fix: bound native hook relay lifetime by joshavant · Pull Request #91550 · openclaw/openclaw

joshavant · 2026-06-09T01:45:33Z

Summary

Add an OpenClaw-owned native hook relay deadline that starts before stdin is read, applies through direct bridge and gateway fallback, and aborts/destroys the held input path on timeout.
Preserve existing provider-compatible timeout fallback behavior: PreToolUse noop/fail-closed, PermissionRequest deny, and observational noop for non-blocking events.
Keep Codex-generated relay command timeouts below Codex's parent hook timeout so the relay has time to emit its fail-closed/noop response before the parent can kill it.

Verification

.agents/skills/autoreview/scripts/autoreview --mode local after final changes: clean, no accepted/actionable findings.
node scripts/run-vitest.mjs src/cli/native-hook-relay-cli.test.ts src/agents/harness/native-hook-relay.test.ts extensions/codex/src/app-server/native-hook-relay.test.ts extensions/codex/src/app-server/run-attempt.native-hook-relay.test.ts passed: 122 tests.
pnpm exec oxfmt --check src/cli/native-hook-relay-cli.ts src/cli/native-hook-relay-cli.test.ts src/agents/harness/native-hook-relay.ts src/agents/harness/native-hook-relay.test.ts extensions/codex/src/app-server/native-hook-relay.ts extensions/codex/src/app-server/native-hook-relay.test.ts passed.
node scripts/run-oxlint.mjs src/cli/native-hook-relay-cli.ts src/cli/native-hook-relay-cli.test.ts src/agents/harness/native-hook-relay.ts src/agents/harness/native-hook-relay.test.ts extensions/codex/src/app-server/native-hook-relay.ts extensions/codex/src/app-server/native-hook-relay.test.ts passed.
pnpm tsgo:core, pnpm tsgo:core:test, pnpm tsgo:extensions, pnpm tsgo:extensions:test passed.
pnpm build passed.
Local child-process regression against freshly built openclaw.mjs: held-open stdin exited code 0, was not killed, and emitted native hook relay timed out after 1000ms.
AWS Crabbox regression proof: provider aws, run run_0d76a211a57b, lease cbx_9d9647b4079b, slug brisk-crayfish; held-open stdin exited code 0 with the timeout line.

pnpm check:changed could not run because the local Crabbox binary is 0.20.0 and current Blacksmith Testbox delegation requires >=0.22.0; the matching direct checks above cover the changed core and Codex extension surfaces.

Real behavior proof

Behavior addressed: Native hook relay CLI processes can no longer wait indefinitely for EOF on stdin; timeout paths return the provider-compatible unavailable/noop/fail-closed response instead of leaking openclaw-hooks children.

Real environment tested: AWS Crabbox Linux, provider aws, run run_0d76a211a57b, lease cbx_9d9647b4079b, slug brisk-crayfish, plus local built openclaw.mjs child-process repro.

Exact steps or command run after this patch: Spawned openclaw hooks relay --provider codex --event pre_tool_use --pre-tool-use-unavailable noop --timeout 1000, wrote valid Codex PreToolUse JSON to stdin, intentionally kept stdin open, and observed whether the child exited before the 60s watchdog.

Evidence after fix: On AWS Crabbox, the held-open stdin child exited code 0 without watchdog kill and stderr included native hook relay timed out: native hook relay timed out after 1000ms.

Observed result after fix: The held-open relay process terminated instead of accumulating; the closed-stdin control also exited normally.

What was not tested: A multi-hour authenticated Codex app-server heartbeat scenario with real provider credentials was not run; the proved live path covers the root leak class through the actual relay CLI process.

clawsweeper · 2026-06-09T01:47:29Z

Codex review: needs maintainer review before merge. Reviewed June 8, 2026, 9:55 PM ET / 01:55 UTC.

Summary
The branch adds a native hook relay deadline across stdin reading, direct bridge invocation, and gateway fallback, plus generated Codex command timeouts and regression coverage.

PR surface: Source +215, Tests +136. Total +351 across 6 files.

Reproducibility: yes. Current main and v2026.6.1 read native hook stdin without a deadline before bridge/gateway timeouts apply, and the PR body includes a held-open stdin repro with local and AWS Crabbox after-fix proof; I did not rerun it in this read-only review.

Review metrics: 1 noteworthy metric.

Plugin SDK API surface: 1 optional method parameter added. NativeHookRelayRegistrationHandle is exported through openclaw/plugin-sdk/agent-harness-runtime, so maintainers should notice the compatibility surface even though existing one-argument implementations remain valid.

Merge readiness
Overall: 🦞 diamond lobster
Proof: 🦞 diamond lobster
Patch quality: 🦞 diamond lobster
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Next step before merge

[P2] The protected maintainer label and absence of actionable findings make this a maintainer-handled review/landing item, not an automated repair candidate.

Security
Cleared: No concrete security or supply-chain regression was found; the diff changes runtime timeout handling and tests without adding dependencies, scripts, permissions, or credential exposure.

Review details

Best possible solution:

Land the bounded relay deadline after maintainer/CI handling, keeping the provider-compatible timeout outputs and Codex parent-timeout margin intact.

Do we have a high-confidence way to reproduce the issue?

Yes. Current main and v2026.6.1 read native hook stdin without a deadline before bridge/gateway timeouts apply, and the PR body includes a held-open stdin repro with local and AWS Crabbox after-fix proof; I did not rerun it in this read-only review.

Is this the best way to solve the issue?

Yes. The best owner boundary is the OpenClaw relay entrypoint, with the child timeout expiring before Codex's parent hook timeout so OpenClaw can still emit fail-closed/noop output instead of being killed first.

AGENTS.md: found and applied where relevant.

Codex review notes: model gpt-5.5, reasoning high; reviewed against 79c6136a9e17.

Label changes

Label changes:

add P1: The PR fixes a user-reported native hook relay leak that can accumulate hundreds of MB per child process and take down unattended gateway hosts.
add proof: sufficient: Contributor real behavior proof is sufficient. The PR body includes after-fix local child-process output and AWS Crabbox live proof for the held-open stdin leak class, with the expected timeout line and exit code 0.
add rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR body includes after-fix local child-process output and AWS Crabbox live proof for the held-open stdin leak class, with the expected timeout line and exit code 0.

Label justifications:

P1: The PR fixes a user-reported native hook relay leak that can accumulate hundreds of MB per child process and take down unattended gateway hosts.
rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR body includes after-fix local child-process output and AWS Crabbox live proof for the held-open stdin leak class, with the expected timeout line and exit code 0.
proof: sufficient: Contributor real behavior proof is sufficient. The PR body includes after-fix local child-process output and AWS Crabbox live proof for the held-open stdin leak class, with the expected timeout line and exit code 0.

Evidence reviewed

PR surface:

Source +215, Tests +136. Total +351 across 6 files.

View PR surface stats

Area	Files	Added	Removed	Net
Source	3	280	65	+215
Tests	3	148	12	+136
Docs	0	0	0	0
Config	0	0	0	0
Generated	0	0	0	0
Other	0	0	0	0
Total	6	428	77	+351

What I checked:

Repository policy applied: Read root AGENTS.md plus scoped src/agents/AGENTS.md and extensions/AGENTS.md; the review applied the agent/runtime, plugin boundary, Codex dependency, and protected-label guidance. Maintainer notes directory only contained telegram notes, which did not match this PR surface. (AGENTS.md:1, 79c6136a9e17)
Current/shipped leak path: v2026.6.1 reads stdin with readStreamText before any relay timeout is applied, then passes timeoutMs only to bridge/gateway calls; current main has the same structure. (src/cli/native-hook-relay-cli.ts:54, 2e08f0f4221f)
PR deadline implementation: The PR arms a deadline before reading stdin, uses remaining time for direct bridge and gateway fallback, passes an AbortSignal to callGateway, and emits provider-compatible timeout responses. (src/cli/native-hook-relay-cli.ts:70, 68dabb735245)
PR stdin and gateway regression coverage: New tests cover held-open stdin for PreToolUse, PermissionRequest, and observational events, verify stdin destruction, and cover a hung gateway fallback under the same deadline. (src/cli/native-hook-relay-cli.test.ts:269, 68dabb735245)
Codex parent timeout contract checked: Codex hook runner writes JSON to the child stdin pipe, then waits with timeout_sec and kill_on_drop, so OpenClaw must emit fallback output before Codex's parent timeout kills the hook process. (../codex/codex-rs/hooks/src/engine/command_runner.rs:56, 0beb5c7f32cf)
Codex config timeout contract checked: Codex normalizes hook command timeout_sec to at least one second and uses the trusted command hash from the normalized command, timeout, and status message; the PR updates command timeout and trusted hash input together. (../codex/codex-rs/hooks/src/engine/discovery.rs:482, 0beb5c7f32cf)

Likely related people:

Vincent Koc: The shipped v2026.6.1 baseline commit contains the native hook relay files and current available history does not expose a finer-grained human feature commit for this path. (role: release baseline author / recent area contributor; confidence: low; commits: 2e08f0f4221f; files: src/cli/native-hook-relay-cli.ts, src/agents/harness/native-hook-relay.ts, extensions/codex/src/app-server/native-hook-relay.ts)

What the crustacean ranks mean

🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works

ClawSweeper keeps one durable marker-backed review comment per issue or PR.
Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
Maintainers can also comment @clawsweeper review to request a fresh review only.
Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

…26.6.6) (#1040) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.6.5` → `2026.6.6` | --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.6.6`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#202666) [Compare Source](openclaw/openclaw@v2026.6.5...v2026.6.6) ##### Highlights - Security boundaries are substantially tighter across transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender checks, deleted-agent ACP bypasses, loopback tools, Discord moderation, and Teams group actions; exec approvals now fail closed on timeout. ([#91529](openclaw/openclaw#91529), [#91618](openclaw/openclaw#91618), [#91615](openclaw/openclaw#91615), [#91619](openclaw/openclaw#91619), [#91741](openclaw/openclaw#91741), [#91745](openclaw/openclaw#91745), [#91746](openclaw/openclaw#91746), [#91748](openclaw/openclaw#91748), [#91749](openclaw/openclaw#91749), [#91750](openclaw/openclaw#91750), [#91751](openclaw/openclaw#91751), [#91752](openclaw/openclaw#91752), [#91763](openclaw/openclaw#91763), [#89938](openclaw/openclaw#89938)) Thanks [@joshavant](https://github.com/joshavant), [@pgondhi987](https://github.com/pgondhi987), [@mmaps](https://github.com/mmaps), [@eleqtrizit](https://github.com/eleqtrizit), [@shakkernerd](https://github.com/shakkernerd), and [@drobison00](https://github.com/drobison00). - Telegram delivery is safer and more coherent: account-scoped topics route to the right agent, streamed text survives tool calls, `/compact` works on generic ingress, callback handling uses concrete APIs, draft chunking is shared, durable dispatch dedupe moved into the SDK, and unauthorized DM text stays out of cache and prompt context. ([#91189](openclaw/openclaw#91189), [#88682](openclaw/openclaw#88682), [#89588](openclaw/openclaw#89588), [#90212](openclaw/openclaw#90212), [#91876](openclaw/openclaw#91876), [#91874](openclaw/openclaw#91874), [#91904](openclaw/openclaw#91904), [#91478](openclaw/openclaw#91478), [#91915](openclaw/openclaw#91915)) Thanks [@codysai001](https://github.com/codysai001), [@alexzhu0](https://github.com/alexzhu0), [@joelnishanth](https://github.com/joelnishanth), [@snowzlm](https://github.com/snowzlm), [@obviyus](https://github.com/obviyus), and [@sallyom](https://github.com/sallyom). - iMessage recovery and delivery now cover always-on inbound restart, durable echo markers, block streaming, idle approval discovery, hardened outbound transport, and actionable inbound startup diagnostics. ([#91335](openclaw/openclaw#91335), [#91449](openclaw/openclaw#91449), [#88969](openclaw/openclaw#88969), [#88530](openclaw/openclaw#88530), [#91783](openclaw/openclaw#91783), [#91785](openclaw/openclaw#91785)) Thanks [@omarshahine](https://github.com/omarshahine), [@jmissig](https://github.com/jmissig), and [@colmbrogan](https://github.com/colmbrogan). - Browser and MCP connectivity gained existing-session CDP support, discovered WebSocket validation, default-profile `cdpUrl` handling, safer browser-output boundaries, Streamable HTTP loopback transport, corrected OAuth/SSE authorization handling, and broader schema compatibility. ([#91422](openclaw/openclaw#91422), [#89851](openclaw/openclaw#89851), [#91736](openclaw/openclaw#91736), [#91747](openclaw/openclaw#91747), [#91451](openclaw/openclaw#91451), [#80143](openclaw/openclaw#80143)) Thanks [@pgondhi987](https://github.com/pgondhi987), [@anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia), [@lifuyue](https://github.com/lifuyue), [@eleqtrizit](https://github.com/eleqtrizit), [@LiuwqGit](https://github.com/LiuwqGit), and [@HemantSudarshan](https://github.com/HemantSudarshan). - Control UI startup and first-reply latency are lower through cached model metadata, removal of the startup catalog wait, lazy slash-command loading, and first-event tracing with slow-reply diagnostics. ([#91531](openclaw/openclaw#91531), [#91538](openclaw/openclaw#91538), [#91568](openclaw/openclaw#91568), [#91583](openclaw/openclaw#91583), [#91598](openclaw/openclaw#91598)) - Provider support expands with OpenRouter OAuth onboarding and Claude Fable 5 adaptive thinking, while Codex sessions keep correct compaction ownership, local models skip guardian review, dynamic tool progress normalizes cleanly, and Gemma 4 reasoning replay is preserved. ([#91830](openclaw/openclaw#91830), [#91882](openclaw/openclaw#91882), [#91590](openclaw/openclaw#91590), [#88630](openclaw/openclaw#88630), [#88768](openclaw/openclaw#88768), [#91696](openclaw/openclaw#91696)) Thanks [@Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@joshavant](https://github.com/joshavant), [@bdjben](https://github.com/bdjben), and [@Coder-Wangyankun](https://github.com/Coder-Wangyankun). ##### Changes - CLI progress: emit Claude CLI commentary progress events and bridge inter-tool commentary into channel progress without exposing internal protocol scaffolding. ([#89834](openclaw/openclaw#89834), [#90883](openclaw/openclaw#90883)) Thanks [@anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia). - Observability: allow trusted diagnostics channels to capture tool input/output content, add first-assistant-event traces, and warn on slow initial replies. ([#91256](openclaw/openclaw#91256), [#91568](openclaw/openclaw#91568), [#91583](openclaw/openclaw#91583)) Thanks [@amknight](https://github.com/amknight). - Plugins/ClawHub: dogfood reusable package publishing, let dry runs skip publish approval, allow declared installed trusted hooks, report managed plugin version drift, and warn instead of failing on retired Skill Workshop configuration. ([#91574](openclaw/openclaw#91574), [#91591](openclaw/openclaw#91591), [#90004](openclaw/openclaw#90004), [#90927](openclaw/openclaw#90927), [#90838](openclaw/openclaw#90838)) Thanks [@Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@brokemac79](https://github.com/brokemac79), and [@lonexreb](https://github.com/lonexreb). - Memory/providers: move the local llama.cpp runtime into its provider plugin, batch embeddings across files, persist the agent model catalog cache, and keep QMD JSON search one-shot while filtering stale REM recall previews. ([#91324](openclaw/openclaw#91324), [#89138](openclaw/openclaw#89138), [#90457](openclaw/openclaw#90457), [#91837](openclaw/openclaw#91837), [#91851](openclaw/openclaw#91851)) Thanks [@osolmaz](https://github.com/osolmaz), [@mushuiyu886](https://github.com/mushuiyu886), [@ai-hpc](https://github.com/ai-hpc), and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Channels/mobile: add the QQBot group mention toggle, improve iPad and iPhone control surfaces, and expose the active connection host in the TUI footer. ([#91423](openclaw/openclaw#91423), [#91557](openclaw/openclaw#91557), [#89909](openclaw/openclaw#89909)) Thanks [@cxyhhhhh](https://github.com/cxyhhhhh), [@Solvely-Colin](https://github.com/Solvely-Colin), and [@baskduf](https://github.com/baskduf). - Performance: prewarm TUI runtime plugins, deduplicate plugin auto-enable fanout, trim dense text-delta snapshots, and reuse prepared startup model metadata. ([#90782](openclaw/openclaw#90782), [#89978](openclaw/openclaw#89978), [#91580](openclaw/openclaw#91580), [#91531](openclaw/openclaw#91531)) Thanks [@RomneyDa](https://github.com/RomneyDa) and [@ai-hpc](https://github.com/ai-hpc). ##### Fixes - Agent/session recovery: drop stale approval follow-ups after session rebind, remove drained reply-queue items by identity, recover stale main and visible replies, preserve Codex context-engine compaction ownership, lower the default compaction timeout to 180 seconds while respecting explicit configuration, and keep provider-failure terminal lifecycle state correct. ([#85679](openclaw/openclaw#85679), [#91450](openclaw/openclaw#91450), [#91566](openclaw/openclaw#91566), [#91840](openclaw/openclaw#91840), [#91590](openclaw/openclaw#91590), [#91361](openclaw/openclaw#91361), [#91895](openclaw/openclaw#91895)) Thanks [@openperf](https://github.com/openperf), [@yetval](https://github.com/yetval), [@joshavant](https://github.com/joshavant), [@wangmiao0668000666](https://github.com/wangmiao0668000666), and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - User-visible content boundaries: suppress Codex/Harmony protocol artifacts, neutralize browser and LanceDB memory media directives, redact transcript images, and preserve native `/compact` replies through source suppression. ([#89151](openclaw/openclaw#89151), [#91422](openclaw/openclaw#91422), [#91425](openclaw/openclaw#91425), [#91529](openclaw/openclaw#91529), [#90212](openclaw/openclaw#90212)) Thanks [@joelnishanth](https://github.com/joelnishanth), [@pgondhi987](https://github.com/pgondhi987), [@joshavant](https://github.com/joshavant), and [@snowzlm](https://github.com/snowzlm). - Channel delivery: keep WhatsApp captured replies attached to the successor controller after restart, retry Feishu rate limits, preserve Mattermost thread replies, canonicalize LINE webhook paths, restore Discord reply hydration and runtime timeout exports, and show OpenAI Realtime WebRTC assistant transcripts. ([#85823](openclaw/openclaw#85823), [#89659](openclaw/openclaw#89659), [#91684](openclaw/openclaw#91684), [#91649](openclaw/openclaw#91649), [#90263](openclaw/openclaw#90263), [#91686](openclaw/openclaw#91686), [#90426](openclaw/openclaw#90426)) Thanks [@itsuzef](https://github.com/itsuzef), [@ladygege](https://github.com/ladygege), [@jacobtomlinson](https://github.com/jacobtomlinson), [@fuller-stack-dev](https://github.com/fuller-stack-dev), and [@shushushv](https://github.com/shushushv). - Cron: cancel active task runs cleanly, preserve terminal timeout/cancel state, and recover no-deliver tool warnings instead of silently losing the outcome. ([#90666](openclaw/openclaw#90666), [#90678](openclaw/openclaw#90678)) Thanks [@ai-hpc](https://github.com/ai-hpc). - Gateway/config/auth: share the approval runtime socket token, replace arrays explicitly in `config.patch`, skip the deleted-agent guard only for valid ACP harness sessions, surface headless LaunchAgent state, verify SQLite auth migration before cleanup, and arm QMD startup maintenance. ([#87105](openclaw/openclaw#87105), [#91551](openclaw/openclaw#91551), [#91219](openclaw/openclaw#91219), [#91614](openclaw/openclaw#91614), [#91740](openclaw/openclaw#91740), [#91978](openclaw/openclaw#91978)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev) and [@scotthuang](https://github.com/scotthuang). - Providers/Codex: clarify quota errors, restore the Codex synthetic usage line, canonicalize Codex protocol assets, require API-key auth for realtime voice, normalize ACP model refs, preserve Gemma 4 `reasoning_content`, and avoid guardian review for local models. ([#91390](openclaw/openclaw#91390), [#91709](openclaw/openclaw#91709), [#91507](openclaw/openclaw#91507), [#91567](openclaw/openclaw#91567), [#88630](openclaw/openclaw#88630), [#91696](openclaw/openclaw#91696)) Thanks [@hxy91819](https://github.com/hxy91819), [@brokemac79](https://github.com/brokemac79), [@RomneyDa](https://github.com/RomneyDa), [@joshavant](https://github.com/joshavant), and [@Coder-Wangyankun](https://github.com/Coder-Wangyankun). - Updates/builds: recover package Gateway restarts after refresh failure, expose plugin convergence repair, fall back to Corepack in PATH-less pnpm environments, seed the correct Docker store packages, and keep ClawHub dry-run and publish paths reusable. ([#91581](openclaw/openclaw#91581), [#91599](openclaw/openclaw#91599), [#91547](openclaw/openclaw#91547), [#91591](openclaw/openclaw#91591)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev), [@sallyom](https://github.com/sallyom), and [@Patrick-Erichsen](https://github.com/Patrick-Erichsen). - UI: require explicit user intent before opening chat sessions and drain restored chat queues after session switches. ([#91480](openclaw/openclaw#91480)) Thanks [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Android: avoid the `dataSync` foreground-service type for persistent nodes. ([#80082](openclaw/openclaw#80082)) Thanks [@davelutztx](https://github.com/davelutztx). - Native hooks: bound relay lifetimes so abandoned native hook connections cannot linger indefinitely. ([#91550](openclaw/openclaw#91550)) Thanks [@joshavant](https://github.com/joshavant). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1040

fix: bound native hook relay lifetime

68dabb7

openclaw-barnacle Bot added cli CLI command changes agents Agent runtime and tooling extensions: codex size: L maintainer Maintainer-authored PR labels Jun 9, 2026

joshavant merged commit 14b1ebd into main Jun 9, 2026
226 of 235 checks passed

joshavant deleted the fix/native-hook-relay-deadline branch June 9, 2026 02:07

This was referenced Jun 9, 2026

[Bug]: native hook relay CLI processes (openclaw-hooks) never exit and accumulate until host OOM #90993

Closed

fix(cli): bound native hook relay process lifetime (#90993) #91147

Closed

Haderach-Ram mentioned this pull request Jun 9, 2026

Ecosystem Digest — 2026-06-09 Haderach-Ram/openclaw-radar#33

Open

github-actions Bot mentioned this pull request Jun 9, 2026

📡 Upstream Digest — 2026-06-09 02:26 UTC curtismercier/openclaw-mods#1042

Open

github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jun 9, 2026

fix: bound native hook relay lifetime (openclaw#91550)

12d6f55

PashaGanson mentioned this pull request Jun 9, 2026

Codex PreToolUse native hook relay spawns CPU-bound openclaw-hooks processes and stalls gateway RPC #91009

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: bound native hook relay lifetime#91550

fix: bound native hook relay lifetime#91550
joshavant merged 1 commit into
mainfrom
fix/native-hook-relay-deadline

joshavant commented Jun 9, 2026

Uh oh!

clawsweeper Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

joshavant commented Jun 9, 2026

Summary

Verification

Real behavior proof

Uh oh!

clawsweeper Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

clawsweeper Bot commented Jun 9, 2026 •

edited

Loading