OpenClaw 4.2 Task Flow Cancellation Mechanics, Observable State Foundation, and Android Assistant Security Tradeoffs

Tools

Managed Child Task Execution Lands in Main: Sticky Cancel Intent and Flow Finalization

PR #59610 is the execution layer that makes Task Flows actually useful. The sticky cancel pattern, where cancelRequestedAt is stamped before children are shut down, means parent job cancellation is now a first-class operation rather than a fire-and-hope cleanup.

Observable Worker State Snapshot PR Adds Runtime Visibility Without Touching SQLite

This open PR writes a compact worker-state.json derived from the task registry observer layer, giving operators a way to inspect live worker and task state without scraping internals. It is intentionally scoped as a foundation for broader session state observability, not a finished product.

Android Assistant PR Merged With P1 Manifest Bug Fixed Before Landing

The shortcuts meta-data placement bug flagged by Greptile would have silently killed App Actions registration on all devices. The fix landed before merge, but the security finding about exported MainActivity accepting spoofed intents with arbitrary prompt extras is still worth reading if you deploy OpenClaw on shared or enterprise Android devices.

Analysis

What Durable Task Flows Actually Change for Operators Running 24/7 Agent Automation

The before_agent_reply plugin hook is underrated in the official coverage. Being able to intercept messages and return synthetic replies without hitting the LLM is a real cost lever for high-traffic Slack or webhook channels. Pair that with durable flow state and you have the basics of a production agent runtime.