OpenClaw v2026.5.28 overhauls Codex recovery and launches iOS Pro UI
OpenClaw, the open-source AI personal assistant, has dropped version 2026.5.28 with a major focus on resilient recovery for Codex and Agent runtimes, plus a brand-new iOS Pro UI for developers.
The update tightens security by enforcing strict physical isolation between subagent execution paths and workspaces to prevent sandbox contamination. System-level hooks are now scoped to the prompt context, and when execution times out or gets manually terminated, session locks are automatically released while framework-level keepalive locks persist. On the fault tolerance front, the Codex application server's error handling has been reworked so that a crash in a helper process doesn't take down the shared runtime state — and it finally eliminates the event loop deadlocks that used to linger from old restarts.
The mobile and chat interface gets a major refresh. The iOS node app (the mobile client that plugs iPhone hardware into the Gateway) has been completely rebuilt into a Pro interface that unifies professional commands, agent management, real-time diagnostics, and global settings. The new iOS app uses WKWebView to render remote Canvas and Adaptive UI (A2UI), and supports real-time two-way Talk audio over Gateway sessions. To keep communication alive during disconnects or background wake-ups, the system has optimized the Gateway chat transport protocol and WebChat reconnection state. And the official build now ships with APNs wake-up enabled via a managed external push relay (ios-push-relay.openclaw.ai), achieving sub-second background wake while keeping production certificates safe.
On the ecosystem and infrastructure side, OpenClaw now natively supports Claude Opus 4.8, Fal Krea image generation architecture, NVIDIA's recommended model catalog, and MiniMax music streaming responses. For security, the CLI and diagnostics modules have a stricter dotenv policy: when running diagnostics or CLI commands, the system will now ignore any .env files in the workspace directory to prevent malicious open-source projects from stealing cloud service credentials via local injection. Additionally, the file extraction module has switched to the ClawPDF engine, enabling structured text extraction from encrypted PDFs for the first time, with the ability to output structured MCP (Model Context Protocol) content directly into agent tool results.