fix(memory): catch up stale sessions on startup by giodl73-repo · Pull Request #82341 · openclaw/openclaw

giodl73-repo · 2026-05-15T22:07:06Z

Summary

Fixes #62625 by adding a startup catch-up scan for memory-core sessions sources after a normal MemoryIndexManager starts.

On startup, the manager now lists session transcript files, compares their path/mtime/size against persisted SQLite files rows for source sessions, marks only missing/newer/resized session files dirty, and schedules a normal incremental sync with reason session-startup-catchup. One-shot openclaw memory index managers also run the same catch-up marking before no-force CLI syncs, so the manual recovery path no longer requires --force for stale session transcripts. This preserves the existing session-start / watch exclusion semantics and avoids broad force reindex behavior.

Real behavior proof

Behavior or issue addressed: memory-core session indexing can silently fall behind after a clean gateway restart because in-process sessionsDirty state is lost and session-start syncs are excluded when there is no config drift. Startup should detect stale persisted session transcript rows, mark those transcript files dirty, and schedule session-startup-catchup sync.
Real environment tested: WSL Ubuntu-24.04 source worktrees created from upstream/main and PR head 9e1027d9f4d8718576653a97a9c8f01b0a455d67.
Exact steps or command run after this patch: created clean detached worktrees for upstream/main and fork/fix-memory-session-startup-catchup-62625; in each worktree ran pnpm --silent exec tsx ./probe-memory-session-startup-catchup.mjs. The probe instantiated a real MemoryManagerSyncOps harness with source sessions, a stale persisted source row, and a real temp session transcript file, then called the startup catch-up method and printed dirty/sync state.
Evidence after fix (screenshot, recording, terminal capture, console output, redacted runtime log, linked artifact, or copied live output):

Fresh proof artifact: https://raw.githubusercontent.com/giodl73-repo/openclaw/proof-artifacts/pr-82341-fresh/pr-82341/pr-82341-memory-session-startup-catchup-before-after-proof.png
Proof summary: https://raw.githubusercontent.com/giodl73-repo/openclaw/proof-artifacts/pr-82341-fresh/pr-82341/summary.txt

BEFORE upstream/main:
status=0
ok=false
changedCount=0
dirtyCount=0
sessionsDirty=false
syncReason=<none>
error=this.runSessionStartupCatchup is not a function

AFTER PR #82341 head:
status=0
ok=true
changedCount=1
dirtyCount=1
sessionsDirty=true
syncReason=session-startup-catchup
error=<none>

Observed result after fix: upstream/main has no startup catch-up path and marks no stale session transcript dirty; PR head detects one stale transcript, marks it dirty, sets sessionsDirty=true, and schedules sync with reason session-startup-catchup.
What was not tested: no live gateway restart was performed for this proof image. The proof directly exercises the memory manager startup catch-up seam with a real temp session transcript file and stale persisted source metadata.

Tests

CI=1 node scripts/run-vitest.mjs extensions/memory-core/src/memory/manager-sync-ops.startup-catchup.test.ts extensions/memory-core/src/memory/manager-session-sync-state.test.ts extensions/memory-core/src/memory/manager-source-state.test.ts extensions/memory-core/src/memory/manager.session-reindex.test.ts
./node_modules/.bin/oxfmt --check --threads=1 extensions/memory-core/src/memory/manager.ts extensions/memory-core/src/memory/manager-sync-ops.ts extensions/memory-core/src/memory/manager-session-sync-state.ts extensions/memory-core/src/memory/manager-session-sync-state.test.ts extensions/memory-core/src/memory/manager-source-state.ts extensions/memory-core/src/memory/manager-source-state.test.ts extensions/memory-core/src/memory/manager-sync-ops.startup-catchup.test.ts
pnpm check:changed

clawsweeper · 2026-05-15T22:12:55Z

Codex review: found issues before merge.

Summary
The PR adds memory-core startup and CLI catch-up logic that compares session transcript file mtime/size against persisted SQLite file rows and marks stale session files dirty for incremental sync.

Reproducibility: yes. Current main has no startup catch-up scan and still excludes clean session-start/watch syncs when dirty state was lost; the contributor’s harness also shows stale transcript marking only after the patch.

Real behavior proof
Sufficient (screenshot): The PR body and linked artifact show an after-fix source-harness run with a real temp session transcript and stale persisted row; it does not show a full live gateway restart.

Next step before merge
The PR has a concrete blocking review finding and a protected maintainer label, so it needs maintainer or author follow-up rather than cleanup closure.

Security
Cleared: The diff changes local memory indexing logic and tests without adding dependencies, network calls, secret handling, CI, or package execution surfaces.

Review findings

[P2] Queue catch-up after in-flight startup syncs — extensions/memory-core/src/memory/manager-sync-ops.ts:557

Review details

Best possible solution:

Land a startup catch-up scan that marks stale session transcripts and guarantees a follow-up non-excluded sync, with a regression test for the in-flight session-start race.

Do we have a high-confidence way to reproduce the issue?

Yes. Current main has no startup catch-up scan and still excludes clean session-start/watch syncs when dirty state was lost; the contributor’s harness also shows stale transcript marking only after the patch.

Is this the best way to solve the issue?

No. The catch-up direction is right, but the implementation should queue or rerun a non-excluded sync after dirty files remain instead of relying on a sync() call that can be coalesced into an excluded in-flight sync.

Full review comments:

[P2] Queue catch-up after in-flight startup syncs — extensions/memory-core/src/memory/manager-sync-ops.ts:557
After markSessionStartupCatchupDirtyFiles() sets sessionsDirtyFiles, this sync() call can be coalesced into an already-running session-start or watch sync. Those reasons are excluded by shouldSyncSessionsForReindex, so the in-flight sync can leave the files dirty without indexing them, and this catch-up path never schedules a second pass. Please ensure a follow-up session-startup-catchup sync runs when dirty files remain after any in-flight sync completes.
Confidence: 0.83

Overall correctness: patch is incorrect
Overall confidence: 0.82

Acceptance criteria:

CI=1 node scripts/run-vitest.mjs extensions/memory-core/src/memory/manager-sync-ops.startup-catchup.test.ts extensions/memory-core/src/memory/manager-session-sync-state.test.ts extensions/memory-core/src/memory/manager-source-state.test.ts extensions/memory-core/src/memory/manager.session-reindex.test.ts
Add or update a focused regression that starts a session-start sync while startup catch-up marks dirty files, then proves the dirty session file is eventually indexed.
Run the appropriate changed check in Testbox before landing, for example node scripts/crabbox-wrapper.mjs run ... --shell -- "pnpm check:changed".

What I checked:

current-main session-start exclusion: Current main skips session syncing for session-start and watch unless forced, targeted, or a full reindex is needed, which matches the linked clean-restart gap when in-process dirty state is lost. (extensions/memory-core/src/memory/manager-session-reindex.ts:25, c4f20b656eac)
current-main startup wiring: Current main constructs the default MemoryIndexManager with watcher, session listener, and interval sync wiring, but has no startup scan that reconciles existing sessions rows against transcript files. (extensions/memory-core/src/memory/manager.ts:223, c4f20b656eac)
PR catch-up implementation: The PR adds dirty-file marking and then calls sync({ reason: "session-startup-catchup" }); because sync() coalesces with any in-flight non-targeted sync, this can be swallowed by an early session-start/watch sync that does not process dirty sessions. (extensions/memory-core/src/memory/manager-sync-ops.ts:557, 66afc127b3e7)
proof artifact inspected: The linked proof image and summary show current main has no catch-up method, while the PR head used for proof marks one stale transcript dirty and schedules session-startup-catchup; the proof is source-harness based, not a live gateway restart. (9e1027d9f4d8)
related history: Commit d766bfc fixed the earlier full-reindex ordering case for session-start/watch and was explicitly identified by the linked issue as only a partial fix for clean restarts. (extensions/memory-core/src/memory/manager-session-reindex.ts:21, d766bfc6b2b5)
recent area refactor: Commit d2a03ec extracted the session sync-state helper file that this PR now extends. (extensions/memory-core/src/memory/manager-session-sync-state.ts:1, d2a03eca1a5e)

Likely related people:

upupc: Authored commit d766bfc, which changed the session-start/watch reindex gate that the linked clean-restart issue builds on. (role: introduced related behavior fix; confidence: high; commits: d766bfc6b2b5; files: extensions/memory-core/src/memory/manager-sync-ops.ts, extensions/memory-core/src/memory/manager.session-reindex.test.ts)
steipete: Authored recent memory session sync-state extraction and broader memory runtime state refactors that shaped the helper files and manager path touched here. (role: recent area contributor; confidence: medium; commits: d2a03eca1a5e, 694ca50e9775; files: extensions/memory-core/src/memory/manager-session-sync-state.ts, extensions/memory-core/src/memory/manager-sync-ops.ts)
frankekn: Recently changed the same manager sync/watch implementation area in commit b04e428, so they may have useful context for startup/watch scheduling behavior. (role: recent adjacent contributor; confidence: low; commits: b04e42812eca; files: extensions/memory-core/src/memory/manager-sync-ops.ts)

Remaining risk / open question:

The startup catch-up sync can be coalesced into an in-flight session-start or watch sync and leave stale session files dirty but unindexed.
The proof is a source-level harness rather than a live gateway restart, so maintainer landing should still gate the exact current head with focused tests or live restart proof.

Codex review notes: model gpt-5.5, reasoning high; reviewed against c4f20b656eac.

Add a startup catch-up scan for memory session source files so clean gateway restarts compare on-disk transcripts against persisted index file state and mark only missing/newer/resized session files dirty for a normal incremental sync. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Ensure one-shot memory index managers also compare session transcripts against persisted source state before no-force CLI syncs, so openclaw memory index can recover stale session rows without requiring --force. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

giodl73-repo · 2026-05-16T21:31:31Z

Updated #82341 with a fresh deterministic proof image and gate-friendly proof section.

The proof compares upstream/main against PR head 9e1027d9f4d8718576653a97a9c8f01b0a455d67 using a real MemoryManagerSyncOps harness, a stale persisted sessions source row, and a real temp session transcript file:

Before: no startup catch-up method, no dirty files, no sync reason.
After: one stale transcript is marked dirty, sessionsDirty=true, and sync is scheduled with session-startup-catchup.

Fresh proof image: https://raw.githubusercontent.com/giodl73-repo/openclaw/proof-artifacts/pr-82341-fresh/pr-82341/pr-82341-memory-session-startup-catchup-before-after-proof.png
Proof summary: https://raw.githubusercontent.com/giodl73-repo/openclaw/proof-artifacts/pr-82341-fresh/pr-82341/summary.txt

giodl73-repo · 2026-05-16T23:47:00Z

CI triage note: the current failures appear inherited from main, not caused by this PR.

The suspicious mainline change is 5b383af73604 (feat: add native mac dashboard window, Peter Steinberger). That commit changed the gateway network/origin path (src/gateway/net.ts, src/gateway/origin-check.ts), which lines up with the failing assertions I saw:

setup-code.test.ts: Tailnet/gateway serve guidance is no longer surfaced as expected (prefer gateway.tailscale.mode=serve).
server.auth.browser-hardening.test.ts: forged loopback/private-origin request now reaches a different failure mode than the expected origin rejection.

So I would treat this as a mainline gateway/origin regression affecting the gate, rather than a regression introduced by this memory startup-catchup PR.

…026.5.18) (#557) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.5.12` → `2026.5.18` | --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.5.18`](https://github.com/openclaw/openclaw/releases/tag/v2026.5.18): openclaw 2026.5.18 [Compare Source](https://github.com/openclaw/openclaw/compare/v2026.5.12...v2026.5.18) ##### Changes - Agents: clarify that fixes should default to clean bounded refactors, lean internals, and explicit plugin SDK/API deprecation paths. - Dependencies: update `@openclaw/proxyline` to 0.3.3. - Dependencies: update Pi packages to 0.75.1 and raise the minimum supported Node.js 22 line to 22.19. - Docker/Podman: add `OPENCLAW_IMAGE_APT_PACKAGES` as the runtime-neutral image build arg for extra apt packages while keeping `OPENCLAW_DOCKER_APT_PACKAGES` as a legacy fallback. ([#62431](https://github.com/openclaw/openclaw/issues/62431)) Thanks [@urtabajev](https://github.com/urtabajev). - Gateway/ACPX: attribute startup probe, config, runtime, and resource-count costs in restart traces without changing readiness behavior. ([#83300](https://github.com/openclaw/openclaw/issues/83300)) Thanks [@samzong](https://github.com/samzong). - Gateway: overlap startup logging and plugin-service startup with channel sidecars to reduce restart ready latency while preserving `/readyz` sidecar gating. ([#83301](https://github.com/openclaw/openclaw/issues/83301)) Thanks [@samzong](https://github.com/samzong). - Plugins/admin-http-rpc: allow trusted admin HTTP RPC clients to start and wait for web QR login flows. ([#83259](https://github.com/openclaw/openclaw/issues/83259)) Thanks [@liorb-mountapps](https://github.com/liorb-mountapps). - Mac app: redesign Settings pages with consistent card layouts, cached navigation, cleaner permissions/voice/skills/cron/exec/debug panes, and steadier spacing around the native sidebar. - Skills: rename the repo-local Codex closeout review skill and helper to `autoreview` while preserving the Codex-first fallback behavior. - Skills: add a meme-maker skill for curated template search, local SVG/PNG rendering, Imgflip hosted rendering, and Know Your Meme provenance links. - Browser: surface pending and recently handled modal dialogs in snapshots, return `blockedByDialog` when an action opens a modal, and allow `browser dialog --dialog-id` to answer pending dialogs. - Agents/tools: shorten built-in tool descriptions and schema hints across media, messaging, sessions, cron, Gateway, web, image/PDF, TTS, nodes, and plan tools while preserving routing guardrails. - Skills: add node inspector debugging, fused diagram generation, and throwaway spike workflow skills. - CLI/plugins: add `defineToolPlugin` plus `openclaw plugins build`, `validate`, and `init` for typed simple tool plugins with generated manifest metadata, optional tool declarations, and context factories. - Agents/skills: tighten bundled skill prompts and metadata, quote skill descriptions, refresh current CLI/API guidance, and update embedded sherpa-onnx runtime downloads. - Skills: update the Obsidian skill to target the official `obsidian` CLI and require its registered binary instead of the third-party `obsidian-cli`. - Skills: add a Python debugging skill for pdb, breakpoint(), post-mortem inspection, and debugpy remote attach. - Plugins/messages: add presentation capability limits for channel renderers, adapt rich message controls before native rendering, and mark legacy `interactive`/Slack directive producer APIs as deprecated. - Proxy: support HTTPS managed forward-proxy endpoints and scoped `proxy.tls.caFile` CA trust for proxy endpoint TLS. ([#79171](https://github.com/openclaw/openclaw/issues/79171)) Thanks [@jesse-merhi](https://github.com/jesse-merhi). - QA-Lab: add first-hour 20-turn and optional 100-turn runtime parity scenarios, with tier metadata for standard and soak QA gates. Fixes [#80338](https://github.com/openclaw/openclaw/issues/80338); refs [#80337](https://github.com/openclaw/openclaw/issues/80337). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: add `openclaw qa suite --runtime-parity-tier` and wire the standard Codex-vs-Pi tier into release checks separately from optional/live-only/soak lanes. Fixes [#80337](https://github.com/openclaw/openclaw/issues/80337). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: add a live-only Codex Pi-shaped Read vocabulary canary so runtime parity catches native workspace-read prompt compatibility drift. ([#80323](https://github.com/openclaw/openclaw/issues/80323)) Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: add live-only harness self-health scenarios for plugin hook crashes, manifest contract errors, and WebChat direct-reply self-message routing. ([#80323](https://github.com/openclaw/openclaw/issues/80323)) Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: add runtime tool fixture scenarios and coverage reporting for Codex-native workspace tools, OpenClaw dynamic tools, and optional plugin-backed tools. Fixes [#80173](https://github.com/openclaw/openclaw/issues/80173). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: expose runtime tool fixture coverage through `openclaw qa coverage --tools`, with optional suite-summary evaluation for parity gate artifacts. Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: schedule a live-frontier Codex-vs-Pi runtime token-efficiency artifact lane in the all-lanes QA workflow. Fixes [#80175](https://github.com/openclaw/openclaw/issues/80175). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: hard-gate required OpenClaw dynamic runtime-tool drift in the standard Codex-vs-Pi tier with a blocking release-check verifier and publish the tool coverage report artifact. Fixes [#80339](https://github.com/openclaw/openclaw/issues/80339); refs [#80319](https://github.com/openclaw/openclaw/issues/80319). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: add the personal-agent approval-denial scenario so the benchmark pack verifies denied local reads stop cleanly without tool progress or fixture leaks. ([#83150](https://github.com/openclaw/openclaw/issues/83150)) Thanks [@iFiras-Max1](https://github.com/iFiras-Max1). - QA-Lab: extend the personal-agent benchmark pack with a local task followthrough scenario for proof-backed pending, blocked, and done status reporting. Thanks [@iFiras-Max1](https://github.com/iFiras-Max1). - Gateway/performance: add `pnpm test:restart:gateway` benchmark tooling for repeated restart readiness, downtime, trace, and resource-slope evidence. ([#83299](https://github.com/openclaw/openclaw/issues/83299)) Thanks [@samzong](https://github.com/samzong). - Android: switch Talk Mode to realtime Gateway relay voice sessions with streaming mic input, realtime audio playback, tool-result bridging, and on-screen transcripts. ([#83130](https://github.com/openclaw/openclaw/issues/83130)) Thanks [@sliekens](https://github.com/sliekens). ##### Fixes - Discord/OpenAI: keep realtime Discord voice sessions hearing follow-up turns with OpenAI realtime and prebuffer assistant playback to avoid choppy starts. ([#80505](https://github.com/openclaw/openclaw/issues/80505)) Thanks [@Solvely-Colin](https://github.com/Solvely-Colin). - Media: prevent image metadata probing from invoking external decoder delegates on unrecognized image bytes, and stop fallback chaining after real processing errors. - Media: install Sharp with the root package and fall back to sips, Windows native imaging, ImageMagick, GraphicsMagick, or ffmpeg for image resizing/conversion when Sharp is unavailable. Fixes [#83401](https://github.com/openclaw/openclaw/issues/83401). Thanks [@scotthuang](https://github.com/scotthuang). - Telegram: deliver generated media completions back into forum topics by preserving topic IDs across requester-agent handoff. ([#83556](https://github.com/openclaw/openclaw/issues/83556)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Gateway: defer update-check startup until after readiness so package update checks no longer block sidecar-ready startup, while preserving update broadcasts and shutdown cleanup. ([#83520](https://github.com/openclaw/openclaw/issues/83520)) Thanks [@samzong](https://github.com/samzong). - Telegram: keep `/btw` and read-only status commands from aborting active runs, and avoid retaining raw update payloads in timed-out spool tombstones. Refs [#83272](https://github.com/openclaw/openclaw/issues/83272). - Agents/video: hide `video_generate` reference-audio parameters unless a registered video provider supports audio inputs. - Plugins/xAI: echo PKCE challenge fields during OAuth authorization-code token exchange for xAI token-endpoint compatibility. ([#83499](https://github.com/openclaw/openclaw/issues/83499)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Codex app-server: hydrate current inbound image attachments before queued runs so Responses-backed agents receive Discord and other channel images as native vision input. Fixes [#83466](https://github.com/openclaw/openclaw/issues/83466). Thanks [@iannwu](https://github.com/iannwu). - Codex app-server: keep native code mode available without forcing code-mode-only so OpenClaw dynamic tool turns complete through the app-server tool bridge. Fixes [#83109](https://github.com/openclaw/openclaw/issues/83109). Thanks [@daswass](https://github.com/daswass). - Release stability: recover stale session diagnostics and Codex OAuth fallback state so stuck runs and reused refresh tokens clear without blocking follow-up work. ([#83503](https://github.com/openclaw/openclaw/issues/83503)) Thanks [@100yenadmin](https://github.com/100yenadmin). - Messages/TTS: apply TTS directives before message-tool sends reach core, gateway, or plugin delivery so opt-in message-tool rooms and proactive sends attach voice notes instead of leaking raw tags. Fixes [#81598](https://github.com/openclaw/openclaw/issues/81598). Thanks [@CG-Intelligence-Agent-Jack](https://github.com/CG-Intelligence-Agent-Jack) and [@CoronovirusG10](https://github.com/CoronovirusG10). - Codex app-server: preserve network access for sandboxed Codex code-mode turns when the OpenClaw sandbox allows outbound egress. Fixes [#83347](https://github.com/openclaw/openclaw/issues/83347). Thanks [@YusukeIt0](https://github.com/YusukeIt0). - QA-Lab: keep the OTLP smoke decoder independent of removed OpenTelemetry generated-root internals. - Messages: default group/channel visible replies to automatic final delivery again, keeping `message_tool` opt-in for ambient/shared rooms and tool-reliable models. - CLI/TUI: force standalone `/exit` runs to terminate after `runTui` returns so onboarding-launched TUI children do not stay alive invisibly. ([#83501](https://github.com/openclaw/openclaw/issues/83501)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Agents/code mode: honor per-agent code-mode config in schema, runtime catalog activation, and model payload filtering. Fixes [#83388](https://github.com/openclaw/openclaw/issues/83388). Thanks [@Kaspre](https://github.com/Kaspre). - Agents/code mode: preserve agent, session, run, and channel context in `before_tool_call` hooks for top-level `exec`/`wait` dispatches. Fixes [#83387](https://github.com/openclaw/openclaw/issues/83387). - QQBot: shorten C2C typing indicators to a 10-second window renewed every 5 seconds, capped to keep a final passive-reply slot available. ([#83469](https://github.com/openclaw/openclaw/issues/83469)) - Replies: keep final payload delivery after live preview updates so channels can finalize or send the completed answer instead of losing preview-only drafts. ([#83468](https://github.com/openclaw/openclaw/issues/83468)) - Discord: deliver final replies in progress-mode preview streams instead of deduplicating the final visible message. ([#83443](https://github.com/openclaw/openclaw/issues/83443)) Thanks [@compoodment](https://github.com/compoodment). - Providers/Xiaomi: replay MiMo Anthropic-compatible `reasoning_content` as provider-required thinking blocks even when OpenClaw thinking is disabled, fixing follow-up tool turns for `mimo-v2-flash`. Fixes [#83407](https://github.com/openclaw/openclaw/issues/83407). Thanks [@Xgenious7](https://github.com/Xgenious7). - Agents/exec approvals: forward approval-runtime credentials on agent-owned Gateway approval calls so approved async commands complete through the existing runtime path instead of stalling on unauthenticated follow-up calls. Thanks [@IWhatsskill](https://github.com/IWhatsskill), [@Patrick-Erichsen](https://github.com/Patrick-Erichsen), and [@jesse-merhi](https://github.com/jesse-merhi). - Gateway/skills: preflight remote macOS skill-bin refreshes with a WebSocket connectivity check so stale node sessions skip quickly instead of logging slow `system.which` timeout warnings. - CLI/config: keep broken discovered plugins that are not referenced by active config from failing `openclaw config validate`, while preserving fatal errors for explicitly configured plugin entries. - GitHub Copilot: drop unsafe native Responses reasoning replay items with non-replayable IDs before dispatch, preventing affected Copilot sessions from failing with `invalid_request_body`. Fixes [#83220](https://github.com/openclaw/openclaw/issues/83220). Thanks [@galiniliev](https://github.com/galiniliev). - Agents/Codex: fail closed when an explicitly requested Codex harness is not registered instead of silently trying configured model fallbacks. Fixes [#83349](https://github.com/openclaw/openclaw/issues/83349). Thanks [@r2-vibes](https://github.com/r2-vibes). - QA-Lab: make runtime tool coverage fail on missing required tool exercise instead of treating pass/pass parity envelope drift as missing coverage. - Core/plugins: harden clawpatch-reported edge cases across gateway auth cleanup, Claude session id paths, plugin activation policy, apply-patch hunk handling, diagnostic redaction, and plugin metadata validation. - UI: show reasoning choices as plain labels instead of leaking internal override wording in session and chat pickers. - Mac app: avoid repeating the Configuration heading inside channel quick settings. - Mac app: keep the Settings sidebar always visible and remove the redundant titlebar hide/show control. - Mac app: prefer explicit private/Tailscale/LAN Gateway endpoints over SSH tunnels, preserve legacy loopback tunnel configs, persist transport choices, and show captured SSH stderr when tunneling really fails. - Gateway/sessions: keep ACP/acpx and runtime child sessions visible in configured-only session lists when their owner or parent session belongs to a configured agent. - Mac app: keep app-level menu commands and Dashboard failure states reachable when the remote Gateway is disconnected. - Mac app: allow longer Gateway and Context errors to wrap in the menu instead of truncating the useful failure detail. - Mac app: tighten remote Gateway fields in Settings so the Connection pane keeps readable labels and full action button text. - Mac app: keep custom Settings card rows left-aligned and full-width so Discovery and status sections no longer appear centered or detached. - Mac app: align Location permission controls to the same trailing column as the rest of Settings. - Mac app: add Dashboard, Chat, Canvas, and Settings shortcuts to the Dock icon menu. - Mac app: replace the Settings window's native split-view sidebar with an explicit layout so page content keeps its leading gutter when the sidebar is shown or hidden. - Mac app: render channel quick config as aligned Settings rows and hide schema-only variants that cannot be edited safely from the quick pane. - Gateway/webchat: hide internal runtime-context and other `display: false` transcript messages from Chat history and live message events. Fixes [#83216](https://github.com/openclaw/openclaw/issues/83216). Thanks [@EmpireCreator](https://github.com/EmpireCreator). - CLI/help: keep `gateway`, `doctor`, `status`, and `health` help registration out of action/runtime imports so subcommand `--help` stays lightweight in constrained terminals. Fixes [#83228](https://github.com/openclaw/openclaw/issues/83228). Thanks [@dfguerrerom](https://github.com/dfguerrerom). - Cron/Discord: keep explicit announce runs in message-tool-only source-reply mode so scheduled agent turns post once instead of also echoing through automatic visible replies. Fixes [#83261](https://github.com/openclaw/openclaw/issues/83261). Thanks [@Theralley](https://github.com/Theralley). - Telegram: preserve forum-topic origin targets in inbound, audio-preflight, and skipped-message hook contexts so follow-up delivery stays bound to the originating topic. Fixes [#83302](https://github.com/openclaw/openclaw/issues/83302). Thanks [@M00zyx](https://github.com/M00zyx). - Telegram: retry HTTP 421 Misdirected Request send failures on a fresh fallback transport so transient edge-node routing errors no longer drop outbound replies. Fixes [#48892](https://github.com/openclaw/openclaw/issues/48892). ([#48908](https://github.com/openclaw/openclaw/issues/48908)) Thanks [@MarsDoge](https://github.com/MarsDoge). - Telegram: fail topic sends closed when Telegram reports `message thread not found` instead of retrying without `message_thread_id` into the base chat. Refs [#83302](https://github.com/openclaw/openclaw/issues/83302). - Config/subagents: remove ignored agent-model `timeoutMs` keys, keep subagent model config to primary/fallback selection, and clean shipped stale config through doctor. Fixes [#83291](https://github.com/openclaw/openclaw/issues/83291). Thanks [@giodl73-repo](https://github.com/giodl73-repo). - Mac app: align the Sessions settings pane with the standard Settings page gutter and row spacing. - OpenAI/Codex: stop rejecting available `openai-codex` GPT-5.1, GPT-5.2, and GPT-5.3 model refs during config validation, while keeping removed Spark aliases suppressed. Fixes [#83303](https://github.com/openclaw/openclaw/issues/83303). - Plugins/xAI: complete OAuth-backed xAI login and sidecar auth fixes, including guarded loopback callback CORS handling, video generation polling/defaults, and native-host User-Agent attribution. ([#83322](https://github.com/openclaw/openclaw/issues/83322)) Thanks [@Jaaneek](https://github.com/Jaaneek). - Codex app-server: preserve streamed native command output in mirrored transcripts and trajectory exports when final snapshots omit aggregated output. ([#83200](https://github.com/openclaw/openclaw/issues/83200)) Thanks [@rozmiarD](https://github.com/rozmiarD). - Codex app-server: fail closed when chat or sender policy denies tools, disabling native code, app, environment, and user MCP surfaces for restricted turns. ([#82374](https://github.com/openclaw/openclaw/issues/82374)) Thanks [@VACInc](https://github.com/VACInc). - Codex app-server: keep recent context-engine messages when oversized projected history is truncated, so short follow-ups in long channel sessions do not fall back to stale earlier turns. ([#83127](https://github.com/openclaw/openclaw/issues/83127)) Thanks [@VACInc](https://github.com/VACInc). - Codex app-server: keep OpenClaw session spawning searchable while steering Codex-native delegation through native subagents, avoiding duplicate direct subagent surfaces. ([#83329](https://github.com/openclaw/openclaw/issues/83329)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Codex app-server: recover stale childless Codex-native subagent task mirrors during maintenance and allow their registry rows to be cancelled without an OpenClaw child session. ([#82836](https://github.com/openclaw/openclaw/issues/82836)) Thanks [@yshimadahrs-ship-it](https://github.com/yshimadahrs-ship-it) and [@joshavant](https://github.com/joshavant). - Feishu: return bound subagent delivery origins from session thread setup so Feishu subagent completions route back to the same DM or topic. ([#83190](https://github.com/openclaw/openclaw/issues/83190)) Thanks [@100menotu001](https://github.com/100menotu001). - CLI/update: tailor post-update Gateway recovery hints by platform, showing systemd, LaunchAgent, Scheduled Task, or generic service-manager guidance instead of macOS-only recovery text. ([#83096](https://github.com/openclaw/openclaw/issues/83096)) Thanks [@rubencu](https://github.com/rubencu). - Plugins: apply a default 15-second timeout to legacy `before_agent_start` hooks so hung plugin handlers no longer block agent startup. Fixes [#48534](https://github.com/openclaw/openclaw/issues/48534). ([#83136](https://github.com/openclaw/openclaw/issues/83136)) Thanks [@therahul-yo](https://github.com/therahul-yo). - Feishu: refresh inbound session delivery context for DM, group, and broadcast turns so later replies do not inherit stale WebChat routing. Fixes [#78274](https://github.com/openclaw/openclaw/issues/78274). - Agents/subagents: require the initial subagent registry save before reporting spawn accepted, returning a spawn error instead of losing an untracked run when the registry write fails. ([#83146](https://github.com/openclaw/openclaw/issues/83146)) Thanks [@yetval](https://github.com/yetval). - QA-Lab/qa-channel: attach redacted agent tool-start traces to outbound `QaBusMessage` records so scenarios can assert actual tool use instead of relying only on reply text. Fixes [#67637](https://github.com/openclaw/openclaw/issues/67637). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: fail live runtime parity reports when assistant-message usage is missing, preventing `0 vs 0` live token rows from being reported as passing proof. Fixes [#80411](https://github.com/openclaw/openclaw/issues/80411). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: add a runtime token-efficiency sidecar report that classifies Codex savings separately from regressions and fails only positive Codex-over-Pi live token deltas above threshold. Fixes [#81093](https://github.com/openclaw/openclaw/issues/81093). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: fail Codex-backed OpenAI live runtime-pair runs before launching isolated workers when no portable Codex auth is available, while staging API-key fallbacks and configured Codex keys for isolated QA agents. Fixes [#80412](https://github.com/openclaw/openclaw/issues/80412). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: refresh parity gates, mock frontier fixtures, model scenarios, and workflow artifact lanes to compare GPT-5.5 against Claude Opus 4.7. Fixes [#74262](https://github.com/openclaw/openclaw/issues/74262). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: make mock parity dispatch provider-aware for source discovery and subagent scenarios so OpenAI and Anthropic lanes no longer share identical canned plans. Fixes [#64879](https://github.com/openclaw/openclaw/issues/64879). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: stop returning Control UI bearer tokens from unauthenticated bootstrap payloads and bind Docker harness ports to loopback-only host addresses. ([#66355](https://github.com/openclaw/openclaw/issues/66355)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Mac app: avoid a SwiftUI metadata crash when rendering the Cron Jobs settings pane. - Agents/subagents: preserve run-mode keep subagent registry entries past the session sweep TTL, so kept subagent runs remain visible after cleanup completes. Fixes [#83132](https://github.com/openclaw/openclaw/issues/83132). ([#83168](https://github.com/openclaw/openclaw/issues/83168)) Thanks [@yetval](https://github.com/yetval). - Agents/OpenAI streams: yield via `setTimeout(0)` instead of `setImmediate` between bursty Responses chunks so abort timers can fire during the yield, keeping cancel-on-timeout responsive on hot streams. Refs [#82462](https://github.com/openclaw/openclaw/issues/82462). - Agents/Codex: keep legacy `oauthRef`-backed OAuth profiles usable while `openclaw doctor --fix` migrates them back to inline credentials, without creating new sidecar credentials. ([#83312](https://github.com/openclaw/openclaw/issues/83312)) Thanks [@joshavant](https://github.com/joshavant). - Agents/Codex: load the selected provider owner alongside the Codex harness runtime so `openai-codex` models resolve when plugin allowlists scope runtime loading. Fixes [#83380](https://github.com/openclaw/openclaw/issues/83380). ([#83519](https://github.com/openclaw/openclaw/issues/83519)) Thanks [@joshavant](https://github.com/joshavant). - Telegram: fail stalled isolated-ingress handlers into tombstones and abort same-lane reply work before restarting, so later same-chat updates drain after a hung turn. Fixes [#83272](https://github.com/openclaw/openclaw/issues/83272). ([#83505](https://github.com/openclaw/openclaw/issues/83505)) Thanks [@joshavant](https://github.com/joshavant). - CLI/config: send SecretRef diagnostics to stderr so JSON command stdout remains parseable. - CLI/doctor: seed Control UI allowed origins when migrating legacy non-loopback gateway bind host aliases like `0.0.0.0`. Fixes [#83286](https://github.com/openclaw/openclaw/issues/83286). Thanks [@giodl73-repo](https://github.com/giodl73-repo). - CLI/plugins: ship the bundled memory CLI as a package entry so package-installed `openclaw memory` commands register correctly. - CLI/update: defer doctor-time plugin package installs during package swaps and seed post-core repair from the updated install registry, preventing duplicate reinstall failures. - CLI/update: preserve old-parent-readable config metadata during legacy package handoffs, fall back only to official `@openclaw/*` npm plugin packages when ClawHub plugin artifacts are unavailable, and keep managed service package roots authoritative during updates. - Feishu: detect SecretRef top-level credentials as a configured default account instead of treating object-backed app secrets as missing. - Gateway/restart: keep ordinary unmanaged SIGUSR1/config restarts in-process instead of detach-spawning an orphaned child, preserving custom supervisor PID tracking while leaving update restarts on the fresh-process path. Fixes [#65668](https://github.com/openclaw/openclaw/issues/65668). - CLI/completion: resolve concrete PowerShell profile paths and reload commands during setup and doctor completion installation. Fixes [#44296](https://github.com/openclaw/openclaw/issues/44296). ([#83059](https://github.com/openclaw/openclaw/issues/83059)) Thanks [@yu-xin-c](https://github.com/yu-xin-c). - Telegram: keep isolated long polling below the hard `getUpdates` request guard so idle bot accounts with high `timeoutSeconds` do not false-disconnect and restart-loop. Fixes [#83264](https://github.com/openclaw/openclaw/issues/83264). Thanks [@riccodecarvalho](https://github.com/riccodecarvalho). - Providers/Google: preserve and recover Gemini 3 tool-call thought signatures during native replay so function-calling turns no longer fail with missing `thought_signature` 400s. Fixes [#72879](https://github.com/openclaw/openclaw/issues/72879). ([#80358](https://github.com/openclaw/openclaw/issues/80358)) Thanks [@abnershang](https://github.com/abnershang). - Telegram: skip transcript-only delivery mirrors and gateway-injected rows when resolving latest assistant text, preventing retained previews from replacing final replies with stale fragments. Fixes [#83159](https://github.com/openclaw/openclaw/issues/83159). ([#83362](https://github.com/openclaw/openclaw/issues/83362)) Thanks [@joshavant](https://github.com/joshavant). - Memory/QMD: keep lexical search on raw hyphenated queries while normalizing semantic QMD sub-searches, avoiding fallback to the builtin index for dashed identifiers and dates. Fixes [#81328](https://github.com/openclaw/openclaw/issues/81328). - Memory-core: distinguish sqlite-vec load failures from missing semantic vector embeddings in degraded `memory index` warnings, so vector recall diagnostics point at unresolved dimensions instead of blaming sqlite-vec when the store is ready. Fixes [#75624](https://github.com/openclaw/openclaw/issues/75624). ([#83056](https://github.com/openclaw/openclaw/issues/83056)) Thanks [@xuruiray](https://github.com/xuruiray) and [@Noah3521](https://github.com/Noah3521). - Agents/subagents: preserve sandbox-peer controller ownership while routing completion announcements back to the originating run session, keeping subagent control and completion delivery scoped correctly. Fixes [#80201](https://github.com/openclaw/openclaw/issues/80201). ([#80242](https://github.com/openclaw/openclaw/issues/80242)) Thanks [@Jerry-Xin](https://github.com/Jerry-Xin). - Gateway: continue restarting remaining channels when one hot-reload channel restart fails, while still reporting aggregate reload failure and rolling back plugin pre-replace stops. Fixes [#83054](https://github.com/openclaw/openclaw/issues/83054). Thanks [@zqchris](https://github.com/zqchris). - Telegram: keep hot-reload restarts from marking polling accounts manually stopped and restart isolated ingress cleanly after worker shutdown, preserving Telegram replies across config reloads. Fixes [#83008](https://github.com/openclaw/openclaw/issues/83008). ([#83410](https://github.com/openclaw/openclaw/issues/83410)) Thanks [@joshavant](https://github.com/joshavant). - Telegram/Ollama: pass current Telegram image attachments into native PI/Ollama vision turns so live photo prompts reach Ollama as native images. Fixes [#83023](https://github.com/openclaw/openclaw/issues/83023). ([#83516](https://github.com/openclaw/openclaw/issues/83516)) Thanks [@joshavant](https://github.com/joshavant). - Gateway/secrets: split the lightweight secrets runtime state and auth-store cache from the full secrets runtime and take a startup fast path when the gateway startup config has no SecretRef values, speeding up secrets startup while preserving cleanup and refresh semantics. - Codex app-server: rotate oversized native Codex threads before resume and cap dynamic tool-result text entering native Codex sessions, preventing stale oversized context from surviving OpenClaw compaction. ([#82981](https://github.com/openclaw/openclaw/issues/82981)) Thanks [@hansolo949](https://github.com/hansolo949). - Gateway/restart: drain pending replies and active chat runs during restart shutdown before sockets and channels close, aborting timed-out chat runs through the normal cleanup path. ([#69121](https://github.com/openclaw/openclaw/issues/69121)) Thanks [@alexlomt](https://github.com/alexlomt). - Agents/Codex: use the Codex runtime context window for OpenAI-model preflight compaction and memory flush checks, so GPT-5.5 Codex sessions compact before hitting the smaller native context limit. Fixes [#82982](https://github.com/openclaw/openclaw/issues/82982). Thanks [@vliuyt](https://github.com/vliuyt). - QA-Lab: clean orphaned gateway temp roots when a suite parent exits and wait on gateway plus transport readiness after config restarts, reducing stale `qa-channel` noise from interrupted runs. Fixes [#65506](https://github.com/openclaw/openclaw/issues/65506). Thanks [@100yenadmin](https://github.com/100yenadmin). - QA-Lab: wake qa-bus long polls that arrive with stale future cursors after a bus restart, preserving reconnect readiness for harness clients. ([#67142](https://github.com/openclaw/openclaw/issues/67142)) Thanks [@hxy91819](https://github.com/hxy91819). - QA-Lab: stage Multipass transfer scripts under OpenClaw's preferred temp root instead of raw OS temp paths, keeping the VM runner inside temp-path guardrails. ([#64098](https://github.com/openclaw/openclaw/issues/64098)) Thanks [@ImLukeF](https://github.com/ImLukeF). - Agents/replies: keep surviving reply media and append a warning when other media references fail, so partial media normalization no longer drops failures silently. Thanks [@Jerry-Xin](https://github.com/Jerry-Xin). - Config/models: accept `thinkingFormat: "together"` in model compat config so Together routes can opt into the Together-specific thinking response shape. - Plugins/tokenjuice: bump the bundled tokenjuice runtime to 0.7.1, bringing Codex hook approval compatibility, pre-tool command wrapping fixes, and Rolldown/Vitest output compaction improvements into the OpenClaw plugin. - Agents/OpenAI: stop post-processing GPT-5 final replies with hardcoded brevity caps, preserving full channel responses instead of appending synthetic ellipses, and log when strict-agentic GPT-5 execution activates. Fixes [#82910](https://github.com/openclaw/openclaw/issues/82910). - Mac app: refine the Settings General and Connection panes with cleaner status panels, card rows, and a single native titlebar sidebar toggle. - Agents/media: deliver failed async image, music, and video generation completions directly when requester-session completion handoff fails, so channel users see provider errors instead of silent fallback stalls. - Browser/CDP: keep loopback proxy bypass active across both `NO_PROXY` casings and redact home-relative Chrome MCP profile paths in attach-failure diagnostics. - Agents/music: steer song, jingle, beat, anthem, and instrumental requests toward `music_generate` audio creation instead of lyric-only replies, and reserve `lyrics` for exact sung words. - Codex app-server: record native Codex tool calls and results into trajectory artifacts so debug/trajectory exports capture the full Codex-native tool history, not just OpenClaw-bridged turns. Thanks [@vyctorbrzezowski](https://github.com/vyctorbrzezowski). - Codex/app-server: keep bound conversation sessions on the owning agent runtime so native Codex control and follow-up turns do not fall back to the default agent client. Fixes [#82954](https://github.com/openclaw/openclaw/issues/82954). ([#82993](https://github.com/openclaw/openclaw/issues/82993)) - CLI/infer: run gateway model probes in fresh explicit sessions so one-shot provider checks do not inherit default agent transcript state. ([#82861](https://github.com/openclaw/openclaw/issues/82861)) Thanks [@Kaspre](https://github.com/Kaspre). - Providers/Together: send video-generation requests to Together's v2 video API even when shared text-model config still points at the v1 base URL. ([#82992](https://github.com/openclaw/openclaw/issues/82992)) - Browser CLI: preserve browser-level options on nested commands, skip option values during lazy command registration, and keep long-running wait/download/dialog hooks open for their advertised wait window. - CLI/sessions: accept `openclaw sessions list` as an alias for `openclaw sessions`, matching other list-style commands. Fixes [#81139](https://github.com/openclaw/openclaw/issues/81139). ([#81163](https://github.com/openclaw/openclaw/issues/81163)) Thanks [@YB0y](https://github.com/YB0y). - Channels/stream previews: widen compact progress draft lines and cut prose at word boundaries while preserving command/path suffixes, with `streaming.progress.maxLineChars` for channel-specific tuning. - CLI/plugins: have `openclaw plugins doctor` warn when a configured runtime needs a missing owner plugin, sharing the same install mapping as `openclaw doctor --fix`. Fixes [#81326](https://github.com/openclaw/openclaw/issues/81326). ([#81674](https://github.com/openclaw/openclaw/issues/81674)) Thanks [@Zavianx](https://github.com/Zavianx). - Agents/Codex: route OpenAI runs that resolve to `openai-codex` through the Codex provider and bootstrap OpenClaw's stored OAuth profile into the Codex harness when the harness owns transport, so `openai/*` model refs no longer fail with `No API key found for openai-codex` despite an existing Codex OAuth profile. ([#82864](https://github.com/openclaw/openclaw/issues/82864)) Thanks [@ragesaq](https://github.com/ragesaq). - Agents/ACP: distinguish prompt-submitted and runtime-active child stalls from true interactive waits, including redacted proxy-env diagnostics for Codex ACP no-output runs. Fixes [#44810](https://github.com/openclaw/openclaw/issues/44810). - Agents/memory: explain that memory-triggered compaction exposes only `read` and append-only `write` when configured core tools are unavailable in `tools.allow` warnings. Fixes [#82941](https://github.com/openclaw/openclaw/issues/82941). Thanks [@galiniliev](https://github.com/galiniliev). - Agents/OpenAI: preserve deterministic tool payload ordering for prompt-cache reuse across OpenAI Responses and chat completions calls. ([#82940](https://github.com/openclaw/openclaw/issues/82940)) Thanks [@galiniliev](https://github.com/galiniliev). - ACP/Codex: honor terminal ACP turn results so failed Codex/acpx runs are not recorded as successful after only progress text. Fixes [#79522](https://github.com/openclaw/openclaw/issues/79522). Thanks [@dudaefj](https://github.com/dudaefj). - Telegram: warn when a media group drops photos that fail to download, including albums where every photo is skipped. Fixes [#55216](https://github.com/openclaw/openclaw/issues/55216). ([#82987](https://github.com/openclaw/openclaw/issues/82987)) Thanks [@eldar702](https://github.com/eldar702). - Agents/skills: apply the full effective tool policy pipeline to inline `command-dispatch: tool` skill dispatch before owner-only filtering, preserving configured allow, deny, sandbox, sender, group, and subagent restrictions. ([#78525](https://github.com/openclaw/openclaw/issues/78525)) - Codex: avoid spawning native hook relay subprocesses for post-tool/finalize events with no registered hook handlers while preserving pre-tool safety and approval relays. Fixes [#76552](https://github.com/openclaw/openclaw/issues/76552). ([#78004](https://github.com/openclaw/openclaw/issues/78004)) Thanks [@evgyur](https://github.com/evgyur). - Channel accounts: keep top-level default channel accounts visible when named accounts are added alongside default credential material, so mixed legacy/new account configs keep resolving `default` instead of silently dropping it. - Agents/CLI: reject empty successful CLI subprocess replies as `empty_response` and keep them out of shared auth-profile health, so blank Claude CLI results no longer become green no-payload turns. Fixes [#83231](https://github.com/openclaw/openclaw/issues/83231). ([#83421](https://github.com/openclaw/openclaw/issues/83421)) Thanks [@joshavant](https://github.com/joshavant). - Codex/Telegram: synthesize native Codex tool progress from final turn snapshots so Telegram `/verbose` stays visible when command events arrive only at completion. - Codex/Telegram: deliver Codex verbose tool summaries in direct message-tool-only turns while suppressing message-send and activity-log noise. ([#83186](https://github.com/openclaw/openclaw/issues/83186)) Thanks [@kurplunkin](https://github.com/kurplunkin). - Mac app: make Channels settings open faster by deferring config-schema work, avoiding startup channel probes, caching decoded channel status rows, and showing only compact quick settings instead of the full generated channel schema. - Control UI: include the Control UI and Gateway protocol versions in protocol-mismatch errors so stale app/dashboard pairings identify which side needs rebuilding or restarting. - Gateway/protocol: restore Gateway WS protocol v4 and keep `message.action` room-event metadata on the existing `inboundTurnKind` wire field while preserving internal inbound-event classification. - Agents/tools: prefer non-webchat session-key routes when the message tool has stale webchat context, so message-tool-only replies keep delivering to the originating channel. Fixes [#82911](https://github.com/openclaw/openclaw/issues/82911). ([#83004](https://github.com/openclaw/openclaw/issues/83004)) Thanks [@joshavant](https://github.com/joshavant). - Channels: keep direct-message last-route writes on isolated `per-channel-peer` sessions instead of contaminating the agent main session with channel delivery context. Fixes [#36614](https://github.com/openclaw/openclaw/issues/36614). Thanks [@aspenas](https://github.com/aspenas). - Mac app: move the Settings sidebar toggle into the native titlebar and tighten the General pane width. - Mac app: keep visited Settings panes mounted so switching tabs no longer blanks and reloads their content. - Mac app: make Config settings open from shallow schema lookups and load selected paths on demand instead of fetching and rendering the full generated config schema up front. - Codex: sanitize inline image payloads before Codex app-server and OpenAI Responses replay, and clear poisoned Codex thread bindings after invalid image errors. Fixes [#82878](https://github.com/openclaw/openclaw/issues/82878). - Providers/GitHub Copilot: request identity-encoded Copilot API responses across token exchange, catalog, model calls, usage, and embeddings so compressed Business-account error payloads no longer reach JSON parsers as gzip bytes. Fixes [#82871](https://github.com/openclaw/openclaw/issues/82871). Thanks [@tonyfe01](https://github.com/tonyfe01). - Telegram: redact nested raw-update identifiers and user metadata before verbose raw update logging, preserving useful update/message ids without exposing chat, user, command, or profile details. ([#82945](https://github.com/openclaw/openclaw/issues/82945)) Thanks [@galiniliev](https://github.com/galiniliev) and [@joshavant](https://github.com/joshavant). - Telegram: preserve replied-to bot messages, captions, and media metadata in group reply chains so follow-up replies understand what the user is reacting to. ([#82863](https://github.com/openclaw/openclaw/issues/82863)) - Providers/Together: update PI runtime packages to 0.74.1 and emit Together-style `reasoning.enabled`/`max_tokens` controls for reasoning-capable OpenAI-completions models. - Agents/diagnostics: split slow embedded-run `attempt-dispatch` startup summaries into workspace, prompt, runtime-plan, and final dispatch subspans so traces identify the delayed setup phase. Fixes [#82782](https://github.com/openclaw/openclaw/issues/82782). ([#82783](https://github.com/openclaw/openclaw/issues/82783)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/Codex: flatten nested tool-result middleware blocks into bounded text so successful message sends are no longer replaced with `Tool output unavailable due to post-processing error`. Fixes [#82912](https://github.com/openclaw/openclaw/issues/82912). Thanks [@joeykrug](https://github.com/joeykrug). - CLI/media: accept HTTP(S) URLs in `openclaw infer image describe --file`, fetching remote images through the guarded media path instead of treating URLs as local files. Fixes [#82837](https://github.com/openclaw/openclaw/issues/82837). ([#82854](https://github.com/openclaw/openclaw/issues/82854)) Thanks [@neeravmakwana](https://github.com/neeravmakwana). - Agents/subagents: keep session-backed parent runs active when the child wait call times out before the child session has actually settled, so late subagent completions are reconciled instead of being lost. Fixes [#82787](https://github.com/openclaw/openclaw/issues/82787). Thanks [@ramitrkar-hash](https://github.com/ramitrkar-hash). - Control UI: advertise shared Gateway protocol constants in browser connect frames, fixing protocol mismatch handshakes after protocol constant drift. Fixes [#82882](https://github.com/openclaw/openclaw/issues/82882). Thanks [@galiniliev](https://github.com/galiniliev). - Gateway: add rollback protocol-mismatch diagnostics, including client protocol ranges in Gateway logs and deep status/doctor hints for stale client processes. Fixes [#82841](https://github.com/openclaw/openclaw/issues/82841). ([#82908](https://github.com/openclaw/openclaw/issues/82908)) - Agents/subagents: keep successful keep-mode completion payloads pending after final-delivery retry exhaustion, so requester recovery no longer loses final subagent results. Fixes [#82583](https://github.com/openclaw/openclaw/issues/82583). ([#82999](https://github.com/openclaw/openclaw/issues/82999)) Thanks [@joshavant](https://github.com/joshavant). - Gateway/auth: allow same-host trusted-proxy callers to use the documented local direct `gateway.auth.password` fallback after revisiting the [#78684](https://github.com/openclaw/openclaw/issues/78684) fail-closed policy, while keeping token fallback rejected and forwarded-header requests on the trusted-proxy path. Fixes [#82607](https://github.com/openclaw/openclaw/issues/82607). ([#82953](https://github.com/openclaw/openclaw/issues/82953)) Thanks [@joshavant](https://github.com/joshavant). - Agents/subagents: wait for queued completion handoffs to reach the parent transcript before marking them announced, preventing busy parent runs from cleaning up before observing child results. Fixes [#82913](https://github.com/openclaw/openclaw/issues/82913). ([#83039](https://github.com/openclaw/openclaw/issues/83039)) Thanks [@joshavant](https://github.com/joshavant). - Agents/subagents: route group/channel subagent completions through message-tool-only handoffs when required and keep active-requester wake failures from dropping completion delivery. Fixes [#82803](https://github.com/openclaw/openclaw/issues/82803). Thanks [@galiniliev](https://github.com/galiniliev), [@yozakura-ava](https://github.com/yozakura-ava), and [@moeedahmed](https://github.com/moeedahmed). - Memory-core: scan persisted memory source sessions on startup, comparing on-disk transcripts against the index and marking only missing/newer/resized files dirty for incremental sync. Fixes [#82341](https://github.com/openclaw/openclaw/issues/82341). ([#82341](https://github.com/openclaw/openclaw/issues/82341)) Thanks [@giodl73-repo](https://github.com/giodl73-repo). - Telegram: keep the top-level default account in the account list when named accounts or bindings are added alongside top-level credentials, preserving default polling while still letting named-only configs resolve to a single account. Fixes [#82794](https://github.com/openclaw/openclaw/issues/82794). ([#82794](https://github.com/openclaw/openclaw/issues/82794)) Thanks [@giodl73-repo](https://github.com/giodl73-repo). - CLI/models: reuse command-scoped plugin metadata across model listing, provider catalog, auth, and synthetic-auth checks, restoring fast `openclaw models` runs for plugin-heavy installs. Fixes [#82881](https://github.com/openclaw/openclaw/issues/82881). ([#83033](https://github.com/openclaw/openclaw/issues/83033)) Thanks [@joshavant](https://github.com/joshavant). - CLI/channels: show configured official external channels such as Discord in `openclaw channels list` when their plugin package is missing, including the install and doctor repair command instead of reporting no configured channels. Fixes [#82813](https://github.com/openclaw/openclaw/issues/82813). - Signal: preserve mixed-case group IDs through routing and session persistence so group auto-replies keep delivering after updates. Fixes [#82827](https://github.com/openclaw/openclaw/issues/82827). - Agents/tools: keep the `message` tool available in embedded runs when it is explicitly allowed through `tools.alsoAllow` or runtime tool allowlists, so channel plugins with custom reply delivery can still use configured message sends. Fixes [#82833](https://github.com/openclaw/openclaw/issues/82833). Thanks [@cn1313113](https://github.com/cn1313113). - WhatsApp: honor forced document delivery for outbound image, GIF, and video media so `forceDocument`/`asDocument` sends preserve original media bytes instead of using compressed media payloads. ([#79272](https://github.com/openclaw/openclaw/issues/79272)) Thanks [@itsuzef](https://github.com/itsuzef). - WhatsApp: name outbound document attachments from their MIME type when no filename is provided, so PDF and CSV sends arrive as `file.pdf` and `file.csv` instead of an extensionless `file`. Thanks [@mcaxtr](https://github.com/mcaxtr). - Process/diagnostics: report active lane blockers in lane wait warnings so `queueAhead=0` no longer hides commands waiting behind active work. Fixes [#82791](https://github.com/openclaw/openclaw/issues/82791). ([#82792](https://github.com/openclaw/openclaw/issues/82792)) Thanks [@galiniliev](https://github.com/galiniliev). - Process/diagnostics: stop counting the active processing turn as queued backlog in liveness warnings so transient max-only event-loop spikes do not surface as gateway warnings. - Agents/replies: classify provider conversation-state rejections and return a clear message-channel error instead of auto-resetting or falling back to a generic runner failure. ([#82616](https://github.com/openclaw/openclaw/issues/82616)) Thanks [@dutifulbob](https://github.com/dutifulbob). - Browser plugin: trust managed Chrome CDP diagnostics when launch HTTP probes race cold-start readiness, avoiding false startup failures. Fixes [#82904](https://github.com/openclaw/openclaw/issues/82904). ([#82986](https://github.com/openclaw/openclaw/issues/82986)) Thanks [@kmanan](https://github.com/kmanan) and [@hclsys](https://github.com/hclsys). - Android: prompt before replacing a changed Gateway TLS thumbprint, showing the old and new SHA-256 fingerprints so users can accept expected certificate rotations instead of hard failing on pin mismatch. ([#83077](https://github.com/openclaw/openclaw/issues/83077)) Thanks [@sliekens](https://github.com/sliekens). - CLI/status: render extra gateway-like service diagnostics as warning/info output instead of error output. Fixes [#46930](https://github.com/openclaw/openclaw/issues/46930). ([#82922](https://github.com/openclaw/openclaw/issues/82922)) thanks [@giodl73-repo](https://github.com/giodl73-repo). - Agents/failover: classify Moonshot/Kimi exhausted-balance HTTP 429 payloads as billing instead of generic rate limits, preserving billing guidance and fallback behavior. Fixes [#43447](https://github.com/openclaw/openclaw/issues/43447). ([#83079](https://github.com/openclaw/openclaw/issues/83079)) Thanks [@leno23](https://github.com/leno23). - Plugin SDK: bundle `openclaw/plugin-sdk/zod` into the published package artifact and verify the packed zod subpath stays self-contained, so pnpm global installs can register plugins without a package-local `zod` symlink. Fixes [#78398](https://github.com/openclaw/openclaw/issues/78398). ([#78515](https://github.com/openclaw/openclaw/issues/78515)) Thanks [@ggzeng](https://github.com/ggzeng). - Providers/Google: drop compaction-truncated Gemini thought signatures before replay so malformed Base64 no longer aborts the next assistant turn. ([#82995](https://github.com/openclaw/openclaw/issues/82995)) Thanks [@wAngByg](https://github.com/wAngByg). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/557

* fix(gateway): clear CLI bindings on session reset * fix(gateway): preserve spawned sessions in configured lists * fix(channels): clear canonical stale routes * fix(telegram): preserve forum topic origin targets * fix(agents): skip fallback for session coordination errors * fix(agents): persist subagent registry before returning accepted (openclaw#83132) (openclaw#83238) * fix(memory): catch up stale sessions on startup (openclaw#82341) * fix(memory): preserve qmd lexical search for hyphenated queries (openclaw#81423) * fix(anthropic): preserve Claude image capability (openclaw#83756) * fix(agents): exclude tool result details from guard budget (openclaw#75525) * fix(provider): use Together video API endpoint * fix(telegram): preserve implicit default account (openclaw#82794) * fix(gateway): allow trusted-proxy local-direct password fallback (openclaw#82953) * fix(discord): return subagent thread delivery origin * fix: add missing prerequisites for upstream-ported fixes Add SessionWriteLockTimeoutError class and hasSessionWriteLockTimeout helper needed by the ported fix(agents) skip-fallback commit. Remove route property references from session-delivery.ts that don't exist in gemmaclaw's SessionEntry type. Add authorizePasswordAuth helper that was present in upstream but missing from gemmaclaw's auth.ts. * fix: remove route assertions incompatible with gemmaclaw SessionEntry Remove test assertions using .route property that exists in upstream's SessionEntry type but not in gemmaclaw's, restoring typecheck green. * fix(memory-core): yield event loop during fallback vector search (openclaw#81172) (openclaw#83758) Summary: - The branch changes memory-core fallback vector search to scan chunks in 256-row rowid batches with `setImmediate` yields, updates regression tests, and adds a changelog entry. - Reproducibility: yes. from source and supplied live output. Current main synchronously scans fallback vector ... and the PR body shows the before/after heartbeat behavior through the actual `searchVector` fallback path. Automerge notes: - PR branch already contained follow-up commit before automerge: test(memory-core): add boundary, parity, and concurrent-insert covera… - PR branch already contained follow-up commit before automerge: fix(memory-core): yield event loop during fallback vector search (#81… Validation: - ClawSweeper review passed for head 0ede3d7. - Required merge gates passed before the squash merge. Prepared head SHA: 0ede3d7 Review: openclaw#83758 (comment) Co-authored-by: NW <nitinwadhawan66@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com> Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com> Approved-by: takhoffman Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com> * fix(subagents): collect unresolved announce batches (openclaw#83701) Summary: - The PR changes collect-mode follow-up queue routing so unresolved-origin items can batch with a single resolved route and later compatible items can resume batching after a true cross-channel drain. - Reproducibility: yes. at source level: current main treats unkeyed-plus-same-keyed queue items as cross-chan ... failing path is directly visible in `src/utils/queue-helpers.ts` and `src/auto-reply/reply/queue/drain.ts`. Automerge notes: - PR branch already contained follow-up commit before automerge: Merge remote-tracking branch 'origin/main' into maint-83701-20260518 Validation: - ClawSweeper review passed for head e6ad029. - Required merge gates passed before the squash merge. Prepared head SHA: e6ad029 Review: openclaw#83701 (comment) Co-authored-by: Andy Ye <35905412+TurboTheTurtle@users.noreply.github.com> Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com> Approved-by: takhoffman Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com> * fix(config): accept gateway remote port * fix: restore Array<{}> closing bracket in manager-search.ts Cherry-pick 68b3729 accidentally dropped the '>' from '}>', producing a syntax error. Restore '}>;' as it was in origin/main. * fix: add remotePort to GatewayRemoteConfig and GatewayRemoteConfigSchema * fix(agents): prioritize manual session turns (openclaw#82765) * fix(agents): prioritize manual session turns * docs: update changelog for session priority --------- Co-authored-by: Galin Iliev <Galin.Iliev@microsoft.com> * revert: fix(agents): prioritize manual session turns (openclaw#82765) - upstream deps not in gemmaclaw * fix: resolve undefined variable errors in cherry-picked extension code * fix(tui): preserve draft while chat is busy * fix(tui): add pendingChatRunId to TuiStateAccess for cherry-picked tui commit * fix(memory-wiki): make wiki_lint tool output path-safe (openclaw#83687) * fix(ui): render session-scoped tool events (openclaw#83734) * chore: regenerate base config schema after upstream cherry-picks * fix(agents): add persistSubagentRunsToDiskOrThrow to subagent-registry test mock New export added to subagent-registry-state.ts was missing from the vi.mock definition, causing all tests in the suite to skip and the module to fail to load. * fix(telegram): wire buildTelegramInboundOriginTarget into session context Cherry-pick 675e053 added the helper and the test assertion but did not update bot-message-context.session.ts to use it. OriginatingTo now correctly includes :topic:<id> for forum groups. * fix(memory): correct session path format in startup-catchup test sessionPathForFile returns sessions/<basename> (no agent dir), but the cherry-picked test used sessions/main/<basename>. The clean-file test always failed because the path mismatch made every file look unindexed. * fix(together): update video generation test URL from v1 to v2 The source uses TOGETHER_VIDEO_BASE_URL = https://api.together.xyz/v2 but the cherry-picked test still asserted the old v1 URL. --------- Co-authored-by: nitinjwadhawan <nitinwadhawan66@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com> Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com> Co-authored-by: Andy Ye <35905412+TurboTheTurtle@users.noreply.github.com> Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Galin Iliev <iliev@galcho.com> Co-authored-by: Galin Iliev <Galin.Iliev@microsoft.com> Co-authored-by: Harry Xie <harryhsieh963@yahoo.com>

* fix(memory): catch up stale sessions on startup Add a startup catch-up scan for memory session source files so clean gateway restarts compare on-disk transcripts against persisted index file state and mark only missing/newer/resized session files dirty for a normal incremental sync. * fix(memory): catch up sessions for cli indexing Ensure one-shot memory index managers also compare session transcripts against persisted source state before no-force CLI syncs, so openclaw memory index can recover stale session rows without requiring --force. * chore: refresh CI after main repairs

openclaw-barnacle Bot added extensions: memory-core Extension: memory-core size: M maintainer Maintainer-authored PR labels May 15, 2026

giodl73-repo force-pushed the fix-memory-session-startup-catchup-62625 branch 8 times, most recently from 46fad37 to 75e6b7c Compare May 16, 2026 14:34

giodl73-repo and others added 3 commits May 16, 2026 07:39

chore: refresh CI after main repairs

9e1027d

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

giodl73-repo force-pushed the fix-memory-session-startup-catchup-62625 branch from 75e6b7c to 9e1027d Compare May 16, 2026 14:39

clawsweeper Bot mentioned this pull request May 16, 2026

Memory: add session sync status observability #42014

Closed

20 tasks

clawsweeper Bot added the P1 High-priority user-facing bug, regression, or broken workflow. label May 16, 2026

giodl73-repo added 6 commits May 16, 2026 15:04

Merge branch 'main' into fix-memory-session-startup-catchup-62625

28a998c

Merge branch 'main' into fix-memory-session-startup-catchup-62625

d55f1dd

Merge branch 'main' into fix-memory-session-startup-catchup-62625

e8c01d1

Merge branch 'main' into fix-memory-session-startup-catchup-62625

edceac0

Merge branch 'main' into fix-memory-session-startup-catchup-62625

8b6313e

Merge branch 'main' into fix-memory-session-startup-catchup-62625

b4e1a1c

clawsweeper Bot added the proof: sufficient ClawSweeper judged the real behavior proof convincing. label May 16, 2026

Merge branch 'main' into fix-memory-session-startup-catchup-62625

7a82279

clawsweeper Bot removed the proof: sufficient ClawSweeper judged the real behavior proof convincing. label May 17, 2026

Merge branch 'main' into fix-memory-session-startup-catchup-62625

66afc12

clawsweeper Bot added proof: sufficient ClawSweeper judged the real behavior proof convincing. impact:session-state Session, memory, transcript, context, or agent state can drift or corrupt. labels May 17, 2026

giodl73-repo merged commit 8af2af2 into openclaw:main May 17, 2026
110 of 112 checks passed

github-actions Bot mentioned this pull request May 17, 2026

🦞 OpenClaw 生态日报 2026-05-17 ivanweng2077/big_model_radar#55

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(memory): catch up stale sessions on startup#82341

fix(memory): catch up stale sessions on startup#82341
giodl73-repo merged 11 commits into
openclaw:mainfrom
giodl73-repo:fix-memory-session-startup-catchup-62625

giodl73-repo commented May 15, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented May 15, 2026 •

edited

Loading

Uh oh!

giodl73-repo commented May 16, 2026

Uh oh!

giodl73-repo commented May 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

giodl73-repo commented May 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Real behavior proof

Tests

Uh oh!

clawsweeper Bot commented May 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

giodl73-repo commented May 16, 2026

Uh oh!

giodl73-repo commented May 16, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

giodl73-repo commented May 15, 2026 •

edited

Loading

clawsweeper Bot commented May 15, 2026 •

edited

Loading