pashpashpash
cc95d4dd28
fix(codex): rotate auth profiles inside harness
2026-05-11 12:41:21 +01:00
pashpashpash
f447e5b9db
fix(btw): keep Codex side questions tool-free
2026-05-11 12:41:21 +01:00
pashpashpash
517566e39a
fix(auth): accept friendly OpenAI order for Codex profiles
2026-05-11 12:41:21 +01:00
pashpashpash
a947e8fae0
fix(codex): align btw side thread semantics
2026-05-11 12:41:21 +01:00
pashpashpash
42e259a696
fix(codex): route btw through native side threads
2026-05-11 12:41:21 +01:00
Peter Steinberger
4aa13b5338
test: tighten outbound target assertions
2026-05-11 12:40:55 +01:00
Shakker
1c452ddabf
test: assert aux reload failures
2026-05-11 12:40:15 +01:00
Shakker
996a38466f
test: assert session usage errors
2026-05-11 12:38:28 +01:00
Peter Steinberger
f57bcb0788
test: tighten outbound route assertions
2026-05-11 12:37:21 +01:00
Shakker
5569973d90
test: assert restart sentinel warnings
2026-05-11 12:36:53 +01:00
Shakker
34186196df
test: assert gateway startup logs
2026-05-11 12:35:03 +01:00
Peter Steinberger
691b760df3
test: tighten outbound action runner assertions
2026-05-11 12:34:58 +01:00
Peter Steinberger
1a7efcad4b
docs: add memory symlink traversal changelog ( #80331 ) (thanks @samzong)
2026-05-11 12:34:01 +01:00
samzong
5ad3fa0a17
fix(memory): preserve ENOTDIR missing reads
...
Signed-off-by: samzong <samzong.lu@gmail.com >
2026-05-11 12:34:01 +01:00
samzong
c6748a8eeb
fix(memory): block extra path symlink traversal
...
## Considered and deferred
- packages/memory-host-sdk/src/host/read-file.ts:77 [BOT-SCOPE]: Fully race-proof parent traversal would need a lower-level pinned/openat-style primitive; this diff fixes static symlink traversal and rejects symlink components before read.
2026-05-11 12:34:01 +01:00
Shakker
d21c47d711
test: assert plugin route runtime scopes
2026-05-11 12:33:04 +01:00
Peter Steinberger
2f1a9faae8
test: tighten outbound storage assertions
2026-05-11 12:31:18 +01:00
Peter Steinberger
3756e5dc10
test: tighten infra edge-case assertions
2026-05-11 12:29:37 +01:00
Shakker
7d966238b3
test: assert whatsapp inbox payloads
2026-05-11 12:27:44 +01:00
Peter Steinberger
7aa8f69808
test: tighten approval runtime assertions
2026-05-11 12:27:02 +01:00
Peter Steinberger
e520d9b8f6
test: tighten proxy dispatcher assertions
2026-05-11 12:25:27 +01:00
Shakker
06292d83a5
test: assert get-reply fixture config
2026-05-11 12:24:05 +01:00
Peter Steinberger
b9c5290a45
test: tighten infra warning and restart assertions
2026-05-11 12:21:46 +01:00
Shakker
a29b2b4026
test: assert session compaction payloads
2026-05-11 12:21:39 +01:00
Peter Steinberger
9c9b719cc9
test: tighten ssrf dispatcher assertions
2026-05-11 12:18:55 +01:00
Peter Steinberger
8e7ee67f67
test: tighten ssrf pinning assertions
2026-05-11 12:17:53 +01:00
Shakker
40457455e1
test: assert tts contract attempts
2026-05-11 12:17:30 +01:00
Peter Steinberger
26a0de82df
test: tighten runtime fetch formdata assertions
2026-05-11 12:16:32 +01:00
Peter Steinberger
c2a13e292f
test: tighten heartbeat runner assertions
2026-05-11 12:15:17 +01:00
Peter Steinberger
0f03af8643
test: tighten infra fetch summary assertions
2026-05-11 12:13:28 +01:00
Kaspre
7eefb26bc8
fix(heartbeat): remap cron-run exec events to session keys ( #80214 )
...
Summary:
- Remap cron-run async exec, ACP, node-event, and watchdog completion events to the queue heartbeat drains.
- Route per-sender cron-run events to the agent main queue and global-scope events to `global` while preserving the originating `agentId`.
- Tighten exec-completion classification and treat cron-run descendants as ephemeral for retention pruning.
Verification:
- CI: https://github.com/openclaw/openclaw/actions/runs/25625964382 passed.
- Real behavior proof: https://github.com/openclaw/openclaw/actions/runs/25666664248/job/75340798016 passed.
- PR targeted validation: `node scripts/run-vitest.mjs run --config test/vitest/vitest.unit.config.ts src/routing/session-key.test.ts src/infra/heartbeat-events-filter.test.ts src/agents/bash-tools.exec-runtime.test.ts src/agents/acp-spawn-parent-stream.test.ts src/cron/session-reaper.test.ts`.
- PR targeted typecheck: `pnpm tsgo:core`.
Refs #52305 .
Related: #18237 , #14191 .
Co-authored-by: Kaspre <kaspre@gmail.com >
2026-05-11 12:13:17 +01:00
Shakker
ccc6109853
test: assert plugin update warnings
2026-05-11 12:13:14 +01:00
Peter Steinberger
2cd08508ea
test: tighten infra helper assertions
2026-05-11 12:11:36 +01:00
Peter Steinberger
c1e4b4d2a9
test: tighten device auth token assertions
2026-05-11 12:10:27 +01:00
Peter Steinberger
c53d7aee0f
test: tighten agent event context assertions
2026-05-11 12:08:25 +01:00
Shakker
a6f80874b3
test: assert acp cli option payloads
2026-05-11 12:07:57 +01:00
Peter Steinberger
1e9ddc33a3
test: tighten device identity storage assertions
2026-05-11 12:07:06 +01:00
Peter Steinberger
605fb9731d
test: tighten channel runtime context assertions
2026-05-11 12:06:05 +01:00
Peter Steinberger
01d9d1be83
test: tighten apns auth assertions
2026-05-11 12:03:43 +01:00
Peter Steinberger
58ca32a79a
test: tighten safe npm install env assertions
2026-05-11 12:02:39 +01:00
Shakker
499d789f97
test: assert config compat warnings
2026-05-11 12:02:01 +01:00
Peter Steinberger
950be50c0d
test: tighten session maintenance warning assertions
2026-05-11 12:00:57 +01:00
Peter Steinberger
ffba41fe6b
fix(codex): ignore echoed abort marker prompts
2026-05-11 11:59:56 +01:00
Peter Steinberger
be0e85a72d
fix(codex): accept abort markers without request responses
2026-05-11 11:59:56 +01:00
Peter Steinberger
b273b81e5b
fix(codex): narrow app-server abort marker fallback
2026-05-11 11:59:56 +01:00
Peter Steinberger
4ff28a7735
fix(codex): release interrupted app-server turns
2026-05-11 11:59:56 +01:00
Shakker
6207ba7010
test: assert session maintenance warnings
2026-05-11 11:59:11 +01:00
Peter Steinberger
42f277dc60
test: tighten gateway tls runtime assertions
2026-05-11 11:58:36 +01:00
Peter Steinberger
1b6143b7f9
fix: hide sandbox marker in command previews
2026-05-11 11:58:29 +01:00
Shakker
fd21722cdf
test: assert port conflict hints
2026-05-11 11:57:19 +01:00
