Two days after the security-focused 2026.2.14, OpenClaw ships again. Version 2026.2.15 is a feature release with teeth — nested sub-agents, Discord's richest UI primitives, plugin observability hooks, and another stack of security fixes that keeps raising the floor.

Sub-Sub-Agents

The headline feature: sub-agents can now spawn their own children. Set maxSpawnDepth: 2 and your agent can delegate to a sub-agent that delegates to another sub-agent. Turtles all the way down — with guard rails.

A maxChildrenPerAgent limit (default 5) prevents runaway spawning. Depth-aware tool policies let you restrict what deeper agents can do. The announce chain routes results back up the hierarchy correctly. This is orchestration infrastructure for agents that manage agents that manage agents. Thanks to @tyler6204 for the PR.

Discord Gets a Real UI

Discord's Components v2 lands in OpenClaw: buttons, selects, modals, file blocks backed by attachments, and proper container layouts. Your agent can now build interactive interfaces directly inside Discord — not just text responses with emoji reactions, but actual UI components.

@thewilloftheshadow contributed both the Components v2 integration and a follow-up with embeds passthrough and exec approval UX refinements. Discord agents just became first-class citizens.

Plugin Hooks: See What the Model Sees

A new pair of hook payloads — llm_input and llm_output — lets plugins observe exactly what goes into the model and what comes back. Prompt context, token usage, the full input/output pipeline. If you're building monitoring, logging, or cost-tracking extensions, this is the primitive you've been waiting for. Thanks @SecondThread.

Platform Improvements

  • Per-channel ack reactions: override emoji reactions at the account or channel level, supporting platform-specific formats across Slack, Discord, and Telegram (@zerone0x)
  • Cron webhooks: finished-run webhook delivery with a dedicated auth token for outbound posts (@advaitpaliwal)
  • Channel dedup: cleaner probe/token resolution across core and extensions (@iyoda, @thewilloftheshadow)

Security: 20+ Fixes

The security work continues at pace. Highlights:

Sandbox hardening: dangerous Docker configs (bind mounts, host networking, unconfined seccomp/apparmor) are now blocked outright. SHA-1 config hashing replaced with SHA-256. Array order preserved in config hashing so sensitive settings trigger proper container recreation. (@aether-ai-agent, @kexinoh)

Secret leakage: Telegram bot tokens are now redacted from error messages and stack traces. Sensitive session details hidden from non-admin status responses. Stored XSS via assistant name/avatar patched in the Control UI. (@aether-ai-agent, @fr33d3m0n, @Adam55A-code)

Input sanitization: null bytes rejected, unsafe control characters stripped, Unicode normalized to NFC before dispatch. Workspace paths sanitized before LLM prompt embedding to prevent instruction injection via malicious directory names. (@fr33d3m0n, @aether-ai-agent)

Skills: download installer paths restricted to per-skill tools directories, preventing arbitrary file writes. Go installer hardened for root/no-sudo environments. (@Adam55A-code, @mcrolly)

Web fetch: response body size capped before HTML parsing to prevent memory exhaustion. (@xuemian168)

Agent Fixes

The agent runtime gets quieter and more correct:

  • Memory search: Unicode-aware FTS so CJK queries produce keyword tokens instead of falling back to vector-only search
  • Context windows: model overrides now honored after provider discovery; smallest discovered window used for duplicate model IDs
  • Group chats: group context injected on every turn, not just the first — preventing agents from losing track of which group they're in
  • Timezone-aware memory: memory/YYYY-MM-DD.md placeholders now resolve with runtime timezone, preventing wrong-year filenames

The Pace

Three releases in a week. 2026.2.12 was the security overhaul. 2026.2.14 added Telegram polls and DM policies. 2026.2.15 brings nested agents, rich Discord UI, and keeps tightening security. The velocity is relentless — and with a foundation forming around the project, it's not slowing down.

The claw is the law.