Peter Steinberger ece92bcbde fix: persist Copilot SDK session bindings ...

Persist GitHub Copilot SDK session ids in the plugin-state SQLite store so separate OpenClaw process turns can resume the same Copilot-side session when the compatibility fingerprint still matches.

The fingerprint covers provider/model/cwd, resolved agent id, resolved Copilot home, and auth identity. Plugin-state lookup/register/delete failures are non-fatal, stale rows are invalidated, and reset delete failures use an in-process tombstone so reset does not accidentally reuse a durable binding.

Also routes the QQBot token POST through the plugin SDK SSRF guard with capture disabled for the secret-bearing request, preserving the current token lifetime validation from main.

Verification: focused Copilot and QQBot Vitest suites, raw channel fetch guard, autoreview clean, Blacksmith Testbox pnpm check:changed tbx_01kst9fwjmsfzwaxqatszcbf40, live local Copilot two-turn smoke with the same SDK session id persisted in SQLite.

Refs #88064

2026-05-29 18:46:03 +02:00

..

skills

fix(qqbot): translate skill descriptions (#78153)

2026-05-09 20:05:45 -04:00

src

fix: persist Copilot SDK session bindings

2026-05-29 18:46:03 +02:00

api.ts

…

channel-plugin-api.ts

…

index.ts

feat(qqbot): resolve clientSecret SecretRefs and add secret contract

2026-05-03 12:25:08 +01:00

npm-shrinkwrap.json

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

openclaw.plugin.json

fix: add ClawHub plugin display names (#87354)

2026-05-27 12:37:35 -05:00

package.json

chore(release): prepare 2026.5.28

2026-05-28 01:48:07 +01:00

runtime-api.ts

refactor: reduce plugin sdk surface

2026-05-10 12:37:10 +01:00

secret-contract-api.ts

feat(qqbot): resolve clientSecret SecretRefs and add secret contract

2026-05-03 12:25:08 +01:00

setup-entry.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

setup-plugin-api.ts

…

tsconfig.json

…