Skip to content

fix: extract stripJsonEventLines to shared module and apply in command-reply#28

Closed
Nachx639 wants to merge 1 commit intoopenclaw:mainfrom
Nachx639:fix/strip-json-events-shared-module
Closed

fix: extract stripJsonEventLines to shared module and apply in command-reply#28
Nachx639 wants to merge 1 commit intoopenclaw:mainfrom
Nachx639:fix/strip-json-events-shared-module

Conversation

@Nachx639
Copy link
Contributor

Problem

Internal JSON events (message_end, turn_end, etc.) were leaking to WhatsApp during heartbeats. The stripJsonEventLines function existed but was only applied in web/auto-reply.ts for heartbeats, not in the main command-reply.ts path.

Solution

  • Created src/auto-reply/strip-json-events.ts as a shared module
  • Applied the filter in command-reply.ts before building payloads
  • Refactored web/auto-reply.ts and cron/isolated-agent.ts to use the shared module

Testing

  • Build passes (npm run build)
  • Heartbeat responses should no longer contain raw JSON events

…mand-reply

- Crea src/auto-reply/strip-json-events.ts con la función compartida
- Aplica el filtro en command-reply.ts antes de construir payloads
- Refactoriza web/auto-reply.ts y cron/isolated-agent.ts para usar el módulo compartido
- Previene que eventos JSON internos (message_end, turn_end, etc.) lleguen a WhatsApp
@Nachx639 Nachx639 closed this Dec 14, 2025
dgarson referenced this pull request in dgarson/clawdbot Feb 2, 2026
alexprime1889-prog pushed a commit to alexprime1889-prog/moltbot that referenced this pull request Feb 8, 2026
centminmod added a commit to centminmod/clawdbot that referenced this pull request Feb 11, 2026
…ttacks, 2 misconfigs)

New guide covering the "AI foot-gun" problem — LLMs modifying their own
OpenClaw config via the ungated gateway tool (config.apply/config.patch).

- CREATE ai-self-misconfiguration.md: TL;DR, attack surface table,
  13-category misconfiguration catalog, defense strategies, gap analysis
- ADD misconfiguration #11 (AI "optimizes" config) and #12 (schema-valid
  but dangerous values)
- ADD prompt injection attacks openclaw#28 (config via gateway tool), openclaw#29 (via
  shell), openclaw#30 (gradual security degradation)
- ADD hardening checklist openclaw#13 (never let AI modify security-critical config)
- UPDATE README navigation and cross-references (27→30 attacks)
slathrop referenced this pull request in slathrop/openclaw-js Feb 11, 2026
Tasks completed: 2/2
- Task 1: Port commit #28 (Voyage docs + API key) and #51 (input_type)
- Task 2: Port commit #29 (default model update to Opus 4.6)

SUMMARY: .planning/phases/12-memory-qmd-hardening/12-06-SUMMARY.md
frodo-harborbot pushed a commit to harborworks/openclaw that referenced this pull request Feb 16, 2026
Fix: move test out of convex/ to fix deploy typecheck
songliu0403-rgb pushed a commit to songliu0403-rgb/openclaw that referenced this pull request Feb 26, 2026
ddupg pushed a commit to ddupg/openclaw that referenced this pull request Feb 27, 2026
- 添加 dist/control-ui/ 到 git 以包含在 npm 包中 (openclaw#28)
- 使用 @openclaw-cn/libsignal 替代 git 依赖,解决中国用户安装失败问题
let5sne pushed a commit to let5sne/openclaw that referenced this pull request Mar 1, 2026
Implements the 'rejection log' insight from reflections: every skipped
verification is a loan against future trust. This module creates an
auditable ledger of deferred security checks.

Features:
- Track debt by category (security_audit, skill_scan, api_health, etc.)
- Risk scoring (1-10) with age multiplier (2x after 1 week)
- Resolve + prune workflow
- Summary API for dashboard/doctor integration

New file: src/security/verification-debt.ts (~150 lines)

Fixes improvement item openclaw#28 from openclaw-improvement-ideas.md.
elliot-ylambda added a commit to elliot-ylambda/magister-openclaw that referenced this pull request Mar 7, 2026
heatherstew44-maker pushed a commit to heatherstew44-maker/openclaw that referenced this pull request Mar 8, 2026
lucasmpramos added a commit to butley/openclaw that referenced this pull request Mar 9, 2026
…ron Filter

- README.md: 24→26 active patches, added entries for both
- verify-patches.sh: added checks (26/26 passing)
lucasmpramos added a commit to butley/openclaw that referenced this pull request Mar 10, 2026
- patches/README.md: 27 active patches, added openclaw#29
- verify-patches.sh: 27/27 passing
- KNOWN-ISSUES.md: documented openclaw#28 cron filter, openclaw#29 text dedup,
  diagnostic logging additions

Co-authored-by: Bob
lucasmpramos added a commit to butley/openclaw that referenced this pull request Mar 10, 2026
Reverts the text concatenation experiment (b5cdabf) and the
totalTextEmitted/inTextReplay approach. Restores the original
per-block text processing with lastTextLen reset on tool/reasoning
start — this was the working state before today's changes.

Keeps: diagnostic logging, cron filter (openclaw#28).
Removes: concatenation, cross-block dedup, defensive guard.

Co-authored-by: Bob
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant