Auto-maintained by agent team. Last updated: 2026-02-22
All PRs target upstream openclaw/openclaw via fork kevinWangSheng/openclaw.
Each PR follows CONTRIBUTING.md and uses the PR template.
Before submission, each PR was cross-referenced against:
- 100+ open upstream PRs (as of 2026-02-22)
- 50 recently merged PRs
- 50+ open issues
No overlap found with existing PRs.
| # | Branch | Title | Type | Status | PR URL |
|---|---|---|---|---|---|
| 1 | security/redos-safe-regex |
fix(security): add ReDoS protection for user-controlled regex patterns | Security | CI Pass | #23670 |
| 2 | security/session-slug-crypto-random |
fix(security): use crypto.randomInt for session slug generation | Security | CI Pass | #23671 |
| 3 | fix/json-parse-crash-guard |
fix(resilience): guard JSON.parse of external process output with try-catch | Bug fix | CI Pass | #23672 |
| 4 | refactor/console-to-subsystem-logger |
refactor(logging): migrate remaining console calls to subsystem logger | Refactor | CI Pass | #23669 |
| 5 | fix/sanitize-rpc-error-messages |
fix(security): sanitize RPC error messages in signal and imessage clients | Security | CI Pass | #23724 |
| 6 | fix/download-stream-cleanup |
fix(resilience): destroy write streams on download errors | Bug fix | CI Pass | #23726 |
| 7 | fix/telegram-status-reaction-cleanup |
fix(telegram): clear done reaction when removeAckAfterReply is true | Bug fix | CI Pass | #23728 |
| 8 | fix/session-cache-eviction |
fix(memory): add max size eviction to session manager cache | Bug fix | CI Pass (17/17) | #23744 |
| 9 | fix/fetch-missing-timeout |
fix(resilience): add timeout to unguarded fetch calls in browser subsystem | Bug fix | CI Pass (18/18) | #23745 |
| 10 | fix/skills-download-partial-cleanup |
fix(resilience): clean up partial file on skill download failure | Bug fix | CI Pass (19/19) | #24141 |
| 11 | fix/extension-relay-stop-cleanup |
fix(browser): flush pending extension timers on relay stop | Bug fix | CI Pass (20/20) | #24142 |
- Each agent works on a separate git worktree branch
- No two agents modify the same file
- File ownership:
- PR 1:
src/infra/exec-approval-forwarder.ts,src/discord/monitor/exec-approvals.ts - PR 2:
src/agents/session-slug.ts - PR 3:
src/infra/bonjour-discovery.ts,src/infra/outbound/delivery-queue.ts - PR 4:
src/infra/tailscale.ts,src/node-host/runner.ts - PR 5:
src/signal/client.ts,src/imessage/client.ts - PR 6:
src/media/store.ts,src/commands/signal-install.ts - PR 7:
src/telegram/bot-message-dispatch.ts - PR 8:
src/agents/pi-embedded-runner/session-manager-cache.ts - PR 9:
src/cli/nodes-camera.ts,src/browser/pw-session.ts - PR 10:
src/agents/skills-install-download.ts - PR 11:
src/browser/extension-relay.ts
- PR 1:
- PR 1: 17 tests pass, check/build/tests all green
- PR 2: 3 tests pass, check/build/tests all green
- PR 3: 45 tests pass (3 new), check/build/tests all green
- PR 4: 12 tests pass, check/build/tests all green
- PR 5: 3 signal tests pass, check pass, awaiting full test suite
- PR 6: 38 tests pass (20 media + 18 signal-install), check pass, awaiting full suite
- PR 7: 47 tests pass (3 new), check pass, awaiting full suite
- PR 8 & 9: Initially failed due to pre-existing upstream TS errors + Windows flaky test. Fixed by rebasing onto latest upstream/main and removing
yieldMs: 10from flaky sandbox test. - PR 8: 17/17 pass, check/build/tests/windows all green
- PR 9: 18/18 pass, check/build/tests/windows all green
- PR 10 & 11: Initially failed Windows flaky test (
yieldMs: 10race). Fixed by removingyieldMs: 10from flaky sandbox test (same fix as PRs 8-9). - PR 10: 19/19 pass, check/build/tests/windows all green
- PR 11: 20/20 pass, check/build/tests/windows all green