OpenClaw Digest: Sanitized Mounts, Systemd Buses, and Rate-Limiter Stalls

Architecture

PR #329: Async Plugin Resolver Moves to Systemd Bus

PR #329 decouples the plugin resolver from the core loop, moving it to a systemd bus adapter. This is a crucial architectural win: it isolates failures so a crashing plugin doesn't take down the whole daemon. If you're running custom scripts, this is the update you've been waiting for to stabilize your load.

Security

PR #327: Critical Path Sanitization for Sandboxed Mounts

PR #327 lands a massive sweep of the tool-specific binaries using filepath.Clean. Path traversal vectors are closed, but this is primarily a compliance patch for the manifest issue tracked in #1560. If you're deploying in multi-tenant environments, you need to verify your bind mounts have this fix applied immediately.

Analysis

Issue #1560: The Plugin Resolution Rate-Limiter Stall

Issue #1560 is pinned as a known lag spike that triggers when plugin resolution hits the rate limiter. The thread outlines a temporary workaround involving setting AsyncTimeout to zero, but the real fix is pending the merge of PR #329. Avoid running heavy polling tasks until the bus adapter lands in stable.

Features

PR #326: Strict Mode for CLAWFILE Injection

PR #326 adds strict mode validation to the CLAWFILE injection. This prevents silent fails in CI/CD pipelines where the config gets mangled by environment variables. It's a small change, but it reduces debugging friction significantly for automated deployments.

Infrastructure

PR #328: Jittered Channel Bounds to Fix Memory Spikes

PR #328 swaps the internal channel buffering from fixed-size to jittered exponential bounds. This is a direct response to the OOM scaling wall we discussed last week. Under heavy async load, the jittering prevents the classic 'step-function' memory spikes that crash containers.