openclaw v0.4.4

openclaw v0.4.4 | user-scoped image output

OpenClaw v0.4.4 is a patch release for ordinary-user image generation. It keeps the v0.4 private bot, safe command surface, image2 helper, /help image, semantic memory v2, model profile, and beginner setup work, then scopes generated image output to the current ordinary-user workspace when the platform command receives the ordinary-user service root.

中文关键词：飞书机器人、Lark 机器人、ordinary-users、image2、生图、用户隔离、附件回传、安全命令面、OpenClaw 发布包。

Highlights

• Updated scripts/generate-image.js so an ordinary-users service root resolves to the current users/<hash>/ workspace.
• Added hashed user/session fallback resolution for image output paths without storing raw user IDs.
• Kept the v0.4.3 /help image, /image2, and bare image2 coverage.
• Kept the v0.4.2 image2 helper, daily-brief exclusion, and model profile controls.
• Kept the v0.4.0 additions: safe /help, /new, platform image commands, ordinary-user private workspace helpers, semantic memory v2 helpers, and scripts/start-here.ps1.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, optional image provider keys, and optional lark-cli identity.

The installers write safe templates only. They do not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check
powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\audit-secrets.ps1

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell and Python checks pass.
• Bash parser checks pass when a real bash is available.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, ordinary-user, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, local machine paths, private workspaces, and deployment-specific daily brief state.

openclaw v0.4.3

openclaw v0.4.3 | image2 help and trigger coverage

OpenClaw v0.4.3 is a patch release for the ordinary-user image flow. It keeps the v0.4 private bot, safe command surface, image2 helper, semantic memory v2, model profile, and beginner setup work, then makes /image2, bare image2, and /help image explicit in the public package.

中文关键词：飞书机器人、Lark 机器人、ordinary-users、image2、生图、/help image、功能介绍图、安全命令面、OpenClaw 发布包。

Highlights

• Added /help image to the ordinary-user safe help panel.
• Documented /image2 and bare image2 alongside /画图, /生图, and /img.
• Clarified that natural-language image2 requests should be turned into an image prompt, generated, and returned as an attachment.
• Kept the v0.4.2 image2 helper, daily-brief exclusion, and model profile controls.
• Kept the v0.4.0 additions: safe /help, /new, platform image commands, ordinary-user private workspace helpers, semantic memory v2 helpers, and scripts/start-here.ps1.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, optional image provider keys, and optional lark-cli identity.

The installers write safe templates only. They do not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check
powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\audit-secrets.ps1

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell and Python checks pass.
• Bash parser checks pass when a real bash is available.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, ordinary-user, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, local machine paths, private workspaces, and deployment-specific daily brief state.

openclaw v0.4.2

openclaw v0.4.2 | ordinary-user image2 helper

OpenClaw v0.4.2 is the current v0.4 release. It keeps the ordinary-user private bot, safe command surface, platform image command, semantic memory v2, model profile, and beginner setup work, then adds a public image2 helper for generated visual deliverables.

中文关键词：飞书机器人、Lark 机器人、ordinary-users、image2、生图、功能介绍图、模型切换、安全命令面、OpenClaw 发布包。

Highlights

• Added scripts/openclaw-user-image2.py for ordinary-user generated capability posters and visual deliverables.
• The image2 helper saves generated files under the current user's local_files/ and can return them through scripts/openclaw-return-files.py.
• Removed the daily brief bridge from the public package. Daily brief integrations are deployment-specific and should stay outside the generic OpenClaw release.
• Kept model profile help/control support for /5.4mini, /5.5medium, and /5.5high.
• Kept the v0.4.0 additions: safe /help, /new, platform image commands, ordinary-user private workspace helpers, semantic memory v2 helpers, and scripts/start-here.ps1.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, optional image provider keys, and optional lark-cli identity.

The installers write safe templates only. They do not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check
powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\audit-secrets.ps1

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell and Python checks pass.
• Bash parser checks pass when a real bash is available.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, ordinary-user, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, local machine paths, private workspaces, and deployment-specific daily brief state.

openclaw v0.4.1

openclaw v0.4.1 | daily brief bridge and model profile controls

OpenClaw v0.4.1 completes the ordinary-user private bot update by adding daily brief/profile bridge commands and guarded model profile controls on top of the v0.4.0 public package refresh.

中文关键词：飞书机器人、Lark 机器人、普通用户私聊、日报、画像、模型切换、安全命令面、OpenClaw 发布包。

Highlights

• Added scripts/openclaw-user-daily-bridge.py for ordinary-user /日报 and /画像 requests.
• Routed ordinary-user daily brief requests through deterministic task intent handling instead of a general chat path.
• Added ordinary-user help panels for daily brief subscriptions and profile updates.
• Added model profile help/control support for /5.4mini, /5.5medium, and /5.5high.
• Kept the v0.4.0 additions: safe /help, /new, platform image commands, ordinary-user private workspace helpers, semantic memory v2 helpers, and scripts/start-here.ps1.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, optional image provider keys, optional daily brief webhook service, and optional lark-cli identity.

The installers write safe templates only. They do not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check
powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\audit-secrets.ps1

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell and Python checks pass.
• Bash parser checks pass when a real bash is available.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, ordinary-user, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, local machine paths, and private workspaces.

openclaw v0.4.0

openclaw v0.4.0 | ordinary-user helpers, safe commands, and setup wizard

OpenClaw v0.4.0 refreshes the public package with the current ordinary-user private bot workflow, public command-surface hardening, platform image commands, semantic memory v2 helpers, and a beginner Windows terminal setup wizard.

中文关键词：飞书机器人、Lark 机器人、普通用户私聊、安全命令面、画图命令、新手安装向导、语义记忆、OpenClaw 发布包。

Highlights

• Added ordinary-user private workspace helpers:
  • scripts/openclaw-user-private-hook.py
  • scripts/openclaw-user-command.py
  • scripts/openclaw-return-files.py
  • scripts/test-openclaw-user-private-hook.py
• Added scripts/openclaw-help-router.py so public /help can show safe OpenClaw help panels instead of exposing connector management commands.
• Added public command-surface guidance that keeps /new, safe custom /help, and platform image commands available while keeping admin commands such as /shell, /provider, /restart, and /config unavailable to normal users.
• Added platform image command support through scripts/generate-image.js for /画图, /生图, and /img.
• Added semantic memory v2 utilities and validation coverage for migration, relation extraction, decay, reflection, semantic health, and ordinary-user private workspaces.
• Added scripts/start-here.ps1, a beginner-friendly Windows terminal wizard for install directory selection, personal bot config, Feishu/Lark bot linking, lark-cli login, startup, and optional Windows Startup registration.
• Updated README, Chinese README, Windows install docs, and release notes for the current public feature set.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, optional image provider keys, and optional lark-cli identity.

The installers write safe templates only. They do not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check
powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\audit-secrets.ps1

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell, Python, and bash parser checks pass where the runtimes exist.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, ordinary-user, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, local machine paths, and private workspaces.

openclaw v0.3.0

openclaw v0.3.0 | Windows one-click installer and personal setup

OpenClaw v0.3.0 adds a Windows first-install path for local OpenClaw assistants, including one-click checkout, runtime tool installation, personal cc-connect configuration, Feishu/Lark bot binding, lark-cli user login, and local startup helpers.

中文关键词：飞书机器人、Lark 机器人、Windows 一键部署、cc-connect 配置、飞书账号登录、OpenClaw 安装脚本、本地记忆、群聊工作区。

Highlights

• Added scripts/bootstrap-windows.ps1 for fresh Windows checkout/update through git or the GitHub source zip.
• Added scripts/install-openclaw-windows.ps1 to prepare %LOCALAPPDATA%\OpenClaw, %USERPROFILE%\.cc-connect, %USERPROFILE%\.codex, and %USERPROFILE%\.openclaw.
• Added scripts/configure-openclaw-windows.ps1 for local personal setup: write sanitized config.toml, inject OpenClaw prompt-only commands, bind the Feishu/Lark bot with cc-connect feishu setup, and login user identity with lark-cli auth login.
• Added scripts/start-openclaw-windows.ps1 to run cc-connect in foreground or as a hidden Windows process with logs under %LOCALAPPDATA%\OpenClaw\logs.
• Added Windows install docs and README quick-start commands for one-run install plus personal Feishu/Lark setup.
• Extended scripts/update-cc-connect-commands.py with Windows command-root, Python binary, and quoted-path rewriting so generated prompt commands work with Windows paths containing spaces.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, and optional lark-cli identity.

The installer writes safe templates only. It does not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell, Python, and bash parser checks pass where the runtimes exist.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, and machine-specific paths.

openclaw v0.2.0

openclaw v0.2.0 | Chinese commands and first-server installer flow

OpenClaw v0.2.0 updates the public workspace runtime with Chinese slash command aliases, prompt-only cc-connect command exports, and a more complete Linux first-install path.

中文关键词：飞书机器人、Lark 机器人、中文 slash 命令、cc-connect prompt-only 命令、OpenClaw 安装脚本、本地记忆、群聊工作区。

Highlights

• Added Chinese aliases such as /查找, /文件, /知识, /记忆, /待办, /任务代理, /工作区, /状态, /健康, /自检, /帮助, and /卡片.
• Exported cc-connect commands now use prompt-only blocks that ask Codex to run the deterministic OpenClaw command and reply with plain text only.
• /健康 and /自检 now route through the command router to the OpenClaw health command.
• /card now returns a plain-text notice instead of generating Feishu card JSON.
• Added scripts/update-cc-connect-commands.py for replacing generated [[commands]] blocks safely.
• The Linux installer now injects prompt-only command blocks into /root/.cc-connect/config.toml when present, or into /root/.cc-connect/config.toml.example for first-time setup.
• The public package now includes the current semantic memory index, memory decay/reflection/relation helpers, card action handler, Base schema sync, and runtime proxy support.
• Regression tests cover Chinese aliases, command isolation, prompt-only exports, selfcheck expectations, and card text fallback.
• Install docs now show the full first-server flow from bootstrap to command verification.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, and optional lark-cli identity.

The installer writes safe templates only. It does not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell, Python, and bash parser checks pass where the runtimes exist.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, and machine-specific paths.

openclaw v0.1.0

openclaw v0.1.0 | Initial public workspace runtime

Initial public release of OpenClaw: a local-first Feishu/Lark assistant workspace, memory, command, and cloud runtime toolkit for cc-connect.

中文关键词：飞书机器人、Lark 机器人、Codex 助理、本地记忆、群聊工作区、cc-connect 部署、OpenClaw。

Highlights

• Public, sanitized workspace/runtime package for OpenClaw.
• Deterministic command scripts for file, memory, task, workspace, status, and health lookups.
• Memory curation, recall, indexing, heartbeat sensing, group sensing, and evidence-packet helpers.
• Plugin manifests for command search, memory, task agent, heartbeat, health, runtime, and file ingestion.
• Linux installer and bootstrap helper for /opt/openclaw deployments.
• GitHub-ready README, Chinese README, CI, security policy, changelog, and release notes.

Required Runtime

This repository packages code, templates, and documentation only. Production use still requires local operator configuration for cc-connect, Codex authentication, Feishu/Lark app credentials, and optional lark-cli identity.

The installer writes safe templates only. It does not create or publish real secrets.

Verify

powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\test.ps1
git diff --check

Linux parser checks:

bash ./scripts/test-linux.sh

Expected:

• PowerShell, Python, and bash parser checks pass where runtimes are available.
• Secret/local-data scan passes.
• Focused OpenClaw command, task, memory, plugin, and health tests pass.

Public Data Boundary

This release intentionally excludes private memory, message logs, downloaded files, QR codes, generated runtime configs, app credentials, user IDs, group IDs, provider keys, and machine-specific paths.