openclaw/docs/automation
RoboClaw 300ef39911
fix(cron): named-session jobs run in the wrong workspace (#159444)
* fix(cron): named-session jobs run in the wrong workspace

Use saved session workspace and cwd bindings for explicit named-session jobs,
retain their managed worktree lease, and preserve workspace context and
restrictions across persistent rollover without changing detached runs.

Co-authored-by: vyctorbrzezowski <51521767+vyctorbrzezowski@users.noreply.github.com>

* fix(cron): named-session jobs run in the wrong workspace

Worked on by:
- @vyctorbrzezowski

Co-authored-by: vyctorbrzezowski <51521767+vyctorbrzezowski@users.noreply.github.com>
OpenClaw-Publication: 85b73558-d465-449a-8257-0d87d3c1ccf8

* fix(cron): prevent cross-session scheduled file access

Bind requester-scheduled saved-workspace access to the authenticated owning
conversation while preserving trusted operator targeting. Prove the path
from creator tool grants through stored jobs and scheduling to real file I/O,
including foreign and archived-session rejection.

Correct mismatched session-key fixtures and make the outbound retry fixture
use the runner session reader and canonical delivery-plan owner.

Co-authored-by: vyctorbrzezowski <51521767+vyctorbrzezowski@users.noreply.github.com>

* fix(cron): reject mismatched worktree owners

Apply the existing session-worktree owner invariant to the already-read registry record, before and after lease acquisition. Prove valid leases and rejected foreign-session or manual-owner bindings through real registry rows, Git worktrees, and final coding-tool file reads.

Co-authored-by: vyctorbrzezowski <51521767+vyctorbrzezowski@users.noreply.github.com>

---------

Co-authored-by: vyctorbrzezowski <51521767+vyctorbrzezowski@users.noreply.github.com>
2026-09-28 14:54:53 -07:00
..
cron-jobs fix(cron): named-session jobs run in the wrong workspace (#159444) 2026-09-28 14:54:53 -07:00
hooks fix: exclude incognito turns from automatic memory capture (#155594) 2026-09-23 17:53:28 +08:00
cron-jobs.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
hooks.md docs: close the remaining ia and ste findings (#144089) 2026-09-10 22:28:26 +08:00
imap.md fix: skip official setup approvals and default to Astra (#145646) 2026-09-12 00:34:25 -07:00
index.md refactor: remove Tasks and TaskFlow runtime (#159179) 2026-09-27 10:40:29 -07:00
standing-orders.md docs: fix one-way and absolute links across cli, tools, gateway, and channels (#143157) 2026-09-10 07:40:16 +09:00