Peter Steinberger ece92bcbde fix: persist Copilot SDK session bindings ...

Persist GitHub Copilot SDK session ids in the plugin-state SQLite store so separate OpenClaw process turns can resume the same Copilot-side session when the compatibility fingerprint still matches.

The fingerprint covers provider/model/cwd, resolved agent id, resolved Copilot home, and auth identity. Plugin-state lookup/register/delete failures are non-fatal, stale rows are invalidated, and reset delete failures use an in-process tombstone so reset does not accidentally reuse a durable binding.

Also routes the QQBot token POST through the plugin SDK SSRF guard with capture disabled for the secret-bearing request, preserving the current token lifetime validation from main.

Verification: focused Copilot and QQBot Vitest suites, raw channel fetch guard, autoreview clean, Blacksmith Testbox pnpm check:changed tbx_01kst9fwjmsfzwaxqatszcbf40, live local Copilot two-turn smoke with the same SDK session id persisted in SQLite.

Refs #88064

2026-05-29 18:46:03 +02:00

..

acpx

refactor: share acpx lazy runtime proxy

2026-05-29 05:45:20 +02:00

active-memory

fix(active-memory): isolate recall lane

2026-05-29 20:57:53 +08:00

admin-http-rpc

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

alibaba

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

amazon-bedrock

feat: add Claude Opus 4.8 support (#87890)

2026-05-29 06:10:42 +01:00

amazon-bedrock-mantle

feat: add Claude Opus 4.8 support (#87890)

2026-05-29 06:10:42 +01:00

anthropic

feat: add Claude Opus 4.8 support (#87890)

2026-05-29 06:10:42 +01:00

anthropic-vertex

feat: add Claude Opus 4.8 support (#87890)

2026-05-29 06:10:42 +01:00

arcee

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

azure-speech

fix(azure-speech): bound generated speech downloads

2026-05-29 13:54:33 +02:00

bonjour

chore: update dependency pins

2026-05-28 18:10:39 +01:00

brave

refactor: share brave web search metadata

2026-05-29 08:34:37 +02:00

browser

fix(browser): centralize cli index parsing

2026-05-29 07:29:52 -04:00

byteplus

fix(video): bound generated video downloads

2026-05-29 11:00:06 +02:00

canvas

fix(canvas): default malformed host base paths

2026-05-29 01:34:30 -04:00

cerebras

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

chutes

refactor: centralize safe expiry parsing

2026-05-29 12:38:11 -04:00

clickclack

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

cloudflare-ai-gateway

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

codex

fix(exec): align release validation checks

2026-05-30 00:04:06 +10:00

codex-supervisor

feat: add codex supervisor extension

2026-05-29 03:49:43 +01:00

comfy

fix(provider): bound Vydra and Comfy media downloads

2026-05-29 16:12:23 +02:00

copilot

fix: persist Copilot SDK session bindings

2026-05-29 18:46:03 +02:00

copilot-proxy

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

deepgram

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

deepinfra

fix: validate deepinfra model metadata numbers

2026-05-28 17:58:06 -04:00

deepseek

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

device-pair

…

diagnostics-otel

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

diagnostics-prometheus

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

diffs

fix(diffs): normalize render presentation numbers

2026-05-29 01:31:35 -04:00

diffs-language-pack

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

discord

fix(discord): bound delivery retry delays

2026-05-29 11:02:34 -04:00

document-extract

feat: support encrypted PDF extraction (#87751)

2026-05-28 20:19:49 +01:00

duckduckgo

fix: validate web search count integers

2026-05-28 18:38:39 -04:00

elevenlabs

refactor(voice): catalog voice models through providers (#87794)

2026-05-29 04:46:45 +01:00

exa

fix(exa): reject non-decimal search counts

2026-05-29 06:49:23 -04:00

fal

fix(fal): bound generated media downloads

2026-05-29 14:28:15 +02:00

feishu

fix(feishu): validate merge-forward timestamps

2026-05-29 09:22:33 -04:00

file-transfer

fix(file-transfer): centralize dir-list page token parsing

2026-05-29 07:11:26 -04:00

firecrawl

refactor: share firecrawl web search metadata

2026-05-29 07:41:27 +02:00

fireworks

test: cover dynamic live model refs

2026-05-28 18:16:45 +01:00

github-copilot

refactor: centralize safe expiry parsing

2026-05-29 12:38:11 -04:00

google

fix(video): bound remaining provider downloads

2026-05-29 15:30:11 +02:00

google-meet

fix(google-meet): reject invalid auth timeouts

2026-05-29 04:11:02 -04:00

googlechat

fix(googlechat): drop invalid inbound timestamps

2026-05-29 11:29:49 -04:00

gradium

fix(tts): bound generated speech downloads

2026-05-29 12:58:56 +02:00

groq

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

huggingface

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

image-generation-core

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

imessage

fix(imessage): validate chat list ids

2026-05-29 09:08:39 -04:00

inworld

fix(tts): centralize directive number parsing

2026-05-29 10:05:37 -04:00

irc

fix(irc): centralize setup port parsing

2026-05-29 06:41:44 -04:00

kilocode

fix: validate kilocode model token metadata

2026-05-28 18:02:34 -04:00

kimi-coding

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

line

fix: reject partial numeric parsing

2026-05-28 10:51:32 -04:00

litellm

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

llm-task

fix: validate llm task numeric options

2026-05-28 20:54:18 -04:00

lmstudio

fix: validate lmstudio discovered context lengths

2026-05-28 18:10:55 -04:00

lobster

fix: validate lobster numeric options

2026-05-28 21:06:23 -04:00

matrix

test: repair current main extension checks

2026-05-29 15:45:12 +02:00

mattermost

fix(mattermost): centralize model picker page parsing

2026-05-29 06:58:37 -04:00

media-understanding-core

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

memory-core

fix(memory-core): centralize cli integer parsing

2026-05-29 06:12:45 -04:00

memory-lancedb

test(memory-lancedb): stabilize aggregate mocks

2026-05-29 13:09:30 +02:00

memory-wiki

fix(memory-wiki): centralize cli line option parsing

2026-05-29 06:16:44 -04:00

microsoft

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

microsoft-foundry

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

migrate-claude

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

migrate-hermes

fix: reject partial numeric parsing

2026-05-28 10:51:32 -04:00

minimax

fix(tts): centralize directive number parsing

2026-05-29 10:05:37 -04:00

mistral

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

moonshot

fix: validate web search count integers

2026-05-28 18:38:39 -04:00

msteams

refactor: centralize safe expiry parsing

2026-05-29 12:38:11 -04:00

nextcloud-talk

fix(nextcloud-talk): centralize integer coercion

2026-05-29 06:45:24 -04:00

nostr

fix(nostr): close relay pool after subscription shutdown

2026-05-28 22:10:43 +01:00

nvidia

fix(nvidia): load featured model catalog (#80775)

2026-05-28 12:59:55 -07:00

oc-path

fix(oc-path): reject noncanonical array indexes

2026-05-29 04:37:41 -04:00

ollama

fix: validate web search count integers

2026-05-28 18:38:39 -04:00

open-prose

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

openai

fix(openai): validate codex oauth token lifetimes

2026-05-29 11:42:49 -04:00

opencode

fix(agents): preserve reasoning_content replay across DeepSeek tier suffixes (#87593)

2026-05-28 16:25:54 +01:00

opencode-go

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

openrouter

fix(video): bound remaining provider downloads

2026-05-29 15:30:11 +02:00

openshell

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

perplexity

fix: validate perplexity token budgets

2026-05-28 19:25:20 -04:00

phone-control

fix(phone-control): reject invalid arm durations

2026-05-29 04:03:45 -04:00

pixverse

fix: validate pixverse video response ids

2026-05-28 17:52:04 -04:00

policy

Policy: add policy file comparison command (#86768)

2026-05-28 23:10:27 -07:00

qa-channel

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

qa-lab

fix(qa-lab): centralize cli integer parsing

2026-05-29 06:20:43 -04:00

qa-matrix

fix(qa-matrix): cap fault proxy bodies

2026-05-29 17:02:11 +02:00

qianfan

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

qqbot

fix: persist Copilot SDK session bindings

2026-05-29 18:46:03 +02:00

qwen

fix(video): bound generated video downloads

2026-05-29 11:00:06 +02:00

runway

fix(video): bound generated video downloads

2026-05-29 11:00:06 +02:00

searxng

fix: validate web search count integers

2026-05-28 18:38:39 -04:00

senseaudio

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

sglang

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

signal

fix(signal): validate reaction message ids

2026-05-29 09:53:20 -04:00

skill-workshop

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

slack

fix(slack): reject unsafe inbound timestamps

2026-05-29 10:52:02 -04:00

stepfun

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

synology-chat

fix(synology-chat): centralize user id parsing

2026-05-29 07:14:31 -04:00

synthetic

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

talk-voice

fix(talk-voice): parse signed list limits

2026-05-29 06:08:50 -04:00

tavily

refactor: share tavily web search helpers

2026-05-29 08:12:48 +02:00

telegram

fix(telegram): centralize safe thread id parsing

2026-05-29 11:24:27 -04:00

tencent

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

test-support

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

thread-ownership

…

tlon

fix: reject malformed tlon sse event ids

2026-05-28 15:50:40 -04:00

together

fix(together): bound generated video downloads

2026-05-29 10:10:39 +02:00

tokenjuice

chore: update dependency pins

2026-05-28 18:10:39 +01:00

tts-local-cli

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

twitch

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

venice

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

vercel-ai-gateway

fix: validate vercel gateway model token metadata

2026-05-28 17:59:42 -04:00

video-generation-core

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

vllm

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

voice-call

fix(voice-call): bound cli numeric options

2026-05-29 02:42:44 -04:00

volcengine

fix(tts): centralize directive number parsing

2026-05-29 10:05:37 -04:00

voyage

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

vydra

fix(provider): bound Vydra and Comfy media downloads

2026-05-29 16:12:23 +02:00

web-readability

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

webhooks

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

whatsapp

fix(whatsapp): validate inbound timestamps

2026-05-29 10:25:59 -04:00

workboard

feat(workboard): persist card metadata

2026-05-29 11:04:37 +01:00

xai

fix(tts): bound generated speech downloads

2026-05-29 12:58:56 +02:00

xiaomi

refactor(voice): catalog voice models through providers (#87794)

2026-05-29 04:46:45 +01:00

zai

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

zalo

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

zalouser

fix(zalouser): reject unsafe inbound timestamps

2026-05-29 11:13:09 -04:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

fix(gateway): reject RPCs from invalidated device-token clients durin… (#70707)

2026-05-26 23:09:56 +01:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor: move plugin state consumers to sqlite

2026-05-29 11:12:15 +01:00

video-generation-providers.live.test.ts

feat(pixverse): add video generation provider

2026-05-27 12:41:10 +02:00