Filter heartbeat response-tool transcript artifacts by fuller-stack-dev · Pull Request #83477 · openclaw/openclaw

fuller-stack-dev · 2026-05-18T06:40:10Z

Summary

Filters full silent heartbeat transcript spans before normal prompt assembly, including helper tool calls/results, prompt-only interrupted wakes, pre-terminal assistant status text, and heartbeat_respond notify:false.
Handles the live OpenAI Responses transcript shapes (input_text / output_text) and the message-tool delivery prefix used by heartbeat polls in shared sessions.
Preserves visible heartbeat output only when it is actually visible: free-text alerts remain, and heartbeat_respond notify:true is kept only after a completed successful matching response-tool result.
Fixes bundled LINE extension lint by using the public command definition type instead of deriving it through a broad API parameter.

Real behavior proof

Behavior addressed: Later normal prompts no longer receive stale silent heartbeat artifacts such as [OpenClaw heartbeat poll], HEARTBEAT.md, heartbeat_respond, or notify=false; completed visible heartbeat notifications remain available to the next prompt context.
Real environment tested: Local OpenClaw checkout on this PR branch at 67bbcaa4e62283ebbab7a488d2683807c5d55e8f, using production runHeartbeatOnce in heartbeat response-tool mode followed by production getReplyFromConfig for a normal prompt on the same temporary agent:main:main session. The model endpoint was a local OpenAI Responses-compatible HTTP server so the full OpenClaw session persistence and prompt assembly path ran without external credentials.
Exact steps or command run after this patch: node --import tsx /tmp/openclaw-heartbeat-real-session-proof.mjs
Evidence after fix: Redacted terminal transcript from the same-session proof:

proof.stage heartbeat-start
localProvider.request heartbeat /v1/responses
localProvider.request heartbeat /v1/responses
proof.stage heartbeat-done ran
proof.stage normal-start
localProvider.request normal /v1/responses
proof.stage normal-done
transcriptLineSummaries ... user text Delivery: to send a message, use the `message` tool. [OpenClaw heartbeat poll] ... custom_message openclaw.runtime-context Read HEARTBEAT.md ... assistant toolCall ... heartbeat_respond ... toolResult ... assistant text HEARTBEAT_OK ... user text what model are you ... assistant text I am the local proof model.
heartbeatResult.status ran
providerRequestKinds heartbeat,heartbeat,normal
heartbeatProviderRequestContainsHeartbeatPrompt true
transcriptContainsHeartbeatArtifacts {"[OpenClaw heartbeat poll]":true,"HEARTBEAT.md":true,"heartbeat_respond":true,"notify=false":true,"\"notify\":false":true}
normalProviderRequestContainsArtifacts {"[OpenClaw heartbeat poll]":false,"HEARTBEAT.md":false,"heartbeat_respond":false,"notify=false":false,"\"notify\":false":false}
normalProviderRequestContainsUserPrompt true

Observed result after fix: The persisted session intentionally still contains the operational heartbeat span, including HEARTBEAT.md, heartbeat_respond, notify:false, HEARTBEAT_OK, and the prefixed [OpenClaw heartbeat poll] user message. The following normal provider request for what model are you contains the user prompt but none of those heartbeat artifacts, proving the filter removes stale heartbeat context before normal prompt dispatch.
What was not tested: No external provider or Telegram delivery. This proof used a local OpenAI Responses-compatible endpoint, but exercised OpenClaw's production heartbeat runner, session-history persistence, transcript filter, and normal prompt submission path on one shared session.

Verification

node --no-maglev node_modules/vitest/vitest.mjs src/auto-reply/heartbeat-filter.test.ts --run --reporter=verbose - Test Files 1 passed (1), Tests 34 passed (34).
node --no-maglev node_modules/vitest/vitest.mjs src/auto-reply/heartbeat-filter.test.ts src/agents/pi-embedded-runner/run/attempt.spawn-workspace.context-engine.test.ts src/infra/heartbeat-runner.tool-response.test.ts --run --reporter=verbose - Test Files 4 passed (4), Tests 134 passed (134).
node --import tsx /tmp/openclaw-heartbeat-real-session-proof.mjs - real same-session heartbeat-to-normal-prompt proof above.
pnpm format:check -- src/auto-reply/heartbeat-filter.ts src/auto-reply/heartbeat-filter.test.ts
git diff --check
AUTOREVIEW_AUTO_TESTS=0 .agents/skills/autoreview/scripts/autoreview --mode local --reviewer codex --fallback-reviewer none - clean, no accepted/actionable findings.
Earlier PR-gate proof retained from this branch: pnpm lint --threads=8, pnpm tsgo:prod, pnpm check:test-types, node scripts/run-bundled-extension-oxlint.mjs, pnpm run test:extensions:package-boundary:compile, pnpm run test:extensions:package-boundary:canary.

clawsweeper · 2026-05-18T06:41:21Z

Codex review: passed.

Workflow note: Future ClawSweeper reviews update this same comment in place.

How this review workflow works

ClawSweeper keeps one durable marker-backed review comment per issue or PR.
Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
Maintainers can also comment @clawsweeper review to request a fresh review only.
Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

Summary
This PR replaces pair-only heartbeat filtering with span-based filtering before embedded-runner prompt assembly, adds focused regression coverage and a changelog entry, and updates the LINE command type to use the SDK command definition.

Reproducibility: yes. from source and report evidence: current main only removes immediate heartbeat prompt/OK pairs, while response-tool calls/results and message-tool-prefixed heartbeat prompts can remain in history that later feeds prompt assembly. I did not execute a live repro in this read-only sweep, but the PR body supplies same-session terminal proof and a commenter supplied a matching Discord gateway observation.

PR rating
Overall: 🐚 platinum hermit
Proof: 🦞 diamond lobster
Patch quality: 🐚 platinum hermit
Summary: Strong terminal proof and broad focused tests make this a normal mergeable-quality bug fix, with the rating capped by session-history compatibility risk.

Rank-up moves:

none

What the crustacean ranks mean

🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Real behavior proof
Sufficient (terminal): The PR body includes redacted terminal proof from a production same-session heartbeat run followed by a normal prompt, showing heartbeat artifacts absent from the next normal provider request.

Risk before merge

This intentionally changes which persisted heartbeat messages are replayed into later prompt/context snapshots, so a real provider transcript shape not represented in tests could still retain or drop heartbeat context differently after upgrade.
Visible notify:true heartbeat response-tool calls are preserved only after a successful matching tool result; pending or failed visible calls are treated as operational artifacts and removed from later context.
This was a read-only review, so exact-head CI and the posted validation remain the executable proof gate.

Maintainer options:

Land With Covered Session Shapes (recommended)
Proceed after exact-head CI if maintainers accept that stored silent heartbeat spans are removed from normal prompt assembly on upgrade.
Add A Known Missing Shape First
If maintainers know another persisted provider transcript format for heartbeat tool calls/results, add one focused case before merge.
Confirm The Live Discord Symptom
If transport-level confidence is required before landing, run this branch against the reported Discord gateway and confirm the silent heartbeat no longer leaks visible HEARTBEAT_OK.

Next step before merge
No repair PR is needed; the remaining path is exact-head automerge/CI plus maintainer acceptance of the explicit session-history risk.

Security
Cleared: No concrete security or supply-chain concern found in the diff; it changes TypeScript source/tests, a type-only LINE import, and the changelog only.

Review details

Best possible solution:

Land the focused filter once exact-head CI is green and maintainers accept the documented session-history compatibility behavior.

Do we have a high-confidence way to reproduce the issue?

Yes from source and report evidence: current main only removes immediate heartbeat prompt/OK pairs, while response-tool calls/results and message-tool-prefixed heartbeat prompts can remain in history that later feeds prompt assembly. I did not execute a live repro in this read-only sweep, but the PR body supplies same-session terminal proof and a commenter supplied a matching Discord gateway observation.

Is this the best way to solve the issue?

Yes. Filtering at the shared heartbeat transcript helper used before embedded-runner prompt assembly is the narrow maintainable boundary, and the implementation preserves completed visible heartbeat alerts instead of deleting all heartbeat spans blindly.

Label changes:

add status: 🚀 automerge armed: This PR is in ClawSweeper's automerge lane. Sufficient (terminal): The PR body includes redacted terminal proof from a production same-session heartbeat run followed by a normal prompt, showing heartbeat artifacts absent from the next normal provider request.
remove status: 👀 ready for maintainer look: Current PR status label is status: 🚀 automerge armed.

What I checked:

Current main only filters immediate heartbeat prompt/ack pairs: Current main exposes filterHeartbeatPairs, which removes a heartbeat user message only when the immediately following assistant message is a heartbeat OK response; it does not recognize helper tool calls, response-tool calls/results, or OpenAI Responses function-call output spans. (src/auto-reply/heartbeat-filter.ts:74, 5d799c2d2052)
Current main applies that pair filter to embedded runner history: The embedded runner filters sanitized prior messages and the active session before prompt/context assembly, so the old pair-only behavior is on the path that prepares normal prompt history after heartbeat runs. (src/agents/pi-embedded-runner/run/attempt.ts:3032, 5d799c2d2052)
PR head implements span filtering for response-tool heartbeat artifacts: The PR head adds transcript span classification for heartbeat prompts, message-tool delivery prefixes, tool calls/results, OpenAI Responses input/output text, visible notify:true completion, and removable silent response-tool spans. (src/auto-reply/heartbeat-filter.ts:348, e019c74bb58f)
PR head wires the new filter at the same prompt-assembly boundaries: The PR replaces both embedded-runner filterHeartbeatPairs call sites with filterHeartbeatTranscriptArtifacts and clears state when prior messages existed but the filtered history becomes empty. (src/agents/pi-embedded-runner/run/attempt.ts:3036, e019c74bb58f)
Regression coverage includes silent, visible, pending, failed, and provider-shaped spans: The added heartbeat-filter tests cover response-tool spans, OpenAI Responses function_call_output, Anthropic-style tool_use_id, visible notify:true preservation, pending/failed visible calls, and mixed user/tool-result turns. (src/auto-reply/heartbeat-filter.test.ts:226, e019c74bb58f)
Context-engine coverage checks the user-visible bug boundary: The PR adds embedded-runner tests showing heartbeat artifacts are absent from normal prompt snapshots while visible heartbeat alert context remains available. (src/agents/pi-embedded-runner/run/attempt.spawn-workspace.context-engine.test.ts:393, e019c74bb58f)

Likely related people:

yujiawei: Git blame attributes the current heartbeat filter and embedded-runner heartbeat filtering call sites on main to commit 9e9feb5. (role: recent area contributor; confidence: high; commits: 9e9feb52f43c; files: src/auto-reply/heartbeat-filter.ts, src/agents/pi-embedded-runner/run/attempt.ts, src/auto-reply/heartbeat.ts)
Shakker: The same current-main commit carrying the heartbeat filter and call-site implementation was committed by Shakker, making them a useful routing candidate for this area. (role: committer / merger of current main implementation; confidence: medium; commits: 9e9feb52f43c; files: src/auto-reply/heartbeat-filter.ts, src/agents/pi-embedded-runner/run/attempt.ts)

Codex review notes: model gpt-5.5, reasoning high; reviewed against 5d799c2d2052.

fuller-stack-dev · 2026-05-20T01:22:35Z

@clawsweeper re-review

clawsweeper · 2026-05-20T01:24:19Z

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

State: Complete
Detail: The targeted re-review finished, the durable review comment was updated, and the synced verdict was routed.
Run: https://github.com/openclaw/clawsweeper/actions/runs/26135532343
Updated: 2026-05-20T01:34:13.013Z

clawsweeper · 2026-05-20T01:34:07Z

ClawSweeper PR egg

✨ Hatched: 🥚 common Clockwork Branchling

Hatch command

Comment @clawsweeper hatch when this PR is hatchable.

Hatchability rules:

Merged PRs are hatchable.
Open PRs are hatchable when they are status: 👀 ready for maintainer look, status: 🚀 automerge armed, or labeled clawsweeper:automerge.
Closed unmerged PRs are hatchable only when one of those hatchable labels is still present in the durable record.

Rarity: 🥚 common.
Trait: sniffs out flaky tests.
Image traits: location flaky test forest; accessory commit compass; palette coral, mint, and warm cream; mood sparkly; pose leaning over a miniature review desk; shell woven fiber shell; lighting bright celebratory glints; background subtle branch markers.
Share on X: post this hatch
Copy: My PR egg hatched a 🥚 common Clockwork Branchling in ClawSweeper.

What is this egg doing here?

Eggs appear after the PR passes real-behavior proof. It is here for vibes, not verdicts: it does not change labels, ratings, merge decisions, or automation.
The shell reacts to review momentum: open follow-up work warms it up, re-review makes it wobble, and a clean final review lets it hatch.
Hatchability usually comes from sufficient real-behavior proof, no blocking P0/P1/P2 findings, no security attention needed, and clean correctness. A merged PR is already final, so merge makes the egg hatchable independently.
The hatch is seeded from this repository and PR number, so the same PR keeps the same creature; the reviewed head SHA can only change safe visual details.
Rarity is just collectible sparkle: 🥚 common, 🌱 uncommon, 💎 rare, ✨ glimmer, and 🌈 legendary.

fuller-stack-dev · 2026-05-20T02:26:23Z

@clawsweeper re-review

clawsweeper · 2026-05-20T02:28:07Z

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

State: Complete
Detail: The targeted re-review finished, the durable review comment was updated, and the synced verdict was routed.
Run: https://github.com/openclaw/clawsweeper/actions/runs/26137532743
Updated: 2026-05-20T02:35:56.654Z

Takhoffman · 2026-05-20T02:51:03Z

@clawsweeper automerge

clawsweeper · 2026-05-20T02:53:03Z

🦞✅
ClawSweeper merged this PR after the passing review.

Source: clawsweeper[bot]
Feedback: structured ClawSweeper verdict: pass (sha=e019c74bb58fb9be95c5c412735c9fe5605cfc32)
Merge status: merged by ClawSweeper automerge
Merged at: 2026-05-20T03:19:36Z
Merge commit: 2ab3a4e422a0

What merged:

This PR replaces pair-only heartbeat filtering with span-based filtering before embedded-runner prompt assem ... ession coverage and a changelog entry, and updates the LINE command type to use the SDK command definition.
Reproducibility: yes. from source and report evidence: current main only removes immediate heartbeat prompt/ ... body supplies same-session terminal proof and a commenter supplied a matching Discord gateway observation.

Automerge notes:

PR branch already contained follow-up commit before automerge: fix: filter heartbeat transcript artifacts
PR branch already contained follow-up commit before automerge: fix: clean up heartbeat filter lint
PR branch already contained follow-up commit before automerge: fix: keep line entry on channel SDK
PR branch already contained follow-up commit before automerge: fix: filter heartbeat response text transcript shapes
PR branch already contained follow-up commit before automerge: Filter heartbeat response-tool transcript artifacts

The automerge loop is complete.

Automerge progress:

2026-05-20 02:51:03 UTC review queued 67bbcaa4e622 (queued)

2026-05-20 02:53:03 UTC repair queued 67bbcaa4e622 (autonomous) Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851

2026-05-20 02:56:22 UTC repair started (running) in 0s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 automerge-openclaw-openclaw-83477

2026-05-20 02:58:40 UTC validation plan (passed) in 2m 19s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 pnpm check:changed; pnpm lint; pnpm check:test-types

2026-05-20 02:58:57 UTC Codex write preflight (passed) in 2m 35s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 danger-full-access

2026-05-20 03:05:35 UTC Codex edit 1 0a4da802e601 (complete) in 9m 14s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 exit 0

2026-05-20 03:10:56 UTC validation and review 1 e019c74bb58f (complete) in 14m 35s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 already-current

2026-05-20 03:11:02 UTC repair completed e019c74bb58f (branch updated) in 14m 40s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 initial automerge rebase is delegated to Codex repair

2026-05-20 03:11:02 UTC review queued e019c74bb58f (after repair)

2026-05-20 03:19:47 UTC automerge wait e019c74bb58f (merged) in 23m 26s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 pull request already merged

2026-05-20 03:19:20 UTC review passed e019c74bb58f (structured ClawSweeper verdict: pass (sha=e019c74bb58fb9be95c5c412735c9fe5605cf...)

2026-05-20 03:19:38 UTC merged e019c74bb58f (merged by ClawSweeper automerge)

2026-05-20 03:19:49 UTC repair finished e019c74bb58f (pushed) in 23m 27s Run: https://github.com/openclaw/clawsweeper/actions/runs/26138316851 repair_contributor_branch

andyylin · 2026-05-20T03:02:49Z

Adding a live repro/evidence point from a Discord gateway that looks like the same failure class this PR is targeting.

Environment:

OpenClaw 2026.5.18 (50a2481)
Discord channel surface
Main agent heartbeat config:

{
  "every": "30m",
  "model": "openai/gpt-5.4-mini",
  "target": "none",
  "timeoutSeconds": 45,
  "lightContext": true,
  "skipWhenBusy": true
}

Observed behavior:

HEARTBEAT_OK is still visibly posted in Discord.
Gateway restart did not clear it.
The heartbeat event itself says it was silent:

{
  "ts": 1779244730047,
  "status": "ok-token",
  "reason": "interval",
  "durationMs": 14866,
  "silent": true,
  "indicatorType": "ok"
}

That makes this look less like heartbeat.target delivery and more like a transcript/reply/response-tool artifact escaping after the heartbeat runner already decided the ack was silent. In other words: exactly the kind of path this PR describes around heartbeat_respond notify:false / response-tool transcript artifacts / message-tool delivery prefix leakage.

If useful, I can test this branch against the live Discord/Joi setup after it lands or from a temporary checkout. This is not theoretical noise; it is happening repeatedly on a real Discord gateway after restart.

Summary: - This PR replaces pair-only heartbeat filtering with span-based filtering before embedded-runner prompt assem ... ession coverage and a changelog entry, and updates the LINE command type to use the SDK command definition. - Reproducibility: yes. from source and report evidence: current main only removes immediate heartbeat prompt/ ... body supplies same-session terminal proof and a commenter supplied a matching Discord gateway observation. Automerge notes: - PR branch already contained follow-up commit before automerge: fix: filter heartbeat transcript artifacts - PR branch already contained follow-up commit before automerge: fix: clean up heartbeat filter lint - PR branch already contained follow-up commit before automerge: fix: keep line entry on channel SDK - PR branch already contained follow-up commit before automerge: fix: filter heartbeat response text transcript shapes - PR branch already contained follow-up commit before automerge: Filter heartbeat response-tool transcript artifacts Validation: - ClawSweeper review passed for head e019c74bb58fb9be95c5c412735c9fe5605cfc32. - Required merge gates passed before the squash merge. Prepared head SHA: e019c74bb58fb9be95c5c412735c9fe5605cfc32 Review: openclaw/openclaw#83477 (comment) Co-authored-by: fuller-stack-dev <263060202+fuller-stack-dev@users.noreply.github.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com> Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com> Approved-by: takhoffman Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>

…026.5.20) (#615) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.5.19` → `2026.5.20` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/567) for more information. --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.5.20`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#2026520) [Compare Source](openclaw/openclaw@v2026.5.19...v2026.5.20) ##### Changes - Exec approvals: remove the old `cat SKILL.md && printf ... && <skill-wrapper>` allowlist compatibility path so skill files must be loaded with the read tool and only the real skill executable is auto-allowed. - Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation. ([#84264](openclaw/openclaw#84264)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Discord/voice: include bounded `IDENTITY.md`, `USER.md`, and `SOUL.md` profile context in realtime voice session instructions by default, with `voice.realtime.bootstrapContextFiles: []` available to disable it. ([#84499](openclaw/openclaw#84499)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Dependencies: bump the bundled Codex harness to `@openai/codex` `0.132.0` and refresh the app-server model-list docs for the new catalog. - CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair. ([#80407](openclaw/openclaw#80407)) Thanks [@giodl73-repo](https://github.com/giodl73-repo). - Agents/config: allow `agents.list[].experimental.localModelLean` so lean local-model mode can be enabled for one configured agent instead of globally. - Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback. ([#84005](openclaw/openclaw#84005)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Providers/OpenRouter: honor provider-level `params.provider` routing policy for OpenRouter requests, with model and agent params overriding the defaults. Thanks [@amknight](https://github.com/amknight). ##### Fixes - CLI/tasks: include stale-running task maintenance decisions in `openclaw tasks maintenance --json` so retained and reconcile candidates explain backing-session, cron, CLI, and wedged-subagent state. ([#84691](openclaw/openclaw#84691)) Thanks [@efpiva](https://github.com/efpiva). - Codex app-server: keep system-prompt reports working when bootstrap hooks provide workspace files with only a path and content, so hook-supplied SOUL/IDENTITY/TOOLS/USER context still reports injected characters correctly. ([#84736](openclaw/openclaw#84736)) Thanks [@JARVIS-Glasses](https://github.com/JARVIS-Glasses). - Providers/MiniMax music: stop advertising `durationSeconds` control and remove prompt-injected duration hints, so `music_generate` reports MiniMax duration as an unsupported override instead of suggesting MiniMax can enforce track length. Fixes [#84508](openclaw/openclaw#84508). Thanks [@neeravmakwana](https://github.com/neeravmakwana). - Doctor: warn when sandbox tool policy hides configured MCP server tools before provider requests. ([#84699](openclaw/openclaw#84699)) Thanks [@nxmxbbd](https://github.com/nxmxbbd). - WhatsApp: update Baileys to `7.0.0-rc12`. - Build: suppress per-locale `rolldown-plugin-dts:fake-js` CommonJS dts warnings emitted while bundling the intentionally-inlined `zod/v4/locales/*.d.cts` files, so `pnpm build` output stays readable after the 0.25.1 plugin bump. Thanks [@romneyda](https://github.com/romneyda). - CLI/nodes: route lazy plugin-registration logs to stderr for JSON-mode `openclaw nodes` commands so stdout stays parseable. ([#84684](openclaw/openclaw#84684)) Thanks [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Approvals: route manual `/approve` decisions through the trusted approval runtime so active exec and plugin approvals no longer look unknown or expired. - Mac app: update the About settings copyright year to 2026. ([#84385](openclaw/openclaw#84385)) Thanks [@pejmanjohn](https://github.com/pejmanjohn). - Dependencies: update `@openclaw/fs-safe` to `0.2.7` so OpenClaw's default Python-helper-off policy keeps best-effort Node write fallbacks for private stores, secret writes, run logs, and media attachments on Linux/macOS. - Infra/secrets: restore the fail-closed contract for `tryReadSecretFileSync` so credential loaders that pass `rejectSymlink: true` (Telegram, LINE, Zalo, IRC, Nextcloud Talk tokens) refuse symlinked credential files instead of silently accepting them, and the infra-state CI shard's secret-file symlink test passes again. Thanks [@romneyda](https://github.com/romneyda). - Browser: honor the configured image sanitization limit for screenshots and labeled snapshots so browser-captured images follow the same resize policy as other image results. ([#84595](openclaw/openclaw#84595)) - Doctor: remove unrecognized `models.providers.*.models[*].compat.thinkingFormat` values during `doctor --fix` so stale provider model config can validate after upgrade. Fixes [#77803](openclaw/openclaw#77803). - Doctor: warn when `openclaw.json` stores plaintext secret-bearing config fields, including model provider API keys and sensitive provider headers. ([#84718](openclaw/openclaw#84718)) Thanks [@lukaIvanic](https://github.com/lukaIvanic). - Status: show the configured default, session-selected model, reason, clear hint, and docs link when a session remains pinned to a model that differs from `agents.defaults.model.primary`. - WebChat: clear stale typing indicators when session change events mark the active chat run complete. - Mac app: keep local packaging signed with a stable app identity for permission testing and fix Control UI production builds under current Vite/Highlight.js exports. - macOS app: update the embedded Peekaboo bridge to 3.2.1 so OpenClaw-hosted UI automation works with current Peekaboo CLI capture flows. - Cron: deliver preferred final assistant output for successful scheduled runs when trailing plain tool warnings remain in diagnostics instead of marking the run failed. - fix(mattermost): fail closed on missing channel type \[AI]. ([#84091](openclaw/openclaw#84091)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Recheck rebuilt system.run argv \[AI]. ([#84090](openclaw/openclaw#84090)) Thanks [@pgondhi987](https://github.com/pgondhi987). - CLI: keep the private QA subcommand out of exported command descriptors unless `OPENCLAW_ENABLE_PRIVATE_QA_CLI=1`, so root help and subcommand markers match runtime registration. ([#84519](openclaw/openclaw#84519)) - CLI/cron: bound `openclaw cron show` job lookup pagination so non-advancing or unbounded `cron.list` responses fail instead of hanging the command. Fixes [#83856](openclaw/openclaw#83856). ([#83989](openclaw/openclaw#83989)) - Agents/messages: stop message-tool-only turns after a successful source-channel `message` send while keeping transcript mirrors under the session write lock. ([#84289](openclaw/openclaw#84289)) - Agents: filter silent heartbeat response-tool transcript artifacts out of embedded context snapshots so later user turns are not polluted by heartbeat no-op messages. ([#83477](openclaw/openclaw#83477)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Agents/OpenAI: log repeated strict tool-schema downgrade diagnostics once per provider/model/tool signature, reducing duplicate debug noise while preserving `strict=false` fallback behavior. Fixes [#82930](openclaw/openclaw#82930). ([#82933](openclaw/openclaw#82933)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/code mode: spell out the `exec` tool's JavaScript/TypeScript, no Node module, and catalog-bridge constraints in model-visible schema text so agents can use enabled tools without trial-and-error. ([#84269](openclaw/openclaw#84269)) Thanks [@Kaspre](https://github.com/Kaspre). - Codex: give `image_generate` dynamic-tool calls a 120s default watchdog when no per-call or configured image timeout is set, so image generation no longer falls back to the generic 30s bridge timeout. ([#84254](openclaw/openclaw#84254)) Thanks [@moritzmmayerhofer](https://github.com/moritzmmayerhofer). - Codex: avoid duplicate dynamic tool terminal diagnostics while large diagnostic backlogs drain without blocking tool responses. ([#82937](openclaw/openclaw#82937)) Thanks [@galiniliev](https://github.com/galiniliev). - CLI/message: include a stable top-level `messageId` in `openclaw message --json` output when channel sends return one. ([#84191](openclaw/openclaw#84191)) Thanks [@100menotu001](https://github.com/100menotu001). - Cron: preserve legacy top-level array `jobs.json` stores when loading or adding scheduled jobs so old cron jobs are no longer treated as an empty store during upgrade. Fixes [#60799](openclaw/openclaw#60799). ([#84433](openclaw/openclaw#84433)) Thanks [@IWhatsskill](https://github.com/IWhatsskill). - Gateway/agents: use an agent's `identity.name` in Gateway agent summaries when `agents.list[].name` is unset, so configured agent labels remain visible in clients. ([#84355](openclaw/openclaw#84355); refs [#57835](openclaw/openclaw#57835)) Thanks [@luoyanglang](https://github.com/luoyanglang). - Channels/replies: keep normal `/verbose` failed-tool progress compact in message-tool replies and prevent late text-only tool output from appearing after the final answer. ([#84303](openclaw/openclaw#84303)) Thanks [@VACInc](https://github.com/VACInc). - Plugins/hooks: apply a default 30-second timeout to `before_compaction` and `after_compaction` hooks so a hung plugin handler no longer blocks compaction completion. ([#84153](openclaw/openclaw#84153)) - Discord: preserve disabled presentation buttons when adapting and rendering Discord message controls. ([#84188](openclaw/openclaw#84188)) Thanks [@100menotu001](https://github.com/100menotu001). - Twitch: add a test-only client-manager registry reset helper so non-isolated Twitch tests can clear cached managers between cases. Fixes [#83887](openclaw/openclaw#83887). ([#84244](openclaw/openclaw#84244)) Thanks [@hclsys](https://github.com/hclsys). - Cron: run main-session scheduled work on a cron-owned wake lane while preserving reply delivery context, so background cron turns no longer block human main-session chat. Fixes [#82766](openclaw/openclaw#82766). ([#82767](openclaw/openclaw#82767)) Thanks [@galiniliev](https://github.com/galiniliev). - Cron: use structured embedded-run denial metadata for isolated scheduled tasks so blocked exec requests fail the job without treating ordinary assistant prose as a denial. ([#84067](openclaw/openclaw#84067)) Thanks [@abnershang](https://github.com/abnershang). - Cron: keep recovered tool warnings diagnostic for successful scheduled runs so final cron output is delivered instead of being replaced by a post-processing warning. ([#84045](openclaw/openclaw#84045)) Thanks [@abnershang](https://github.com/abnershang). - Plugins/perf: thread explicit plugin discovery results through `loadBundledCapabilityRuntimeRegistry`, `resolveBundledPluginSources`, and `listChannelCatalogEntries` so callers that already hold a discovery result skip redundant filesystem walks. Thanks [@SebTardif](https://github.com/SebTardif). - harden update restart script creation \[AI]. ([#84088](openclaw/openclaw#84088)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Docker: keep the bundled Codex plugin in official release image keep lists so the default OpenAI agent harness remains available after Docker pruning. Fixes [#83613](openclaw/openclaw#83613). ([#83626](openclaw/openclaw#83626)) Thanks [@YuanHanzhong](https://github.com/YuanHanzhong). - CLI/channels: preserve the first line of `openclaw channels logs` output when the rolling tail window starts exactly on a line boundary, mirroring the already-fixed `readLogSlice` behavior in `src/logging/log-tail.ts`. - Control UI: treat terminal session status as authoritative over stale active-run flags so completed terminal runs stop showing abort/live UI. ([#84057](openclaw/openclaw#84057)) - CLI: preserve embedded equals signs in inline root option values instead of truncating after the second separator. ([#83995](openclaw/openclaw#83995)) Thanks [@ThiagoCAltoe](https://github.com/ThiagoCAltoe). - Matrix/config: accept `messages.queue.byChannel.matrix` queue overrides and keep queue provider schema/type keys aligned for Matrix, Google Chat, and Mattermost. Thanks [@bdjben](https://github.com/bdjben). - CLI: format `openclaw acp client` failures through the shared error formatter so object-shaped errors stay readable instead of printing `[object Object]`. Fixes [#83904](openclaw/openclaw#83904). ([#84080](openclaw/openclaw#84080)) - Providers/Ollama: default unknown-capabilities models to tool-capable so discovered native Ollama models can use tools when `/api/show` omits capabilities. ([#84055](openclaw/openclaw#84055)) Thanks [@dutifulbob](https://github.com/dutifulbob). - Installer/Windows: launch `install.ps1` onboarding as an attached child process so fresh native Windows installs do not freeze visibly at `Starting setup...` or corrupt the wizard's terminal rendering. - CLI/update: keep restart health checks working across one-version CLI/Gateway protocol skew and use the managed Gateway service Node for all follow-up commands even when the package root is unchanged, so `openclaw update` no longer silently switches the gateway to a different Node binary when multiple Node installations are present. Thanks [@amknight](https://github.com/amknight). - CLI/gateway: include the running Gateway version in `gateway status` JSON output, preserving existing server metadata while falling back to status RPC data for read probes. Fixes [#56222](openclaw/openclaw#56222). Thanks [@galiniliev](https://github.com/galiniliev). - Memory/search: close local embedding providers when active-memory searches time out so pending local model loads and embedding contexts are aborted and released. ([#83858](openclaw/openclaw#83858)) Thanks [@brokemac79](https://github.com/brokemac79). - CLI/nodes: request pending node surface approval scopes before `openclaw nodes approve` so exec-capable node approval can use admin-scoped Gateway credentials instead of failing with `missing scope: operator.admin`. ([#84392](openclaw/openclaw#84392)) Thanks [@joshavant](https://github.com/joshavant). - Gateway: reject slow node event sends before outbound buffers grow unbounded and log the rejected payload diagnostic. ([#84387](openclaw/openclaw#84387)) Thanks [@samzong](https://github.com/samzong). - Agents: include bounded trajectory queued-writer diagnostics in `pi-trajectory-flush` timeout warnings so flush stalls show pending writes, queued bytes, and append state. Fixes [#82961](openclaw/openclaw#82961). ([#82962](openclaw/openclaw#82962)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/subagents: recover stale completion announces by retrying unsupported transcript-wait wakes without transcript waiting and forcing a message-tool handoff when the requester run is already stale. Fixes [#83699](openclaw/openclaw#83699). ([#83700](openclaw/openclaw#83700)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/subagents: constrain wildcard subagent target allowlists to configured agents while preserving explicitly listed compatibility targets. Fixes [#84040](openclaw/openclaw#84040). ([#84357](openclaw/openclaw#84357)) Thanks [@joshavant](https://github.com/joshavant). - Providers/Anthropic: route Anthropic model refs selected with Claude CLI auth through the Claude CLI runtime so shorthand refs such as `anthropic/opus-4.7` no longer fall back to embedded Anthropic billing. Fixes [#84222](openclaw/openclaw#84222). ([#84374](openclaw/openclaw#84374)) Thanks [@joshavant](https://github.com/joshavant). - Agents: honor explicit `models.providers.<id>.timeoutSeconds` values above the default idle watchdog for cloud and self-hosted providers, so long first-token waits no longer fall back at \~120s when the provider timeout is higher. ([#83979](openclaw/openclaw#83979)) Thanks [@yujiawei](https://github.com/yujiawei). - Agents/Codex: keep encrypted Responses reasoning replay provenance-bound so stale mirrored Codex transcripts drop invalid encrypted content before request assembly while preserving matching same-session replay. Fixes [#83836](openclaw/openclaw#83836). ([#84367](openclaw/openclaw#84367)) Thanks [@joshavant](https://github.com/joshavant). - Agents/subagents: skip stale embedded-run wake probes for dormant completion requesters, so late subagent completions go straight to requester-agent/direct handoff instead of producing `reason=no_active_run` queue noise. ([#82964](openclaw/openclaw#82964)) Thanks [@galiniliev](https://github.com/galiniliev). - CLI: retry config snapshot reads after a transient failure so one rejected read no longer poisons later commands in the same process. ([#83931](openclaw/openclaw#83931)) Thanks [@honor2030](https://github.com/honor2030). - Media: decode URL path basenames before using them as remote media fallback filenames, so files like `My%20Report.pdf` are surfaced as `My Report.pdf`. Fixes [#84050](openclaw/openclaw#84050). ([#84052](openclaw/openclaw#84052)) Thanks [@jbetala7](https://github.com/jbetala7). - WhatsApp: clarify inbound group diagnostics so observed but unregistered groups point to `channels.whatsapp.groups` without changing routing or sender authorization. ([#83846](openclaw/openclaw#83846)) Thanks [@neeravmakwana](https://github.com/neeravmakwana). - WhatsApp: drain pending outbound deliveries on a 30s periodic timer in addition to the reconnect handler, so messages enqueued while the provider is already connected no longer wait for the next reconnect to send. ([#79083](openclaw/openclaw#79083)) Thanks [@Oviemudiaga](https://github.com/Oviemudiaga). - CLI/TUI: include gateway plugin slash commands in TUI autocomplete, so connected sessions can suggest plugin-owned commands exposed by the running Gateway. ([#83640](openclaw/openclaw#83640)) Thanks [@se7en-agent](https://github.com/se7en-agent). - Gateway/mobile: restore QR setup-code handoff of bounded operator tokens for iOS and Android onboarding while keeping admin and pairing scopes out of bootstrap. ([#83684](openclaw/openclaw#83684)) Thanks [@ngutman](https://github.com/ngutman). - iOS: repair Release archive compilation for the TestFlight build. ([#84255](openclaw/openclaw#84255)) Thanks [@ngutman](https://github.com/ngutman). - Agents/compaction: bound plugin-owned CLI transcript compaction with the host safety timeout so a hung context engine can no longer stall post-turn cleanup. ([#84083](openclaw/openclaw#84083)) Thanks [@100yenadmin](https://github.com/100yenadmin). - Control UI/usage: truncate long context skill, tool, and file names in the usage panel while keeping the full name available on hover. ([#42197](openclaw/openclaw#42197)) Thanks [@Rain120](https://github.com/Rain120). - Codex: respect explicit `models auth order set` and `config.auth.order` precedence over stale `lastGood` in `/codex account`, and show `no working credential` when every explicit-order profile is ineligible instead of marking a lower-ranked profile as active. Fixes [#84386](openclaw/openclaw#84386). ([#84412](openclaw/openclaw#84412)) Thanks [@openperf](https://github.com/openperf). - Agents: honor `messages.suppressToolErrors` for mutating tool failures so configured chat surfaces do not receive separate warning payloads. ([#81561](openclaw/openclaw#81561)) Thanks [@moeedahmed](https://github.com/moeedahmed). - Agents/fallback: surface billing guidance for mixed rate-limit plus billing fallback exhaustion instead of generic failure copy. Fixes [#79396](openclaw/openclaw#79396). ([#79489](openclaw/openclaw#79489)) Thanks [@aayushprsingh](https://github.com/aayushprsingh). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/615

Summary: - This PR replaces pair-only heartbeat filtering with span-based filtering before embedded-runner prompt assem ... ession coverage and a changelog entry, and updates the LINE command type to use the SDK command definition. - Reproducibility: yes. from source and report evidence: current main only removes immediate heartbeat prompt/ ... body supplies same-session terminal proof and a commenter supplied a matching Discord gateway observation. Automerge notes: - PR branch already contained follow-up commit before automerge: fix: filter heartbeat transcript artifacts - PR branch already contained follow-up commit before automerge: fix: clean up heartbeat filter lint - PR branch already contained follow-up commit before automerge: fix: keep line entry on channel SDK - PR branch already contained follow-up commit before automerge: fix: filter heartbeat response text transcript shapes - PR branch already contained follow-up commit before automerge: Filter heartbeat response-tool transcript artifacts Validation: - ClawSweeper review passed for head e019c74. - Required merge gates passed before the squash merge. Prepared head SHA: e019c74 Review: openclaw#83477 (comment) Co-authored-by: fuller-stack-dev <263060202+fuller-stack-dev@users.noreply.github.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com> Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com> Approved-by: takhoffman Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>

openclaw-barnacle Bot added agents Agent runtime and tooling size: M proof: supplied External PR includes structured after-fix real behavior proof. labels May 18, 2026

fuller-stack-dev force-pushed the codex/filter-heartbeat-transcript-artifacts branch from fcdf1f3 to f14a4fe Compare May 18, 2026 08:59

clawsweeper Bot added the clawsweeper:automerge Maintainer opted this PR into bounded ClawSweeper-reviewed automerge label May 20, 2026

fuller-stack-dev added 5 commits May 20, 2026 02:59

fix: filter heartbeat response-tool transcript spans

11e6f43

fix: filter heartbeat transcript artifacts

8e0daa2

fix: clean up heartbeat filter lint

23f9086

fix: keep line entry on channel SDK

72741fa

fix: filter heartbeat response text transcript shapes

0a4da80

Filter heartbeat response-tool transcript artifacts

e019c74

clawsweeper Bot force-pushed the codex/filter-heartbeat-transcript-artifacts branch from 67bbcaa to e019c74 Compare May 20, 2026 03:11

clawsweeper Bot added status: 🚀 automerge armed This PR is in ClawSweeper's automerge lane. and removed status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. labels May 20, 2026

clawsweeper Bot merged commit 2ab3a4e into openclaw:main May 20, 2026
106 of 108 checks passed

dustytext-bot mentioned this pull request May 22, 2026

requestHeartbeat with intent: "immediate" does not wake idle agent #84841

Closed

aksheyw mentioned this pull request May 23, 2026

[Bug]: Embedded-run bootstrap-context stage variance causes 20-37s heartbeat fires on 5.20 (regression from 5.6; not fixed by 5.12 PR #80449 or 5.20 PRs #83477/#83858) #85783

Open

clawsweeper Bot mentioned this pull request May 25, 2026

fix: trim trailing heartbeat context when no user message follows #86472

Closed

SebTardif mentioned this pull request May 26, 2026

fix(heartbeat): trim trailing verbose ack wrappers from session context #86693

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Filter heartbeat response-tool transcript artifacts#83477

Filter heartbeat response-tool transcript artifacts#83477
clawsweeper[bot] merged 6 commits into
openclaw:mainfrom
fuller-stack-dev:codex/filter-heartbeat-transcript-artifacts

fuller-stack-dev commented May 18, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented May 18, 2026 •

edited

Loading

Uh oh!

fuller-stack-dev commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented May 20, 2026 •

edited

Loading

Uh oh!

fuller-stack-dev commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 •

edited

Loading

Uh oh!

Takhoffman commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 •

edited

Loading

Uh oh!

andyylin commented May 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

fuller-stack-dev commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Real behavior proof

Verification

Uh oh!

clawsweeper Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fuller-stack-dev commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hatch command

Uh oh!

fuller-stack-dev commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Takhoffman commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

andyylin commented May 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

fuller-stack-dev commented May 18, 2026 •

edited

Loading

clawsweeper Bot commented May 18, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading