- Dependencies: bump transitive `basic-ftp` to 5.3.1 so the runtime lockfile no longer includes the vulnerable 5.3.0 build flagged by the production dependency audit. (#78637) Thanks @sallyom.

- Hooks/cron: log returned `/hooks/agent` isolated-run errors and failed cron jobs with cron diagnostic summaries, so rejected `payload.model` values are visible instead of looking like accepted-but-missing runs. Fixes #78597. (#78655) Thanks @kevinslin.

- Managed proxy/security: classify raw socket callsites and proxy runtime mutations in boundary checks so new direct egress or unmanaged proxy-state changes cannot land without explicit review. (#77126) Thanks @jesse-merhi.

- Memory indexing: propagate memory directory creation failures immediately instead of reporting an unusable directory as ready. Thanks @he-yufeng.

- Channels/iMessage: surface the silent group-allowlist drop at default log level by emitting a one-time `warn` per account at monitor startup when `channels.imessage.groupPolicy: "allowlist"` is set without a `channels.imessage.groups` block, plus a one-time `warn` per `chat_id` when the runtime gate drops a specific group, naming the exact `channels.imessage.groups[...]` key to add to allow it. Fixes #78749. (#79190) Thanks @omarshahine.

- WhatsApp: stop Gateway-originated outbound echoes from advancing inbound activity in `openclaw channels status`, so outbound self-sends no longer look like handled inbound messages. Fixes #79056. (#79057) Thanks @ai-hpc and @bittoby.

- Gateway/nodes: preserve the live node registry session and invoke ownership when an older same-node WebSocket closes after reconnecting. (#78351) Thanks @samzong.

import fsSync from "node:fs";

import os from "node:os";

import path from "node:path";

import { afterAll, beforeAll, beforeEach, describe, expect, it } from "vitest";

import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

import {

buildFileEntry,

buildMultimodalChunkForIndexing,

chunkMarkdown,

ensureDir,

isMemoryPath,

listMemoryFiles,

normalizeExtraMemoryPaths,

}

});

afterEach(() => {

vi.restoreAllMocks();

});

function setupTempDirLifecycle(prefix: string): () => string {

let tmpDir = "";

beforeEach(() => {

describe("memory host SDK package internals", () => {

const getTmpDir = setupTempDirLifecycle("memory-package-");

it("propagates directory creation failures", () => {

const mkdirError = new Error("disk full");

const targetDir = path.join(getTmpDir(), "blocked");

const mkdirSync = vi.spyOn(fsSync, "mkdirSync").mockImplementation(() => {

throw mkdirError;

});

expect(() => ensureDir(targetDir)).toThrow(mkdirError);

expect(mkdirSync).toHaveBeenCalledWith(targetDir, { recursive: true });

});

it("normalizes additional memory paths", () => {

const workspaceDir = path.join(os.tmpdir(), "memory-test-workspace");

const absPath = path.resolve(path.sep, "shared-notes");

};

export function ensureDir(dir: string): string {

try {

fsSync.mkdirSync(dir, { recursive: true });

} catch {}

fsSync.mkdirSync(dir, { recursive: true });

return dir;

}