From 088d3bd6be1e139b8e815d6a15d2022be99e7a3f Mon Sep 17 00:00:00 2001 From: Omar Shahine Date: Mon, 13 Apr 2026 16:50:45 -0700 Subject: [PATCH] docs(changelog): note sendPolicy suppressDelivery + BB Private API cache fixes (#66220) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Two recently-merged fixes that shipped without CHANGELOG entries: - PR #65461 (sendPolicy deny suppresses delivery, not inbound processing, closes #53328) — squash 0362f21784 - PR #65447 (BB lazy-refresh Private API on send to prevent reply threading degradation, closes #43764) — squash 85cfba6 Backfilling under `## Unreleased` > `### Fixes` before the next release cut. Co-authored-by: Lobster Co-authored-by: Claude Opus 4.6 (1M context) --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 23c1cb4c9cc..bed36ccf1e2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -12,6 +12,8 @@ Docs: https://docs.openclaw.ai ### Fixes +- fix(auto-reply): `sendPolicy: "deny"` no longer blocks inbound message processing — the agent still runs its turn (context, memory, tool calls) while all outbound delivery is suppressed: final replies, tool results, block replies, streaming chunks, typing indicators, plan updates, TTS payloads, plugin-binding notices, and fast-abort replies. Enables observer-agent use cases (e.g. a WhatsApp group watcher that reads and routes without replying). (#65461, #53328) Thanks @omarshahine. +- fix(bluebubbles): lazy-refresh the Private API server-info cache on send when reply threading or message effects are requested but status is unknown, so sends no longer silently degrade to plain messages when the 10-minute cache expires. (#65447, #43764) Thanks @omarshahine. - fix(heartbeat): force owner downgrade for untrusted hook:wake system events [AI-assisted]. (#66031) Thanks @pgondhi987. - fix(browser): enforce SSRF policy on snapshot, screenshot, and tab routes [AI]. (#66040) Thanks @pgondhi987. - fix(msteams): enforce sender allowlist checks on SSO signin invokes [AI]. (#66033) Thanks @pgondhi987.