Skip to content

fix(imessage): surface inbound startup diagnostics#91785

Merged
omarshahine merged 2 commits into
mainfrom
fix/imessage-inbound-startup-diagnostics
Jun 10, 2026
Merged

fix(imessage): surface inbound startup diagnostics#91785
omarshahine merged 2 commits into
mainfrom
fix/imessage-inbound-startup-diagnostics

Conversation

@omarshahine

@omarshahine omarshahine commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add default-level, privacy-safe diagnostics when inbound rows are dropped for echo/reflection reasons (echo, self-chat echo, agent echo in self-chat, reflected assistant content) and for same-account from me rows. The log includes account, reason, numeric chat id when present, row/message id, GUID presence, group flag, and timestamp, but not message text, sender handles, or full GUIDs.
  • Throttle from me diagnostics once per account/conversation/reason so normal outbound watcher rows do not spam default logs while still surfacing the same-account group-chat drop called out by review.
  • Add structured watch.subscribe startup retry/failure context: account, cliPath, db path presence, remote-host presence, timeout, since_rowid, attachment/reaction flags, attempt count, and retry delay.
  • Keep this diagnostics-only: no inbound delivery policy, watch retry classification, retry count, teardown, or thrown error behavior changes.

Refs #89593.
Refs #87263.

Verification

Initial proof:

  • node scripts/run-vitest.mjs extensions/imessage/src/monitor.watch-subscribe-retry.test.ts (4 tests)
  • pnpm format:check -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts
  • pnpm lint:extensions -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts
  • pnpm tsgo:extensions
  • git diff --check
  • .agents/skills/autoreview/scripts/autoreview --mode local --prompt "Review this diagnostics-only iMessage monitor patch. It should not change inbound delivery policy or watch.subscribe retry behavior. Focus on log noise/privacy, whether echo/reflection drops are surfaced without message content/sender handles, whether watch.subscribe retry/failure diagnostics include useful startup context, and whether tests cover the new formatting." (clean)

Follow-up proof after ClawSweeper noted that from me rows also needed diagnostics:

  • node scripts/run-vitest.mjs extensions/imessage/src/monitor.watch-subscribe-retry.test.ts (5 tests)
  • pnpm format:check -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts
  • pnpm lint:extensions -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts
  • pnpm tsgo:extensions
  • git diff --check
  • .agents/skills/autoreview/scripts/autoreview --mode local --prompt "Review the follow-up to PR #91785. It adds privacy-safe diagnostics for iMessage 'from me' drops and throttles that reason per account/conversation so normal outbound watcher rows do not spam default logs. Focus on whether it satisfies ClawSweeper's from-me diagnostic finding without changing delivery policy or overlogging PII." (clean)

Real behavior proof

Behavior addressed: missing runtime diagnostics for iMessage inbound rows that are intentionally dropped before dispatch, plus startup context for watch.subscribe retry/failure.
Real environment tested: lobster macOS host, OpenClaw PR head 597684c3650dab508cbb1378a58b74636d581626, imsg 0.11.0, Node v26.0.0.
Exact steps or command run after this patch: checked out origin/fix/imessage-inbound-startup-diagnostics on lobster, started monitorIMessageProvider through the PR source with a redacting runtime logger, then sent a self-addressed iMessage through sendMessageIMessage using sendTransport = "bridge". Account, target, chat id, message id, and any participant details were redacted from output.
Evidence after fix:

{
  "host": "lobster",
  "proofId": "openclaw-lobster-live-monitor-proof-ada22165-6306-46b6-8ed0-6c94fcab6bbc",
  "head": "597684c3650dab508cbb1378a58b74636d581626",
  "transport": "bridge",
  "candidateKey": "account_id",
  "targetKind": "handle",
  "sendMessageIdPresent": false,
  "sendGuidPresent": true,
  "dropDiagnosticFound": true,
  "redactedDropDiagnostic": "imessage: dropped inbound message account=<redacted> reason=\"from me\" chat_id=<redacted> group=false message_id=<redacted> guid=present created_at=2026-06-10T00:20:16.169Z",
  "startupDiagnostics": [],
  "logCount": 1,
  "errorCount": 0,
  "sendError": null,
  "errorSamples": []
}

Observed result after fix: the live monitor emitted the new default-level, privacy-safe from me drop diagnostic with no message text, sender handle, target handle, or full GUID in the proof output.
What was not tested: a live watch.subscribe startup timeout on lobster; that branch remains covered by focused tests because the live monitor startup succeeded.

@openclaw-barnacle openclaw-barnacle Bot added channel: imessage Channel integration: imessage size: S maintainer Maintainer-authored PR labels Jun 9, 2026
@clawsweeper

clawsweeper Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Codex review: needs maintainer review before merge. Reviewed June 9, 2026, 8:28 PM ET / 00:28 UTC.

Summary
The PR adds privacy-safe default iMessage inbound-drop diagnostics, throttles same-account from me drop logs, and expands watch.subscribe startup retry/failure log context with focused tests.

PR surface: Source +107, Tests +72. Total +179 across 2 files.

Reproducibility: not applicable. as a PR review: the patch adds diagnostics around existing iMessage drop/startup paths. The contributor supplied a live after-fix monitor proof for the visible inbound-drop diagnostic plus focused tests for the startup failure branch.

Review metrics: none identified.

Merge readiness
Overall: 🐚 platinum hermit
Proof: 🐚 platinum hermit
Patch quality: 🐚 platinum hermit
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Rank-up moves:

  • none.

Risk before merge

  • [P1] The PR has the protected maintainer label, so it should stay in the human maintainer path even with no blocking review findings.
  • [P2] The live proof covers the inbound from me drop diagnostic; the watch.subscribe startup-timeout branch remains covered by focused tests rather than a live timeout reproduction.

Maintainer options:

  1. Decide the mitigation before merge
    Land the diagnostics-only patch after maintainer review accepts the default-log privacy/noise tradeoff and normal CI or equivalent scoped proof is clean.
  2. Pause or close
    Do not merge this PR until maintainers decide whether the risk is worth taking.

Next step before merge

  • [P2] Human maintainer review remains appropriate because the PR carries a protected maintainer label and the remaining decision is acceptance of log privacy/noise tradeoffs, not an automated code repair.

Security
Cleared: The diff only changes diagnostic formatting, runtime logging, and focused tests; it does not broaden dependency, CI, credential, install, package, or code-execution surfaces.

Review details

Best possible solution:

Land the diagnostics-only patch after maintainer review accepts the default-log privacy/noise tradeoff and normal CI or equivalent scoped proof is clean.

Do we have a high-confidence way to reproduce the issue?

Not applicable as a PR review: the patch adds diagnostics around existing iMessage drop/startup paths. The contributor supplied a live after-fix monitor proof for the visible inbound-drop diagnostic plus focused tests for the startup failure branch.

Is this the best way to solve the issue?

Yes, this is the best narrow fix shape: log privacy-safe metadata at the existing drop/retry decisions instead of changing iMessage delivery policy, retry classification, or transport behavior.

AGENTS.md: found and applied where relevant.

Codex review notes: model gpt-5.5, reasoning high; reviewed against 48ec58a5844f.

Label changes

Label changes:

  • add proof: sufficient: Contributor real behavior proof is sufficient. The PR body now includes redacted live macOS iMessage monitor logs from the PR head showing the new from me inbound-drop diagnostic after the patch.
  • add rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🐚 platinum hermit and patch quality is 🐚 platinum hermit.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (logs): The PR body now includes redacted live macOS iMessage monitor logs from the PR head showing the new from me inbound-drop diagnostic after the patch.
  • remove rating: 🦪 silver shellfish: Current PR rating is rating: 🐚 platinum hermit, so this older rating label is no longer current.
  • remove status: 📣 needs proof: Current PR status label is status: 👀 ready for maintainer look.

Label justifications:

  • P2: This is a normal-priority iMessage diagnostics fix for message-loss/startup debugging with limited blast radius and no delivery-policy change.
  • rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🐚 platinum hermit and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (logs): The PR body now includes redacted live macOS iMessage monitor logs from the PR head showing the new from me inbound-drop diagnostic after the patch.
  • proof: sufficient: Contributor real behavior proof is sufficient. The PR body now includes redacted live macOS iMessage monitor logs from the PR head showing the new from me inbound-drop diagnostic after the patch.
Evidence reviewed

PR surface:

Source +107, Tests +72. Total +179 across 2 files.

View PR surface stats
Area Files Added Removed Net
Source 1 109 2 +107
Tests 1 77 5 +72
Docs 0 0 0 0
Config 0 0 0 0
Generated 0 0 0 0
Other 0 0 0 0
Total 2 186 7 +179

Acceptance criteria:

  • [P1] node scripts/run-vitest.mjs extensions/imessage/src/monitor.watch-subscribe-retry.test.ts.
  • [P1] pnpm format:check -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts.
  • [P1] pnpm lint:extensions -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts.
  • [P1] pnpm tsgo:extensions.
  • [P1] git diff --check.

What I checked:

  • Repository policy read: Read the full root AGENTS.md and applied its OpenClaw PR review, maintainer-label, read-only, proof, security, and channel/plugin guidance. (AGENTS.md:1, 48ec58a5844f)
  • Scoped policy read: Read the extension-scoped AGENTS.md; the PR remains within the owning bundled plugin and does not cross plugin/core boundaries. (extensions/AGENTS.md:1, 48ec58a5844f)
  • Diff inspected: The PR head changes only monitor-provider.ts and one focused test file, adding diagnostic formatting/throttling and startup log context without changing retry count, delivery predicates, teardown, or thrown-error behavior. (extensions/imessage/src/monitor/monitor-provider.ts:260, 597684c3650d)
  • Inbound decision contract checked: Current main already returns the exact drop reasons this PR surfaces (from me, agent echo in self-chat, self-chat echo, echo, and reflected assistant content), so the patch wraps existing decisions instead of redefining delivery policy. (extensions/imessage/src/monitor/inbound-processing.ts:511, 48ec58a5844f)
  • Runtime entry point checked: channel.runtime.ts starts monitorIMessageProvider for the active account, so the added logs sit at the plugin-owned iMessage monitor boundary used by real gateway runtime. (extensions/imessage/src/channel.runtime.ts:98, 48ec58a5844f)
  • Startup retry path checked: The current monitor loop already retries bounded watch.subscribe startup failures and logs retry/failure messages; the PR enriches the string with account/config/presence fields while preserving the same control flow. (extensions/imessage/src/monitor/monitor-provider.ts:1420, 48ec58a5844f)

Likely related people:

  • vincentkoc: Introduced the bounded iMessage watch.subscribe startup retry path and adjacent focused retry test that this PR now enriches with structured diagnostics. (role: startup retry feature owner; confidence: high; commits: 35a784c16563; files: extensions/imessage/src/monitor/monitor-provider.ts, extensions/imessage/src/monitor.watch-subscribe-retry.test.ts)
  • obviyus: Recent history shows work on inbound echo IDs and reflected self-chat drop behavior, which are central to the diagnostic reasons surfaced by this PR. (role: inbound echo/self-chat contributor; confidence: high; commits: e3e2a19ab7f1, 4a5885df3a36; files: extensions/imessage/src/monitor/inbound-processing.ts, extensions/imessage/src/monitor/self-chat-dedupe.test.ts)
  • steipete: Shortlog and file history show repeated refactors and fixes across the iMessage monitor and inbound-processing surfaces, including monitor retry type alignment and plugin boundary work. (role: heavy adjacent contributor; confidence: medium; commits: fa87c6334aa6, 625fd5b3e3e2, e4b5027c5e29; files: extensions/imessage/src/monitor/monitor-provider.ts, extensions/imessage/src/monitor/inbound-processing.ts)
  • shakkernerd: Current line blame for the monitor/drop and startup retry regions points to a recent commit that touched the central iMessage monitor files, making this a useful routing signal despite the broad commit title. (role: recent area contributor; confidence: medium; commits: d48778994fb2; files: extensions/imessage/src/monitor/monitor-provider.ts, extensions/imessage/src/monitor/inbound-processing.ts, extensions/imessage/src/monitor.watch-subscribe-retry.test.ts)
What the crustacean ranks mean
  • 🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
  • 🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
  • 🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
  • 🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
  • 🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
  • 🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
  • 🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works
  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

@clawsweeper clawsweeper Bot added rating: 🦐 gold shrimp Decent PR readiness signal, but merge confidence is limited. status: ⏳ waiting on author ClawSweeper has contributor-facing work open and is waiting for author action. P2 Normal backlog priority with limited blast radius. labels Jun 9, 2026
@omarshahine

Copy link
Copy Markdown
Contributor Author

Addressed ClawSweeper's from me diagnostic finding in 597684c365.

What changed:

  • Added from me to the privacy-safe diagnostic surface.
  • Throttled from me diagnostics once per account/conversation/reason so normal outbound watcher rows do not spam default logs.
  • Kept GUIDs presence-only and still logs no sender handle or message content.

Verification after this patch:

  • node scripts/run-vitest.mjs extensions/imessage/src/monitor.watch-subscribe-retry.test.ts (5 tests)
  • pnpm format:check -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts
  • pnpm lint:extensions -- extensions/imessage/src/monitor/monitor-provider.ts extensions/imessage/src/monitor.watch-subscribe-retry.test.ts
  • pnpm tsgo:extensions
  • git diff --check
  • .agents/skills/autoreview/scripts/autoreview --mode local --prompt "Review the follow-up to PR #91785. It adds privacy-safe diagnostics for iMessage 'from me' drops and throttles that reason per account/conversation so normal outbound watcher rows do not spam default logs. Focus on whether it satisfies ClawSweeper's from-me diagnostic finding without changing delivery policy or overlogging PII." (clean)

@clawsweeper re-review

@clawsweeper

clawsweeper Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

@blacksmith-sh

This comment has been minimized.

@clawsweeper clawsweeper Bot added rating: 🦪 silver shellfish Thin PR readiness signal; proof, validation, or implementation needs work. status: 📣 needs proof The PR needs real behavior proof before ClawSweeper can clear the contributor ask. and removed rating: 🦐 gold shrimp Decent PR readiness signal, but merge confidence is limited. status: ⏳ waiting on author ClawSweeper has contributor-facing work open and is waiting for author action. labels Jun 10, 2026
@omarshahine

Copy link
Copy Markdown
Contributor Author

Added the requested live diagnostics proof to the PR body.

Lobster proof summary:

  • Host: lobster
  • PR head: 597684c3650dab508cbb1378a58b74636d581626
  • Runtime path: live monitorIMessageProvider plus self-addressed sendMessageIMessage using sendTransport = "bridge"
  • Result: monitor emitted the new redacted reason="from me" drop diagnostic.
  • Redaction: account, target, chat id, message id, participant details, message text, and full GUID are not present in the proof output.

Proof id: openclaw-lobster-live-monitor-proof-ada22165-6306-46b6-8ed0-6c94fcab6bbc

@clawsweeper re-review

@clawsweeper

clawsweeper Bot commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

🦞👀
ClawSweeper picked this up.

Command router queued. I will update this comment with the next step.

Re-review progress:

@clawsweeper clawsweeper Bot added proof: sufficient ClawSweeper judged the real behavior proof convincing. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. and removed rating: 🦪 silver shellfish Thin PR readiness signal; proof, validation, or implementation needs work. status: 📣 needs proof The PR needs real behavior proof before ClawSweeper can clear the contributor ask. labels Jun 10, 2026
@omarshahine

Copy link
Copy Markdown
Contributor Author

Land-ready maintainer check before merge.

  • Head: 597684c3650dab508cbb1378a58b74636d581626
  • State: open, non-draft, mergeable
  • Checks: no non-green material checks reported in gh pr checks
  • ClawSweeper: proof sufficient / ready for maintainer review after lobster live monitor proof
  • Maintainer decision: accepting the diagnostics-only default-log privacy/noise tradeoff for this PR

Lobster proof id: openclaw-lobster-live-monitor-proof-ada22165-6306-46b6-8ed0-6c94fcab6bbc

@omarshahine omarshahine merged commit 6c045c5 into main Jun 10, 2026
328 of 340 checks passed
@omarshahine omarshahine deleted the fix/imessage-inbound-startup-diagnostics branch June 10, 2026 02:10
github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jun 10, 2026
Merged via squash.

Prepared head SHA: 597684c

Proof:
- Focused tests, lint/type/diff checks, and autoreview passed before merge.
- ClawSweeper re-review marked proof and patch quality platinum after lobster live monitor proof.
- Maintainer accepted the diagnostics-only default-log privacy/noise tradeoff.

Lobster proof id: openclaw-lobster-live-monitor-proof-ada22165-6306-46b6-8ed0-6c94fcab6bbc

Reviewed-by: @omarshahine
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Jun 12, 2026
…26.6.6) (#1040)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.6.5` → `2026.6.6` |

---

### Release Notes

<details>
<summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary>

### [`v2026.6.6`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#202666)

[Compare Source](openclaw/openclaw@v2026.6.5...v2026.6.6)

##### Highlights

- Security boundaries are substantially tighter across transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender checks, deleted-agent ACP bypasses, loopback tools, Discord moderation, and Teams group actions; exec approvals now fail closed on timeout. ([#&#8203;91529](openclaw/openclaw#91529), [#&#8203;91618](openclaw/openclaw#91618), [#&#8203;91615](openclaw/openclaw#91615), [#&#8203;91619](openclaw/openclaw#91619), [#&#8203;91741](openclaw/openclaw#91741), [#&#8203;91745](openclaw/openclaw#91745), [#&#8203;91746](openclaw/openclaw#91746), [#&#8203;91748](openclaw/openclaw#91748), [#&#8203;91749](openclaw/openclaw#91749), [#&#8203;91750](openclaw/openclaw#91750), [#&#8203;91751](openclaw/openclaw#91751), [#&#8203;91752](openclaw/openclaw#91752), [#&#8203;91763](openclaw/openclaw#91763), [#&#8203;89938](openclaw/openclaw#89938)) Thanks [@&#8203;joshavant](https://github.com/joshavant), [@&#8203;pgondhi987](https://github.com/pgondhi987), [@&#8203;mmaps](https://github.com/mmaps), [@&#8203;eleqtrizit](https://github.com/eleqtrizit), [@&#8203;shakkernerd](https://github.com/shakkernerd), and [@&#8203;drobison00](https://github.com/drobison00).
- Telegram delivery is safer and more coherent: account-scoped topics route to the right agent, streamed text survives tool calls, `/compact` works on generic ingress, callback handling uses concrete APIs, draft chunking is shared, durable dispatch dedupe moved into the SDK, and unauthorized DM text stays out of cache and prompt context. ([#&#8203;91189](openclaw/openclaw#91189), [#&#8203;88682](openclaw/openclaw#88682), [#&#8203;89588](openclaw/openclaw#89588), [#&#8203;90212](openclaw/openclaw#90212), [#&#8203;91876](openclaw/openclaw#91876), [#&#8203;91874](openclaw/openclaw#91874), [#&#8203;91904](openclaw/openclaw#91904), [#&#8203;91478](openclaw/openclaw#91478), [#&#8203;91915](openclaw/openclaw#91915)) Thanks [@&#8203;codysai001](https://github.com/codysai001), [@&#8203;alexzhu0](https://github.com/alexzhu0), [@&#8203;joelnishanth](https://github.com/joelnishanth), [@&#8203;snowzlm](https://github.com/snowzlm), [@&#8203;obviyus](https://github.com/obviyus), and [@&#8203;sallyom](https://github.com/sallyom).
- iMessage recovery and delivery now cover always-on inbound restart, durable echo markers, block streaming, idle approval discovery, hardened outbound transport, and actionable inbound startup diagnostics. ([#&#8203;91335](openclaw/openclaw#91335), [#&#8203;91449](openclaw/openclaw#91449), [#&#8203;88969](openclaw/openclaw#88969), [#&#8203;88530](openclaw/openclaw#88530), [#&#8203;91783](openclaw/openclaw#91783), [#&#8203;91785](openclaw/openclaw#91785)) Thanks [@&#8203;omarshahine](https://github.com/omarshahine), [@&#8203;jmissig](https://github.com/jmissig), and [@&#8203;colmbrogan](https://github.com/colmbrogan).
- Browser and MCP connectivity gained existing-session CDP support, discovered WebSocket validation, default-profile `cdpUrl` handling, safer browser-output boundaries, Streamable HTTP loopback transport, corrected OAuth/SSE authorization handling, and broader schema compatibility. ([#&#8203;91422](openclaw/openclaw#91422), [#&#8203;89851](openclaw/openclaw#89851), [#&#8203;91736](openclaw/openclaw#91736), [#&#8203;91747](openclaw/openclaw#91747), [#&#8203;91451](openclaw/openclaw#91451), [#&#8203;80143](openclaw/openclaw#80143)) Thanks [@&#8203;pgondhi987](https://github.com/pgondhi987), [@&#8203;anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia), [@&#8203;lifuyue](https://github.com/lifuyue), [@&#8203;eleqtrizit](https://github.com/eleqtrizit), [@&#8203;LiuwqGit](https://github.com/LiuwqGit), and [@&#8203;HemantSudarshan](https://github.com/HemantSudarshan).
- Control UI startup and first-reply latency are lower through cached model metadata, removal of the startup catalog wait, lazy slash-command loading, and first-event tracing with slow-reply diagnostics. ([#&#8203;91531](openclaw/openclaw#91531), [#&#8203;91538](openclaw/openclaw#91538), [#&#8203;91568](openclaw/openclaw#91568), [#&#8203;91583](openclaw/openclaw#91583), [#&#8203;91598](openclaw/openclaw#91598))
- Provider support expands with OpenRouter OAuth onboarding and Claude Fable 5 adaptive thinking, while Codex sessions keep correct compaction ownership, local models skip guardian review, dynamic tool progress normalizes cleanly, and Gemma 4 reasoning replay is preserved. ([#&#8203;91830](openclaw/openclaw#91830), [#&#8203;91882](openclaw/openclaw#91882), [#&#8203;91590](openclaw/openclaw#91590), [#&#8203;88630](openclaw/openclaw#88630), [#&#8203;88768](openclaw/openclaw#88768), [#&#8203;91696](openclaw/openclaw#91696)) Thanks [@&#8203;Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@&#8203;joshavant](https://github.com/joshavant), [@&#8203;bdjben](https://github.com/bdjben), and [@&#8203;Coder-Wangyankun](https://github.com/Coder-Wangyankun).

##### Changes

- CLI progress: emit Claude CLI commentary progress events and bridge inter-tool commentary into channel progress without exposing internal protocol scaffolding. ([#&#8203;89834](openclaw/openclaw#89834), [#&#8203;90883](openclaw/openclaw#90883)) Thanks [@&#8203;anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia).
- Observability: allow trusted diagnostics channels to capture tool input/output content, add first-assistant-event traces, and warn on slow initial replies. ([#&#8203;91256](openclaw/openclaw#91256), [#&#8203;91568](openclaw/openclaw#91568), [#&#8203;91583](openclaw/openclaw#91583)) Thanks [@&#8203;amknight](https://github.com/amknight).
- Plugins/ClawHub: dogfood reusable package publishing, let dry runs skip publish approval, allow declared installed trusted hooks, report managed plugin version drift, and warn instead of failing on retired Skill Workshop configuration. ([#&#8203;91574](openclaw/openclaw#91574), [#&#8203;91591](openclaw/openclaw#91591), [#&#8203;90004](openclaw/openclaw#90004), [#&#8203;90927](openclaw/openclaw#90927), [#&#8203;90838](openclaw/openclaw#90838)) Thanks [@&#8203;Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@&#8203;brokemac79](https://github.com/brokemac79), and [@&#8203;lonexreb](https://github.com/lonexreb).
- Memory/providers: move the local llama.cpp runtime into its provider plugin, batch embeddings across files, persist the agent model catalog cache, and keep QMD JSON search one-shot while filtering stale REM recall previews. ([#&#8203;91324](openclaw/openclaw#91324), [#&#8203;89138](openclaw/openclaw#89138), [#&#8203;90457](openclaw/openclaw#90457), [#&#8203;91837](openclaw/openclaw#91837), [#&#8203;91851](openclaw/openclaw#91851)) Thanks [@&#8203;osolmaz](https://github.com/osolmaz), [@&#8203;mushuiyu886](https://github.com/mushuiyu886), [@&#8203;ai-hpc](https://github.com/ai-hpc), and [@&#8203;TurboTheTurtle](https://github.com/TurboTheTurtle).
- Channels/mobile: add the QQBot group mention toggle, improve iPad and iPhone control surfaces, and expose the active connection host in the TUI footer. ([#&#8203;91423](openclaw/openclaw#91423), [#&#8203;91557](openclaw/openclaw#91557), [#&#8203;89909](openclaw/openclaw#89909)) Thanks [@&#8203;cxyhhhhh](https://github.com/cxyhhhhh), [@&#8203;Solvely-Colin](https://github.com/Solvely-Colin), and [@&#8203;baskduf](https://github.com/baskduf).
- Performance: prewarm TUI runtime plugins, deduplicate plugin auto-enable fanout, trim dense text-delta snapshots, and reuse prepared startup model metadata. ([#&#8203;90782](openclaw/openclaw#90782), [#&#8203;89978](openclaw/openclaw#89978), [#&#8203;91580](openclaw/openclaw#91580), [#&#8203;91531](openclaw/openclaw#91531)) Thanks [@&#8203;RomneyDa](https://github.com/RomneyDa) and [@&#8203;ai-hpc](https://github.com/ai-hpc).

##### Fixes

- Agent/session recovery: drop stale approval follow-ups after session rebind, remove drained reply-queue items by identity, recover stale main and visible replies, preserve Codex context-engine compaction ownership, lower the default compaction timeout to 180 seconds while respecting explicit configuration, and keep provider-failure terminal lifecycle state correct. ([#&#8203;85679](openclaw/openclaw#85679), [#&#8203;91450](openclaw/openclaw#91450), [#&#8203;91566](openclaw/openclaw#91566), [#&#8203;91840](openclaw/openclaw#91840), [#&#8203;91590](openclaw/openclaw#91590), [#&#8203;91361](openclaw/openclaw#91361), [#&#8203;91895](openclaw/openclaw#91895)) Thanks [@&#8203;openperf](https://github.com/openperf), [@&#8203;yetval](https://github.com/yetval), [@&#8203;joshavant](https://github.com/joshavant), [@&#8203;wangmiao0668000666](https://github.com/wangmiao0668000666), and [@&#8203;TurboTheTurtle](https://github.com/TurboTheTurtle).
- User-visible content boundaries: suppress Codex/Harmony protocol artifacts, neutralize browser and LanceDB memory media directives, redact transcript images, and preserve native `/compact` replies through source suppression. ([#&#8203;89151](openclaw/openclaw#89151), [#&#8203;91422](openclaw/openclaw#91422), [#&#8203;91425](openclaw/openclaw#91425), [#&#8203;91529](openclaw/openclaw#91529), [#&#8203;90212](openclaw/openclaw#90212)) Thanks [@&#8203;joelnishanth](https://github.com/joelnishanth), [@&#8203;pgondhi987](https://github.com/pgondhi987), [@&#8203;joshavant](https://github.com/joshavant), and [@&#8203;snowzlm](https://github.com/snowzlm).
- Channel delivery: keep WhatsApp captured replies attached to the successor controller after restart, retry Feishu rate limits, preserve Mattermost thread replies, canonicalize LINE webhook paths, restore Discord reply hydration and runtime timeout exports, and show OpenAI Realtime WebRTC assistant transcripts. ([#&#8203;85823](openclaw/openclaw#85823), [#&#8203;89659](openclaw/openclaw#89659), [#&#8203;91684](openclaw/openclaw#91684), [#&#8203;91649](openclaw/openclaw#91649), [#&#8203;90263](openclaw/openclaw#90263), [#&#8203;91686](openclaw/openclaw#91686), [#&#8203;90426](openclaw/openclaw#90426)) Thanks [@&#8203;itsuzef](https://github.com/itsuzef), [@&#8203;ladygege](https://github.com/ladygege), [@&#8203;jacobtomlinson](https://github.com/jacobtomlinson), [@&#8203;fuller-stack-dev](https://github.com/fuller-stack-dev), and [@&#8203;shushushv](https://github.com/shushushv).
- Cron: cancel active task runs cleanly, preserve terminal timeout/cancel state, and recover no-deliver tool warnings instead of silently losing the outcome. ([#&#8203;90666](openclaw/openclaw#90666), [#&#8203;90678](openclaw/openclaw#90678)) Thanks [@&#8203;ai-hpc](https://github.com/ai-hpc).
- Gateway/config/auth: share the approval runtime socket token, replace arrays explicitly in `config.patch`, skip the deleted-agent guard only for valid ACP harness sessions, surface headless LaunchAgent state, verify SQLite auth migration before cleanup, and arm QMD startup maintenance. ([#&#8203;87105](openclaw/openclaw#87105), [#&#8203;91551](openclaw/openclaw#91551), [#&#8203;91219](openclaw/openclaw#91219), [#&#8203;91614](openclaw/openclaw#91614), [#&#8203;91740](openclaw/openclaw#91740), [#&#8203;91978](openclaw/openclaw#91978)) Thanks [@&#8203;fuller-stack-dev](https://github.com/fuller-stack-dev) and [@&#8203;scotthuang](https://github.com/scotthuang).
- Providers/Codex: clarify quota errors, restore the Codex synthetic usage line, canonicalize Codex protocol assets, require API-key auth for realtime voice, normalize ACP model refs, preserve Gemma 4 `reasoning_content`, and avoid guardian review for local models. ([#&#8203;91390](openclaw/openclaw#91390), [#&#8203;91709](openclaw/openclaw#91709), [#&#8203;91507](openclaw/openclaw#91507), [#&#8203;91567](openclaw/openclaw#91567), [#&#8203;88630](openclaw/openclaw#88630), [#&#8203;91696](openclaw/openclaw#91696)) Thanks [@&#8203;hxy91819](https://github.com/hxy91819), [@&#8203;brokemac79](https://github.com/brokemac79), [@&#8203;RomneyDa](https://github.com/RomneyDa), [@&#8203;joshavant](https://github.com/joshavant), and [@&#8203;Coder-Wangyankun](https://github.com/Coder-Wangyankun).
- Updates/builds: recover package Gateway restarts after refresh failure, expose plugin convergence repair, fall back to Corepack in PATH-less pnpm environments, seed the correct Docker store packages, and keep ClawHub dry-run and publish paths reusable. ([#&#8203;91581](openclaw/openclaw#91581), [#&#8203;91599](openclaw/openclaw#91599), [#&#8203;91547](openclaw/openclaw#91547), [#&#8203;91591](openclaw/openclaw#91591)) Thanks [@&#8203;fuller-stack-dev](https://github.com/fuller-stack-dev), [@&#8203;sallyom](https://github.com/sallyom), and [@&#8203;Patrick-Erichsen](https://github.com/Patrick-Erichsen).
- UI: require explicit user intent before opening chat sessions and drain restored chat queues after session switches. ([#&#8203;91480](openclaw/openclaw#91480)) Thanks [@&#8203;TurboTheTurtle](https://github.com/TurboTheTurtle).
- Android: avoid the `dataSync` foreground-service type for persistent nodes. ([#&#8203;80082](openclaw/openclaw#80082)) Thanks [@&#8203;davelutztx](https://github.com/davelutztx).
- Native hooks: bound relay lifetimes so abandoned native hook connections cannot linger indefinitely. ([#&#8203;91550](openclaw/openclaw#91550)) Thanks [@&#8203;joshavant](https://github.com/joshavant).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1040
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

channel: imessage Channel integration: imessage maintainer Maintainer-authored PR P2 Normal backlog priority with limited blast radius. proof: sufficient ClawSweeper judged the real behavior proof convincing. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. size: S status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant