diff --git a/CHANGELOG.md b/CHANGELOG.md index 429a381808..1a43826224 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,7 @@ - **Also fixed:** `muse_code` was missing from `sync._RUNTIME_PREFIXES` and app.js `_CM_RT_PREFIXES`, so its sessions were bucketed as openclaw there. - **Verified:** `tests/test_openexecutive_runtime_wiring.py` (13 tests, in CI), and the adapter against a store written by OpenExecutive's own storage code at upstream 8b2a9a7. - **Carries:** #5921. +- **Released:** carries #5921 (merged as `e0537a0fbc`). The adapter ships in clawmetry-pro 0.7.26, already served by the cloud (clawmetry-cloud #2424); 0.7.27 (clawmetry-pro #247) follows with the zero-usage honesty fix found by a real end-to-end turn. ### Fixed: a correct emailed code dropped you back on "Sign in to open the dashboard" (2026-09-12) - **Why:** a paying customer reported it after reinstalling: enter the email, enter the code from the email, and the local dashboard shows the sign-in card again, every time. The login wall accepts only the gateway token. Email sign-in succeeded against the cloud but handed the page no credential: it cleared the signed-out marker and reloaded, relying on zero-click `/api/auth/detected-token`. That endpoint refuses unless every strict loopback check passes (client address, Host header, no proxy headers, loopback bind). Wherever one of them fails, zero-click fails on every load, so a correct code reloaded into the same wall forever.