Skip to content

fix: add missing @microsoft/agents-hosting dependency for msteams extension#1

Merged
EthanHunter1229 merged 29 commits intomainfrom
fix/issue-44857-msteams-dependency
Mar 16, 2026
Merged

fix: add missing @microsoft/agents-hosting dependency for msteams extension#1
EthanHunter1229 merged 29 commits intomainfrom
fix/issue-44857-msteams-dependency

Conversation

@EthanHunter1229
Copy link
Copy Markdown
Owner

The msteams extension depends on @microsoft/agents-hosting but this dependency was not included in the root package.json, causing runtime errors when the MS Teams channel starts.

Fixes openclaw#44857

obviyus and others added 23 commits March 13, 2026 14:31
Merge endpoint and status into a single grouped card with icons.
Split connect/disconnect into context-aware buttons.
Add text label under speaker toggle, balance layout with matching
spacer column, and wrap status text in a colored pill.
Remove MESSAGE label and divider, let text field auto-size instead
of fixed 92dp, and merge Detail/Attach into the bottom action row.
Rename role labels to You/OpenClaw/System, update streaming label to
OpenClaw · Live, and remove the redundant SESSION row + Connected pill
since the top bar and chip row already convey both.
Remove header bloat, merge Node info into a single Device card,
group permissions into Media/Notifications/Data Access cards with
internal dividers, and combine Screen+Debug into Preferences.
Sections reduced from 9 to 6.
…unts (openclaw#26054)

* fix(agents): avoid injecting memory file twice on case-insensitive mounts

On case-insensitive file systems mounted into Docker from macOS, both
MEMORY.md and memory.md pass fs.access() even when they are the same
underlying file. The previous dedup via fs.realpath() failed in this
scenario because realpath does not normalise case through the Docker
mount layer, so both paths were treated as distinct entries and the
same content was injected into the bootstrap context twice, wasting
tokens.

Fix by replacing the collect-then-dedup approach with an early-exit:
try MEMORY.md first; fall back to memory.md only when MEMORY.md is
absent. This makes the function return at most one entry regardless
of filesystem case-sensitivity.

* docs: clarify singular memory bootstrap fallback

* fix: note memory bootstrap fallback docs and changelog (openclaw#26054) (thanks @Lanfei)

---------

Co-authored-by: Ayaan Zaidi <[email protected]>
* Docker: add OPENCLAW_TZ timezone support

* fix: validate docker timezone names

* fix: support Docker timezone override (openclaw#34119) (thanks @Lanfei)

---------

Co-authored-by: Ayaan Zaidi <[email protected]>
…w#43780)

* Android: fix HttpURLConnection leak in TalkModeVoiceResolver.listVoices

* fix null errorStream NPE and preserve HTTP keep-alive

* fix: restore voice resolver disconnect cleanup

---------

Co-authored-by: Ayaan Zaidi <[email protected]>
…ma fixture

Adds the missing requiresOpenAiAnthropicToolPayload field to the
model-compat schema acceptance test, guarding against regressions
like openclaw#43339 where onboarding fails with "Unrecognized key".

Closes openclaw#43339
…ter (openclaw#43403)

* fix(agents): rephrase session reset prompt to avoid Azure content filter

Azure OpenAI's content filter flags the phrase 'Execute your Session
Startup sequence now' as potentially harmful, causing /new and /reset
to return 400 for all Azure-hosted deployments.

Replace 'Execute ... now' with 'Run your Session Startup sequence' in
session-reset-prompt.ts and post-compaction-context.ts. The semantics
are identical but the softer phrasing avoids the false-positive.

Closes openclaw#42769

* ci: retrigger checks (windows shard timeout)

* fix: add changelog for Azure startup prompt fix (openclaw#43403) (thanks @xingsy97)

---------

Co-authored-by: Ayaan Zaidi <[email protected]>
…ema (openclaw#41171)

Merged via squash.

Prepared head SHA: 9522761
Co-authored-by: atian8179 <[email protected]>
Co-authored-by: altaywtf <[email protected]>
Reviewed-by: @altaywtf
…aw#42583)

Merged via squash.

Prepared head SHA: e37f965
Co-authored-by: stim64045-spec <[email protected]>
Co-authored-by: altaywtf <[email protected]>
Reviewed-by: @altaywtf
Merged via squash.

Prepared head SHA: 4ba4a39
Co-authored-by: unisone <[email protected]>
Co-authored-by: altaywtf <[email protected]>
Reviewed-by: @altaywtf
* feat(ios): add onboarding welcome pager

* feat(ios): add onboarding welcome pager (openclaw#45054) (thanks @ngutman)
…nclaw#35615)

Merged via squash.

Prepared head SHA: d81d332
Co-authored-by: ingyukoh <[email protected]>
Co-authored-by: altaywtf <[email protected]>
Reviewed-by: @altaywtf
…ension

The msteams extension depends on @microsoft/agents-hosting but this
dependency was not included in the root package.json, causing runtime
errors when the MS Teams channel starts.

Fixes openclaw#44857
…tems

Add memory check before generating shell completion cache during updates.
Skip cache generation if free memory is below 512MB to prevent OOM errors
on low-memory systems (issue openclaw#45065).

Also increased Node.js memory limit for the completion generation process
and added error handling for graceful failure.
@EthanHunter1229 EthanHunter1229 force-pushed the fix/issue-44857-msteams-dependency branch from f9dfa07 to becd91d Compare March 13, 2026 12:55
Wassorbrot added 6 commits March 13, 2026 18:12
Fix GHSA-qpjj-47vm-64pj: Missing authentication for local browser-control
endpoints.

Previously, when gateway.auth.mode was set to 'none' or 'trusted-proxy',
the browser control server would start without authentication, allowing
unauthorized local callers to invoke privileged browser operations.

This fix removes the bypass for 'none' and 'trusted-proxy' modes, ensuring
browser control always requires authentication regardless of gateway auth
mode.

CVSS: 7.5 (High)
CWE: CWE-306 Missing Authentication for Critical Function
…urce

Resolves openclaw#46494 - health command was showing running=false and
tokenSource=none for Telegram even when channels status showed
running=true and tokenSource=config.

The health command was building channel status from config only,
not querying the gateway for runtime status. Now it calls
channels.status from gateway and merges runtime fields.
- Add runtime validation for gateway response structure
- Extract getGatewayChannelData helper to avoid code duplication
- Use proper TypeScript types instead of unsafe as assertions
- Use const assertion for key arrays for better type safety
Resolves openclaw#46369 - cron.remove now cleans up:
1. Session record in sessions.json (by sessionKey or jobId)
2. Run history file in ~/.openclaw/cron/runs/

The fix adds cleanup logic in the gateway's cron.remove method
to delete associated session records and history files when a
cron job is removed.
Resolves openclaw#46411 - console.log with PATH was printed on every
node start. Now only shown when OPENCLAW_DEBUG or VERBOSE is set.
Resolves openclaw#46520 - Origin validation now accepts custom URL schemes
like tauri://, electron://, capacitor:// when listed in allowedOrigins.

The parseOrigin function now handles non-standard schemes that
fail new URL() parsing.
@EthanHunter1229 EthanHunter1229 merged commit c0ec20a into main Mar 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Broken bundled msteams extension