惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
T
ThreatConnect
SecWiki News
SecWiki News
F
Future of Privacy Forum
AWS News Blog
AWS News Blog
C
Cisco Blogs
A
Arctic Wolf
Vercel News
Vercel News
The GitHub Blog
The GitHub Blog
Scott Helme
Scott Helme
V
V2EX
博客园 - 叶小钗
阮一峰的网络日志
阮一峰的网络日志
K
Kaspersky official blog
G
Google Developers Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
P
Privacy International News Feed
C
Cyber Attacks, Cyber Crime and Cyber Security
N
News | PayPal Newsroom
Schneier on Security
Schneier on Security
NISL@THU
NISL@THU
Microsoft Azure Blog
Microsoft Azure Blog
量子位
The Hacker News
The Hacker News
Stack Overflow Blog
Stack Overflow Blog
Security Latest
Security Latest
M
Microsoft Research Blog - Microsoft Research
Google Online Security Blog
Google Online Security Blog
博客园_首页
C
CXSECURITY Database RSS Feed - CXSecurity.com
I
InfoQ
Google DeepMind News
Google DeepMind News
Y
Y Combinator Blog
The Cloudflare Blog
Microsoft Security Blog
Microsoft Security Blog
Martin Fowler
Martin Fowler
Cisco Talos Blog
Cisco Talos Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
T
Troy Hunt's Blog
F
Fox-IT International blog
S
Security @ Cisco Blogs
博客园 - 司徒正美
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
C
Comments on: Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
L
LINUX DO - 最新话题
GbyAI
GbyAI
Project Zero
Project Zero
腾讯CDC
T
Tailwind CSS Blog

Recent Commits to openclaw:main

fix: honor skill source install aliases (#84842) fix(test): avoid message tool bundled channel loads · openclaw/openclaw@6421808 test(onboard): guard docker e2e resources chore: bump OpenClaw to 2026.5.26 fix: stabilize discord voice receive recovery perf: reduce session and auth cache hotpath work (#86678) · openclaw/openclaw@ee51169 fix(qa): stream gateway gauntlet prebuild output fix(cli): route plugin packaging recovery hints · openclaw/openclaw@56633e4 perf(agents): reuse model manifest context · openclaw/openclaw@ea2496b fix(diagnostics): expose missing telemetry signals (#86682) · openclaw/openclaw@ef8619d perf: avoid extra session snapshot cloning · openclaw/openclaw@71e9eaa fix: avoid compaction checkpoint transcript copies (#86666) · openclaw/openclaw@c59635a fix: preserve code mode failure output test: avoid message tool discovery in send helper · openclaw/openclaw@1514cc8 fix(scripts): bound guard inventory file reads · openclaw/openclaw@6defcb0 fix(test): isolate kitchen sink rpc home env feat(signal): support reaction approvals (#85894) fix(scripts): bound source scan file reads · openclaw/openclaw@57748a6 test(ollama): support cloud api live smoke · openclaw/openclaw@2a6b4ed test: serialize agents tools vitest files · openclaw/openclaw@978a2d0 fix(auto-reply): use context-aware overflow reserve hints (#84399) · openclaw/openclaw@3a4f2b1 feat(gateway): forward OpenAI sampling params (#84094) · openclaw/openclaw@6c7b3f3 perf: cache model cost indexes · openclaw/openclaw@068924e fix: hide unsupported best effort message option · openclaw/openclaw@5dc7043 refactor: reuse realtime output activity in google meet (#86665) fix(test): harden bundled plugin install sweep · openclaw/openclaw@84929e4 fix: prefer source public artifacts in source checkouts · openclaw/openclaw@c87957d test: type child process spawn mock · openclaw/openclaw@65a2105 test(installer): cover rocky cli installs · openclaw/openclaw@fe33747 docs: update changelog for landed fixes · openclaw/openclaw@da831e2 fix: dampen repeated device-required probes · openclaw/openclaw@399c692 fix(ui): keep local file markdown links inert · openclaw/openclaw@fc2d2d5 fix(update): avoid duplicate plugin smoke failures · openclaw/openclaw@342bde2 fix(gateway): cap retained compaction checkpoint bytes · openclaw/openclaw@d7361ef fix: stabilize tests and reduce plugin memory churn · openclaw/openclaw@c1a026a perf: reduce runtime metadata hotpath churn · openclaw/openclaw@1d21224 refactor: share realtime output activity tracking (#86661) fix(memory-wiki): bound compile page reads (#86660) · openclaw/openclaw@acbdb8c test(qa-matrix): use larger media coverage jpeg fix(cli): reject unknown command help roots (#81083) (thanks @YB0y) · openclaw/openclaw@bec7d56 test: improve test profiling helpers · openclaw/openclaw@68ab48b perf: reduce fuzzy matching allocations · openclaw/openclaw@ec7ad3b perf: reduce runtime cache churn · openclaw/openclaw@1531fe2 refactor: reuse forced consult coordinator in discord voice (#86656) · openclaw/openclaw@0164fd5 fix(scripts): drain codex-cli metadata stdout (#84239) (thanks @Iftek… fix(test): avoid discord voice tts activation tax · openclaw/openclaw@75ac0b5 fix(codex): disable native thread personality (#85891) (thanks @lastg… · openclaw/openclaw@0f35ec2 Refactor realtime voice turn context tracking (#86650) fix(discord): surface silent reply-delivery skips and remove runtime.… · openclaw/openclaw@3a48366 test(discord): cover deliver-lambda abort-skip path via processDiscor… · openclaw/openclaw@48adcb1 docs: update changelog for landed bug fixes · openclaw/openclaw@75c6cf2 test(qa-matrix): use valid media coverage jpeg · openclaw/openclaw@0f54221 fix(gmail-watcher): strip listeners from old process after settleProc… · openclaw/openclaw@0a38932 fix(gmail-watcher): prevent TDZ in settleProcess and guard exit handl… · openclaw/openclaw@94968c8 fix(hooks): stop existing Gmail watcher before re-entry to prevent leaks fix(codex): honor yolo app-server approval policy · openclaw/openclaw@7b30291 fix(usage-cost): invalidate durable cache on missing-cost semantics c… · openclaw/openclaw@9c79a0f fix(usage-cost): preserve transport-recorded positive cost for unpric… · openclaw/openclaw@6e85869 fix(usage-cost): only flag catalog-default zeros, preserve operator-c… · openclaw/openclaw@1670249 fix: treat zero-rate usage cost as unknown · openclaw/openclaw@116c600 fix(usage-cost): surface unpriced-model spend as missingCostEntries i… · openclaw/openclaw@1cc0a96 fix(irc): normalize channel route ids · openclaw/openclaw@9cb1e47 test(irc): cover transient channel join · openclaw/openclaw@c4c80ce fix(irc): store inbound channel routes as channel:#name and join befo… · openclaw/openclaw@63dee51 fix(test): harden macos onboarding e2e · openclaw/openclaw@cd96542 fix(agents): strip markdown code spans from IDENTITY.md values and la… · openclaw/openclaw@55c9a6b perf: reduce runtime cache churn · openclaw/openclaw@5b6d03e fix(pi-runner): flush blocks after compaction retry (#85288) (thanks … · openclaw/openclaw@0d4575a fix(gateway): abort stale agent runs on restart · openclaw/openclaw@a122d80 fix(ui): harden control e2e browser setup · openclaw/openclaw@4424daf fix(telegram): keep overlapping DM replies deliverable (#85361) (than… · openclaw/openclaw@0f67dfd fix(openai): route compaction through Codex auth provider (#86408) · openclaw/openclaw@f4cfa01 refactor: share realtime forced consult coordination · openclaw/openclaw@5dccba7 test(qa-lab): add runtime confidence reports build: refresh dependency pins (#86628) · openclaw/openclaw@cda7c30 test: port release validation stabilizers · openclaw/openclaw@9f7485e fix(cron): stop forcing message tool for delivery · openclaw/openclaw@c51fa0d fix(google): omit request config with cached content test: stabilize release validation test harnesses fix(test): bound kitchen sink command output · openclaw/openclaw@f1197ed fix(discord): stabilize realtime wake-name feedback test(config): guard legacy agentRuntime regression perf: precompute audio resample kernels fix(codex): allow env api-key app-server bootstrap · openclaw/openclaw@009b18c refactor: reuse shared coercion helpers (#86419) · openclaw/openclaw@77d9ac3 fix(cron): preserve runtime snapshot for isolated delivery · openclaw/openclaw@a98660e fix(test): model active assistant failover attempts · openclaw/openclaw@c55bee5 docs: update changelog for bug sweep landings test: fix mock signatures for tsgo · openclaw/openclaw@aa05c5c docs: document fail-closed behavior for rejected modelPatterns · openclaw/openclaw@36f269d fix(security): guard plugin modelPatterns with compileSafeRegex · openclaw/openclaw@117e082 docs(manifest): note safe-regex validation for modelPatterns · openclaw/openclaw@e7c7ee4 style: use bracket notation for __openclaw to satisfy no-underscore-d… · openclaw/openclaw@9a6c161 fix(security): escape field names in transcript regex extraction · openclaw/openclaw@fe8d99d test: tighten oversized metadata assertion to check exact id in __ope… · openclaw/openclaw@aff8e64 fix(logging): exit on stdout/stderr EPIPE instead of spinning · openclaw/openclaw@2aa5f17 fix(logging): preserve failure exit on EPIPE · openclaw/openclaw@623a60a fix(logging): keep string failure codes on EPIPE · openclaw/openclaw@78a1e7d fix(scripts): docs-spellcheck.sh fails on bash 3.2 with set -u · openclaw/openclaw@fef57f9 fix(docs): keep spellcheck bash 3.2-compatible · openclaw/openclaw@778fa87
fix(cron): accept opaque session target keys · openclaw/openclaw@c9364f0
ferminquant · 2026-05-26 · via Recent Commits to openclaw:main

@@ -784,28 +784,30 @@ describe("gateway server cron", () => {

784784

}

785785

});

786786787-

test("rejects unsafe custom session ids on add and update", async () => {

787+

test("accepts opaque custom session ids on add and update", async () => {

788788

const { prevSkipCron } = await setupCronTestRun({

789-

tempPrefix: "openclaw-gw-cron-bad-session-target-",

789+

tempPrefix: "openclaw-gw-cron-opaque-session-target-",

790790

cronEnabled: false,

791791

});

792792793793

const cronState = await createDirectCronState();

794794795795

try {

796796

const addRes = await directCronReq(cronState, "cron.add", {

797-

name: "bad custom session",

797+

name: "dingtalk group session",

798798

enabled: true,

799799

schedule: { kind: "every", everyMs: 60_000 },

800-

sessionTarget: "session:../../outside",

800+

sessionTarget: "session:agent:main:dingtalk:group:cid3tmd4xb19xjfk/wogxwy2a==",

801801

wakeMode: "now",

802802

payload: { kind: "agentTurn", message: "hello" },

803803

});

804-

expect(addRes.ok).toBe(false);

805-

expect(addRes.error?.message).toContain("invalid cron sessionTarget session id");

804+

expect(addRes.ok).toBe(true);

805+

expectRecordFields(addRes.payload, {

806+

sessionTarget: "session:agent:main:dingtalk:group:cid3tmd4xb19xjfk/wogxwy2a==",

807+

});

806808807809

const validRes = await directCronReq(cronState, "cron.add", {

808-

name: "good custom session",

810+

name: "custom session to patch",

809811

enabled: true,

810812

schedule: { kind: "every", everyMs: 60_000 },

811813

sessionTarget: "session:project-alpha:ops",

@@ -822,8 +824,8 @@ describe("gateway server cron", () => {

822824

sessionTarget: "session:..\\outside",

823825

},

824826

});

825-

expect(updateRes.ok).toBe(false);

826-

expect(updateRes.error?.message).toContain("invalid cron sessionTarget session id");

827+

expect(updateRes.ok).toBe(true);

828+

expectRecordFields(updateRes.payload, { sessionTarget: "session:..\\outside" });

827829

} finally {

828830

await cleanupCronTestRun({ cronState, prevSkipCron });

829831

}

@@ -1136,20 +1138,21 @@ describe("gateway server cron", () => {

11361138

}

11371139

}, 45_000);

113811401139-

test("fails closed for persisted unsafe custom session ids", async () => {

1141+

test("runs persisted opaque custom session ids with native separators", async () => {

11401142

const now = Date.now();

1143+

const sessionTarget = "session:agent:main:dingtalk:group:cid3tmd4xb19xjfk/wogxwy2a==";

11411144

const { prevSkipCron } = await setupCronTestRun({

1142-

tempPrefix: "openclaw-gw-cron-persisted-bad-session-target-",

1145+

tempPrefix: "openclaw-gw-cron-persisted-opaque-session-target-",

11431146

cronEnabled: false,

11441147

jobs: [

11451148

{

1146-

id: "bad-custom-session-job",

1147-

name: "bad custom session job",

1149+

id: "opaque-custom-session-job",

1150+

name: "opaque custom session job",

11481151

enabled: true,

11491152

createdAtMs: now,

11501153

updatedAtMs: now,

11511154

schedule: { kind: "every", everyMs: 60_000 },

1152-

sessionTarget: "session:../../outside",

1155+

sessionTarget,

11531156

wakeMode: "now",

11541157

payload: { kind: "agentTurn", message: "hello" },

11551158

state: {},

@@ -1162,13 +1165,21 @@ describe("gateway server cron", () => {

11621165

await connectOk(ws);

1163116611641167

try {

1168+

const finished = waitForCronEvent(

1169+

ws,

1170+

(payload) =>

1171+

payload?.jobId === "opaque-custom-session-job" && payload?.action === "finished",

1172+

);

11651173

const runRes = await rpcReq(ws, "cron.run", {

1166-

id: "bad-custom-session-job",

1174+

id: "opaque-custom-session-job",

11671175

mode: "force",

11681176

});

11691177

expect(runRes.ok).toBe(true);

1170-

expect(runRes.payload).toEqual({ ok: true, ran: false, reason: "invalid-spec" });

1171-

expect(cronIsolatedRun).not.toHaveBeenCalled();

1178+

expectEnqueuedRunPayload(runRes.payload);

1179+

await finished;

1180+

expect(cronIsolatedRun).toHaveBeenCalledTimes(1);

1181+

const call = cronIsolatedRun.mock.calls.at(0)?.[0] as { sessionKey?: unknown } | undefined;

1182+

expect(call?.sessionKey).toBe("agent:main:dingtalk:group:cid3tmd4xb19xjfk/wogxwy2a==");

11721183

} finally {

11731184

await cleanupCronTestRun({ ws, server, prevSkipCron });

11741185

}