OpenClaw v2026.4.26: Device tokens, operator field notes

The source record for v2026.4.26 names a provider, model, voice, or context change. This is an operator's reading of that record, with the exact source facts kept next to a bounded experiment rather than a generic feature list.

Treat this as a stable maintenance checkpoint and keep the release record beside the backup and rollback evidence. A release tag describes the project change. Your Gateway's provider, channel, platform, and account support should be recorded separately.

A small field test

Control UI/Talk

What changed. add a generic browser realtime transport contract, Google Live browser Talk sessions with constrained ephemeral tokens, and a Gateway relay for backend-only realtime voice plugins.

Check it with. Control UI/Talk changes a capability choice, not automatically a billing or privacy agreement. Record provider, model id, context setting, and fallback behavior before changing a default.

CLI/models

What changed. route provider-filtered model listing through an explicit source plan so user config, installed manifest rows, Provider Index previews, and scoped runtime fallbacks keep a stable authority order without adding another catalog cache.

Check it with. Treat CLI/models as a boundary change. Exercise one permitted request and one refused request with a test identity, then keep both decisions in the log.

Providers

What changed. add Cerebras as a bundled plugin with onboarding, static model catalog, docs, and manifest-owned endpoint metadata.

Check it with. Check Providers with a known prompt and a disposable account. Save the selected route, reasoning setting, latency, and refusal or fallback result so another operator can reproduce it.

Gateway/device tokens

What changed. stop echoing rotated bearer tokens from shared/admin device.token.rotate responses while preserving the same-device token handoff needed by token-only clients before reconnect.

Check it with. Use Gateway/device tokens for a small reproducible task: save the input, visible result, useful failure, and version context another operator would need.

The details that affect a runbook

Agents/sessions_spawn

resolve configured bare model aliases for spawn model overrides using the target agent runtime default provider, carrying forward the alias-specific #69029 review fixes from #59681 without the unrelated active-session pruning path. Fixes #59681.

A catalog label for Agents/sessions_spawn is only the first signal. Confirm the account, endpoint, context limit, and tool policy that the running Gateway actually selected.

Operator checklist before rollout

1. Before touching persistent state, capture the version, host, provider, and workspace for Control UI/Talk.
2. Read the linked release record and verify a backup whenever the change can alter configuration or session data.
3. Exercise the named capability with a non-sensitive prompt, including the fallback or refusal result if it occurs.
4. Force a timeout or provider fallback in a disposable session and verify that no side effect is repeated.
5. Close the test with the evidence attached, and do not widen the rollout while a behavior remains unexplained.

openclaw --version
openclaw gateway status
openclaw security audit

Keep the source trail attached

Close the loop with an explicit next action: keep the candidate isolated, proceed with the staged upgrade, or stop and investigate. Do not treat a green install as proof that the runtime path is correct.

Regression cases from the source

Gateway/device tokens. stop echoing rotated bearer tokens from shared/admin device.token.rotate responses while preserving the same-device token handoff needed by token-only clients before reconnect. Treat the fix as a boundary condition and retain the source wording beside your local result.

Agents/sessions_spawn. resolve configured bare model aliases for spawn model overrides using the target agent runtime default provider, carrying forward the alias-specific #69029 review fixes from #59681 without the unrelated active-session pruning path. Fixes #59681. Keep the reproduction and the post-fix result together in the acceptance record.

This page is a practical reading of the v2026.4.26 source record; the release index and model provider reference remain the references to use for migrations and support boundaries.