Maintenance release.
Quieter CLI output with hosted stores. CLI commands no longer print INFO remote: POST /v1/flow … log lines to the terminal. These per-request lines are an audit trail meant for ~/.keep/keep-client.log (where they still appear); a logging side effect from the MCP server library was echoing them to the console on every command. Set KEEP_VERBOSE=1 to see them on stderr when debugging.
Dependency security fix. Bumped express-rate-limit to 8.5.2 in the OpenClaw plugin, picking up the patched ip-address 10.2.0 (GHSA-v2v4-37r5-5v8g, moderate: XSS in HTML-emitting methods).