Skip to content

fix(auto-reply): Hide message_id and sender metadata in direct chats#22054

Closed
jd316 wants to merge 0 commit intoopenclaw:mainfrom
jd316:main
Closed

fix(auto-reply): Hide message_id and sender metadata in direct chats#22054
jd316 wants to merge 0 commit intoopenclaw:mainfrom
jd316:main

Conversation

@jd316
Copy link
Contributor

@jd316 jd316 commented Feb 20, 2026

Direct chats do not require moderation tracking or complex group threaded history, but this untrusted metadata visibly leaks into the standard DM UI. This change strictly hides this metadata in isDirect conversation info context, resolving UI clutter. Tests have been updated to reflect the new behavior.

Greptile Summary

Hides message_id, conversation_label, and sender fields in direct chat contexts to prevent untrusted metadata from cluttering the DM UI. Tests updated to verify these fields remain visible in group chats.

Issues found:

  • message_id_full field is not hidden in direct chats, allowing metadata to leak when it differs from message_id

Confidence Score: 2/5

  • This PR has a logic bug that allows metadata to leak in direct chats
  • Score reflects incomplete implementation - message_id_full field is not properly hidden in direct chats, violating the stated goal of preventing metadata leakage in DM UI
  • Pay close attention to src/auto-reply/reply/inbound-meta.ts:81-82 where the message_id_full logic needs the isDirect check

Last reviewed commit: f708dfc

(2/5) Greptile learns from your feedback when you react with thumbs up/down!

Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, 1 comment

Edit Code Review Agent Settings | Greptile

Comment on lines +81 to +82
message_id_full:
messageIdFull && messageIdFull !== messageId ? messageIdFull : undefined,
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

message_id_full will leak in direct chats when it differs from message_id, since the isDirect check is missing

Suggested change
message_id_full:
messageIdFull && messageIdFull !== messageId ? messageIdFull : undefined,
message_id_full: isDirect
? undefined
: (messageIdFull && messageIdFull !== messageId ? messageIdFull : undefined),
Prompt To Fix With AI
This is a comment left during a code review.
Path: src/auto-reply/reply/inbound-meta.ts
Line: 81-82

Comment:
`message_id_full` will leak in direct chats when it differs from `message_id`, since the `isDirect` check is missing

```suggestion
    message_id_full: isDirect
      ? undefined
      : (messageIdFull && messageIdFull !== messageId ? messageIdFull : undefined),
```

How can I resolve this? If you propose a fix, please make it concise.

@openclaw-barnacle openclaw-barnacle bot added channel: msteams Channel integration: msteams channel: whatsapp-web Channel integration: whatsapp-web size: S and removed size: XS labels Feb 20, 2026
@jd316 jd316 force-pushed the main branch 4 times, most recently from 9635265 to 0ba1e90 Compare February 21, 2026 08:47
@openclaw-barnacle openclaw-barnacle bot added the agents Agent runtime and tooling label Feb 21, 2026
@openclaw-barnacle openclaw-barnacle bot added the docs Improvements or additions to documentation label Feb 21, 2026
@openclaw-barnacle openclaw-barnacle bot removed docs Improvements or additions to documentation agents Agent runtime and tooling labels Feb 21, 2026
@jd316 jd316 force-pushed the main branch 2 times, most recently from 34ebf07 to 0f6c97a Compare February 21, 2026 12:46
@openclaw-barnacle openclaw-barnacle bot added the gateway Gateway runtime label Feb 21, 2026
@jd316 jd316 force-pushed the main branch 5 times, most recently from 8f6ea64 to 2325f6a Compare February 21, 2026 18:53
@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

21 similar comments
@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@openclaw-barnacle
Copy link

Closing this PR because it looks dirty (too many unrelated or unexpected changes). This usually happens when a branch picks up unrelated commits or a merge went sideways. Please recreate the PR from a clean branch.

@greptile-apps
Copy link
Contributor

greptile-apps bot commented Feb 23, 2026

Too many files changed for review. (107 files found, 100 file limit)

@obviyus
Copy link
Contributor

obviyus commented Feb 23, 2026

Sorry, accidentally replayed main commits here. Reverting.

@obviyus
Copy link
Contributor

obviyus commented Feb 23, 2026

@jd316 closed?

@jd316
Copy link
Contributor Author

jd316 commented Feb 23, 2026

@obviyus
Hey! The bot closed this PR due to unrelated commits. I've opened a clean PR with the correct scope at #24359

@obviyus
Copy link
Contributor

obviyus commented Feb 23, 2026

@jd316 I was working on this one and preparing to merge it. Please do not create duplicate PRs.

@jd316
Copy link
Contributor Author

jd316 commented Feb 23, 2026

@obviyus apologies for the confusion. The bot closed #22054, so I thought it was dead and created #24359. Both are now closed.

I have a clean branch fix/auto-reply-direct-chat-metadata with the 4 auto-reply commits (2 files only as you requested).

How would you like to proceed?
Should I:

  1. Reopen PR fix(auto-reply): Hide message_id and sender metadata in direct chats #24359?
  2. Restore the commits to fix(auto-reply): Hide message_id and sender metadata in direct chats #22054?
  3. Wait for you to handle it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants