- Infra/tmp: tolerate concurrent temp-dir permission repairs by rechecking directories that another process already tightened, so parallel ACP subprocess startup no longer throws `Unsafe fallback OpenClaw temp dir`. Fixes #66867. Thanks @Kane808-AI and @jarvisz8.

- Agents/compaction: add an opt-in `agents.defaults.compaction.midTurnPrecheck` mid-turn precheck that detects tool-loop context pressure and triggers compaction before the next tool call instead of waiting for end-of-turn. (#73499) Thanks @marchpure and @haoxingjun.

- Gateway/approvals: let loopback token/password-backed native approval clients resolve exec approvals without attaching stale paired Gateway identities, while remote and unauthenticated approval clients keep normal device identity behavior. (#74472)

- Gateway/config: include rejected validation paths in foreground and service last-known-good recovery logs plus main-agent notices, so unsupported direct edits explain which key caused restore instead of looking like silent reversion. Fixes #75060. Thanks @amknight.

## 2026.4.29

- `.clobbered.*` exists → an external direct edit or startup read was restored.

- `.rejected.*` exists → an OpenClaw-owned config write failed schema or clobber checks before commit.

- `Config write rejected:` → the write tried to drop required shape, shrink the file sharply, or persist invalid config.

- `Rejected validation details:` → the recovery log or main-agent notice includes the schema path that caused the restore, such as `agents.defaults.execution` or `gateway.auth.password.source`.

- `missing-meta-vs-last-good`, `gateway-mode-missing-vs-last-good`, or `size-drop-vs-last-good:*` → startup treated the current file as clobbered because it lost fields or size compared with the last-known-good backup.

- `Config last-known-good promotion skipped` → the candidate contained redacted secret placeholders such as `***`.

},

});

expect(gatewayLogMessages).toContain(

"gateway: restored invalid effective config from last-known-good backup: /tmp/openclaw-test-missing-config.json",

"gateway: restored invalid effective config from last-known-good backup: /tmp/openclaw-test-missing-config.json; Rejected validation details: <root>: JSON5 parse failed.",

);

expect(startGatewayServer).toHaveBeenCalledWith(

19170,

GatewayBindMode,

GatewayTailscaleMode,

} from "../../config/config.js";

import { formatConfigIssueSummary } from "../../config/issue-format.js";

import { CONFIG_PATH, resolveGatewayPort, resolveStateDir } from "../../config/paths.js";

import type { OpenClawConfig } from "../../config/types.openclaw.js";

import { hasConfiguredSecretInput } from "../../config/types.secrets.js";

}),

);

if (recovered) {

const issueSummary = formatConfigIssueSummary([

...invalidSnapshot.issues,

...invalidSnapshot.legacyIssues,

]);

gatewayLog.warn(

`gateway: restored invalid effective config from last-known-good backup: ${invalidSnapshot.path}`,

`gateway: restored invalid effective config from last-known-good backup: ${invalidSnapshot.path}${issueSummary ? `; Rejected validation details: ${issueSummary}.` : ""}`,

);

try {

const { writeRestartSentinel } = await import("../../infra/restart-sentinel.js");

}));

vi.mock("../config/io.js", () => ({

getRuntimeConfig: loadConfigMock,

readBestEffortConfig: loadConfigMock,

}));

vi.mock("../infra/net/proxy/proxy-lifecycle.js", () => ({

handle?.kill("SIGTERM");

};

if (shouldStartProxyForCli(normalizedArgv)) {

const [{ getRuntimeConfig }, { startProxy }] = await Promise.all([

const [{ readBestEffortConfig }, { startProxy }] = await Promise.all([

import("../config/io.js"),

import("../infra/net/proxy/proxy-lifecycle.js"),

]);

const config = getRuntimeConfig();

const config = await readBestEffortConfig();

proxyHandle = await startProxy(config?.proxy ?? undefined);

}

expect(warn).toHaveBeenCalledWith(

expect.stringContaining("Config auto-restored from last-known-good:"),

);

expect(warn).toHaveBeenCalledWith(

expect.stringContaining("Rejected validation details: gateway.mode: Expected string."),

);

const observe = await readLastObserveEvent(auditPath);

expect(observe?.restoredFromBackup).toBe(true);

expect(observe?.restoredBackupPath).toBe(resolveLastKnownGoodConfigPath(configPath));

appendConfigAuditRecordSync,

type ConfigObserveAuditRecord,

} from "./io.audit.js";

import { formatConfigIssueSummary } from "./issue-format.js";

import { resolveStateDir } from "./paths.js";

import {

isPluginLocalInvalidConfigSnapshot,

});

await deps.fs.promises.copyFile(lastGoodPath, snapshot.path);

await deps.fs.promises.chmod?.(snapshot.path, 0o600).catch(() => {});

const issueSummary = formatConfigIssueSummary([...snapshot.issues, ...snapshot.legacyIssues]);

deps.logger.warn(

`Config auto-restored from last-known-good: ${snapshot.path} (${params.reason})`,

`Config auto-restored from last-known-good: ${snapshot.path} (${params.reason})${issueSummary ? `; Rejected validation details: ${issueSummary}.` : ""}`,

);

await appendConfigAuditRecord(

createConfigObserveAuditAppendParams(deps, {

import {

formatConfigIssueLine,

formatConfigIssueLines,

formatConfigIssueSummary,

normalizeConfigIssue,

normalizeConfigIssuePath,

normalizeConfigIssues,

).toBe("- gateway.\\nbind: bad\\r\\n\\tvalue");

});

it("formats concise issue summaries", () => {

expect(formatConfigIssueSummary([])).toBeNull();

expect(

formatConfigIssueSummary(

[

{ path: "", message: "root broken" },

{ path: "gateway.auth.password.source", message: "Required" },

{ path: "agents.defaults.execution", message: "Unrecognized key" },

],

{ maxIssues: 2 },

),

).toBe("<root>: root broken; gateway.auth.password.source: Required; and 1 more");

});

it("normalizes issue metadata for machine output", () => {

expect(

normalizeConfigIssue({

import { sanitizeTerminalText } from "../terminal/safe-text.js";

import type { ConfigValidationIssue } from "./types.js";

type ConfigIssueLineInput = {

export type ConfigIssueLineInput = {

path?: string | null;

message: string;

};

normalizeRoot?: boolean;

};

type ConfigIssueSummaryOptions = ConfigIssueFormatOptions & {

maxIssues?: number;

};

export function normalizeConfigIssuePath(path: string | null | undefined): string {

if (typeof path !== "string") {

return "<root>";

): string[] {

return issues.map((issue) => formatConfigIssueLine(issue, marker, opts));

}

export function formatConfigIssueSummary(

issues: ReadonlyArray<ConfigIssueLineInput>,

opts: ConfigIssueSummaryOptions = {},

): string | null {

if (issues.length === 0) {

return null;

}

const maxIssueCandidate = Math.floor(opts.maxIssues ?? 5);

const maxIssues = Number.isFinite(maxIssueCandidate) ? Math.max(1, maxIssueCandidate) : 5;

const visibleIssues = issues.slice(0, maxIssues);

const lines = formatConfigIssueLines(visibleIssues, "", {

normalizeRoot: opts.normalizeRoot ?? true,

});

const hiddenIssueCount = issues.length - visibleIssues.length;

if (hiddenIssueCount <= 0) {

return lines.join("; ");

}

return `${lines.join("; ")}; and ${hiddenIssueCount} more`;

}