Peter Steinberger 13563478fb fix(mattermost): preserve safe denied-sender group history (#115773) ...

* fix(mattermost): record pending history for non-allowlisted group senders

When `groupPolicy` is `"allowlist"`, messages from senders not in
`groupAllowFrom` were silently dropped before reaching
`recordPendingHistoryEntryIfEnabled()`. This meant the bot had no
context of what non-allowlisted users said, breaking use cases like
conversation summarization.

This change introduces a `senderBlockedByGroupAllowlist` flag so that
non-allowlisted messages continue through the history-recording code
path before returning without generating a response.

Changes:
1. Add `senderBlockedByGroupAllowlist` flag before access check
2. `GROUP_POLICY_NOT_ALLOWLISTED` sets flag instead of returning
3. Skip `commandGate` check for blocked senders
4. Call `recordPendingHistory()` then return before response processing

Fixes openclaw/openclaw#57607

* test(mattermost): verify denied history over real transport

Co-authored-by: Jason Wang <jasonwang@barkingdog.ai>

---------

Co-authored-by: Jason Wang <jasonwang@barkingdog.ai>

2026-07-29 05:08:22 -04:00

..

acpx

perf(catalog): cadence-proof provider caches and parallelize the Claude scan (#115259)

2026-07-28 11:37:37 -04:00

active-memory

feat(memory): retain recent project scopes per session (#115731)

2026-07-29 04:58:14 -04:00

admin-http-rpc

fix(admin-http-rpc): time out incomplete request bodies (#104564)

2026-07-20 20:40:12 -07:00

alibaba

…

amazon-bedrock

test(providers): consolidate streaming and model contract cases (#114336)

2026-07-27 01:36:32 -04:00

amazon-bedrock-mantle

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

anthropic

fix(auth): reuse Claude CLI logins natively and stop forwarding expired OAuth tokens (#115134)

2026-07-29 01:30:07 -04:00

anthropic-vertex

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

arcee

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

azure-speech

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

baseten

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

beam

feat(plugins): mirror local coding sessions to a remote Beam receiver (#114735)

2026-07-27 17:31:34 -04:00

bonjour

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

brave

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

browser

fix(browser): release unread CDP response streams (#115675)

2026-07-29 04:11:35 -04:00

buzz

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

byteplus

refactor(providers): unify lifecycle-safe manifest registration (#114381)

2026-07-27 03:20:02 -04:00

canvas

refactor(fs): adopt shared safe filesystem primitives (#113596)

2026-07-25 03:24:19 -07:00

cerebras

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

chutes

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

clawrouter

refactor(providers): unify lifecycle-safe manifest registration (#114381)

2026-07-27 03:20:02 -04:00

clickclack

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

cloudflare-ai-gateway

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

codex

refactor: retire legacy provider and secret paths (#115655)

2026-07-29 04:36:20 -04:00

cohere

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

comfy

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00

copilot

refactor(agents): resolve code-mode vs tool-search once for every harness (#115189)

2026-07-28 09:16:35 -04:00

copilot-proxy

…

crabbox

…

cua-computer

fix(deps): remediate tar and Hono advisories (#115029)

2026-07-28 16:48:04 +08:00

deepgram

fix(agents): honor run abort signal in image and pdf tools (#112644)

2026-07-25 05:17:09 -07:00

deepinfra

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

deepseek

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

device-pair

…

diagnostics-otel

fix(diagnostics): keep internal thinking out of telemetry [AI] (#115261)

2026-07-29 14:05:45 +05:30

diagnostics-prometheus

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

diffs

fix(plugin-sdk): classify loopback hosts consistently (#114832)

2026-07-27 22:55:44 -04:00

diffs-language-pack

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

discord

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

document-extract

…

duckduckgo

fix(duckduckgo): preserve words around highlighted matches (#111460)

2026-07-19 19:09:09 -07:00

elevenlabs

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

exa

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

fal

refactor: remove 3,527 lines of runtime and test duplication (#115626)

2026-07-29 02:21:20 -04:00

featherless

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

feishu

fix(feishu): reject unsupported initial document content (#115697)

2026-07-29 04:53:11 -04:00

file-transfer

refactor(fs): adopt fs-safe 0.5 core primitives (#113705)

2026-07-28 03:41:47 -04:00

firecrawl

docs(agents): surface hidden tool capabilities in model-facing descriptions (#114516)

2026-07-27 07:20:25 -04:00

fireworks

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

github-copilot

feat(plugins): catch code-mode drift between catalogs shipping the same model (#115183)

2026-07-28 08:52:21 -04:00

gmi

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

google

refactor: remove 3,527 lines of runtime and test duplication (#115626)

2026-07-29 02:21:20 -04:00

google-meet

refactor: remove 3,527 lines of runtime and test duplication (#115626)

2026-07-29 02:21:20 -04:00

googlechat

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

gradium

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

groq

refactor(providers): unify lifecycle-safe manifest registration (#114381)

2026-07-27 03:20:02 -04:00

huggingface

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

image-generation-core

…

imessage

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

inworld

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

irc

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

kilocode

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

kimi-coding

fix(models): preserve provider ranking through discovery (#115406)

2026-07-28 17:25:33 -04:00

line

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

linux-canvas

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

linux-node

…

litellm

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

llama-cpp

fix(agents): project llama.cpp-safe tool schemas (#115598)

2026-07-29 01:33:32 -04:00

llm-task

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

lmstudio

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

lobster

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

logbook

refactor(sqlite): enforce one database connection boundary (#113418)

2026-07-24 15:15:17 -07:00

longcat

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

matrix

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

mattermost

fix(mattermost): preserve safe denied-sender group history (#115773)

2026-07-29 05:08:22 -04:00

media-understanding-core

…

memory-core

feat(memory): retain recent project scopes per session (#115731)

2026-07-29 04:58:14 -04:00

memory-lancedb

fix(media): reject malformed provider binary payloads (#114514)

2026-07-27 06:39:47 -04:00

memory-wiki

refactor(fs): adopt fs-safe 0.5 core primitives (#113705)

2026-07-28 03:41:47 -04:00

meta

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

microsoft

test: consolidate OpenClaw test state fixtures (#113576)

2026-07-25 05:30:52 -07:00

microsoft-foundry

fix(microsoft-foundry): preserve GPT token limits (#115542)

2026-07-29 00:14:31 -04:00

migrate-claude

…

migrate-hermes

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

minimax

refactor: remove 3,527 lines of runtime and test duplication (#115626)

2026-07-29 02:21:20 -04:00

mistral

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

moonshot

feat: per-model code-mode capability flags with an "auto" master-switch tier (#114695)

2026-07-27 16:47:41 -04:00

msteams

fix(msteams): honor group and channel conversation allowlists (#115746)

2026-07-29 05:05:42 -04:00

mxc

fix(sandbox): scope runtimes by workspace (#115766)

2026-07-29 16:50:38 +08:00

nextcloud-talk

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

nostr

fix(nostr): keep private tool traces out of encrypted messages (#115769)

2026-07-29 05:01:27 -04:00

novita

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

nvidia

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

oc-path

fix(cli): preserve machine-readable stdout (#113654)

2026-07-27 05:44:16 -04:00

ollama

fix(qa): bound paired-node gateway startup readiness (#115693)

2026-07-29 03:45:56 -04:00

onepassword

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

open-prose

…

openai

feat(openai): support GPT-Live over backend WebSocket (#115622)

2026-07-29 04:15:03 -04:00

opencode

perf(catalog): cadence-proof provider caches and parallelize the Claude scan (#115259)

2026-07-28 11:37:37 -04:00

opencode-go

feat(plugins): catch code-mode drift between catalogs shipping the same model (#115183)

2026-07-28 08:52:21 -04:00

openrouter

fix(openrouter): skip malformed video catalog rows (#111637)

2026-07-29 01:40:15 -04:00

openshell

fix(sandbox): scope runtimes by workspace (#115766)

2026-07-29 16:50:38 +08:00

parallel

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

perplexity

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

pixverse

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

policy

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

qa-channel

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

qa-lab

refactor(qa): remove execution sharding (#115787)

2026-07-29 17:06:57 +08:00

qianfan

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

qqbot

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

qwen

refactor(providers): consolidate compatible replay policies (#114669)

2026-07-27 14:15:53 -04:00

raft

refactor(channels): fix account resolution and setup isolation (#114395)

2026-07-27 03:49:37 -04:00

reef

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

runway

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

searxng

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

senseaudio

…

sglang

fix: make gateway nodes and local inference reliable under stress (#115185)

2026-07-28 08:41:14 -04:00

signal

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

slack

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

sms

refactor(channels): fix account resolution and setup isolation (#114395)

2026-07-27 03:49:37 -04:00

stepfun

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

synology-chat

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

synthetic

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

talk-voice

…

tavily

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

teams-meetings

refactor: consolidate Teams and Zoom meeting plugin shells (#115707)

2026-07-29 04:11:57 -04:00

telegram

refactor: centralize channel streaming config hints (#115739)

2026-07-29 04:42:23 -04:00

tencent

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

test-support

…

thread-ownership

fix(thread-ownership): cancel unread ownership response bodies (#111231)

2026-07-19 20:48:44 -07:00

tlon

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

together

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

tokenjuice

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

tts-local-cli

…

twitch

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

vault

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

venice

refactor: remove duplicate runtime and plugin paths (#115483)

2026-07-28 22:06:04 -04:00

vercel-ai-gateway

refactor(providers): derive simple providers from manifests (#114331)

2026-07-27 01:29:53 -04:00

video-generation-core

…

vllm

fix: make gateway nodes and local inference reliable under stress (#115185)

2026-07-28 08:41:14 -04:00

voice-call

feat(openai): support GPT-Live over backend WebSocket (#115622)

2026-07-29 04:15:03 -04:00

volcengine

feat(plugins): catch code-mode drift between catalogs shipping the same model (#115183)

2026-07-28 08:52:21 -04:00

voyage

…

vydra

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

web-readability

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

webhooks

…

whatsapp

feat(media): probe duration and dimensions for playback metadata (#115728)

2026-07-29 04:52:17 -04:00

workboard

feat(plugins): deliver sessions.changed to plugin services (#114813)

2026-07-27 20:56:44 -04:00

xai

refactor: remove 3,527 lines of runtime and test duplication (#115626)

2026-07-29 02:21:20 -04:00

xiaomi

refactor: remove duplicate provider and runtime code (#115529)

2026-07-29 00:04:52 -04:00

zai

feat: per-model code-mode capability flags with an "auto" master-switch tier (#114695)

2026-07-27 16:47:41 -04:00

zalo

fix(zalo): stop provider startup after gateway shutdown (#115763)

2026-07-29 04:45:50 -04:00

zalouser

refactor: deduplicate extension normalization primitives (#115650)

2026-07-29 04:10:06 -04:00

zoom-meetings

refactor: consolidate Teams and Zoom meeting plugin shells (#115707)

2026-07-29 04:11:57 -04:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor(packages): DM-policy contract suite, dead routes, package folds (#114776)

2026-07-27 20:20:13 -04:00

video-generation-providers.live.test.ts

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00