OpenClaw v2026.11.1 runs your Claude subscription without a second login

A Claude subscription saved in the Claude CLI now makes your configured models available, with no separate native login. Native Agent and Workflow orchestration is opt-in and off by default, and restricted runs keep their limits.

Slide text

01 02 03 04 Claude and models

openclaw/openclaw · CHANGELOG/2026.11.1.md

OpenClaw v2026.11.1 runs your Claude subscription without a second login

Native Agent and Workflow tools · opt-in, off by default

Gemini Flash text models now go through Interactions by default on Google's official API-key endpoint. Custom proxies keep their old default, and explicit cache handles still need the Generative AI provider.

When a provider rate-limits you, OpenClaw now waits as long as the provider asks, instead of piling up hours of its own backoff. And eligible Google API keys rotate before streaming starts again.

Each session's tool definitions now stay the same from turn to turn, even through heartbeats and requests from non-owners, so the prompt cache stops missing for no reason.

Part two: conversations that hold together.

If Telegram, Discord or webhook conversations went quiet partway through, that's fixed. Replies keep reaching the agent after a request handler or an earlier turn finishes.

Conversations survive interruptions. An oversized turn keeps its useful history. Stopping the first Claude CLI turn no longer resets the next message. And compaction keeps your current request across repeated summaries.

Subagents now hold on to their follow-up work when you switch models or sessions. And a parent session receives its children's approval requests, even if you run a custom session store.

In Codex, a missing thread with recorded history now raises an error instead of quietly starting over. And a retry can summarize tools it already finished without running them again.

Part three: the Mac and Android apps.

In the Mac app, a settings save that fails can no longer overwrite the secrets you stored. And switching off Tailscale exposure leaves Gateway authentication intact.

On the Mac, iMessage survives app updates without a new Automation grant. A tab that fails to load now shows a recoverable error. And an oversized recording explains the size limit instead of dropping the node.

On Android, End Talk now stops listening without canceling work the agent already accepted, so its answer still lands in chat. It needs a compatible Gateway, and you can still cancel outright.

Part four: updates and security.

An update that hung after a crashed or canceled updater now recovers. On Windows, a failed verification puts the Gateway back. And checks on large state stop copying the whole database over and over.

The managed proxy and its subprocess CA bundle now reject certificate chains that rely on the distrusted emSign ECC G3 root. Restart the Gateway after updating, and update clients with their own trust stores separately.

ClickClack and ClawHub now refuse redirects into unrelated private services. Discord CDN downloads no longer inherit the browser's private-network access. And unattended Doctor checks won't download plugins unless you agreed to a repair.

The Android app sits this one out and stays on its August build. Everything else is in the release changelog. If you run OpenClaw on a Mac, I'd update today, for the secrets fix alone.