### Fixes

- Voice/Ollama: honor routed voice agent `tools.allow` for classic embedded voice responses, including empty allowlists, so no-tool Ollama agents do not receive tool schemas. Fixes #79506. Thanks @donkeykong91.

- Gateway: reread config from disk after the first in-process restart loop startup, preventing SIGUSR1 restarts from reusing a stale startup snapshot and dropping config written after boot. Fixes #79947. Thanks @TheLevti.

- Codex app-server: deliver native image-generation outputs from Codex `savedPath` events as reply media, so blank-text image generation turns still attach the generated file. Thanks @keshavbotagent.

- Network/SSRF: keep pinned automatic DNS lookups on IPv4 when dual-stack hosts also publish AAAA records, and treat `EADDRNOTAVAIL` as a transient gateway network failure instead of a fatal crash. Fixes #80078. Thanks @takamasa-aiso.

agentId?: string;

workspaceDir?: string;

sessionFile?: string;

toolsAllow?: string[];

};

function createAgentRuntime(payloads: Array<Record<string, unknown>>) {

expect(args.workspaceDir).toBe("/tmp/openclaw/workspace/voice");

expect(args.sessionFile).toBe("/tmp/openclaw/voice/sessions/session.jsonl");

});

it("passes the routed voice agent explicit tool allowlist to the embedded run", async () => {

const { runtime, runEmbeddedPiAgent } = createAgentRuntime([

{ text: '{"spoken":"No tools needed."}' },

]);

const coreConfig = {

agents: {

list: [

{

id: "voice",

tools: { allow: [] },

},

],

},

} as CoreConfig;

const result = await generateVoiceResponse({

voiceConfig: VoiceCallConfigSchema.parse({

agentId: "voice",

responseModel: "ollama/qwen2.5:1.5b",

responseTimeoutMs: 5000,

}),

coreConfig,

agentRuntime: runtime,

callId: "call-123",

from: "+15550001111",

transcript: [],

userMessage: "hello there",

});

expect(result.text).toBe("No tools needed.");

const args = requireEmbeddedAgentArgs(runEmbeddedPiAgent);

expect(args.agentId).toBe("voice");

expect(args.toolsAllow).toStrictEqual([]);

});

});

isReasoning?: boolean;

};

function isRecord(value: unknown): value is Record<string, unknown> {

return typeof value === "object" && value !== null && !Array.isArray(value);

}

function readExplicitToolsAllow(value: unknown): string[] | undefined {

if (!isRecord(value)) {

return undefined;

}

const allow = value.allow;

if (!Array.isArray(allow)) {

return undefined;

}

return allow.filter((entry): entry is string => typeof entry === "string");

}

function resolveVoiceAgentToolsAllow(config: CoreConfig, agentId: string): string[] | undefined {

const agents = isRecord(config.agents) ? config.agents : undefined;

const list = Array.isArray(agents?.list) ? agents.list : [];

const agent = list.find((entry) => isRecord(entry) && entry.id === agentId);

if (!isRecord(agent)) {

return undefined;

}

return readExplicitToolsAllow(isRecord(agent.tools) ? agent.tools : undefined);

}

const VOICE_SPOKEN_OUTPUT_CONTRACT = [

"Output format requirements:",

'- Return only valid JSON in this exact shape: {"spoken":"..."}',

explicitSessionKey: sessionKey,

});

const agentId = voiceConfig.agentId ?? "main";

const toolsAllow = resolveVoiceAgentToolsAllow(cfg, agentId);

// Resolve paths

const storePath = agentRuntime.session.resolveStorePath(cfg.session?.store, { agentId });

lane: "voice",

extraSystemPrompt,

agentDir,

toolsAllow,

});

const text = extractSpokenTextFromPayloads((result.payloads ?? []) as VoiceResponsePayload[]);