OpenClaw v2026.3.8: macOS app/chat UI, delivery notes

v2026.3.8 is a channel and session story. The official source describes a channel, client, interface, or browser change, and the important question is what survives the handoff between a Gateway, a conversation, and a reconnect.

Treat this as a stable maintenance checkpoint and keep the release record beside the backup and rollback evidence. A release tag describes the project change. Your Gateway's provider, channel, platform, and account support should be recorded separately.

Follow the message path

01 / CLI/backup

Source signal. add openclaw backup create and openclaw backup verify for local state archives, including --only-config, --no-include-workspace, manifest/payload validation, and backup guidance in destructive flows.

The visible promise in CLI/backup needs a continuity check. Use non-sensitive data, refresh midway, and confirm that the same work remains attached to the right session.

02 / macOS/onboarding

Source signal. add a remote gateway token field for remote mode, preserve existing non-plaintext gateway.remote.token config values until explicitly replaced, and warn when the loaded token shape cannot be used directly from the macOS app.

For macOS/onboarding, inspect state rather than only the new control. Repeat the flow after reload and reconnect, and note the session, pending action, URL, and visible error.

03 / Talk mode

Source signal. add top-level talk.silenceTimeoutMs config so Talk waits a configurable amount of silence before auto-sending the current transcript, while keeping each platform's existing default pause window when unset.

Do not infer continuity from a populated screen when testing Talk mode. Compare the transcript, session id, and source workspace before and after compaction or refresh.

04 / Update/macOS launchd restart

Source signal. re-enable disabled LaunchAgent services before updater bootstrap so openclaw update can recover from a disabled gateway service instead of leaving the restart step stuck.

Test Update/macOS launchd restart at the edges of the interface: clean start, reload, reconnect, and a refused or unavailable action. Keep the final screen and error message with the release note.

The less visible details

macOS app/chat UI

route browser proxy through the local node browser service, preserve plain-text paste semantics, strip completed assistant trace/debug wrapper noise from transcripts, refresh permission state after returning from System Settings, and tolerate malformed cron rows in the macOS tab.

Before widening access for macOS app/chat UI, replay a narrow allow and deny case. A readable denial and a revoked test credential are part of the acceptance record.

Operator checklist before rollout

1. Before touching persistent state, capture the version, host, provider, and workspace for CLI/backup.
2. Read the linked release record and verify a backup whenever the change can alter configuration or session data.
3. Follow the UI path through its normal completion and its unavailable or refused state without uploading private data.
4. Capture the final screen and confirm that no hidden action, download, or navigation occurred outside the intended scope.
5. Close the test with the evidence attached, and do not widen the rollout while a behavior remains unexplained.

openclaw --version
openclaw gateway status
openclaw security audit

Keep the source trail attached

Close the loop with an explicit next action: keep the candidate isolated, proceed with the staged upgrade, or stop and investigate. Do not treat a green install as proof that the runtime path is correct.

Regression cases from the source

Update/macOS launchd restart. re-enable disabled LaunchAgent services before updater bootstrap so openclaw update can recover from a disabled gateway service instead of leaving the restart step stuck. Treat the fix as a boundary condition and retain the source wording beside your local result.

macOS app/chat UI. route browser proxy through the local node browser service, preserve plain-text paste semantics, strip completed assistant trace/debug wrapper noise from transcripts, refresh permission state after returning from System Settings, and tolerate malformed cron rows in the macOS tab. Keep the reproduction and the post-fix result together in the acceptance record.

This page is a practical reading of the v2026.3.8 source record; the release index and channel routing guide remain the references to use for migrations and support boundaries.