Upstream main sync jan 26

5 tests: react/remove, read/paginate, edit, delete, pin/unpin
against live mattermost server via mm-test.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Based on harborworks/.openclaw config. Includes:
- Auth profile for Anthropic
- Agent defaults: opus model, main agent with workspace
- Telegram channel config (bot token from env)
- Telegram plugin enabled
- Tool sandbox allowlist
- Brave web search config
- Gateway auth token from env
- Heartbeat disabled by default (0m)

…ss (openclaw#31)

* test(discord): align loadConfig mock signature with source

* fix: async agent delegation — config bug, pruning, observability, normalization, prompts

- Fix maxPerCall config bug: broker was reading maxConcurrency for both
  limits; add dedicated maxPerCall field to VoiceCallSubagentConfigSchema
- Replace O(n) pruning on every state transition with lazy threshold-based
  pruning (amortized via PRUNE_THRESHOLD=16)
- Add BrokerMetrics type and metrics getter for observability: enqueued,
  completed, failed, expired, canceled, fallbacksSpoken, repairAttempts,
  repairSuccesses, totalExecutionMs
- Improve JSON normalization pipeline: strip markdown fences, trailing
  commas, single-line comments; case-insensitive key matching; expanded
  alias sets; export extractFirstJsonObject, parseBoolean, parseNumber
- Lighten repairPayload: thinkLevel=off, 4s timeout, truncate input to
  1000 chars, pass context through to avoid redundant loadCoreAgentDeps
- Clean up orphaned session store entries and temp files after job
  completion (finally block with fs.unlinkSync)
- Move foreground envelope prompt to end of system prompt with structured
  RESPONSE FORMAT heading; wrap conversation history in XML tags
- Add specialist-specific prompts (SPECIALIST_PROMPTS map) for research,
  scheduler, and policy roles
- Expand test coverage: 55 tests across broker and normalization suites
  covering pruning, metrics, deadline clamping, JSON extraction edge
  cases, alias resolution, type coercion, and specialist prompts

https://claude.ai/code/session_01SYcKJe4ySZthJSCkKxzbFZ

* fix: guard fallback rejection, fix deadline overrun, resolve prompt conflict

- Wrap speakFallbackIfActive in try/catch inside the runJob catch block
  to prevent unhandled promise rejections when onSummaryReady is broken
- Check remaining time before applying Math.max(1000ms) clamp so jobs
  that have already expired hit the expiry branch instead of launching
  a 1s LLM call past their deadline
- Replace "use tools when helpful" with delegation guidance in the
  foreground voice prompt to avoid contradicting the JSON-only envelope
  instruction — tools belong in the specialist background lane

https://claude.ai/code/session_01SYcKJe4ySZthJSCkKxzbFZ

* fix: JSON-aware trailing comma/comment repair, session orphan prevention

Replace naive regex-based stripTrailingCommas and stripJsonComments with
character-walking implementations that track whether we're inside a JSON
string literal, so commas and // sequences inside string values are never
corrupted.

Move session store cleanup into the finally block of runJob so entries are
removed on both success and failure paths.  Add reapOrphanedSessions()
method that sweeps stale voice-subagent:* keys older than a configurable
threshold, called at webhook server startup to catch entries orphaned by
crashes.

https://claude.ai/code/session_01SYcKJe4ySZthJSCkKxzbFZ

---------

Co-authored-by: Claude <noreply@anthropic.com>

)

Route all Linux CI jobs to self-hosted runners (hanzo-k8s label) on
our DOKS cluster instead of GitHub-hosted ubuntu-latest. This
eliminates queue wait times and runs jobs on dedicated infrastructure.

Migrated workflows: ci.yml (8 jobs), workflow-sanity.yml,
install-smoke.yml, formal-conformance.yml, labeler.yml,
auto-response.yml, stale.yml.

Kept on GitHub runners: Android (needs JDK/Gradle/SDK),
Windows (needs Windows OS), macOS (needs Xcode/Swift),
Docker release (needs Docker), npm release (needs registry).

Adjusted test parallelism: BOT_TEST_WORKERS=1 for 4GiB runner pods.

Runners: 3x github-runner + 2x github-runner-build pods in
actions-runner-system namespace, org-scoped for hanzoai.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix slack bot

Fix the keycode bug

* Agents: respect reasoning on OpenAI WS

* Agents: avoid implicit WS reasoning summaries

---------

Co-authored-by: Lyle <lyle@example.com>

Co-authored-by: Bob