Skip to content

Fix config.patch explicit array replacement#91551

Merged
joshavant merged 6 commits into
mainfrom
fix/config-patch-explicit-array-replace
Jun 9, 2026
Merged

Fix config.patch explicit array replacement#91551
joshavant merged 6 commits into
mainfrom
fix/config-patch-explicit-array-replace

Conversation

@joshavant

@joshavant joshavant commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add an explicit replacePaths contract for destructive config.patch array replacement.
  • Reject unconfirmed config.patch payloads that would remove existing array entries, including nested arrays under id-keyed config arrays.
  • Update Gateway agent tool preflight, Matrix QA, iOS skill editing, protocol schema, docs, and focused regression coverage.

Refs #90540

Verification

  • .agents/skills/autoreview/scripts/autoreview --mode local
    • autoreview clean: no accepted/actionable findings reported
  • AWS Crabbox live Gateway/WebSocket/disk proof: run_c11f1f03de06, provider aws, lease cbx_baaa409355ec, machine c7a.8xlarge, exit 0
    • Regression repro: old truncated config.patch attempt from 82 bindings to 2 was rejected; disk remained at 82 and hash stayed unchanged.
    • Fix proof: same replacement with replacePaths: ["bindings"] succeeded and disk moved to 2 entries intentionally.
  • AWS Crabbox focused regression lanes passed in the same run:
    • src/gateway/server.config-patch.test.ts
    • src/agents/tools/gateway-tool.test.ts
    • src/agents/openclaw-gateway-tool.test.ts
    • extensions/qa-matrix/src/runners/contract/runtime.test.ts
    • extensions/qa-matrix/src/runners/contract/scenarios.test.ts
    • packages/gateway-protocol/src
  • Local: pnpm test src/gateway/server.config-patch.test.ts
  • Local: pnpm test src/agents/tools/gateway-tool.test.ts src/agents/openclaw-gateway-tool.test.ts
  • Local: pnpm test src/config/merge-patch.test.ts extensions/qa-matrix/src/runners/contract/runtime.test.ts extensions/qa-matrix/src/runners/contract/scenarios.test.ts packages/gateway-protocol/src
  • Local: pnpm format:docs
  • Local: git diff --check
  • Local: swift build in apps/shared/OpenClawKit

Known proof gaps:

  • Broader local swift test in apps/shared/OpenClawKit still fails existing unrelated TalkConfigContractTests.selectionFixtures fixture expectations.
  • Local iOS xcodebuild compiled the touched Design files, then failed existing unrelated apps/ios/Sources/Onboarding/QRScannerView.swift / AppleReviewDemoMode resolution.

Real behavior proof

Behavior addressed: config.patch could silently remove existing array entries after a truncated config.get round-trip.

Real environment tested: AWS Crabbox Linux host via Gateway WebSocket RPCs and on-disk config verification.

Exact steps or command run after this patch: pnpm crabbox:run -- --provider aws --idle-timeout 90m --ttl 240m --timing-json --script-stdin with a temporary Gateway RPC proof plus focused regression tests.

Evidence after fix: Crabbox run_c11f1f03de06 printed E2E_REGRESSION_REPRO_SUMMARY showing rejected destructive patch and unchanged disk, then E2E_FIX_PROOF_SUMMARY showing explicit replacePaths replacement was accepted.

Observed result after fix: Unconfirmed destructive array patch from 82 bindings to 2 was rejected; confirmed replacement with replacePaths: ["bindings"] succeeded.

What was not tested: Full Control UI browser flow; this bug’s mutation contract was proven at Gateway RPC and disk-write level.

@openclaw-barnacle openclaw-barnacle Bot added docs Improvements or additions to documentation app: ios App: ios app: web-ui App: web-ui gateway Gateway runtime agents Agent runtime and tooling size: L maintainer Maintainer-authored PR labels Jun 9, 2026
@clawsweeper

clawsweeper Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Codex review: needs maintainer review before merge. Reviewed June 8, 2026, 10:27 PM ET / 02:27 UTC.

Summary
Adds a config.patch replacePaths contract that rejects destructive array replacement unless explicitly confirmed, and updates Gateway, agent tool preflight, protocol schema, iOS/QA callers, docs, snapshots, and regression tests.

PR surface: Source +275, Tests +493, Docs +11, Other +14. Total +793 across 28 files.

Reproducibility: Do we have a high-confidence way to reproduce the issue? Yes from source and the linked report: current main lets config.patch write a shorter non-id array over the existing config after a config.get round-trip; I did not execute the repro because this review is read-only.

Review metrics: 1 noteworthy metric.

  • Config patch contract: 1 protocol parameter added, 1 fail-closed write guard added. The new replacePaths surface changes Gateway API behavior for intentional array removal, so maintainers should review upgrade impact before merge.

Merge readiness
Overall: 🐚 platinum hermit
Proof: 🦞 diamond lobster
Patch quality: 🐚 platinum hermit
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Rank-up moves:

  • [P1] Maintainer should explicitly confirm the fail-closed replacePaths compatibility tradeoff before merge.

Risk before merge

  • [P1] Existing Gateway API clients that intentionally remove array entries with config.patch will now fail with INVALID_REQUEST until they send replacePaths or use config.apply; that fail-closed upgrade looks justified by the data-loss bug but needs maintainer acceptance.

Maintainer options:

  1. Confirm the fail-closed upgrade (recommended)
    Merge after a maintainer explicitly accepts that intentional config.patch array removals must add replacePaths and that release notes or PR body context cover the new requirement.
  2. Choose a different protocol shape
    Pause if maintainers prefer a tagged config.get, diff-based array operation, or another explicit-intent API instead of replacePaths.
  3. Preserve legacy behavior by default
    If compatibility is more important than fail-closed safety, require a patch that keeps legacy array replacement as default and introduces strict rejection through an opt-in path with tests.

Next step before merge

  • [P2] Protected maintainer label plus the intentional Gateway API compatibility change require maintainer review; no narrow automation repair is identified.

Security
Cleared: No concrete supply-chain or secret-handling regression was found; the patch tightens a config write boundary, with compatibility risk handled separately.

Review details

Best possible solution:

Land a maintainer-approved fail-closed config.patch contract with clear upgrade/release-note context: unconfirmed destructive array writes reject, and intentional array replacement uses replacePaths or full config.apply.

Do we have a high-confidence way to reproduce the issue?

Do we have a high-confidence way to reproduce the issue? Yes from source and the linked report: current main lets config.patch write a shorter non-id array over the existing config after a config.get round-trip; I did not execute the repro because this review is read-only.

Is this the best way to solve the issue?

Is this the best way to solve the issue? Yes, if maintainers accept the compatibility tradeoff: Gateway-side intent enforcement is the right owner boundary for preventing destructive RPC writes, and the PR updates the protocol/tool/docs/test callers that need the new contract.

AGENTS.md: found and applied where relevant.

Codex review notes: model gpt-5.5, reasoning high; reviewed against 82afc4678ace.

Label changes

Label changes:

  • add P1: The PR addresses a reported config.patch data-loss path that can silently remove routing bindings and misroute messages for real deployments.
  • add merge-risk: 🚨 compatibility: The diff intentionally makes previously accepted destructive config.patch array writes fail unless clients add replacePaths or use config.apply.
  • add proof: sufficient: Contributor real behavior proof is sufficient. The PR body includes after-fix AWS Crabbox live Gateway/WebSocket/disk proof showing the rejected unconfirmed destructive patch and the accepted explicit replacement.
  • add rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🦞 diamond lobster and patch quality is 🐚 platinum hermit.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR body includes after-fix AWS Crabbox live Gateway/WebSocket/disk proof showing the rejected unconfirmed destructive patch and the accepted explicit replacement.
  • remove rating: 🌊 off-meta tidepool: Current PR rating is rating: 🐚 platinum hermit, so this older rating label is no longer current.

Label justifications:

  • P1: The PR addresses a reported config.patch data-loss path that can silently remove routing bindings and misroute messages for real deployments.
  • merge-risk: 🚨 compatibility: The diff intentionally makes previously accepted destructive config.patch array writes fail unless clients add replacePaths or use config.apply.
  • rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🦞 diamond lobster and patch quality is 🐚 platinum hermit.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR body includes after-fix AWS Crabbox live Gateway/WebSocket/disk proof showing the rejected unconfirmed destructive patch and the accepted explicit replacement.
  • proof: sufficient: Contributor real behavior proof is sufficient. The PR body includes after-fix AWS Crabbox live Gateway/WebSocket/disk proof showing the rejected unconfirmed destructive patch and the accepted explicit replacement.
Evidence reviewed

PR surface:

Source +275, Tests +493, Docs +11, Other +14. Total +793 across 28 files.

View PR surface stats
Area Files Added Removed Net
Source 9 294 19 +275
Tests 14 527 34 +493
Docs 2 13 2 +11
Config 0 0 0 0
Generated 0 0 0 0
Other 3 16 2 +14
Total 28 850 57 +793

What I checked:

  • Current main config.patch behavior: Current main parses config.patch raw, applies applyMergePatch to the current snapshot, restores redacted values, then diffs and writes the validated config; there is no destructive-array intent gate on this path. (src/gateway/server-methods/config.ts:581, 82afc4678ace)
  • Current main array merge semantics: Current main only merges id-keyed arrays when mergeObjectArraysById succeeds; otherwise arrays fall through to replacement semantics, matching the linked data-loss report for non-id arrays such as bindings. (src/config/merge-patch.ts:88, 82afc4678ace)
  • PR destructive-array guard: The PR head adds replacePaths normalization and a Gateway-side destructive-array detector that rejects unconfirmed removals before validation/write. (src/gateway/server-methods/config.ts:139, c82e172ab5f0)
  • Protocol and tool contract: The PR head adds optional replacePaths to the Gateway protocol schema and the agent-facing gateway tool normalizes and forwards it for config.patch only. (packages/gateway-protocol/src/schema/config.ts:56, c82e172ab5f0)
  • Regression coverage: The PR head covers rejection of unconfirmed array shrink/replacement, explicit replacement with replacePaths, nested id-keyed array paths, and parent deletion cases. (src/gateway/server.config-patch.test.ts:461, c82e172ab5f0)
  • Real behavior proof in PR body: The PR body reports AWS Crabbox live Gateway/WebSocket/disk proof run_c11f1f03de06: an unconfirmed destructive patch from 82 bindings to 2 was rejected without disk hash change, and the same replacement with replacePaths: ["bindings"] succeeded intentionally. (c82e172ab5f0)

Likely related people:

  • Vincent Koc: Blame and local history show the current config.patch handler, merge-patch helper, Gateway protocol schema, iOS config patch model, and QA helpers all coming from commit cff8154; shallow history limits older provenance. (role: current implementation owner in local history; confidence: medium; commits: cff8154954eb; files: src/gateway/server-methods/config.ts, src/config/merge-patch.ts, packages/gateway-protocol/src/schema/config.ts)
What the crustacean ranks mean
  • 🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
  • 🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
  • 🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
  • 🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
  • 🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
  • 🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
  • 🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works
  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

@joshavant
joshavant requested a review from a team as a code owner June 9, 2026 01:58
@clawsweeper clawsweeper Bot added the rating: 🌊 off-meta tidepool PR readiness rating does not apply to this item. label Jun 9, 2026
@clawsweeper clawsweeper Bot added proof: sufficient ClawSweeper judged the real behavior proof convincing. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. P1 High-priority user-facing bug, regression, or broken workflow. merge-risk: 🚨 compatibility 🚨 May break existing users, config, migrations, defaults, or upgrade paths. and removed rating: 🌊 off-meta tidepool PR readiness rating does not apply to this item. labels Jun 9, 2026
@joshavant
joshavant merged commit 9f48254 into main Jun 9, 2026
206 of 217 checks passed
@joshavant
joshavant deleted the fix/config-patch-explicit-array-replace branch June 9, 2026 02:48
@joshavant joshavant mentioned this pull request Jun 9, 2026
Closed
vincentkoc pushed a commit that referenced this pull request Jun 9, 2026
@joshavant @vincentkoc
Fix config.patch explicit array replacement (#91551)
84e2286 
* fix config patch explicit array replacement

* fix generated config patch protocol model

* fix config patch test helper typing

* fix shared auth patch replacement tests

* update config patch prompt snapshots

* harden qa lab config patch replace paths
github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jun 9, 2026
@joshavant
Fix config.patch explicit array replacement (openclaw#91551)
5e7e3d7 
* fix config patch explicit array replacement

* fix generated config patch protocol model

* fix config patch test helper typing

* fix shared auth patch replacement tests

* update config patch prompt snapshots

* harden qa lab config patch replace paths
@github-actions github-actions Bot mentioned this pull request Jun 9, 2026
Open
@yetval yetval mentioned this pull request Jun 10, 2026
Merged
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Jun 12, 2026
bot-owl @eleboucher
fix(container): update image ghcr.io/openclaw/openclaw (2026.6.5 ➔ 20…
bb872cc 
…26.6.6) (#1040)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.6.5` → `2026.6.6` |

---

### Release Notes

<details>
<summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary>

### [`v2026.6.6`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#202666)

[Compare Source](openclaw/openclaw@v2026.6.5...v2026.6.6)

##### Highlights

- Security boundaries are substantially tighter across transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender checks, deleted-agent ACP bypasses, loopback tools, Discord moderation, and Teams group actions; exec approvals now fail closed on timeout. ([#&#8203;91529](openclaw/openclaw#91529), [#&#8203;91618](openclaw/openclaw#91618), [#&#8203;91615](openclaw/openclaw#91615), [#&#8203;91619](openclaw/openclaw#91619), [#&#8203;91741](openclaw/openclaw#91741), [#&#8203;91745](openclaw/openclaw#91745), [#&#8203;91746](openclaw/openclaw#91746), [#&#8203;91748](openclaw/openclaw#91748), [#&#8203;91749](openclaw/openclaw#91749), [#&#8203;91750](openclaw/openclaw#91750), [#&#8203;91751](openclaw/openclaw#91751), [#&#8203;91752](openclaw/openclaw#91752), [#&#8203;91763](openclaw/openclaw#91763), [#&#8203;89938](openclaw/openclaw#89938)) Thanks [@&#8203;joshavant](https://github.com/joshavant), [@&#8203;pgondhi987](https://github.com/pgondhi987), [@&#8203;mmaps](https://github.com/mmaps), [@&#8203;eleqtrizit](https://github.com/eleqtrizit), [@&#8203;shakkernerd](https://github.com/shakkernerd), and [@&#8203;drobison00](https://github.com/drobison00).
- Telegram delivery is safer and more coherent: account-scoped topics route to the right agent, streamed text survives tool calls, `/compact` works on generic ingress, callback handling uses concrete APIs, draft chunking is shared, durable dispatch dedupe moved into the SDK, and unauthorized DM text stays out of cache and prompt context. ([#&#8203;91189](openclaw/openclaw#91189), [#&#8203;88682](openclaw/openclaw#88682), [#&#8203;89588](openclaw/openclaw#89588), [#&#8203;90212](openclaw/openclaw#90212), [#&#8203;91876](openclaw/openclaw#91876), [#&#8203;91874](openclaw/openclaw#91874), [#&#8203;91904](openclaw/openclaw#91904), [#&#8203;91478](openclaw/openclaw#91478), [#&#8203;91915](openclaw/openclaw#91915)) Thanks [@&#8203;codysai001](https://github.com/codysai001), [@&#8203;alexzhu0](https://github.com/alexzhu0), [@&#8203;joelnishanth](https://github.com/joelnishanth), [@&#8203;snowzlm](https://github.com/snowzlm), [@&#8203;obviyus](https://github.com/obviyus), and [@&#8203;sallyom](https://github.com/sallyom).
- iMessage recovery and delivery now cover always-on inbound restart, durable echo markers, block streaming, idle approval discovery, hardened outbound transport, and actionable inbound startup diagnostics. ([#&#8203;91335](openclaw/openclaw#91335), [#&#8203;91449](openclaw/openclaw#91449), [#&#8203;88969](openclaw/openclaw#88969), [#&#8203;88530](openclaw/openclaw#88530), [#&#8203;91783](openclaw/openclaw#91783), [#&#8203;91785](openclaw/openclaw#91785)) Thanks [@&#8203;omarshahine](https://github.com/omarshahine), [@&#8203;jmissig](https://github.com/jmissig), and [@&#8203;colmbrogan](https://github.com/colmbrogan).
- Browser and MCP connectivity gained existing-session CDP support, discovered WebSocket validation, default-profile `cdpUrl` handling, safer browser-output boundaries, Streamable HTTP loopback transport, corrected OAuth/SSE authorization handling, and broader schema compatibility. ([#&#8203;91422](openclaw/openclaw#91422), [#&#8203;89851](openclaw/openclaw#89851), [#&#8203;91736](openclaw/openclaw#91736), [#&#8203;91747](openclaw/openclaw#91747), [#&#8203;91451](openclaw/openclaw#91451), [#&#8203;80143](openclaw/openclaw#80143)) Thanks [@&#8203;pgondhi987](https://github.com/pgondhi987), [@&#8203;anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia), [@&#8203;lifuyue](https://github.com/lifuyue), [@&#8203;eleqtrizit](https://github.com/eleqtrizit), [@&#8203;LiuwqGit](https://github.com/LiuwqGit), and [@&#8203;HemantSudarshan](https://github.com/HemantSudarshan).
- Control UI startup and first-reply latency are lower through cached model metadata, removal of the startup catalog wait, lazy slash-command loading, and first-event tracing with slow-reply diagnostics. ([#&#8203;91531](openclaw/openclaw#91531), [#&#8203;91538](openclaw/openclaw#91538), [#&#8203;91568](openclaw/openclaw#91568), [#&#8203;91583](openclaw/openclaw#91583), [#&#8203;91598](openclaw/openclaw#91598))
- Provider support expands with OpenRouter OAuth onboarding and Claude Fable 5 adaptive thinking, while Codex sessions keep correct compaction ownership, local models skip guardian review, dynamic tool progress normalizes cleanly, and Gemma 4 reasoning replay is preserved. ([#&#8203;91830](openclaw/openclaw#91830), [#&#8203;91882](openclaw/openclaw#91882), [#&#8203;91590](openclaw/openclaw#91590), [#&#8203;88630](openclaw/openclaw#88630), [#&#8203;88768](openclaw/openclaw#88768), [#&#8203;91696](openclaw/openclaw#91696)) Thanks [@&#8203;Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@&#8203;joshavant](https://github.com/joshavant), [@&#8203;bdjben](https://github.com/bdjben), and [@&#8203;Coder-Wangyankun](https://github.com/Coder-Wangyankun).

##### Changes

- CLI progress: emit Claude CLI commentary progress events and bridge inter-tool commentary into channel progress without exposing internal protocol scaffolding. ([#&#8203;89834](openclaw/openclaw#89834), [#&#8203;90883](openclaw/openclaw#90883)) Thanks [@&#8203;anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia).
- Observability: allow trusted diagnostics channels to capture tool input/output content, add first-assistant-event traces, and warn on slow initial replies. ([#&#8203;91256](openclaw/openclaw#91256), [#&#8203;91568](openclaw/openclaw#91568), [#&#8203;91583](openclaw/openclaw#91583)) Thanks [@&#8203;amknight](https://github.com/amknight).
- Plugins/ClawHub: dogfood reusable package publishing, let dry runs skip publish approval, allow declared installed trusted hooks, report managed plugin version drift, and warn instead of failing on retired Skill Workshop configuration. ([#&#8203;91574](openclaw/openclaw#91574), [#&#8203;91591](openclaw/openclaw#91591), [#&#8203;90004](openclaw/openclaw#90004), [#&#8203;90927](openclaw/openclaw#90927), [#&#8203;90838](openclaw/openclaw#90838)) Thanks [@&#8203;Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@&#8203;brokemac79](https://github.com/brokemac79), and [@&#8203;lonexreb](https://github.com/lonexreb).
- Memory/providers: move the local llama.cpp runtime into its provider plugin, batch embeddings across files, persist the agent model catalog cache, and keep QMD JSON search one-shot while filtering stale REM recall previews. ([#&#8203;91324](openclaw/openclaw#91324), [#&#8203;89138](openclaw/openclaw#89138), [#&#8203;90457](openclaw/openclaw#90457), [#&#8203;91837](openclaw/openclaw#91837), [#&#8203;91851](openclaw/openclaw#91851)) Thanks [@&#8203;osolmaz](https://github.com/osolmaz), [@&#8203;mushuiyu886](https://github.com/mushuiyu886), [@&#8203;ai-hpc](https://github.com/ai-hpc), and [@&#8203;TurboTheTurtle](https://github.com/TurboTheTurtle).
- Channels/mobile: add the QQBot group mention toggle, improve iPad and iPhone control surfaces, and expose the active connection host in the TUI footer. ([#&#8203;91423](openclaw/openclaw#91423), [#&#8203;91557](openclaw/openclaw#91557), [#&#8203;89909](openclaw/openclaw#89909)) Thanks [@&#8203;cxyhhhhh](https://github.com/cxyhhhhh), [@&#8203;Solvely-Colin](https://github.com/Solvely-Colin), and [@&#8203;baskduf](https://github.com/baskduf).
- Performance: prewarm TUI runtime plugins, deduplicate plugin auto-enable fanout, trim dense text-delta snapshots, and reuse prepared startup model metadata. ([#&#8203;90782](openclaw/openclaw#90782), [#&#8203;89978](openclaw/openclaw#89978), [#&#8203;91580](openclaw/openclaw#91580), [#&#8203;91531](openclaw/openclaw#91531)) Thanks [@&#8203;RomneyDa](https://github.com/RomneyDa) and [@&#8203;ai-hpc](https://github.com/ai-hpc).

##### Fixes

- Agent/session recovery: drop stale approval follow-ups after session rebind, remove drained reply-queue items by identity, recover stale main and visible replies, preserve Codex context-engine compaction ownership, lower the default compaction timeout to 180 seconds while respecting explicit configuration, and keep provider-failure terminal lifecycle state correct. ([#&#8203;85679](openclaw/openclaw#85679), [#&#8203;91450](openclaw/openclaw#91450), [#&#8203;91566](openclaw/openclaw#91566), [#&#8203;91840](openclaw/openclaw#91840), [#&#8203;91590](openclaw/openclaw#91590), [#&#8203;91361](openclaw/openclaw#91361), [#&#8203;91895](openclaw/openclaw#91895)) Thanks [@&#8203;openperf](https://github.com/openperf), [@&#8203;yetval](https://github.com/yetval), [@&#8203;joshavant](https://github.com/joshavant), [@&#8203;wangmiao0668000666](https://github.com/wangmiao0668000666), and [@&#8203;TurboTheTurtle](https://github.com/TurboTheTurtle).
- User-visible content boundaries: suppress Codex/Harmony protocol artifacts, neutralize browser and LanceDB memory media directives, redact transcript images, and preserve native `/compact` replies through source suppression. ([#&#8203;89151](openclaw/openclaw#89151), [#&#8203;91422](openclaw/openclaw#91422), [#&#8203;91425](openclaw/openclaw#91425), [#&#8203;91529](openclaw/openclaw#91529), [#&#8203;90212](openclaw/openclaw#90212)) Thanks [@&#8203;joelnishanth](https://github.com/joelnishanth), [@&#8203;pgondhi987](https://github.com/pgondhi987), [@&#8203;joshavant](https://github.com/joshavant), and [@&#8203;snowzlm](https://github.com/snowzlm).
- Channel delivery: keep WhatsApp captured replies attached to the successor controller after restart, retry Feishu rate limits, preserve Mattermost thread replies, canonicalize LINE webhook paths, restore Discord reply hydration and runtime timeout exports, and show OpenAI Realtime WebRTC assistant transcripts. ([#&#8203;85823](openclaw/openclaw#85823), [#&#8203;89659](openclaw/openclaw#89659), [#&#8203;91684](openclaw/openclaw#91684), [#&#8203;91649](openclaw/openclaw#91649), [#&#8203;90263](openclaw/openclaw#90263), [#&#8203;91686](openclaw/openclaw#91686), [#&#8203;90426](openclaw/openclaw#90426)) Thanks [@&#8203;itsuzef](https://github.com/itsuzef), [@&#8203;ladygege](https://github.com/ladygege), [@&#8203;jacobtomlinson](https://github.com/jacobtomlinson), [@&#8203;fuller-stack-dev](https://github.com/fuller-stack-dev), and [@&#8203;shushushv](https://github.com/shushushv).
- Cron: cancel active task runs cleanly, preserve terminal timeout/cancel state, and recover no-deliver tool warnings instead of silently losing the outcome. ([#&#8203;90666](openclaw/openclaw#90666), [#&#8203;90678](openclaw/openclaw#90678)) Thanks [@&#8203;ai-hpc](https://github.com/ai-hpc).
- Gateway/config/auth: share the approval runtime socket token, replace arrays explicitly in `config.patch`, skip the deleted-agent guard only for valid ACP harness sessions, surface headless LaunchAgent state, verify SQLite auth migration before cleanup, and arm QMD startup maintenance. ([#&#8203;87105](openclaw/openclaw#87105), [#&#8203;91551](openclaw/openclaw#91551), [#&#8203;91219](openclaw/openclaw#91219), [#&#8203;91614](openclaw/openclaw#91614), [#&#8203;91740](openclaw/openclaw#91740), [#&#8203;91978](openclaw/openclaw#91978)) Thanks [@&#8203;fuller-stack-dev](https://github.com/fuller-stack-dev) and [@&#8203;scotthuang](https://github.com/scotthuang).
- Providers/Codex: clarify quota errors, restore the Codex synthetic usage line, canonicalize Codex protocol assets, require API-key auth for realtime voice, normalize ACP model refs, preserve Gemma 4 `reasoning_content`, and avoid guardian review for local models. ([#&#8203;91390](openclaw/openclaw#91390), [#&#8203;91709](openclaw/openclaw#91709), [#&#8203;91507](openclaw/openclaw#91507), [#&#8203;91567](openclaw/openclaw#91567), [#&#8203;88630](openclaw/openclaw#88630), [#&#8203;91696](openclaw/openclaw#91696)) Thanks [@&#8203;hxy91819](https://github.com/hxy91819), [@&#8203;brokemac79](https://github.com/brokemac79), [@&#8203;RomneyDa](https://github.com/RomneyDa), [@&#8203;joshavant](https://github.com/joshavant), and [@&#8203;Coder-Wangyankun](https://github.com/Coder-Wangyankun).
- Updates/builds: recover package Gateway restarts after refresh failure, expose plugin convergence repair, fall back to Corepack in PATH-less pnpm environments, seed the correct Docker store packages, and keep ClawHub dry-run and publish paths reusable. ([#&#8203;91581](openclaw/openclaw#91581), [#&#8203;91599](openclaw/openclaw#91599), [#&#8203;91547](openclaw/openclaw#91547), [#&#8203;91591](openclaw/openclaw#91591)) Thanks [@&#8203;fuller-stack-dev](https://github.com/fuller-stack-dev), [@&#8203;sallyom](https://github.com/sallyom), and [@&#8203;Patrick-Erichsen](https://github.com/Patrick-Erichsen).
- UI: require explicit user intent before opening chat sessions and drain restored chat queues after session switches. ([#&#8203;91480](openclaw/openclaw#91480)) Thanks [@&#8203;TurboTheTurtle](https://github.com/TurboTheTurtle).
- Android: avoid the `dataSync` foreground-service type for persistent nodes. ([#&#8203;80082](openclaw/openclaw#80082)) Thanks [@&#8203;davelutztx](https://github.com/davelutztx).
- Native hooks: bound relay lifetimes so abandoned native hook connections cannot linger indefinitely. ([#&#8203;91550](openclaw/openclaw#91550)) Thanks [@&#8203;joshavant](https://github.com/joshavant).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1040
This was referenced Jun 30, 2026
Closed
Merged
badgerbees pushed a commit to badgerbees/openclaw that referenced this pull request Jul 8, 2026
@joshavant @badgerbees
Fix config.patch explicit array replacement (openclaw#91551)
ae39e2d 
* fix config patch explicit array replacement

* fix generated config patch protocol model

* fix config patch test helper typing

* fix shared auth patch replacement tests

* update config patch prompt snapshots

* harden qa lab config patch replace paths
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

agents Agent runtime and tooling app: ios App: ios app: web-ui App: web-ui docs Improvements or additions to documentation extensions: qa-lab gateway Gateway runtime maintainer Maintainer-authored PR merge-risk: 🚨 compatibility 🚨 May break existing users, config, migrations, defaults, or upgrade paths. P1 High-priority user-facing bug, regression, or broken workflow. proof: sufficient ClawSweeper judged the real behavior proof convincing. rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. size: L status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joshavant