Added a stronger real-user behavior proof in extensions/tlon/src/outbound-tool-trace-sanitize.test.ts.

The new test exercises the actual outbound plugin send chain:

deliverOutboundPayloads
→ tlon sendMedia
→ uploadImageFromUrl(mediaUrl)
→ buildMediaStory(text, uploadedUrl)
→ Urbit poke payload

It sends mediaUrl: "https://source.example/image.png#preview", returns https://media.example/image.png#preview from the uploader mock, and verifies the final Urbit poke JSON contains "src":"https://media.example/image.png#preview" without a link verse.

Validation:

git diff --check
node scripts/run-vitest.mjs run extensions/tlon/src/urbit/send.test.ts extensions/tlon/src/outbound-tool-trace-sanitize.test.ts

Test Files  2 passed (2)
Tests       5 passed (5)

Codex review: needs maintainer review before merge. Reviewed July 12, 2026, 1:42 AM ET / 05:42 UTC.

Summary
The PR changes Tlon image URL classification to inspect the parsed pathname and adds positive and negative fragment regression tests.

PR surface: Source +6, Tests +38. Total +44 across 2 files.

Reproducibility: yes. On current main, buildMediaStory("caption", "https://cdn.example/image.png#preview") deterministically fails the existing regex and reaches the link branch; the contributor also supplied after-fix live Tlon proof.

Review metrics: none identified.

Root-cause cluster
Relationship: fixed_by_candidate
Canonical: #104852
Summary: This PR is the direct candidate fix for the linked Tlon fragment-bearing media URL bug.

Members:

• canonical: Tlon media URLs with fragments are sent as links instead of image blocks #104852 - The issue reports the exact image-versus-link classification behavior changed by this PR.

Proposal only: this assessment does not dispatch repair, suppress jobs, mutate sibling items, close, or merge anything.

Merge readiness
Overall: 🦞 diamond lobster
Proof: 🦞 diamond lobster
Patch quality: 🦞 diamond lobster
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Next step before merge

• [P2] The open PR already contains the complete focused repair and sufficient proof, so no separate ClawSweeper fix branch is appropriate.

Security
Cleared: The classifier and test changes add no dependency, permission, secret, workflow, downloaded-code, package-resolution, or other concrete security concern.

Real Tlon behavior proof

I added a local live proof pass against a real WSL-hosted Urbit comet, not a mocked sender.

Setup

• Sender: real vere-v4.6 comet booted in WSL Ubuntu-22.04.
• Sender web interface: http://localhost:8080.
• Target: redacted real Tlon DM target.
• Test URL shape: https://[redacted]/javascript.png#preview.
• Route exercised: tlonRuntimeOutbound.sendMedia() -> uploadImageFromUrl() -> fallback original URL -> buildMediaStory() -> real Urbit chat-dm-action poke.

Runtime fallback proof

The live run hit the upload fallback path and preserved the original fragment-bearing URL:

{
  "ok": true,
  "fallbackPreservedOriginalUrl": true,
  "hasFallbackWarning": true,
  "warnings": [
    "[tlon] Failed to upload image, using original URL: MediaFetchError: Failed to fetch media from <redacted:TLON_MEDIA_URL>: getaddrinfo ENOENT raw.githubusercontent.com"
  ]
}

Real Urbit poke payload proof

The outgoing chat-dm-action payload captured immediately before the real HTTP poke contains an image block, not a link verse:

{
  "mark": "chat-dm-action",
  "json": {
    "diff": {
      "delta": {
        "add": {
          "memo": {
            "content": [
              {
                "inline": [
                  "OpenClaw PR #104853 captured live proof 2026-07-12T03:53:07.183Z"
                ]
              },
              {
                "block": {
                  "image": {
                    "src": "<redacted:TLON_MEDIA_URL>",
                    "height": 0,
                    "width": 0,
                    "alt": ""
                  }
                }
              }
            ]
          }
        }
      }
    }
  }
}

The same run reported:

{
  "capturedPokeImageBlocks": [
    {
      "block": {
        "image": {
          "src": "<redacted:TLON_MEDIA_URL>",
          "height": 0,
          "width": 0,
          "alt": ""
        }
      }
    }
  ]
}

Send receipt proof

The live send returned a Tlon media receipt:

{
  "primaryPlatformMessageId": "<redacted:TLON_SHIP>/170.141.184.508.057.993.689.001.489.075.536.727.638",
  "parts": [
    {
      "kind": "media",
      "threadId": "<redacted:TLON_TARGET>"
    }
  ]
}

Tlon UI proof

After logging into the same real comet's Tlon UI, the Groups app showed the delivered DM row as an image message:

{
  "url": "http://localhost:8080/apps/groups/Home",
  "containsProofNeedle": true,
  "containsImageMarker": true,
  "text": "... VectorPeak\n~pilbyt-nidnyt\nOpenClaw PR #104853 captured live proof 2026-07-12T03:53:07.183Z (Image)\n11:53 ..."
}

This verifies the reviewed behavior through a live Tlon stack: a fragment-suffixed image URL survives upload fallback, is classified as an image block, is sent via a real Urbit poke, and appears in Tlon UI as an image message rather than a plain link.

@clawsweeper re-review

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

• State: Complete
• Detail: The targeted re-review published an exact durable review comment and queued an executing target-wide serialized router scan.
• Run: https://github.com/openclaw/clawsweeper/actions/runs/29179270510
• Updated: 2026-07-12T04:15:40.780Z

Updated the PR for the reviewer-requested patch-quality issue.

What changed:

isImageUrl()
- no longer matches image extensions from raw query/fragment text
- parses URL pathname for URL inputs
- preserves existing non-URL path handling
- still emits the original URL unchanged when it becomes block.image.src

I also added the negative regression case from review:

https://cdn.example/page#preview.png => link, not block.image

Validation:

git diff --check
node scripts/run-vitest.mjs run extensions/tlon/src/urbit/send.test.ts extensions/tlon/src/urbit/upload.test.ts

Test Files  2 passed (2)
Tests       12 passed (12)

The earlier redacted live Tlon proof remains valid for the positive behavior; this follow-up narrows the classifier so fragment text cannot create the false-positive media delivery case.

@clawsweeper re-review

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

• State: Complete
• Detail: The targeted re-review published an exact durable review comment and queued an executing target-wide serialized router scan.
• Run: https://github.com/openclaw/clawsweeper/actions/runs/29180132395
• Updated: 2026-07-12T04:50:47.298Z

Current head has been synced with latest upstream/main and still only changes the Tlon-local classifier/test surface.

The stale review marker is expected after the main sync. Requesting a fresh review for current head 5a2a4591f8f640c815c3535833420cdd08390127.

@clawsweeper re-review

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

• State: Complete
• Detail: The targeted re-review published an exact durable review comment and queued an executing target-wide serialized router scan.
• Run: https://github.com/openclaw/clawsweeper/actions/runs/29180441235
• Updated: 2026-07-12T05:04:34.804Z

Current head is now ef430632cca0d45117f470515d49458d14f72d16 after syncing with latest upstream/main; PR diff still only contains the Tlon classifier and regression tests. Requesting fresh review for the exact head.

@clawsweeper re-review

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

• State: Complete
• Detail: The targeted re-review published an exact durable review comment and queued an executing target-wide serialized router scan.
• Run: https://github.com/openclaw/clawsweeper/actions/runs/29180962660
• Updated: 2026-07-12T05:23:58.343Z

Current head has been synced with latest upstream/main again to clear the BEHIND tail.

Validation after sync:

` ext
git diff --check upstream/main...HEAD
node scripts/run-vitest.mjs run extensions/tlon/src/urbit/send.test.ts extensions/tlon/src/urbit/upload.test.ts

Test Files 2 passed (2)
Tests 12 passed (12)
`

The PR diff remains limited to the Tlon-local classifier/test surface:

ext extensions/tlon/src/urbit/story.ts extensions/tlon/src/urbit/send.test.ts

Requesting fresh exact-head review for $head.

@clawsweeper re-review

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

• State: Complete
• Detail: The targeted re-review published an exact durable review comment and queued an executing target-wide serialized router scan.
• Run: https://github.com/openclaw/clawsweeper/actions/runs/29181422546
• Updated: 2026-07-12T05:43:43.341Z

Land-ready verification (maintainer):

• Exact PR head: 8849ec52b80b2b48501cd02116d8ee977396c351, merged with current main.
• Exact-head CI: run 29392849150, complete and green.
• Maintainer improvement: the pathname split now satisfies current-main noUncheckedIndexedAccess, and a signed-query regression verifies that classification ignores the query while the original fetch URL remains intact.
• Focused Blacksmith Testbox proof: send.test.ts and upload.test.ts, 13/13 passed (tbx_01kxj4gf3w7a44wdgcfj9adg04).
• Owner check: urlToStory performs Tlon-local classification; upload/fallback and the emitted URL remain unchanged. Fragment, query, image-looking fragment, and non-image branches are covered.
• Fresh full-branch structured autoreview: clean, 0.96 confidence. git diff --check passes.

No remaining proof gaps.

Merged via squash.

• Prepared head SHA: 8849ec52b80b2b48501cd02116d8ee977396c351
• Landed commit: 1ac30c8491c3b89df8a427acdd111940506fd1ba