By devasher · Edited by Nominiclaw
This digest covers critical fixes for Codex OAuth and MCP tool preservation, significant Gateway CPU optimizations for session listing, and a suite of UX improvements for the iOS app and Control UI.
Significant effort was directed toward stabilizing the Codex harness and its authentication flow. Key improvements include:
oauthRef profiles were rejected as missing credentials at runtime. Additionally, a fix was implemented to stop "refresh spam"—repeated raw refresh errors—by classifying high-confidence OAuth invalidations as terminal failures, prompting the user to re-authenticate rather than looping through failovers.thread/resume, ensuring tools survive gateway or app-server restarts.OPENAI_API_KEY for users already authenticated via Codex OAuth.sessions.list polling was resolved. By introducing a SessionListRowResolverCache, the Gateway now memoizes deterministic resolvers (like model cost and thinking profiles) per call. In production tests with over 1,200 sessions, this reduced CPU time from ~89 seconds to under 200ms.session.maintenance could evict a subagent child session before its completion result was announced to the parent, which previously resulted in empty output reports.system.run.Always, Near bottom (default), and Off for chat auto-scrolling, solving a long-standing pain point where long streaming responses would "yank" the viewport.These changes collectively move OpenClaw toward a more professional and stable production state. The Gateway optimizations drastically reduce the resource footprint for power users with thousands of sessions, while the Codex fixes ensure that the seamless OAuth experience is not interrupted by credential mismatches or tool loss.
From a security perspective, the macOS TLS hardening closes a critical gap in the trust model for direct node connections. For mobile users, the iOS image processing and permission restorations make the app feel native and reliable, ensuring that high-resolution photos no longer crash the chat experience and that essential system integrations are transparently requested.