OpenClaw Releases OpenClaw 2.0: Guided Model Setup, 575 ms Control UI Startup, and One Trust Boundary Per Gateway

The OpenClaw team has just released OpenClaw 2.0 . The team shipped nothing for nearly seven weeks, after 106 releases in the previous 230 days. The update rewrites installation and rebuilds the browser Control UI . It also moves sessions and transcripts into SQLite and adds shared cloud sessions .

Yes for single-operator and single-team deployments. No for multi-tenant products.

Guided setup now looks for AI access already on the machine. It can reuse verified Codex, ChatGPT or Claude CLI sign-ins, accept an API key, run a provider sign-in, or find installed Ollama and LM Studio models. It then proves the exact choice can answer before saving that model and credential. Fresh OpenAI setups default to GPT-5.6. On the local side, node-llama-cpp was replaced with a managed llama-server , Gemma 4 became the RAM-gated llama.cpp default, and the llama.cpp default context was raised to 64K.

The rebuilt Control UI puts conversations at the center, with files, approvals and live work beside the chat. In a simulated default-chat test with a mocked Gateway and 50 ms HTTP/1.1 latency, JavaScript requests fell from 140 to 45 and startup fell from roughly 1.6 seconds to 575 ms.

Docked panels add a workspace file editor, a git-backed Changes panel with pull-request status and CI summaries, a browser panel with element inspection and screenshot annotation, and a full-screen web terminal. The limits are stated plainly: the file editor cannot create or delete files, Changes is read-only, and Create PR hands off to GitHub rather than submitting inside OpenClaw. Approval requests appear inside the conversation that triggered them, with a rolling 30-day history. A /btw command opens a side conversation so a quick question does not pollute the main transcript.

Sessions and transcripts now live in SQLite. Before rolling back to an older file-backed release, the current CLI must restore archived legacy transcript artifacts, and sessions created after the migration will not appear in older releases. Take a verified backup before upgrading .

Shared cloud sessions let a second person join live work or take it over with context intact. Owners and administrators choose whether someone may read, suggest changes, work in a draft, or participate directly. The documentation is direct about the ceiling: these controls are not tenant isolation and not a security boundary. Incognito is off by default, keeps its conversation in process memory, and still sends messages to the model provider.

The Gateway binds to loopback by default, and most chat channels answer an unknown DM sender with a pairing code. openclaw security audit checks inbound access, tool blast radius, network exposure, browser control exposure and plugin allowlists.