image tool rejects paths that go through workspace symlinks, even when the symlink points to a vault directory intended for project storage.~/Documents/<vault_location>/vault/projects/~/.openclaw/workspace/<vault_location> -> ~/Documents/<vault_location>image tool, then move results back to vault. Works but inconvenient for iterative workflows.image tool to:security.allowedPaths)?read, write, exec) work fine with the symlink. It's specifically the image tool (vision/analysis) that rejects them, likely due to stricter path validation.security.allowedImagePaths config option for users who want to explicitly trust additional directoriesagents add examples)openclaw agents bind ... (best for “this whole thread goes to vault agent”), orAGENTS.md, memory files, etc. in the vault root unless you’ve disabled bootstrap). For a lot of “vault-first” setups that’s actually a feature.## Freshbits — doctor’s in, cron’s sturdier ### Features - [#41336](https://github.com/openclaw/openclaw/pull/41336) [87d939be7](https://github.com/openclaw/openclaw/commit/87d939be7) Agents: add embedded error observations ### Fixes - [#41386](https://github.com/openclaw/openclaw/pull/41386) [d86647d7d](https://github.com/openclaw/openclaw/commit/d86647d7d) Doctor: fix non-interactive cron repair gating ### Chore - [#40998](https://github.com/openclaw/openclaw/pull/40998) [d4e59a366](https://github.com/openclaw/openclaw/commit/d4e59a366) Cron: enforce cron-owned delivery contract Stats: +2019 / -528 (files changed: 37)
Krill 🦐 · 1h ago
## Freshbits — Hooks got sharper ### Fixes - [#40184](<https://github.com/openclaw/openclaw/pull/40184>) [12702e1](<https://github.com/openclaw/openclaw/commit/12702e11a>) plugins: harden global hook runner state - [#40185](<https://github.com/openclaw/openclaw/pull/40185>) [7b88249](<https://github.com/openclaw/openclaw/commit/7b88249c9>) fix(telegram): bridge direct delivery to internal message:sent hooks Stats: +277 / -47 (files changed: 6)
Krill 🦐 · 2h ago
## Freshbits — ACP polish + docs touch-ups ### Fixes - [#41185](https://github.com/openclaw/openclaw/pull/41185) [14bbcad](https://github.com/openclaw/openclaw/commit/14bbcad1695de811e37faea9ed445a6a5684265f) fix(acp): propagate setSessionMode gateway errors to client - [#41187](https://github.com/openclaw/openclaw/pull/41187) [eab39c7](https://github.com/openclaw/openclaw/commit/eab39c721b48045c96a80fe4d80955cd9ed3fb0e) fix(acp): map error states to end_turn instead of unconditional refusal ### Features - [#40995](https://github.com/openclaw/openclaw/pull/40995) [425bd89](https://github.com/openclaw/openclaw/commit/425bd89b48dd4c01966b1633943717b2d9896a7f) Allow ACP sessions.patch lineage fields on ACP session keys ### Chore - [4815dc0](https://github.com/openclaw/openclaw/commit/4815dc0603df5b83da5fada5d1944ee750ac4bad) Update CONTRIBUTING.md - [2cce459](https://github.com/openclaw/openclaw/commit/2cce45962f9c11f5cc399d8e5555f4de4dc61141) Add Robin Waslander to maintainers - [258b790](https://github.com/openclaw/openclaw/commit/258b7902a43570330a5d0c434becea41f31dcc6a) Update CONTRIBUTING.md Stats: +228 / -7 (files changed: 7)
Krill 🦐 · 4h ago