OpenClaw.NET v0.3.0 — AgentQi desktop and safer recovery
This release brings the AgentQi Avalonia companion redesign and the reliability features previously available only on main into the desktop and runtime downloads.
Desktop companion
- A chat-first AgentQi [OpenClaw.NET] interface with light/dark themes, navigation search, setup shortcuts, and access to existing runtime management pages.
- Describe supported settings changes in chat, review and edit the proposal, then explicitly apply or cancel it. A manual editor works without a model when the gateway is reachable.
- Preserve pending edits across follow-up proposals, handle stale revisions and HTTP errors, and persist only intentional model overrides. Credentials and complex account setup remain in dedicated forms.
- Follow the system theme until explicitly changed; preserve the existing assembly and settings identities.
- Use the shared setup preset catalog so tool-capable Ollama presets can be selected and invalid preset IDs are not offered.
- Migrate legacy saved tokens into OS-backed storage with verification and recoverable failure handling.
Runtime reliability
- Fix model selection so advertising several tools does not require parallel tool calls. Sequential tool models can be selected; explicit parallel-call requirements remain enforced.
- Explain recorded run blockers and recovery steps across the admin console, Dashboard, and Companion.
- Add permission-aware goal recovery and evidence-backed action reconciliation. Unknown action outcomes remain blocked rather than being replayed automatically.
- Support opt-in durable action journaling and bounded regression capture, plus redacted trajectory import and offline replay.
- Add offline instance backup and checksum-verified restore into an isolated directory, including SQLite validation. These operations do not dispatch agent actions.
Release engineering
- Require the deterministic pinned public-plugin compatibility smoke before building release assets; keep moving latest-package canaries separate and non-blocking.
- Use the modern macOS linker for NativeAOT builds and verify the path in pull-request CI.
- Restrict CI token permissions and disable persisted checkout credentials.
- Refresh the README with desktop screenshots, clearer onboarding, and capability boundaries.
Downloads
Start with the desktop bundle for your platform:
| Platform | Asset |
|---|---|
| Windows x64 | openclaw-desktop-win-x64.zip |
| Apple Silicon macOS | openclaw-desktop-osx-arm64.zip |
| Linux x64 | openclaw-desktop-linux-x64.zip |
Each desktop bundle contains Companion, the NativeAOT gateway, and the NativeAOT CLI. Standalone gateway and CLI archives are also provided. Verify downloads using the matching .sha256 files.
These Windows and macOS archives are unsigned, and the macOS archive is not notarized; signing secrets were not configured for this build. Consult the release and first-run guide for the current signing limitations and OS prompts.
Scope and upgrade notes
Chat configuration supports the settings documented in the configuration guide; it does not make every operation configurable through chat. Durable journaling and capture remain opt-in. Dynamically loaded native .NET plugins require JIT, and embedded-model sidecars remain experimental; see the capability matrix.
For Ollama tool use, choose a tool-capable model and the Ollama Agentic preset. The General preset declares no tool-call support.
Back up your configuration and durable state before upgrading. Use named operator accounts for browser administration and operator account tokens for desktop/API clients. The desktop application identity and storage location remain compatible with existing installations.
The roadmap in this tag was written before publication and labels the recovery features “main only; target v0.3.0.” Those features are included in this release. The historical v0.2.0 verification caveat remains specific to v0.2.0.
Full changes: v0.2.0...v0.3.0
Validation
- Release commit
8caa0155b58c7498fe95af231a416aae14dfcb8e: 2,659 core tests and 2,672 tests with optional coverage enabled; PR CI, code analysis, pinned public compatibility, and macOS linker checks passed. - All three platform release builds and extraction smokes passed. All nine archive digests match their checksum files; the downloaded macOS desktop archive also passed local SHA-256, ZIP CRC, and executable-permission checks.
- The extracted macOS desktop passed setup, chat, stop/restart/reconnect, corrupt-config recovery, and owned-gateway shutdown in both an automated headless host and the native UI (using a temporary launch wrapper). Tests used an isolated profile and a deterministic local Ollama-compatible provider fixture.
- The tested release commit is included in
main, and its source tree is identical to merge commita9124b86e973688bed3e335e5208cca91c61ed5a.