OpenClaw 2026.5.20 正式版解读：策略插件、Discord 语音跟随与多模型供应商增强

版本：OpenClaw 2026.5.20 正式版。定位：2026.5.20 正式版把策略检查、Discord 语音、Codex 依赖、xAI OAuth、OpenRouter 路由和本地模型精简模式等能力向前推进了一步。

一句话看懂这个版本

2026.5.20 正式版把策略检查、Discord 语音、Codex 依赖、xAI OAuth、OpenRouter 路由和本地模型精简模式等能力向前推进了一步。

核心更新速览

为什么这个正式版值得关注？

这次整理只看 npm 与官方 CHANGELOG 中的正式版本号，不纳入带预发布后缀或尚未对应正式包的顶部草稿。OpenClaw 2026.5.20 的价值在于进一步收紧执行审批边界，同时增强 Discord 语音、策略插件和多模型供应商接入能力。

官方 Changes 摘要

• Exec approvals: remove the old `cat SKILL.md && printf … && <skill-wrapper>` allowlist compatibility path so skill files must be loaded with the read tool and only the real skill executable is auto-allowed.
• Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation.
• Discord/voice: include bounded `IDENTITY.md`, `USER.md`, and `SOUL.md` profile context in realtime voice session instructions by default, with `voice.realtime.bootstrapContextFiles: []` available to disable it.
• Dependencies: bump the bundled Codex harness to `@openai/codex` `0.132.0` and refresh the app-server model-list docs for the new catalog.
• CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair.
• Agents/config: allow `agents.list[].experimental.localModelLean` so lean local-model mode can be enabled for one configured agent instead of globally.
• Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback.
• Providers/OpenRouter: honor provider-level `params.provider` routing policy for OpenRouter requests, with model and agent params overriding the defaults.

官方 Fixes 摘要

• Control UI/WebChat: keep selected external-channel sessions live by mirroring Codex prompts at turn start, streaming hidden runs only to exact selected-session subscribers, and deduplicating accumulated stream snapshots around tool cards. Fixes #83528, #82611, refs #83949.
• CLI/tasks: include stale-running task maintenance decisions in `openclaw tasks maintenance –json` so retained and reconcile candidates explain backing-session, cron, CLI, and wedged-subagent state.
• Codex app-server: keep system-prompt reports working when bootstrap hooks provide workspace files with only a path and content, so hook-supplied SOUL/IDENTITY/TOOLS/USER context still reports injected characters correctly.
• Providers/MiniMax music: stop advertising `durationSeconds` control and remove prompt-injected duration hints, so `music_generate` reports MiniMax duration as an unsupported override instead of suggesting MiniMax can enforce track length. Fixes #84508.
• Doctor: warn when sandbox tool policy hides configured MCP server tools before provider requests.
• WhatsApp: update Baileys to `7.0.0-rc12`.
• Build: suppress per-locale `rolldown-plugin-dts:fake-js` CommonJS dts warnings emitted while bundling the intentionally-inlined `zod/v4/locales/*.d.cts` files, so `pnpm build` output stays readable after the 0.25.1 plugin bump.
• CLI/nodes: route lazy plugin-registration logs to stderr for JSON-mode `openclaw nodes` commands so stdout stays parseable.

对用户的实际影响

• 更安全：Skill 加载和 exec approval 的边界更明确，减少绕行旧兼容路径的风险。
• 更适合语音协作：Discord 语音跟随与实时上下文让语音助手更像常驻伙伴。
• 多模型更灵活：xAI、OpenRouter、本地模型 lean 配置和 Codex 更新让供应商组合更丰富。
• 排障更有章法：Policy plugin、doctor lint 与 workspace repair 为合规和修复提供了更统一入口。

升级建议

如果你使用 Discord 语音、OpenRouter、xAI、本地模型或经常依赖 Skills 自动化，建议关注 2026.5.20 正式版。升级前仍建议备份配置，并先在测试环境验证渠道与模型登录状态。

写在最后

这一版不像 2026.5.26 那样体量巨大，但它对安全边界和语音/供应商体验的铺垫很重要。对于长期运行的个人 AI 网关来说，这类基础能力往往比单个炫目的功能更关键。

参考来源

• OpenClaw 官方 CHANGELOG：https://github.com/openclaw/openclaw/blob/main/CHANGELOG.md
• OpenClaw GitHub Releases：https://github.com/openclaw/openclaw/releases
• OpenClaw npm package：https://www.npmjs.com/package/openclaw