Summary
Inbound message metadata (the Conversation info (untrusted metadata) JSON block and
timestamp/sender line) is being rendered in the conversation view, visible to the end user. This
context is intended only for the assistant's internal use and should be stripped before display.
Affected surfaces: Webchat UI and OpenClaw macOS app.
Steps to reproduce
- Send a message via webchat or the macOS app
- View the conversation
- Metadata blocks appear above the user's message text:
Conversation info (untrusted metadata):
{
"message_id": "90DF7B1E-...",
"sender": "openclaw-macos"
}
[Thu 2026-02-19 09:12 PST] hello
Expected behavior
Only the user's message content is displayed. Metadata (message_id, sender,
timestamps) should be hidden from the UI.
Actual behavior
The full metadata envelope is rendered as part of the message.
OpenClaw version
OpenClaw app 2026.2.19 (build 12767), local mode, macOS.
Operating system
macOs
Install method
No response
Logs, screenshots, and evidence
Impact and severity
Severity: High
Frequency: 100% repro
Additional information
No response
Summary
Inbound message metadata (the Conversation info (untrusted metadata) JSON block and
timestamp/sender line) is being rendered in the conversation view, visible to the end user. This
context is intended only for the assistant's internal use and should be stripped before display.
Affected surfaces: Webchat UI and OpenClaw macOS app.
Steps to reproduce
Expected behavior
Only the user's message content is displayed. Metadata (message_id, sender,
timestamps) should be hidden from the UI.
Actual behavior
The full metadata envelope is rendered as part of the message.
OpenClaw version
OpenClaw app 2026.2.19 (build 12767), local mode, macOS.
Operating system
macOs
Install method
No response
Logs, screenshots, and evidence
Impact and severity
Severity: High
Frequency: 100% repro
Additional information
No response