v3.3.1 — OpenClaw 2026.4.1 Compatibility

What's Changed

Fixes compatibility issues introduced by OpenClaw 2026.4.1 update:

Bug Fixes

• Exec approval timeout: Deploy now writes exec-approvals.json with security=full defaults, preventing gateway approval timeouts that blocked all tool execution
• Telegram DM blocking: Changed default dmPolicy from "pairing" to "open" so new contacts can message the bot directly
• Stale gateway token: Re-deploys now run openclaw gateway install --force to refresh embedded tokens

Config Additions

• tools.profile: "full" added to generated openclaw.json
• allowFrom: ["*"] added to Telegram channel config
• exec-approvals.json auto-generated with full permissions during deploy

Upgrade Notes

For existing deployments, run:

# On your server:
openclaw gateway install --force
openclaw gateway restart

Or re-deploy with ./deploy.sh <client-name> to apply all fixes automatically.