fix(codex): guard path-only bootstrap files [AI-assisted] by IWhatsskill · Pull Request #84736 · openclaw/openclaw

IWhatsskill · 2026-05-21T00:10:48Z

Summary

Fixes a Codex app-server startup/reporting crash when bootstrap context files are supplied with path and content but no name.

The patch keeps path-based lookup first, treats the filename as optional, and derives the report display name from the path when needed.

Why

OpenClaw can carry context files shaped like:

{ "path": "/workspace/AGENTS.md", "content": "..." }

The Codex system prompt report path later assumed name was always present and could call .trim() through the basename helper with undefined.

What changed

Guard optional bootstrap file names in the Codex injection stats path.
Keep lookup by full path before trying filename or basename lookup.
Derive a stable display name from path when name is absent.
Add a regression test through runCodexAppServerAttempt() with a hook-supplied path-only bootstrap file.

Real behavior proof

Behavior or issue addressed: Codex app-server startup/reporting could crash while building the system prompt report when a bootstrap context file had path and content but no name; the failing path was runCodexAppServerAttempt -> buildCodexSystemPromptReport -> buildCodexBootstrapInjectionStats -> readCodexIndexedContextFileContent -> getCodexContextFileBasename.

Real environment tested: isolated Linux OpenClaw testserver clone of openclaw/openclaw, Node v22.22.2, pnpm 11.1.0. This was a standalone node --import tsx OpenClaw run outside Vitest. It used a provider-free Codex JSON-RPC stdio app-server process, no live provider credentials, no OAuth, and no secrets.

Exact steps or command run after this patch: applied the patch to the isolated OpenClaw checkout, then ran the standalone proof runner:

OPENCLAW_PR84736_PROOF_MODE=after \
OPENCLAW_PR84736_EXPECT=pass \
node --import tsx .artifacts/pr84736-real-proof/proof-runner.mjs

Before evidence: the same standalone path-only bootstrap scenario on current main reproduced the crash before the app-server turn could start:

PR84736 standalone OpenClaw Codex app-server proof
mode=before
expect=fail
runner=node --import tsx
vitest=false
appServerTransport=stdio
appServerProcess=provider-free Codex JSON-RPC stdio process
workspace=<tmp>/workspace
bootstrapFileShape={ path, content, missing }
appServerMethods=<none>
result=error
errorName=TypeError
errorMessage=Cannot read properties of undefined (reading 'trim')
stackTop=
TypeError: Cannot read properties of undefined (reading 'trim')
    at normalizeCodexContextFilePath (<repo>/extensions/codex/src/app-server/run-attempt.ts:4705:19)
    at getCodexContextFileBasename (<repo>/extensions/codex/src/app-server/run-attempt.ts:4709:10)
    at readCodexIndexedContextFileContent (<repo>/extensions/codex/src/app-server/run-attempt.ts:4501:26)
    at buildCodexBootstrapInjectionStats (<repo>/extensions/codex/src/app-server/run-attempt.ts:4442:32)
    at buildCodexSystemPromptReport (<repo>/extensions/codex/src/app-server/run-attempt.ts:4366:29)

After-fix evidence: copied live terminal output from the same standalone setup after the patch:

PR84736 standalone OpenClaw Codex app-server proof
mode=after
expect=pass
runner=node --import tsx
vitest=false
appServerTransport=stdio
appServerProcess=provider-free Codex JSON-RPC stdio process
workspace=<tmp>/workspace
bootstrapFileShape={ path, content, missing }
[agent/embedded] codex plugin thread config eligibility
appServerMethods=initialize -> initialized -> thread/start -> turn/start
result=success
assistantTextCount=0
reportedFile={"name":"SOUL.md","path":"<tmp>/workspace/SOUL.md","rawChars":50,"injectedChars":50,"truncated":false}
basenameFromPath=true

Observed result after fix: the Codex app-server attempt no longer calls the basename helper with undefined; the app-server reaches turn/start, and the system prompt report emits SOUL.md from the path-only bootstrap file with matching raw and injected character counts.

What was not tested: no live provider request, OAuth flow, routing, or config-shape behavior was changed or tested. The broader generic /context unnamed-bootstrap display fallback remains separate in #47941 and #48021.

Additional validation

Focused regression:

node scripts/run-vitest.mjs extensions/codex/src/app-server/run-attempt.test.ts --run --testNamePattern "reports hook-supplied bootstrap files"
1 passed | 185 skipped

Focused suite:

node scripts/run-vitest.mjs extensions/codex/src/app-server/run-attempt.test.ts src/agents/bootstrap-hooks.test.ts src/agents/bootstrap-files.test.ts src/agents/pi-embedded-helpers.buildbootstrapcontextfiles.test.ts
6 files / 301 tests passed

Other checks:

node_modules/.bin/oxfmt --check --threads=1 extensions/codex/src/app-server/run-attempt.ts extensions/codex/src/app-server/run-attempt.test.ts
passed

git diff --check
passed

node scripts/run-tsgo.mjs -p tsconfig.extensions.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/extensions.tsbuildinfo
passed

node scripts/run-tsgo.mjs -p test/tsconfig/tsconfig.extensions.test.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/extensions-test.tsbuildinfo
passed

node scripts/run-oxlint.mjs --tsconfig config/tsconfig/oxlint.extensions.json extensions/codex/src/app-server/run-attempt.ts extensions/codex/src/app-server/run-attempt.test.ts
0 warnings / 0 errors

pnpm check:changed
passed

Notes

No provider, OAuth, routing, config-shape, or fallback behavior is changed.

clawsweeper · 2026-05-21T00:12:24Z

Codex review: passed.

Workflow note: Future ClawSweeper reviews update this same comment in place.

How this review workflow works

ClawSweeper keeps one durable marker-backed review comment per issue or PR.
Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
Maintainers can also comment @clawsweeper review to request a fresh review only.
Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

Summary
The PR updates Codex app-server system-prompt reporting to tolerate bootstrap files with path and content but no name, adds a focused regression test, and records the fix in the changelog.

Reproducibility: yes. The PR body supplies current-main before output with the undefined.trim() stack, and source inspection confirms hook-supplied path-only bootstrap files can reach the Codex report helper.

PR rating
Overall: 🦞 diamond lobster
Proof: 🦞 diamond lobster
Patch quality: 🦞 diamond lobster
Summary: The PR is focused, backed by strong before/after real behavior proof, and has no blocking findings from this review.

What the crustacean ranks mean

🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Real behavior proof
Sufficient (live_output): The PR body includes before/after copied live terminal output from a standalone OpenClaw Codex app-server run outside Vitest, showing the crash before and successful turn/start with SOUL.md after the patch.

Next step before merge
No repair job is needed; this PR already contains the focused fix and sufficient proof, so exact-head checks and the existing automerge gate can handle the remaining merge decision.

Security
Cleared: The diff only changes Codex app-server report lookup logic, a colocated test, and changelog text; it does not touch secrets, dependencies, CI, install, release, or package execution paths.

Review details

Best possible solution:

Land the narrow Codex app-server report guard after exact-head checks; keep the broader generic /context unnamed-file fallback on the existing linked issue and PR.

Do we have a high-confidence way to reproduce the issue?

Yes. The PR body supplies current-main before output with the undefined.trim() stack, and source inspection confirms hook-supplied path-only bootstrap files can reach the Codex report helper.

Is this the best way to solve the issue?

Yes. Guarding optional name, preserving path-first lookup, and deriving a display basename in the Codex app-server report layer is the narrowest maintainable fix for this scoped crash.

Label justifications:

P2: This fixes a focused Codex app-server startup/reporting crash with a small implementation surface and limited blast radius.
rating: 🦞 diamond lobster: Current PR rating is 🦞 diamond lobster because proof is 🦞 diamond lobster, patch quality is 🦞 diamond lobster, and The PR is focused, backed by strong before/after real behavior proof, and has no blocking findings from this review.
status: 🚀 automerge armed: This PR is in ClawSweeper's automerge lane. Sufficient (live_output): The PR body includes before/after copied live terminal output from a standalone OpenClaw Codex app-server run outside Vitest, showing the crash before and successful turn/start with SOUL.md after the patch.
proof: sufficient: Contributor real behavior proof is sufficient. The PR body includes before/after copied live terminal output from a standalone OpenClaw Codex app-server run outside Vitest, showing the crash before and successful turn/start with SOUL.md after the patch.

What I checked:

Current main crash path: Current main builds Codex system-prompt report stats from bootstrap files, passes file.name through readCodexIndexedContextFileContent, and getCodexContextFileBasename(fileName) calls .trim() on that value, matching the reported undefined-name crash path. (extensions/codex/src/app-server/run-attempt.ts:4442, 9cdf8a1e2f9f)
Patch guard: The PR head normalizes file.name through readNonEmptyString, derives a display basename from path when needed, and keeps path lookup before filename and basename lookup. (extensions/codex/src/app-server/run-attempt.ts:4443, 466711089908)
Regression coverage: The PR adds a runCodexAppServerAttempt regression where an agent:bootstrap hook supplies only path, content, and missing, then asserts the report reaches turn/start and emits SOUL.md with matching character counts. (extensions/codex/src/app-server/run-attempt.test.ts:4832, 466711089908)
Hook source permits runtime mutation: The hook runner hands bootstrapFiles through mutable hook context and returns the updated array, so hook-supplied shapes are part of the runtime path even though the static workspace type requires name. (src/agents/bootstrap-hooks.ts:19, 9cdf8a1e2f9f)
Related generic fallback remains separate: The provided related context shows the broader generic /context unnamed-bootstrap display issue is still tracked by Context breakdown can label virtual bootstrap files as 'undefined' instead of falling back to path/basename #47941 and fix(context): fall back to path basename for unnamed bootstrap files #48021, so this PR is correctly scoped to Codex app-server reporting. (src/agents/bootstrap-budget.ts:149, 08bd7b740bb6)
Feature history: git blame ties the current Codex app-server report helper and indexed content lookup to commit 110042d, which introduced this run-attempt surface in the current checkout. (extensions/codex/src/app-server/run-attempt.ts:4333, 110042d840bb)

Likely related people:

yaoyi1222: git blame attributes the current Codex app-server report helper, bootstrap injection stats, and indexed context lookup to commit 110042d. (role: introduced behavior; confidence: high; commits: 110042d840bb; files: extensions/codex/src/app-server/run-attempt.ts, src/agents/bootstrap-hooks.ts)
Kevin Lin: Recent git history shows work on the same Codex app-server run-attempt file shortly after the report helper landed. (role: recent adjacent contributor; confidence: medium; commits: 404fd6d9abce; files: extensions/codex/src/app-server/run-attempt.ts, extensions/codex/src/app-server/run-attempt.test.ts)
Takhoffman: The commit that introduced the current surface includes an Approved-by: takhoffman trailer and co-author signal, making this a plausible routing candidate for owner review. (role: reviewer/merger signal; confidence: medium; commits: 110042d840bb; files: extensions/codex/src/app-server/run-attempt.ts, extensions/codex/src/app-server/run-attempt.test.ts)

Codex review notes: model gpt-5.5, reasoning high; reviewed against 9cdf8a1e2f9f.

clawsweeper · 2026-05-21T00:20:29Z

ClawSweeper PR egg

✨ Hatched: 💎 rare Tiny Crabkin

Hatch command

Comment @clawsweeper hatch when this PR is hatchable.

Hatchability rules:

Merged PRs are hatchable.
Open PRs are hatchable when they are status: 👀 ready for maintainer look, status: 🚀 automerge armed, or labeled clawsweeper:automerge.
Closed unmerged PRs are hatchable only when one of those hatchable labels is still present in the durable record.

Rarity: 💎 rare.
Trait: keeps receipts.
Image traits: location flaky test forest; accessory release bell; palette coral, mint, and warm cream; mood sleepy but ready; pose waving from a small platform; shell brushed metal shell; lighting clean product lighting; background miniature CI buoys.
Share on X: post this hatch
Copy: My PR egg hatched a 💎 rare Tiny Crabkin in ClawSweeper.

What is this egg doing here?

Eggs appear after the PR passes real-behavior proof. It is here for vibes, not verdicts: it does not change labels, ratings, merge decisions, or automation.
The shell reacts to review momentum: open follow-up work warms it up, re-review makes it wobble, and a clean final review lets it hatch.
Hatchability usually comes from sufficient real-behavior proof, no blocking P0/P1/P2 findings, no security attention needed, and clean correctness. A merged PR is already final, so merge makes the egg hatchable independently.
The hatch is seeded from this repository and PR number, so the same PR keeps the same creature; the reviewed head SHA can only change safe visual details.
Rarity is just collectible sparkle: 🥚 common, 🌱 uncommon, 💎 rare, ✨ glimmer, and 🌈 legendary.

IWhatsskill · 2026-05-21T00:44:24Z

@clawsweeper re-review

clawsweeper · 2026-05-21T00:46:18Z

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

State: Complete
Detail: The targeted re-review finished, the durable review comment was updated, and the synced verdict was routed.
Run: https://github.com/openclaw/clawsweeper/actions/runs/26198603676
Updated: 2026-05-21T00:52:41.606Z

IWhatsskill · 2026-05-21T01:17:20Z

@clawsweeper hatch

clawsweeper · 2026-05-21T01:19:00Z

🦞👀
ClawSweeper PR egg hatch requested.

I queued a comment sync for this PR. If the egg is hatchable, ClawSweeper will generate the image once and update the existing review comment.
Action: PR egg hatch queued (workflow sweep.yml, event repository_dispatch).
The ASCII egg stays as the fallback.

Takhoffman · 2026-05-21T01:24:36Z

@clawsweeper automerge

clawsweeper · 2026-05-21T01:27:16Z

🦞✅
ClawSweeper merged this PR after the passing review.

Source: clawsweeper[bot]
Feedback: structured ClawSweeper verdict: pass (sha=4667110899081e66153f8ed5453c311efb4bd75d)
Merge status: merged by ClawSweeper automerge
Merged at: 2026-05-21T01:55:30Z
Merge commit: c4f14a39a520

What merged:

The PR updates Codex app-server system-prompt reporting to tolerate bootstrap files with path and content but no name, adds a focused regression test, and records the fix in the changelog.
Reproducibility: yes. The PR body supplies current-main before output with the undefined.trim() stack, and source inspection confirms hook-supplied path-only bootstrap files can reach the Codex report helper.

Automerge notes:

PR branch already contained follow-up commit before automerge: fix(codex): guard path-only bootstrap files [AI-assisted]

The automerge loop is complete.

Automerge progress:

2026-05-21 01:24:36 UTC review queued 28c1f3368760 (queued)

2026-05-21 01:27:16 UTC repair queued 28c1f3368760 (autonomous) Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943

2026-05-21 01:30:03 UTC repair started (running) in 2s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 automerge-openclaw-openclaw-84736

2026-05-21 01:30:15 UTC validation plan (passed) in 14s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 pnpm check:changed; pnpm lint; pnpm check:test-types

2026-05-21 01:30:32 UTC Codex write preflight (passed) in 31s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 danger-full-access

2026-05-21 01:36:16 UTC Codex edit 1 fc0ac9879ed9 (complete) in 6m 14s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 exit 0

2026-05-21 01:39:53 UTC validation and review 1 466711089908 (complete) in 9m 52s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 already-current

2026-05-21 01:39:58 UTC repair completed 466711089908 (branch updated) in 9m 57s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 initial automerge rebase is delegated to Codex repair

2026-05-21 01:39:57 UTC review queued 466711089908 (after repair)

2026-05-21 01:47:29 UTC automerge wait 466711089908 (ready) in 17m 28s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 checks and exact-head review are ready

2026-05-21 01:55:15 UTC review passed 466711089908 (structured ClawSweeper verdict: pass (sha=4667110899081e66153f8ed5453c311efb4bd...)

2026-05-21 01:47:30 UTC repair finished 466711089908 (pushed) in 17m 29s Run: https://github.com/openclaw/clawsweeper/actions/runs/26199919943 repair_contributor_branch

2026-05-21 01:49:12 UTC review queued 466711089908 (queued)

2026-05-21 01:55:32 UTC merged 466711089908 (merged by ClawSweeper automerge)

…026.5.20) (#615) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.5.19` → `2026.5.20` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/567) for more information. --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.5.20`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#2026520) [Compare Source](openclaw/openclaw@v2026.5.19...v2026.5.20) ##### Changes - Exec approvals: remove the old `cat SKILL.md && printf ... && <skill-wrapper>` allowlist compatibility path so skill files must be loaded with the read tool and only the real skill executable is auto-allowed. - Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation. ([#84264](openclaw/openclaw#84264)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Discord/voice: include bounded `IDENTITY.md`, `USER.md`, and `SOUL.md` profile context in realtime voice session instructions by default, with `voice.realtime.bootstrapContextFiles: []` available to disable it. ([#84499](openclaw/openclaw#84499)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Dependencies: bump the bundled Codex harness to `@openai/codex` `0.132.0` and refresh the app-server model-list docs for the new catalog. - CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair. ([#80407](openclaw/openclaw#80407)) Thanks [@giodl73-repo](https://github.com/giodl73-repo). - Agents/config: allow `agents.list[].experimental.localModelLean` so lean local-model mode can be enabled for one configured agent instead of globally. - Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback. ([#84005](openclaw/openclaw#84005)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Providers/OpenRouter: honor provider-level `params.provider` routing policy for OpenRouter requests, with model and agent params overriding the defaults. Thanks [@amknight](https://github.com/amknight). ##### Fixes - CLI/tasks: include stale-running task maintenance decisions in `openclaw tasks maintenance --json` so retained and reconcile candidates explain backing-session, cron, CLI, and wedged-subagent state. ([#84691](openclaw/openclaw#84691)) Thanks [@efpiva](https://github.com/efpiva). - Codex app-server: keep system-prompt reports working when bootstrap hooks provide workspace files with only a path and content, so hook-supplied SOUL/IDENTITY/TOOLS/USER context still reports injected characters correctly. ([#84736](openclaw/openclaw#84736)) Thanks [@JARVIS-Glasses](https://github.com/JARVIS-Glasses). - Providers/MiniMax music: stop advertising `durationSeconds` control and remove prompt-injected duration hints, so `music_generate` reports MiniMax duration as an unsupported override instead of suggesting MiniMax can enforce track length. Fixes [#84508](openclaw/openclaw#84508). Thanks [@neeravmakwana](https://github.com/neeravmakwana). - Doctor: warn when sandbox tool policy hides configured MCP server tools before provider requests. ([#84699](openclaw/openclaw#84699)) Thanks [@nxmxbbd](https://github.com/nxmxbbd). - WhatsApp: update Baileys to `7.0.0-rc12`. - Build: suppress per-locale `rolldown-plugin-dts:fake-js` CommonJS dts warnings emitted while bundling the intentionally-inlined `zod/v4/locales/*.d.cts` files, so `pnpm build` output stays readable after the 0.25.1 plugin bump. Thanks [@romneyda](https://github.com/romneyda). - CLI/nodes: route lazy plugin-registration logs to stderr for JSON-mode `openclaw nodes` commands so stdout stays parseable. ([#84684](openclaw/openclaw#84684)) Thanks [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Approvals: route manual `/approve` decisions through the trusted approval runtime so active exec and plugin approvals no longer look unknown or expired. - Mac app: update the About settings copyright year to 2026. ([#84385](openclaw/openclaw#84385)) Thanks [@pejmanjohn](https://github.com/pejmanjohn). - Dependencies: update `@openclaw/fs-safe` to `0.2.7` so OpenClaw's default Python-helper-off policy keeps best-effort Node write fallbacks for private stores, secret writes, run logs, and media attachments on Linux/macOS. - Infra/secrets: restore the fail-closed contract for `tryReadSecretFileSync` so credential loaders that pass `rejectSymlink: true` (Telegram, LINE, Zalo, IRC, Nextcloud Talk tokens) refuse symlinked credential files instead of silently accepting them, and the infra-state CI shard's secret-file symlink test passes again. Thanks [@romneyda](https://github.com/romneyda). - Browser: honor the configured image sanitization limit for screenshots and labeled snapshots so browser-captured images follow the same resize policy as other image results. ([#84595](openclaw/openclaw#84595)) - Doctor: remove unrecognized `models.providers.*.models[*].compat.thinkingFormat` values during `doctor --fix` so stale provider model config can validate after upgrade. Fixes [#77803](openclaw/openclaw#77803). - Doctor: warn when `openclaw.json` stores plaintext secret-bearing config fields, including model provider API keys and sensitive provider headers. ([#84718](openclaw/openclaw#84718)) Thanks [@lukaIvanic](https://github.com/lukaIvanic). - Status: show the configured default, session-selected model, reason, clear hint, and docs link when a session remains pinned to a model that differs from `agents.defaults.model.primary`. - WebChat: clear stale typing indicators when session change events mark the active chat run complete. - Mac app: keep local packaging signed with a stable app identity for permission testing and fix Control UI production builds under current Vite/Highlight.js exports. - macOS app: update the embedded Peekaboo bridge to 3.2.1 so OpenClaw-hosted UI automation works with current Peekaboo CLI capture flows. - Cron: deliver preferred final assistant output for successful scheduled runs when trailing plain tool warnings remain in diagnostics instead of marking the run failed. - fix(mattermost): fail closed on missing channel type \[AI]. ([#84091](openclaw/openclaw#84091)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Recheck rebuilt system.run argv \[AI]. ([#84090](openclaw/openclaw#84090)) Thanks [@pgondhi987](https://github.com/pgondhi987). - CLI: keep the private QA subcommand out of exported command descriptors unless `OPENCLAW_ENABLE_PRIVATE_QA_CLI=1`, so root help and subcommand markers match runtime registration. ([#84519](openclaw/openclaw#84519)) - CLI/cron: bound `openclaw cron show` job lookup pagination so non-advancing or unbounded `cron.list` responses fail instead of hanging the command. Fixes [#83856](openclaw/openclaw#83856). ([#83989](openclaw/openclaw#83989)) - Agents/messages: stop message-tool-only turns after a successful source-channel `message` send while keeping transcript mirrors under the session write lock. ([#84289](openclaw/openclaw#84289)) - Agents: filter silent heartbeat response-tool transcript artifacts out of embedded context snapshots so later user turns are not polluted by heartbeat no-op messages. ([#83477](openclaw/openclaw#83477)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Agents/OpenAI: log repeated strict tool-schema downgrade diagnostics once per provider/model/tool signature, reducing duplicate debug noise while preserving `strict=false` fallback behavior. Fixes [#82930](openclaw/openclaw#82930). ([#82933](openclaw/openclaw#82933)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/code mode: spell out the `exec` tool's JavaScript/TypeScript, no Node module, and catalog-bridge constraints in model-visible schema text so agents can use enabled tools without trial-and-error. ([#84269](openclaw/openclaw#84269)) Thanks [@Kaspre](https://github.com/Kaspre). - Codex: give `image_generate` dynamic-tool calls a 120s default watchdog when no per-call or configured image timeout is set, so image generation no longer falls back to the generic 30s bridge timeout. ([#84254](openclaw/openclaw#84254)) Thanks [@moritzmmayerhofer](https://github.com/moritzmmayerhofer). - Codex: avoid duplicate dynamic tool terminal diagnostics while large diagnostic backlogs drain without blocking tool responses. ([#82937](openclaw/openclaw#82937)) Thanks [@galiniliev](https://github.com/galiniliev). - CLI/message: include a stable top-level `messageId` in `openclaw message --json` output when channel sends return one. ([#84191](openclaw/openclaw#84191)) Thanks [@100menotu001](https://github.com/100menotu001). - Cron: preserve legacy top-level array `jobs.json` stores when loading or adding scheduled jobs so old cron jobs are no longer treated as an empty store during upgrade. Fixes [#60799](openclaw/openclaw#60799). ([#84433](openclaw/openclaw#84433)) Thanks [@IWhatsskill](https://github.com/IWhatsskill). - Gateway/agents: use an agent's `identity.name` in Gateway agent summaries when `agents.list[].name` is unset, so configured agent labels remain visible in clients. ([#84355](openclaw/openclaw#84355); refs [#57835](openclaw/openclaw#57835)) Thanks [@luoyanglang](https://github.com/luoyanglang). - Channels/replies: keep normal `/verbose` failed-tool progress compact in message-tool replies and prevent late text-only tool output from appearing after the final answer. ([#84303](openclaw/openclaw#84303)) Thanks [@VACInc](https://github.com/VACInc). - Plugins/hooks: apply a default 30-second timeout to `before_compaction` and `after_compaction` hooks so a hung plugin handler no longer blocks compaction completion. ([#84153](openclaw/openclaw#84153)) - Discord: preserve disabled presentation buttons when adapting and rendering Discord message controls. ([#84188](openclaw/openclaw#84188)) Thanks [@100menotu001](https://github.com/100menotu001). - Twitch: add a test-only client-manager registry reset helper so non-isolated Twitch tests can clear cached managers between cases. Fixes [#83887](openclaw/openclaw#83887). ([#84244](openclaw/openclaw#84244)) Thanks [@hclsys](https://github.com/hclsys). - Cron: run main-session scheduled work on a cron-owned wake lane while preserving reply delivery context, so background cron turns no longer block human main-session chat. Fixes [#82766](openclaw/openclaw#82766). ([#82767](openclaw/openclaw#82767)) Thanks [@galiniliev](https://github.com/galiniliev). - Cron: use structured embedded-run denial metadata for isolated scheduled tasks so blocked exec requests fail the job without treating ordinary assistant prose as a denial. ([#84067](openclaw/openclaw#84067)) Thanks [@abnershang](https://github.com/abnershang). - Cron: keep recovered tool warnings diagnostic for successful scheduled runs so final cron output is delivered instead of being replaced by a post-processing warning. ([#84045](openclaw/openclaw#84045)) Thanks [@abnershang](https://github.com/abnershang). - Plugins/perf: thread explicit plugin discovery results through `loadBundledCapabilityRuntimeRegistry`, `resolveBundledPluginSources`, and `listChannelCatalogEntries` so callers that already hold a discovery result skip redundant filesystem walks. Thanks [@SebTardif](https://github.com/SebTardif). - harden update restart script creation \[AI]. ([#84088](openclaw/openclaw#84088)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Docker: keep the bundled Codex plugin in official release image keep lists so the default OpenAI agent harness remains available after Docker pruning. Fixes [#83613](openclaw/openclaw#83613). ([#83626](openclaw/openclaw#83626)) Thanks [@YuanHanzhong](https://github.com/YuanHanzhong). - CLI/channels: preserve the first line of `openclaw channels logs` output when the rolling tail window starts exactly on a line boundary, mirroring the already-fixed `readLogSlice` behavior in `src/logging/log-tail.ts`. - Control UI: treat terminal session status as authoritative over stale active-run flags so completed terminal runs stop showing abort/live UI. ([#84057](openclaw/openclaw#84057)) - CLI: preserve embedded equals signs in inline root option values instead of truncating after the second separator. ([#83995](openclaw/openclaw#83995)) Thanks [@ThiagoCAltoe](https://github.com/ThiagoCAltoe). - Matrix/config: accept `messages.queue.byChannel.matrix` queue overrides and keep queue provider schema/type keys aligned for Matrix, Google Chat, and Mattermost. Thanks [@bdjben](https://github.com/bdjben). - CLI: format `openclaw acp client` failures through the shared error formatter so object-shaped errors stay readable instead of printing `[object Object]`. Fixes [#83904](openclaw/openclaw#83904). ([#84080](openclaw/openclaw#84080)) - Providers/Ollama: default unknown-capabilities models to tool-capable so discovered native Ollama models can use tools when `/api/show` omits capabilities. ([#84055](openclaw/openclaw#84055)) Thanks [@dutifulbob](https://github.com/dutifulbob). - Installer/Windows: launch `install.ps1` onboarding as an attached child process so fresh native Windows installs do not freeze visibly at `Starting setup...` or corrupt the wizard's terminal rendering. - CLI/update: keep restart health checks working across one-version CLI/Gateway protocol skew and use the managed Gateway service Node for all follow-up commands even when the package root is unchanged, so `openclaw update` no longer silently switches the gateway to a different Node binary when multiple Node installations are present. Thanks [@amknight](https://github.com/amknight). - CLI/gateway: include the running Gateway version in `gateway status` JSON output, preserving existing server metadata while falling back to status RPC data for read probes. Fixes [#56222](openclaw/openclaw#56222). Thanks [@galiniliev](https://github.com/galiniliev). - Memory/search: close local embedding providers when active-memory searches time out so pending local model loads and embedding contexts are aborted and released. ([#83858](openclaw/openclaw#83858)) Thanks [@brokemac79](https://github.com/brokemac79). - CLI/nodes: request pending node surface approval scopes before `openclaw nodes approve` so exec-capable node approval can use admin-scoped Gateway credentials instead of failing with `missing scope: operator.admin`. ([#84392](openclaw/openclaw#84392)) Thanks [@joshavant](https://github.com/joshavant). - Gateway: reject slow node event sends before outbound buffers grow unbounded and log the rejected payload diagnostic. ([#84387](openclaw/openclaw#84387)) Thanks [@samzong](https://github.com/samzong). - Agents: include bounded trajectory queued-writer diagnostics in `pi-trajectory-flush` timeout warnings so flush stalls show pending writes, queued bytes, and append state. Fixes [#82961](openclaw/openclaw#82961). ([#82962](openclaw/openclaw#82962)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/subagents: recover stale completion announces by retrying unsupported transcript-wait wakes without transcript waiting and forcing a message-tool handoff when the requester run is already stale. Fixes [#83699](openclaw/openclaw#83699). ([#83700](openclaw/openclaw#83700)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/subagents: constrain wildcard subagent target allowlists to configured agents while preserving explicitly listed compatibility targets. Fixes [#84040](openclaw/openclaw#84040). ([#84357](openclaw/openclaw#84357)) Thanks [@joshavant](https://github.com/joshavant). - Providers/Anthropic: route Anthropic model refs selected with Claude CLI auth through the Claude CLI runtime so shorthand refs such as `anthropic/opus-4.7` no longer fall back to embedded Anthropic billing. Fixes [#84222](openclaw/openclaw#84222). ([#84374](openclaw/openclaw#84374)) Thanks [@joshavant](https://github.com/joshavant). - Agents: honor explicit `models.providers.<id>.timeoutSeconds` values above the default idle watchdog for cloud and self-hosted providers, so long first-token waits no longer fall back at \~120s when the provider timeout is higher. ([#83979](openclaw/openclaw#83979)) Thanks [@yujiawei](https://github.com/yujiawei). - Agents/Codex: keep encrypted Responses reasoning replay provenance-bound so stale mirrored Codex transcripts drop invalid encrypted content before request assembly while preserving matching same-session replay. Fixes [#83836](openclaw/openclaw#83836). ([#84367](openclaw/openclaw#84367)) Thanks [@joshavant](https://github.com/joshavant). - Agents/subagents: skip stale embedded-run wake probes for dormant completion requesters, so late subagent completions go straight to requester-agent/direct handoff instead of producing `reason=no_active_run` queue noise. ([#82964](openclaw/openclaw#82964)) Thanks [@galiniliev](https://github.com/galiniliev). - CLI: retry config snapshot reads after a transient failure so one rejected read no longer poisons later commands in the same process. ([#83931](openclaw/openclaw#83931)) Thanks [@honor2030](https://github.com/honor2030). - Media: decode URL path basenames before using them as remote media fallback filenames, so files like `My%20Report.pdf` are surfaced as `My Report.pdf`. Fixes [#84050](openclaw/openclaw#84050). ([#84052](openclaw/openclaw#84052)) Thanks [@jbetala7](https://github.com/jbetala7). - WhatsApp: clarify inbound group diagnostics so observed but unregistered groups point to `channels.whatsapp.groups` without changing routing or sender authorization. ([#83846](openclaw/openclaw#83846)) Thanks [@neeravmakwana](https://github.com/neeravmakwana). - WhatsApp: drain pending outbound deliveries on a 30s periodic timer in addition to the reconnect handler, so messages enqueued while the provider is already connected no longer wait for the next reconnect to send. ([#79083](openclaw/openclaw#79083)) Thanks [@Oviemudiaga](https://github.com/Oviemudiaga). - CLI/TUI: include gateway plugin slash commands in TUI autocomplete, so connected sessions can suggest plugin-owned commands exposed by the running Gateway. ([#83640](openclaw/openclaw#83640)) Thanks [@se7en-agent](https://github.com/se7en-agent). - Gateway/mobile: restore QR setup-code handoff of bounded operator tokens for iOS and Android onboarding while keeping admin and pairing scopes out of bootstrap. ([#83684](openclaw/openclaw#83684)) Thanks [@ngutman](https://github.com/ngutman). - iOS: repair Release archive compilation for the TestFlight build. ([#84255](openclaw/openclaw#84255)) Thanks [@ngutman](https://github.com/ngutman). - Agents/compaction: bound plugin-owned CLI transcript compaction with the host safety timeout so a hung context engine can no longer stall post-turn cleanup. ([#84083](openclaw/openclaw#84083)) Thanks [@100yenadmin](https://github.com/100yenadmin). - Control UI/usage: truncate long context skill, tool, and file names in the usage panel while keeping the full name available on hover. ([#42197](openclaw/openclaw#42197)) Thanks [@Rain120](https://github.com/Rain120). - Codex: respect explicit `models auth order set` and `config.auth.order` precedence over stale `lastGood` in `/codex account`, and show `no working credential` when every explicit-order profile is ineligible instead of marking a lower-ranked profile as active. Fixes [#84386](openclaw/openclaw#84386). ([#84412](openclaw/openclaw#84412)) Thanks [@openperf](https://github.com/openperf). - Agents: honor `messages.suppressToolErrors` for mutating tool failures so configured chat surfaces do not receive separate warning payloads. ([#81561](openclaw/openclaw#81561)) Thanks [@moeedahmed](https://github.com/moeedahmed). - Agents/fallback: surface billing guidance for mixed rate-limit plus billing fallback exhaustion instead of generic failure copy. Fixes [#79396](openclaw/openclaw#79396). ([#79489](openclaw/openclaw#79489)) Thanks [@aayushprsingh](https://github.com/aayushprsingh). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/615

…4736) Summary: - The PR updates Codex app-server system-prompt reporting to tolerate bootstrap files with `path` and `content` but no `name`, adds a focused regression test, and records the fix in the changelog. - Reproducibility: yes. The PR body supplies current-main before output with the `undefined.trim()` stack, and source inspection confirms hook-supplied path-only bootstrap files can reach the Codex report helper. Automerge notes: - PR branch already contained follow-up commit before automerge: fix(codex): guard path-only bootstrap files [AI-assisted] Validation: - ClawSweeper review passed for head 4667110. - Required merge gates passed before the squash merge. Prepared head SHA: 4667110 Review: openclaw#84736 (comment) Co-authored-by: JARVIS-Glasses <whatsskilll@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com> Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com> Approved-by: takhoffman Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>

openclaw-barnacle Bot added extensions: codex size: S triage: needs-real-behavior-proof Candidate: external PR needs after-fix proof from a real setup. labels May 21, 2026

openclaw-barnacle Bot added proof: supplied External PR includes structured after-fix real behavior proof. and removed triage: needs-real-behavior-proof Candidate: external PR needs after-fix proof from a real setup. labels May 21, 2026

IWhatsskill marked this pull request as ready for review May 21, 2026 00:54

clawsweeper Bot added the clawsweeper:automerge Maintainer opted this PR into bounded ClawSweeper-reviewed automerge label May 21, 2026

IWhatsskill and others added 2 commits May 21, 2026 01:31

fix(codex): guard path-only bootstrap files

fc0ac98

fix(codex): guard path-only bootstrap files [AI-assisted]

4667110

clawsweeper Bot force-pushed the fix/codex-context-file-name-guard branch from 28c1f33 to 4667110 Compare May 21, 2026 01:39

clawsweeper Bot added status: 🚀 automerge armed This PR is in ClawSweeper's automerge lane. and removed status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. labels May 21, 2026

clawsweeper Bot merged commit c4f14a3 into openclaw:main May 21, 2026
102 of 104 checks passed

Haderach-Ram mentioned this pull request May 21, 2026

Ecosystem Digest — 2026-05-21 Haderach-Ram/openclaw-radar#14

Open

github-actions Bot mentioned this pull request May 21, 2026

📡 Upstream Digest — 2026-05-21 02:35 UTC curtismercier/openclaw-mods#905

Open

clawsweeper Bot mentioned this pull request May 21, 2026

[Bug]: Session transcript mirroring writes header cwd from process.cwd(), allowing cross-agent workspace contamination #49523

Open

This was referenced May 22, 2026

fix(context): fall back to path basename for unnamed bootstrap files #48021

Closed

Context breakdown can label virtual bootstrap files as 'undefined' instead of falling back to path/basename #47941

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(codex): guard path-only bootstrap files [AI-assisted]#84736

fix(codex): guard path-only bootstrap files [AI-assisted]#84736
clawsweeper[bot] merged 2 commits into
openclaw:mainfrom
IWhatsskill:fix/codex-context-file-name-guard

IWhatsskill commented May 21, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented May 21, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented May 21, 2026 •

edited

Loading

Uh oh!

IWhatsskill commented May 21, 2026

Uh oh!

clawsweeper Bot commented May 21, 2026 •

edited

Loading

Uh oh!

IWhatsskill commented May 21, 2026

Uh oh!

clawsweeper Bot commented May 21, 2026

Uh oh!

Takhoffman commented May 21, 2026

Uh oh!

clawsweeper Bot commented May 21, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

IWhatsskill commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Why

What changed

Real behavior proof

Additional validation

Notes

Uh oh!

clawsweeper Bot commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

clawsweeper Bot commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hatch command

Uh oh!

IWhatsskill commented May 21, 2026

Uh oh!

clawsweeper Bot commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

IWhatsskill commented May 21, 2026

Uh oh!

clawsweeper Bot commented May 21, 2026

Uh oh!

Takhoffman commented May 21, 2026

Uh oh!

clawsweeper Bot commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

IWhatsskill commented May 21, 2026 •

edited

Loading

clawsweeper Bot commented May 21, 2026 •

edited

Loading

clawsweeper Bot commented May 21, 2026 •

edited

Loading

clawsweeper Bot commented May 21, 2026 •

edited

Loading

clawsweeper Bot commented May 21, 2026 •

edited

Loading