preserve delivery thread fallback and fix threadId handling in delivery context.
• Telegram: fix HTML nesting for overlapping styles/links. (#4578) Thanks @ThanhNguyxn.
• Telegram: accept numeric messageId/chatId in react actions. (#4533) Thanks @Ayush10.
• Telegram: honor per-account proxy dispatcher via undici fetch. (#4456) Thanks @spiceoogway.
• Telegram: scope skill commands to bound agent per bot. (#4360) Thanks @robhparker.
• BlueBubbles: debounce by messageId to preserve attachments in text+image messages. (#4984)
• Routing: prefer requesterOrigin over stale session entries for sub-agent announce delivery. (#4957)
• Extensions: restore embedded extension discovery typings.
• CLI: fix tui:dev port resolution.
• LINE: fix status command TypeError. (#4651)
• OAuth: skip expired-token warnings when refresh tokens are still valid. (#4593)
• Build: skip redundant UI install step in Dockerfile. (#4584) Thanks @obviyus.