OpenClaw v2026.4.15-beta.1: Control UI/Overview, upgrade notes

v2026.4.15-beta.1 arrived on 2026-04-15 with a change that matters during maintenance: control ui/overview. The page is a researched reading note from the official release record, with a test path for a real Gateway.

The tag is pre-release: keep it isolated from a production Gateway and compare it with the stable line before making it a default. Support still depends on the provider, channel, platform, and account behind the installation, so check those boundaries before extrapolating from the tag.

Before the package changes

01 / Control UI/Overview

Source signal. add a Model Auth status card showing OAuth token health and provider rate-limit pressure at a glance, with attention callouts when OAuth tokens are expiring or expired. Backed by a new models.authStatus gateway method that strips credentials and caches for 60s.

Treat Control UI/Overview as a boundary change. Exercise one permitted request and one refused request with a test identity, then keep both decisions in the log.

02 / Memory/LanceDB

Source signal. add cloud storage support to memory-lancedb so durable memory indexes can run on remote object storage instead of local disk only.

Do not infer continuity from a populated screen when testing Memory/LanceDB. Compare the transcript, session id, and source workspace before and after compaction or refresh.

03 / GitHub Copilot/memory search

Source signal. add a GitHub Copilot embedding provider for memory search, and expose a dedicated Copilot embedding host helper so plugins can reuse the transport while honoring remote overrides, token refresh, and safer payload validation.

The safe reading of GitHub Copilot/memory search is operational: prove the model can answer the intended task, then force a bounded failure and verify that no side effect is repeated.

04 / Security/approvals

Source signal. redact secrets in exec approval prompts so inline approval review can no longer leak credential material in rendered prompt content.

Read Security/approvals as an authorization checkpoint: prove who may act, what the action can reach, and how the rejected attempt is surfaced to the operator.

Details behind the headline

CLI/configure

re-read the persisted config hash after writes so config updates stop failing with stale-hash races.

Treat CLI/configure as a recovery contract: identify what is preserved, what is irreversible, and which post-update check decides whether the old package may be activated.

Test this release without widening the boundary

1. Note the current version, host, provider, and workspace before exercising Control UI/Overview.
2. Keep a tested backup beside the release record if the update can touch configuration, sessions, or a database.
3. Run a read-only prompt with a known answer and save provider, model, reasoning, and latency details.
4. Change only the candidate route, then confirm that a failed request returns a readable error and leaves the session intact.
5. Stop if the observed behavior falls outside the official note, and link the log or screenshot to the version record.

openclaw --version
openclaw gateway status
openclaw security audit

Record what the release actually changed

Keep the version, source URL, test identity, and rollback decision together. If this tag is pre-release, leave it isolated; if it is stable, record the migration and rollback result before reconnecting every channel.

Corrections worth replaying

Security/approvals. redact secrets in exec approval prompts so inline approval review can no longer leak credential material in rendered prompt content. Keep the reproduction and the post-fix result together in the acceptance record.

CLI/configure. re-read the persisted config hash after writes so config updates stop failing with stale-hash races. Record the failure that this correction addresses before declaring the upgrade complete.

Use the complete OpenClaw v2026.4.15-beta.1 release notes for the exact change list, then cross-check the official release index and the Gateway health guide before acting.