fix(sessions): derive channel from account-scoped DM session keys in send-policy by yetval · Pull Request #92788 · openclaw/openclaw

yetval · 2026-06-13T20:43:50Z

Summary

session.sendPolicy channel-scoped deny rules silently did not fire for account-scoped DM sessions. A rule like { action: "deny", match: { channel: "demo-channel" } } was ignored for a per-account-channel-peer DM session, and the message was sent anyway.

The fix updates deriveChannelFromKey in src/sessions/send-policy.ts so it derives the channel for the 4-part account-scoped DM key layout as well as the 3-part direct/group layouts, while still returning undefined for keys that have no channel segment.

Root cause

buildAgentPeerSessionKey (src/routing/session-key.ts) produces this key for a per-account-channel-peer DM session:

agent:<agentId>:<channel>:<accountId>:direct:<peerId>

After stripAgentSessionKeyPrefix removes the agent:<agentId>: prefix, the remaining key is:

<channel>:<accountId>:direct:<peerId>

The previous guard only treated parts[0] as the channel when parts[1] was one of group/channel/direct/dm. For the account-scoped layout, parts[1] is the accountId, so the guard failed and deriveChannelFromKey returned undefined. With no channel derived (and no entry.channel/lastChannel to fall back on), the match.channel rule never matched, so the deny rule did not fire.

The 3-part direct/group layouts (<channel>:direct:<peerId>) worked; only the 4-part account-scoped DM layout was broken.

The derive fallback was introduced in #92022, which handled only the 3-part case. #27842 (superseded, parent #27750 abandoned) earlier flagged this exact class for an abandoned key format. It is now freshly reachable via the shipped per-account-channel-peer dmScope. There is no open issue or PR covering this.

Why not one-sided

The fix lives in the single shared derivation helper deriveChannelFromKey, which is the only place that maps a session key to a channel for send-policy matching. The new guard scans every segment after the channel for a known peer kind (group/channel/direct/dm), so it covers both the 3-part and 4-part layouts produced by buildAgentPeerSessionKey, not just one DM scope. Keys with no channel/peer segment (for example the per-peer agent:main:direct:user-1, which strips to direct:user-1, length 2) still return undefined, so non-channel keys are unaffected.

Verification

node scripts/run-vitest.mjs src/sessions/send-policy.test.ts -> all pass (8 tests), including the new account-scoped DM regression test and the existing 3-part direct test.
Red proof: reverting only the send-policy.ts change (keeping the test) makes the new test fail with expected 'allow' to be 'deny', confirming the test catches the regression.
node scripts/run-oxlint.mjs --tsconfig config/tsconfig/oxlint.core.json src/sessions/send-policy.ts src/sessions/send-policy.test.ts -> clean.
npx oxfmt --check src/sessions/send-policy.ts src/sessions/send-policy.test.ts -> all files correctly formatted.

Real behavior proof

Behavior addressed: channel-scoped session.sendPolicy deny rule now fires for account-scoped (per-account-channel-peer) DM sessions, where it previously silently allowed the send.

Real environment tested: the real production buildAgentPeerSessionKey and resolveSendPolicy functions from the source tree, driven by a small script that builds the actual account-scoped DM key and evaluates the policy.

Exact steps or command run after this patch: built the key via buildAgentPeerSessionKey({ agentId: "main", channel: "demo-channel", accountId: "acct-1", peerKind: "direct", peerId: "user-1", dmScope: "per-account-channel-peer" }) and called resolveSendPolicy({ cfg, sessionKey }) with session.sendPolicy = { default: "allow", rules: [{ action: "deny", match: { channel: "demo-channel" } }] } and no entry.channel/lastChannel, so the channel must be derived from the key.

Evidence after fix:

# Before fix (reverted)
sessionKey = agent:main:demo-channel:acct-1:direct:user-1
decision   = allow

# After fix
sessionKey = agent:main:demo-channel:acct-1:direct:user-1
decision   = deny

Observed result after fix: the same account-scoped DM key that previously resolved to allow (the bug, message sent despite the deny rule) now resolves to deny.

What was not tested: end-to-end delivery through a live channel transport; this change is in the pure policy-resolution layer and is covered by the unit test plus the real-function before/after script above.

References

fix(sessions): derive channel from direct-chat session keys in send-policy #92022 introduced the channel-derivation fallback (3-part case only).
fix: handle accountId in session key parsing for send policy and Discord exec approvals #27842 / fix(routing): include accountId in group/channel session keys #27750 are historical context for this class, superseded for an abandoned key format and now reachable via the shipped per-account-channel-peer dmScope.
No open issue.

clawsweeper · 2026-06-13T20:45:18Z

Codex review: needs maintainer review before merge. Reviewed June 13, 2026, 5:01 PM ET / 21:01 UTC.

Summary
The PR broadens session send-policy channel derivation to recognize account-scoped DM keys and adds a regression test built with buildAgentPeerSessionKey.

PR surface: Source -1, Tests +14. Total +13 across 2 files.

Reproducibility: yes. Source inspection shows buildAgentPeerSessionKey emits agent:<agentId>:<channel>:<accountId>:direct:<peerId> while current deriveChannelFromKey only recognizes peer kinds at parts[1], so the account-scoped path cannot derive a channel without another fallback.

Review metrics: 1 noteworthy metric.

Send-policy matcher behavior: 1 matcher broadened. The changed matcher now covers <channel>:<accountId>:direct:<peerId>, which can change upgrade behavior for existing channel-scoped deny rules.

Stored data model
Persistent data-model change detected: serialized state: src/sessions/send-policy.test.ts. Confirm migration or upgrade compatibility proof before merge.

Merge readiness
Overall: 🐚 platinum hermit
Proof: 🦞 diamond lobster
Patch quality: 🐚 platinum hermit
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Rank-up moves:

Record in merge or release-note context that channel-scoped deny rules now apply to account-scoped DM sessions.

Risk before merge

[P1] Existing users with per-account-channel-peer DM sessions and channel-scoped deny rules will start blocking sends after upgrade where the bug previously allowed them.

Maintainer options:

Land With Upgrade Context (recommended)
Merge this as the intended policy enforcement fix and explicitly note that matching account-scoped DM sends can now be denied by existing channel rules.
Ask For Transport Proof First
Pause only long enough to request one real channel run if maintainers want end-to-end denial proof beyond the pure policy resolver.
Pause For Policy Direction
Hold the PR if maintainers are not ready to make existing account-scoped DM channel deny rules fail closed on upgrade.

Next step before merge

No automated repair is indicated; the remaining action is maintainer acceptance of the intentional stricter send-policy behavior and normal merge gates.

Security
Cleared: No security or supply-chain concern found; the diff only tightens pure session policy matching and adds focused test coverage.

Review details

Best possible solution:

Land the focused helper and regression-test change with merge or release-note context that channel-scoped deny rules now apply to account-scoped DM session keys.

Do we have a high-confidence way to reproduce the issue?

Yes. Source inspection shows buildAgentPeerSessionKey emits agent:<agentId>:<channel>:<accountId>:direct:<peerId> while current deriveChannelFromKey only recognizes peer kinds at parts[1], so the account-scoped path cannot derive a channel without another fallback.

Is this the best way to solve the issue?

Yes. Updating the single shared key-to-channel derivation helper is the narrowest maintainable fix; changing individual send-policy call sites would duplicate parsing and risk another one-sided policy path.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning high; reviewed against e6ffcf7362c6.

Label changes

Label justifications:

P2: This is a bounded correctness fix for session send-policy enforcement with limited blast radius.
merge-risk: 🚨 compatibility: Existing account-scoped DM setups with channel deny rules may see sends blocked after upgrade where the bug previously allowed them.
rating: 🐚 platinum hermit: Overall readiness is 🐚 platinum hermit; proof is 🦞 diamond lobster and patch quality is 🐚 platinum hermit.
status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR body includes structured after-fix proof using production key-building and policy-resolution functions with before/after output showing the decision changes from allow to deny.
proof: sufficient: Contributor real behavior proof is sufficient. The PR body includes structured after-fix proof using production key-building and policy-resolution functions with before/after output showing the decision changes from allow to deny.

Evidence reviewed

PR surface:

Source -1, Tests +14. Total +13 across 2 files.

View PR surface stats

Area	Files	Added	Removed	Net
Source	1	5	6	-1
Tests	1	14	0	+14
Docs	0	0	0	0
Config	0	0	0	0
Generated	0	0	0	0
Other	0	0	0	0
Total	2	19	6	+13

What I checked:

Current main misses the account-scoped key layout: deriveChannelFromKey strips agent:<agentId>: but only treats parts[0] as the channel when parts[1] is a peer kind, so a stripped <channel>:<accountId>:direct:<peerId> key falls through without another channel fallback. (src/sessions/send-policy.ts:51, e6ffcf7362c6)
Current main emits the affected account-scoped DM key: buildAgentPeerSessionKey emits agent:<agentId>:<channel>:<accountId>:direct:<peerId> for dmScope === "per-account-channel-peer", making the reported send-policy path reachable. (src/routing/session-key.ts:239, e6ffcf7362c6)
Docs define both sides of the contract: The public config docs list per-account-channel-peer as a supported DM scope and describe session.sendPolicy channel matching, so channel-scoped rules are expected to work for channel-attributable session keys. Public docs: docs/gateway/config-agents.md. (docs/gateway/config-agents.md:1302, e6ffcf7362c6)
Latest release still has the same miss: Tag v2026.6.6 still has the 3-part-only deriveChannelFromKey guard while also containing the account-scoped key emitter, so the behavior is not already shipped fixed. (src/sessions/send-policy.ts:51, 8c802aa68351)
PR fixes the shared helper and test: The patch changes only the shared derivation helper to scan for a peer-kind marker after the channel and adds a regression case using the production key builder. (src/sessions/send-policy.ts:46, 3adee187627d)
Relevant recent history: Merged pull request fix(sessions): derive channel from direct-chat session keys in send-policy #92022 introduced the direct-chat send-policy channel derivation fix, but the current merged helper still covers only the 3-part layout this PR extends. (src/sessions/send-policy.ts:49, a4a4c766170a)

Likely related people:

hansraj316: Authored the merged direct-chat send-policy channel derivation change that this PR extends from 3-part to account-scoped 4-part DM keys. (role: recent area contributor; confidence: high; commits: 0f54ae20d584, a4a4c766170a; files: src/sessions/send-policy.ts, src/sessions/send-policy.test.ts)
vincentkoc: Merged the related send-policy derivation PR and commented verification context on that path, so they are a useful routing candidate for the intentional policy behavior. (role: recent reviewer and merger; confidence: medium; commits: a4a4c766170a, 8c802aa68351; files: src/sessions/send-policy.ts, src/sessions/send-policy.test.ts)
snowzlm: Local blame attributes the current helper and session-key implementation in this checkout to a broad grafted commit, though the historical trail is flattened. (role: current-file history owner; confidence: medium; commits: 37d6fd2e817d; files: src/sessions/send-policy.ts, src/routing/session-key.ts)

What the crustacean ranks mean

🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works

ClawSweeper keeps one durable marker-backed review comment per issue or PR.
Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
Maintainers can also comment @clawsweeper review to request a fresh review only.
Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

…send-policy

vincentkoc

Maintainer review passed. I tightened the helper before merge so channel derivation only accepts canonical <channel>:<peerKind>:<peerId> and <channel>:<accountId>:<peerKind>:<peerId> shapes, with regression coverage for malformed/incomplete keys.

Verification:

Local: node scripts/run-vitest.mjs src/sessions/send-policy.test.ts --maxWorkers=1
Local: node_modules/.bin/oxfmt --check --threads=1 src/sessions/send-policy.ts src/sessions/send-policy.test.ts
Local: node scripts/run-oxlint.mjs --tsconfig config/tsconfig/oxlint.core.json src/sessions/send-policy.ts src/sessions/send-policy.test.ts
Local: git diff --check
Autoreview: clean after exact-shape tightening.
Crabbox AWS: cbx_002f80f1f6eb / golden-hermit, run run_db28effba937; focused send-policy test plus OPENCLAW_CHECK_CHANGED_REMOTE_CHILD=1 OPENCLAW_CHANGED_LANES_RAW_SYNC=1 CI=1 corepack pnpm check:changed passed.
GitHub exact-head CI: 53006b28cd20b17734323c37f9363a078e60e8b1 passed with 134 successful, 25 skipped, and 1 neutral checks.

Compatibility note: this intentionally makes existing channel-scoped send-policy rules apply to account-scoped DM sessions where they were previously skipped.

…26.6.8) (#1144) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.6.6` → `2026.6.8` | --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.6.8`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#202668) [Compare Source](openclaw/openclaw@v2026.6.6...v2026.6.8) ##### Highlights - Telegram and WhatsApp channel delivery are richer and less brittle: Telegram can send structured rich text with tables, lists, expandable blockquotes, prompt-preserving CLI backend delivery, retired native draft migration, and safer rich-media boundaries, while WhatsApp now honors configured ACP bindings. ([#92679](openclaw/openclaw#92679), [#84082](openclaw/openclaw#84082), [#89421](openclaw/openclaw#89421), [#92513](openclaw/openclaw#92513)) Thanks [@obviyus](https://github.com/obviyus), [@jzakirov](https://github.com/jzakirov), [@spacegeologist](https://github.com/spacegeologist), and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Agent and Gateway recovery is sharper across account-scoped DM sends, generated media completions, restart shutdown aborts, yielded subagent pauses, yielded cron media, heartbeat dedupe, session identity prompts, and unknown OpenAI agent selector rejection. ([#92788](openclaw/openclaw#92788), [#91246](openclaw/openclaw#91246), [#91357](openclaw/openclaw#91357), [#92631](openclaw/openclaw#92631), [#92146](openclaw/openclaw#92146), [#91287](openclaw/openclaw#91287), [#92468](openclaw/openclaw#92468), [#92510](openclaw/openclaw#92510)) Thanks [@yetval](https://github.com/yetval), [@TurboTheTurtle](https://github.com/TurboTheTurtle), [@ooiuuii](https://github.com/ooiuuii), [@openperf](https://github.com/openperf), [@IWhatsskill](https://github.com/IWhatsskill), [@ZengWen-DT](https://github.com/ZengWen-DT), and [@zhangguiping-xydt](https://github.com/zhangguiping-xydt). - Provider/model handling expands and tightens with GLM-5.2, Claude Haiku 4.5 catalog rows, OpenRouter and Google Vertex provider-prefix normalization, managed SecretRef auth, bounded model browse discovery, storeless OpenAI Responses replay gating, and Claude 4.5 Copilot tool-streaming safety. ([#92796](openclaw/openclaw#92796), [#90116](openclaw/openclaw#90116), [#92627](openclaw/openclaw#92627), [#91218](openclaw/openclaw#91218), [#90686](openclaw/openclaw#90686), [#92247](openclaw/openclaw#92247), [#90706](openclaw/openclaw#90706), [#75393](openclaw/openclaw#75393)) Thanks [@arkyu2077](https://github.com/arkyu2077), [@liuhao1024](https://github.com/liuhao1024), [@bymle](https://github.com/bymle), [@rohitjavvadi](https://github.com/rohitjavvadi), [@samson910022](https://github.com/samson910022), [@snowzlm](https://github.com/snowzlm), and [@Kailigithub](https://github.com/Kailigithub). - `/usage` and reply payload hooks now have a native full footer renderer, default template, fixed-decimal formatting, credential-aware limits, better partial-count handling, and warnings for broken templates instead of silent bad output. ([#92657](openclaw/openclaw#92657), [#89835](openclaw/openclaw#89835), [#89629](openclaw/openclaw#89629)) Thanks [@Marvinthebored](https://github.com/Marvinthebored). - UI and mobile flows are steadier: workspace files can collapse and start collapsed, WebChat backscroll survives streaming, the sidebar session picker remains interactive above the desktop workbench, reset soft args survive UI dispatch, stale dashboard session parent lineage is preserved, and iOS reconnects stale foreground gateways. ([#92779](openclaw/openclaw#92779), [#92622](openclaw/openclaw#92622), [#92705](openclaw/openclaw#92705), [#91353](openclaw/openclaw#91353), [#90658](openclaw/openclaw#90658), [#92552](openclaw/openclaw#92552)) Thanks [@shakkernerd](https://github.com/shakkernerd), [@TurboTheTurtle](https://github.com/TurboTheTurtle), [@NianJiuZst](https://github.com/NianJiuZst), [@zhouhe-xydt](https://github.com/zhouhe-xydt), [@luoyanglang](https://github.com/luoyanglang), and [@Solvely-Colin](https://github.com/Solvely-Colin). - Memory, state, and diagnostics recover cleaner: oversized OpenAI embedding batches split before 431s, QMD memory search stays available in transient mode, SQLite avoids WAL on NFS state volumes, stuck-session recovery scheduling no longer resets warning backoff, and Infinity chunk limits stay genuinely unbounded. ([#92650](openclaw/openclaw#92650), [#92618](openclaw/openclaw#92618), [#92639](openclaw/openclaw#92639), [#91247](openclaw/openclaw#91247), [#92752](openclaw/openclaw#92752), [#92735](openclaw/openclaw#92735)) Thanks [@mushuiyu886](https://github.com/mushuiyu886), [@TurboTheTurtle](https://github.com/TurboTheTurtle), [@849261680](https://github.com/849261680), [@gnanam1990](https://github.com/gnanam1990), and [@yhterrance](https://github.com/yhterrance). ##### Changes - Providers/models: add GLM-5.2 support and Claude Haiku 4.5 catalog entries while keeping provider-qualified model IDs normalized across OpenRouter and Google Vertex paths. ([#92796](openclaw/openclaw#92796), [#90116](openclaw/openclaw#90116), [#92627](openclaw/openclaw#92627), [#91218](openclaw/openclaw#91218)) Thanks [@arkyu2077](https://github.com/arkyu2077), [@liuhao1024](https://github.com/liuhao1024), and [@bymle](https://github.com/bymle). - Channel plugins: ship Telegram rich-message delivery and WhatsApp ACP binding support, including rich prompt handoff to CLI backends and transport fixtures for richer drafts. ([#92679](openclaw/openclaw#92679), [#92513](openclaw/openclaw#92513)) Thanks [@obviyus](https://github.com/obviyus) and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Agent commands: support `/btw` in CLI-backed sessions and keep CLI usage-error exits classified as usage failures instead of successful runs. ([#92669](openclaw/openclaw#92669), [#92162](openclaw/openclaw#92162)) Thanks [@joshavant](https://github.com/joshavant) and [@Pandah97](https://github.com/Pandah97). - Usage hooks: add built-in full footer rendering, default footer templates, per-turn usage state, credential-aware limits, and fixed-decimal formatting for usage-bar templates. ([#92657](openclaw/openclaw#92657), [#89835](openclaw/openclaw#89835), [#89629](openclaw/openclaw#89629)) Thanks [@Marvinthebored](https://github.com/Marvinthebored). - Docs and operator guidance: document node config examples, clarify before-install hook scope, correct agent default concurrency comments, refresh ZAI provider docs, and update channel/group docs for current Telegram and WhatsApp behavior. ([#92677](openclaw/openclaw#92677), [#92766](openclaw/openclaw#92766), [#92695](openclaw/openclaw#92695)) Thanks [@liuhao1024](https://github.com/liuhao1024), [@sallyom](https://github.com/sallyom), and [@ArielSmoliar](https://github.com/ArielSmoliar). ##### Fixes - Onboarding/skills: show the Homebrew install recommendation only on macOS and Linux, so FreeBSD and other unsupported platforms no longer get a misleading brew prompt. Fixes [#68893](openclaw/openclaw#68893); carries forward [#68894](openclaw/openclaw#68894), [#68910](openclaw/openclaw#68910), [#68941](openclaw/openclaw#68941), [#68943](openclaw/openclaw#68943), [#69002](openclaw/openclaw#69002), and [#69545](openclaw/openclaw#69545). Thanks [@yurivict](https://github.com/yurivict), [@Sanjays2402](https://github.com/Sanjays2402), [@Eruditi](https://github.com/Eruditi), [@JustInCache](https://github.com/JustInCache), [@nnish16](https://github.com/nnish16), and [@Mlightsnow](https://github.com/Mlightsnow). - Channels and delivery: preserve account-scoped DM channel send policy, rich Telegram final replies, rich Telegram tables and lists, Telegram thread-create CLI remapping, Slack outbound `message_sent` hooks, contributed message-tool schema optionality, same-channel generated media completions, and channel chunking around surrogate pairs and Infinity limits. ([#92788](openclaw/openclaw#92788), [#92679](openclaw/openclaw#92679), [#89421](openclaw/openclaw#89421), [#89943](openclaw/openclaw#89943), [#91137](openclaw/openclaw#91137), [#91246](openclaw/openclaw#91246), [#92735](openclaw/openclaw#92735)) Thanks [@yetval](https://github.com/yetval), [@obviyus](https://github.com/obviyus), [@spacegeologist](https://github.com/spacegeologist), [@rishitamrakar](https://github.com/rishitamrakar), [@lundog](https://github.com/lundog), [@TurboTheTurtle](https://github.com/TurboTheTurtle), and [@yhterrance](https://github.com/yhterrance). - Auto-reply/groups: keep ordinary group text replies on automatic final-reply delivery while allowing `message(action=send)` for files, images, and other attachments to the same group or topic. Carries forward [#43276](openclaw/openclaw#43276); refs [#48004](openclaw/openclaw#48004). Thanks [@NayukiChiba](https://github.com/NayukiChiba) and [@ShakaRover](https://github.com/ShakaRover). - Auto-reply/skills: preserve multiline payloads for `/skill` and direct skill slash commands while keeping command-head normalization for aliases, colon syntax, and bot mentions. Fixes [#79155](openclaw/openclaw#79155); carries forward [#81305](openclaw/openclaw#81305). Thanks [@web3blind](https://github.com/web3blind). - iMessage: normalize leading NUL sent-message echo prefixes while preserving interior NUL bytes and the leading attributedBody marker handling from [#73942](openclaw/openclaw#73942). Carries forward [#63581](openclaw/openclaw#63581). Thanks [@drvoss](https://github.com/drvoss). - Discord: give generated auto-thread titles a 60-second timeout and 4,096-token reasoning-model output budget, clamped to the selected model output cap. ([#64734](openclaw/openclaw#64734)) Thanks [@hanamizuki](https://github.com/hanamizuki). - Agent, cron, and Gateway runtime: mark active main sessions before restart shutdown aborts, pause yielded subagent runs whose terminal also signals abort, preserve yielded media completions, de-duplicate main-session heartbeat events, expose session identity in runtime prompts, reject unknown OpenAI agent selectors, keep generated media completions and slash-command block replies in WebChat, preserve fresh post-compaction usage while clearing stale usage snapshots, and require admin privileges for HTTP session/model override surfaces. ([#91357](openclaw/openclaw#91357), [#92631](openclaw/openclaw#92631), [#92146](openclaw/openclaw#92146), [#91287](openclaw/openclaw#91287), [#92468](openclaw/openclaw#92468), [#92510](openclaw/openclaw#92510), [#91246](openclaw/openclaw#91246), [#50795](openclaw/openclaw#50795), [#50845](openclaw/openclaw#50845), [#82874](openclaw/openclaw#82874), [#92651](openclaw/openclaw#92651), [#92646](openclaw/openclaw#92646)) Thanks [@ooiuuii](https://github.com/ooiuuii), [@openperf](https://github.com/openperf), [@IWhatsskill](https://github.com/IWhatsskill), [@ZengWen-DT](https://github.com/ZengWen-DT), [@zhangguiping-xydt](https://github.com/zhangguiping-xydt), [@Hollychou924](https://github.com/Hollychou924), [@leno23](https://github.com/leno23), and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Agents/exec: default empty-success background completion notices on only for real chat channels, preserving explicit opt-outs and keeping generic providers silent while carrying forward the narrow UX intent from [#39726](openclaw/openclaw#39726) and [#46926](openclaw/openclaw#46926). Thanks [@Sapientropic](https://github.com/Sapientropic) and [@wenkang-xie](https://github.com/wenkang-xie). - Providers and model replay: preserve storeless OpenAI Responses replay compatibility, avoid eager tool streaming for Claude 4.5 in Copilot, honor profile auth for SecretRef model entries, bound model browsing, strip provider prefixes where runtimes need bare IDs, and surface nested embedding fetch failures. ([#90706](openclaw/openclaw#90706), [#75393](openclaw/openclaw#75393), [#90686](openclaw/openclaw#90686), [#92247](openclaw/openclaw#92247), [#92627](openclaw/openclaw#92627), [#91218](openclaw/openclaw#91218), [#92628](openclaw/openclaw#92628)) Thanks [@snowzlm](https://github.com/snowzlm), [@Kailigithub](https://github.com/Kailigithub), [@rohitjavvadi](https://github.com/rohitjavvadi), [@samson910022](https://github.com/samson910022), [@liuhao1024](https://github.com/liuhao1024), [@bymle](https://github.com/bymle), and [@mushuiyu886](https://github.com/mushuiyu886). - Memory, state, diagnostics, and config: split header-too-large embedding batches, keep QMD memory search enabled in transient mode, avoid SQLite WAL on NFS volumes, preserve recovery scheduling outside stuck-session warning backoff, and keep shell environment fallbacks contained in config write tests. ([#92650](openclaw/openclaw#92650), [#92618](openclaw/openclaw#92618), [#92639](openclaw/openclaw#92639), [#91247](openclaw/openclaw#91247), [#92752](openclaw/openclaw#92752)) Thanks [@mushuiyu886](https://github.com/mushuiyu886), [@TurboTheTurtle](https://github.com/TurboTheTurtle), [@849261680](https://github.com/849261680), and [@gnanam1990](https://github.com/gnanam1990). - Workspace setup state: store setup completion outside the workspace dot directory using an OpenClaw-named root file, migrate valid legacy state forward, and avoid clobbering generic root `workspace-state.json` files for TigerFS-style dot-path compatibility. This Clownfish replacement carries forward the focused [#53326](openclaw/openclaw#53326) fix idea because the original branch was closed and uneditable. ([#53326](openclaw/openclaw#53326), [#44783](openclaw/openclaw#44783), [#39446](openclaw/openclaw#39446)) Thanks [@1qh](https://github.com/1qh). - UI/mobile/TUI: preserve dashboard session parent lineage, WebChat backscroll, reset soft command args, sidebar session picker interactivity, collapsed workspace files, resolved `/model` confirmation refs, and stale foreground iOS Gateway reconnects. ([#90658](openclaw/openclaw#90658), [#92622](openclaw/openclaw#92622), [#91353](openclaw/openclaw#91353), [#92705](openclaw/openclaw#92705), [#92779](openclaw/openclaw#92779), [#92773](openclaw/openclaw#92773), [#92552](openclaw/openclaw#92552)) Thanks [@luoyanglang](https://github.com/luoyanglang), [@TurboTheTurtle](https://github.com/TurboTheTurtle), [@zhouhe-xydt](https://github.com/zhouhe-xydt), [@NianJiuZst](https://github.com/NianJiuZst), [@shakkernerd](https://github.com/shakkernerd), [@NarahariRaghava](https://github.com/NarahariRaghava), and [@Solvely-Colin](https://github.com/Solvely-Colin). - TUI: reload the active session after external `/new` or `/reset` session-change events so stale transcript and stream state clear promptly. Fixes [#38966](openclaw/openclaw#38966); carries forward [#40472](openclaw/openclaw#40472). Thanks [@yizhanzjz](https://github.com/yizhanzjz) and [@wsyjh8](https://github.com/wsyjh8). - Control UI: preserve Gateway Access tokens during same-normalized WebSocket URL edits and reload gateway-scoped tokens when switching endpoints. Fixes [#41545](openclaw/openclaw#41545); repairs [#42001](openclaw/openclaw#42001) with additional source PRs [#41546](openclaw/openclaw#41546), [#41552](openclaw/openclaw#41552), and [#41718](openclaw/openclaw#41718). Thanks [@wsyjh8](https://github.com/wsyjh8), [@llagy0020](https://github.com/llagy0020), [@llagy007](https://github.com/llagy007), [@pingfanfan](https://github.com/pingfanfan), and [@zheliu2](https://github.com/zheliu2). - Gateway CLI: tolerate a single transient clean WebSocket close before `hello-ok` so one-shot RPC calls reconnect instead of failing noisily, while repeated clean pre-hello closes still surface. Carries forward source PRs [#54475](openclaw/openclaw#54475) and [#54774](openclaw/openclaw#54774); [#85253](openclaw/openclaw#85253) covered adjacent connect assembly diagnostics. Thanks [@ruanrrn](https://github.com/ruanrrn). - Gateway/Linux: keep root-owned systemd user service lifecycle commands on root's user manager when a stale `SUDO_USER` remains in a root shell with root's user bus environment. Fixes [#81410](openclaw/openclaw#81410). Thanks [@Ericksza](https://github.com/Ericksza) and [@ChuckClose-tech](https://github.com/ChuckClose-tech). - Release and test reliability: extend slow Gateway/full-suite watchdogs, split local full-suite shards when throttled, stabilize plugin auth marker fixtures, avoid brittle provider-ref error text, and keep QA Lab bootstrap selection assertions aligned with flow-only scenarios. ([#92652](openclaw/openclaw#92652)) - macOS Peekaboo bridge: update the embedded Peekaboo package to 3.5.2 and route bundled-skill CLI commands through the OpenClaw app bridge so they inherit its Screen Recording and Accessibility grants. - Agent routing: route subagent RPC callbacks addressed to an agent-shaped `--to` target to the correct session key instead of falling back to the main session, so WeChat (and other channel) session-key callbacks reach the intended subagent session. ([#90231](openclaw/openclaw#90231)) Thanks [@zhangguiping-xydt](https://github.com/zhangguiping-xydt). - Cron: preserve model, fallback, thinking, timeout, light-context, unsafe-content, and tool allow-list overrides on implicit text payloads by promoting them to agent turns, while explicit system events still prune those fields. Fixes [#28905](openclaw/openclaw#28905); carries forward [#64060](openclaw/openclaw#64060) and [#73946](openclaw/openclaw#73946). Thanks [@liaoandi](https://github.com/liaoandi). - QQBot delivery: keep markdown table chunks self-contained across message boundaries by preserving table state across block deliveries, flushing unfinished table-row fragments as plain text, and detecting short pipe-terminated rows by column count so split rows are not sent as malformed markdown. ([#92428](openclaw/openclaw#92428)) Thanks [@sliverp](https://github.com/sliverp). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1144

openclaw-barnacle Bot added size: XS proof: supplied External PR includes structured after-fix real behavior proof. labels Jun 13, 2026

vincentkoc self-assigned this Jun 13, 2026

fix(sessions): derive channel from account-scoped DM session keys in …

53006b2

…send-policy

vincentkoc force-pushed the fix/send-policy-account-scoped-channel branch from 3adee18 to 53006b2 Compare June 13, 2026 21:34

openclaw-barnacle Bot removed the proof: sufficient ClawSweeper judged the real behavior proof convincing. label Jun 13, 2026

vincentkoc approved these changes Jun 13, 2026

View reviewed changes

vincentkoc merged commit ae68006 into openclaw:main Jun 13, 2026
163 of 165 checks passed

clawsweeper Bot mentioned this pull request Jul 16, 2026

fix(sessions): commit reduced session index before deleting evicted transcripts #108378

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

fix(sessions): derive channel from account-scoped DM session keys in send-policy#92788

fix(sessions): derive channel from account-scoped DM session keys in send-policy#92788
vincentkoc merged 1 commit into
openclaw:mainfrom
yetval:fix/send-policy-account-scoped-channel

yetval commented Jun 13, 2026

Uh oh!

clawsweeper Bot commented Jun 13, 2026 •

edited

Loading

Uh oh!

vincentkoc left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Uh oh!

Conversation

yetval commented Jun 13, 2026

Summary

Root cause

Why not one-sided

Verification

Real behavior proof

References

Uh oh!

clawsweeper Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

vincentkoc left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

clawsweeper Bot commented Jun 13, 2026 •

edited

Loading