Commit Graph

23347 Commits

Author SHA1 Message Date
Peter Steinberger
65c9eddae8 fix(heartbeat): suppress metadata-only exec completion noise 2026-04-29 21:39:47 +01:00
Peter Steinberger
470098bd26 fix: keep embedded run lanes from wedging 2026-04-29 21:37:17 +01:00
Peter Steinberger
7fc0859a01 perf(tests): split plugin state runtime imports 2026-04-29 21:21:38 +01:00
Peter Steinberger
12ee7f696f fix(ollama): avoid broad provider hooks for local runs 2026-04-29 21:20:48 +01:00
Shakker
9c19335276 fix: package bundled runtime deps helper 2026-04-29 21:11:59 +01:00
Agustin Rivera
b8372a714c fix(auth): bound bootstrap handoff scopes (#72919)
* fix(auth): bound bootstrap handoff scopes

Co-authored-by: zsx <git@zsxsoft.com>

* fix(auth): log stripped bootstrap scopes

* docs: add changelog entry for bootstrap handoff scope bounds

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-29 14:11:16 -06:00
Agustin Rivera
fef42acda0 fix(commands): scope owner allowlist prefixes (#72928)
* fix(commands): scope owner allowlist prefixes

Co-authored-by: zsx <git@zsxsoft.com>

* fix(commands): annotate owner allowlist short-circuit

* docs: move changelog entry to unreleased fixes

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-29 14:00:07 -06:00
Michael Appel
665b0ef542 fix(agents): move groupId trust check into resolveGroupToolPolicy for all callers [AI-assisted] (#73720)
* fix: address issue

* fix: address review feedback

* fix(gateway): validate groupId against session key before persisting to session entry

* test(gateway): verify groupId is validated against session key before session entry write

* fix(agents): trust stored group metadata

* fix(gateway): keep first group selectors

* docs: add group policy trust changelog entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-29 13:56:26 -06:00
clawsweeper[bot]
7c51cd2baf fix(device-pair): reject invalid remote setup URLs
Fail setup-code generation when gateway.remote.url is configured but malformed, instead of falling back to a bind-derived URL and issuing a bootstrap token.
2026-04-29 20:45:33 +01:00
Peter Steinberger
fdba408bce fix: restore codex verbose full output 2026-04-29 20:36:36 +01:00
Devin Robison
4808361fca fix: gate startup context for sandboxed spawned sessions (#73611)
* fix: gate startup context for sandboxed spawned sessions

* docs: add startup sandbox changelog entry

* fix: address startup sandbox review feedback

* test: format startup sandbox coverage
2026-04-29 13:35:55 -06:00
Val Alexander
323985f4ca fix(ui): align sidebar trigger affordances
Align the Control UI and exported transcript sidebar triggers around a shared accessible hamburger affordance.
2026-04-29 20:33:39 +01:00
Jeff
9b6670d5c9 fix(ssrf): allow IPv6 fake-ip SSRF opt-in
Allow trusted fake-IP proxy stacks to opt into IPv6 unique-local SSRF resolution without opening broader private-network access.
2026-04-29 20:31:17 +01:00
Peter Steinberger
d2e55b01f2 perf(tests): speed up channel plugin id tests 2026-04-29 20:24:12 +01:00
Peter Steinberger
4aedffd37a refactor(plugins): split loader runtime helpers (#74545)
* refactor(plugins): split loader runtime helpers

* test(scripts): include discord api barrel lane

* test(ci): align built artifact guard expectations

* fix(plugins): avoid redundant cache key assertion
2026-04-29 19:22:41 +00:00
Vyctor Huggo Przozwski da Silva
ccb8472daf fix(agents): preserve seeded Anthropic text blocks
* fix(agents): preserve seeded Anthropic text blocks

* docs(changelog): note Anthropic seeded block fix

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-29 20:16:52 +01:00
辉哥
4eb30fc13a fix(media): surface vision pipeline diagnostics
* fix: improve error message in optimizeImageToJpeg to include actual error details

* fix: improve error message to include configured input for Model does not support images

* fix(media): surface vision pipeline diagnostics

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-29 20:13:19 +01:00
Peter Steinberger
945c910f20 test: remove redundant migration runtime assertion 2026-04-29 20:09:50 +01:00
Vincent Koc
26c03c761f test(ci): align CI guard expectations 2026-04-29 12:09:09 -07:00
Vyctor Huggo Przozwski da Silva
06b1d4e0f7 fix(agents): avoid empty Codex Responses input 2026-04-29 20:08:49 +01:00
Peter Steinberger
4b4e0c82e4 perf(tests): avoid channel plugin imports in system prompt 2026-04-29 20:06:07 +01:00
Peter Steinberger
b0ae867034 refactor(migration): share cached config runtime helper 2026-04-29 20:05:23 +01:00
Vyctor Huggo Przozwski da Silva
97e2f5b332 fix(auto-reply): honor direct silent empty replies
* fix(auto-reply): allow direct silent empty replies

* fix(auto-reply): guard direct silent empty replies
2026-04-29 20:02:38 +01:00
Hemant Sudarshan
eb7d89f4b9 fix(status): honor channel model context windows 2026-04-29 19:58:21 +01:00
Peter Steinberger
57e4994caf ci: speed up release validation 2026-04-29 19:55:37 +01:00
clawsweeper[bot]
fc2d957923 test(infra): assert dotenv logger warning sink
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 19:55:18 +01:00
Shakker
e69da9d578 fix: honor config timeline diagnostics 2026-04-29 19:53:55 +01:00
Shakker
d001c3436b fix: gate diagnostics timeline by flag 2026-04-29 19:53:55 +01:00
Shakker
097eed8cd8 feat: emit diagnostics timeline 2026-04-29 19:53:55 +01:00
Hemant Sudarshan
db6951088a fix(telegram): keep unreachable polling sockets non-fatal
* Runtime: suppress transient network uncaught exceptions

* fix(telegram): keep unreachable polling sockets non-fatal

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-29 19:53:43 +01:00
Simone
dabf76b3de fix(device-pair): validate public setup urls (#74538)
* fix(device-pair): validate public setup urls

* test(cli): cover invalid qr override urls

---------

Co-authored-by: Lucenx9 <185146821+Lucenx9@users.noreply.github.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-29 19:47:35 +01:00
Hemant Sudarshan
fbae2a6441 Fix gateway timeout embedded fallback session lock (#74543)
* Agent: isolate gateway timeout fallback sessions

* fix(cli): isolate gateway timeout fallback sessions

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-29 19:38:11 +01:00
Blasius Patrick
f5aebe42e1 fix(security): resolve model aliases before audit classification (#74532)
* fix(security): resolve model aliases before audit classification

Before classification, model strings are now resolved through the alias
index so that configured aliases (e.g. 'gpt-prev') are translated to
their canonical provider/key form (e.g. 'openai/gpt-5.4') before hygene
and tier checks run.

Fixes #74455.

Signed-off-by: Blasius Patrick <blasius.patrick@gmail.com>

* fix(security): share audit model alias resolution

---------

Signed-off-by: Blasius Patrick <blasius.patrick@gmail.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-29 19:26:02 +01:00
Peter Steinberger
68912111cf fix(slack): avoid generic inline button prompt hint 2026-04-29 19:15:49 +01:00
Peter Steinberger
4bc79f9737 test: relax live web search timeouts 2026-04-29 19:14:15 +01:00
Vincent Koc
39ecedb300 test(gateway): complete reload model config fixture 2026-04-29 11:09:38 -07:00
Vincent Koc
b54c642bd6 test(infra): assert dotenv structured warning 2026-04-29 11:04:45 -07:00
Vincent Koc
edf579c406 test(gateway): align reload model visibility fixture 2026-04-29 11:04:45 -07:00
Peter Steinberger
db665a09cd fix(slack): expose fileId in message tool schema 2026-04-29 19:02:30 +01:00
Peter Steinberger
efefba2db1 refactor(plugins): split bundled runtime deps jiti aliases 2026-04-29 18:57:05 +01:00
Vincent Koc
139815d6a9 test(i18n): align locale registry expectations 2026-04-29 10:40:07 -07:00
Shakker
c85ff84334 test: type model picker env auth mock 2026-04-29 18:23:40 +01:00
Shakker
fba8af4d62 test: align model picker auth mock 2026-04-29 18:23:40 +01:00
Shakker
587ce45ec9 fix: preserve google vertex adc auth fallback 2026-04-29 18:23:40 +01:00
Shakker
1df1ee48c0 fix: keep model list synthetic auth refs exact 2026-04-29 18:23:39 +01:00
Shakker
fceaecd123 test: type model list auth snapshot mock 2026-04-29 18:23:39 +01:00
Shakker
69181342e1 fix: preserve manifest-backed model list auth 2026-04-29 18:23:39 +01:00
Shakker
be1037fd34 test: tighten model list auth fixtures 2026-04-29 18:23:39 +01:00
Shakker
87bd12b2d3 fix: include local model list auth markers 2026-04-29 18:23:39 +01:00
Shakker
b418c08a22 refactor: use auth index for model list rows 2026-04-29 18:23:39 +01:00