Peter Steinberger
2f44ffc8a7
refactor: route plugin metadata consumers through snapshots
2026-05-02 08:41:24 +01:00
Peter Steinberger
a483e43f80
refactor: hide command helper internals
2026-05-02 08:34:13 +01:00
Peter Steinberger
2c14d6f99d
fix: bound message CLI shutdown hooks
2026-05-02 08:32:40 +01:00
Peter Steinberger
ea1a0277d5
fix: report model run fallback metadata
2026-05-02 07:59:47 +01:00
Peter Steinberger
fa7de46261
fix(cli): report missing infer media providers
2026-05-02 07:47:25 +01:00
Peter Steinberger
960fabdaef
refactor: trim cli helper exports
2026-05-02 07:36:54 +01:00
Peter Steinberger
52eee27f30
refactor: hide command helper internals
2026-05-02 06:54:02 +01:00
Peter Steinberger
811d90778f
refactor: trim unused nodes cli type export
2026-05-02 06:29:53 +01:00
Peter Steinberger
04b9f5fc98
fix(cli): avoid directory plugin reinstall prompts
2026-05-02 06:14:29 +01:00
Peter Steinberger
ebe8f615e5
fix: reject agent-scoped model default writes
2026-05-02 04:19:11 +01:00
Peter Steinberger
eee3aeae00
[codex] add Crestodian plugin management ( #75869 )
...
Summary:
- The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes.
- Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks.
ClawSweeper fixups:
- Included follow-up commit: Repair Crestodian plugin management config schema drift
Validation:
- ClawSweeper review passed for head c29cda6005 .
- Required merge gates passed before the squash merge.
Prepared head SHA: c29cda6005
Review: https://github.com/openclaw/openclaw/pull/75869#issuecomment-4362360704
Co-authored-by: Peter Steinberger <steipete@gmail.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-02 03:12:38 +00:00
Peter Steinberger
82a8006f77
fix: reserve legacy tool cli token
2026-05-02 04:06:46 +01:00
Peter Steinberger
a22f065043
fix(slack): support exact message reads
2026-05-02 03:24:36 +01:00
Peter Steinberger
37426a6e64
fix(slack): use live directory readers in cli
2026-05-02 03:04:29 +01:00
Vincent Koc
0c6c1cac76
feat(plugins): prefer clawhub for bundled cutovers
2026-05-01 18:13:03 -07:00
Peter Steinberger
5c3043bb37
refactor: trim auth cli type exports
2026-05-02 01:54:25 +01:00
Peter Steinberger
5046cbc6f9
refactor: trim local type exports
2026-05-02 01:44:51 +01:00
Vincent Koc
824cfa196d
feat(plugins): show clawpack source facts in inspect
2026-05-01 17:40:05 -07:00
Vincent Koc
0aa8022e88
refactor(plugins): rename clawhub storepack metadata to clawpack
2026-05-01 17:32:22 -07:00
Peter Steinberger
0217db5387
refactor: trim cli tagline exports
2026-05-02 01:11:18 +01:00
Vincent Koc
20e8769d93
feat(plugins): persist clawhub storepack metadata
2026-05-01 17:05:47 -07:00
Peter Steinberger
900e21fb1a
refactor: trim cli helper type exports
2026-05-02 00:55:11 +01:00
Peter Steinberger
20945b84b4
feat: generalize message access groups ( #75813 )
2026-05-01 23:55:26 +01:00
Peter Steinberger
fe8966b4ea
fix: stop channel runtime before WhatsApp removal
2026-05-01 22:37:30 +01:00
Peter Steinberger
4b9aa3021a
fix: restore release ci guardrails
2026-05-01 22:28:37 +01:00
Peter Steinberger
5c7362fe9d
refactor: trim cli shape exports
2026-05-01 22:08:43 +01:00
Peter Steinberger
4def4073d4
refactor: trim cli helper exports
2026-05-01 22:05:19 +01:00
Peter Steinberger
4b7a000dcb
chore: clean up plugin dependency leftovers
2026-05-01 21:37:08 +01:00
Peter Steinberger
ed8f50f240
refactor: simplify plugin dependency handling
...
Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths.
Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.
2026-05-01 21:32:22 +01:00
Vincent Koc
579acc3a91
fix(plugins): avoid source rebuilds for policy toggles
...
Reuse current installed-plugin registry records for policy-only enable and disable refreshes.\n\nThanks @vincentkoc
2026-05-01 09:01:13 -07:00
Vincent Koc
f858b5de22
fix(security): keep plain audit off plugin runtimes
...
Keep routine security audit on config/filesystem checks by default, reserving plugin runtime collectors for deep audit paths.\n\nThanks @vincentkoc
2026-05-01 08:22:06 -07:00
Peter Steinberger
5c95fc06fa
test(plugin-sdk): align facade loader windows fast path
2026-05-01 14:43:08 +01:00
Shakker
5e33bfee10
test(plugins): mock install slot registry
2026-05-01 14:39:21 +01:00
Vincent Koc
70095f08f4
fix(plugins): satisfy slot registry type
2026-05-01 06:07:16 -07:00
Vincent Koc
f0c7c430f5
fix(plugins): scope install slot selection
2026-05-01 06:07:15 -07:00
Vincent Koc
cad2cef0fb
fix(update): use service env for doctor
2026-05-01 05:06:14 -07:00
Vincent Koc
debb8ac76c
fix(update): verify daemon restart port
2026-05-01 05:06:14 -07:00
Peter Steinberger
7b3dfbf214
refactor: trim cli program test exports
2026-05-01 12:39:10 +01:00
Peter Steinberger
050f0f50c9
refactor: trim cli test helper exports
2026-05-01 12:31:52 +01:00
Peter Steinberger
b48dcab1b5
fix(cli): repair agent runtime deps during startup
2026-05-01 12:06:26 +01:00
Peter Steinberger
7ddf28c0d4
feat: support git plugin installs
2026-05-01 10:59:10 +01:00
Peter Steinberger
067375cee3
fix: retry update channel persistence
2026-05-01 09:30:10 +01:00
Peter Steinberger
250376f885
fix: simplify bundled runtime dependency repair ( #75183 )
...
Summary:
- Merged fix: simplify bundled runtime dependency repair after ClawSweeper review.
ClawSweeper fixups:
- Included follow-up commit: fix: verify cached bundled runtime roots
- Included follow-up commit: refactor: simplify plugin runtime startup paths
- Included follow-up commit: refactor: trim plugin startup policy helpers
- Included follow-up commit: refactor: trust package manager runtime deps materialization
- Included follow-up commit: fix: narrow channel runtime deps skip policy
- Included follow-up commit: refactor: defer startup plugin runtime deps
- Ran the ClawSweeper repair loop before final review.
Validation:
- ClawSweeper review passed for head 04dc566534 .
- Required merge gates passed before the squash merge.
Prepared head SHA: 04dc566534
Review: https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786
Co-authored-by: Peter Steinberger <steipete@gmail.com >
Co-authored-by: Shakker <shakkerdroid@gmail.com >
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com >
2026-05-01 07:49:02 +00:00
Peter Steinberger
a379ac0562
fix: guard plugin HTTP calls in CI
2026-05-01 08:26:29 +01:00
Peter Steinberger
42d73fd955
refactor: remove dead private helpers
2026-05-01 06:55:26 +01:00
Jesse Merhi
4ea0556f64
feat: add proxy validation command
...
Adds `openclaw proxy validate` for operator-managed proxy preflight checks, including allowed/denied destination validation, CLI output, tests, docs, and changelog coverage.
Maintainer follow-ups before landing:
- validate custom allowed URLs before probing;
- use a temporary loopback canary for default denied checks and fail custom denied transport errors as unverifiable;
- redact proxy URL userinfo, query strings, and fragments from text/JSON validation output.
Validation:
- `pnpm test src/infra/net/proxy/proxy-validation.test.ts src/cli/proxy-cli.runtime.test.ts src/cli/proxy-cli.test.ts -- --reporter=verbose`
- `pnpm exec oxfmt --check --threads=1 CHANGELOG.md src/cli/proxy-cli.ts src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.test.ts src/cli/proxy-cli.runtime.test.ts src/infra/net/proxy/proxy-validation.ts src/infra/net/proxy/proxy-validation.test.ts docs/cli/proxy.md docs/security/network-proxy.md`
- `pnpm exec oxlint src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.runtime.test.ts`
- `git diff --check`
- Testbox `pnpm install && OPENCLAW_TESTBOX=1 pnpm check:changed` on `tbx_01kqgz68ff20n3dtrgq0j1mykt`
- GitHub CI success on `321b3aaf2b8be27dec6ce2ac5e4007ed064218b5`
2026-05-01 00:19:55 -05:00
Val Alexander
df0ee092f0
fix: harden gateway recovery diagnostics and media delivery
...
Harden gateway recovery diagnostics and media delivery.\n\n- Accept gateway send asVoice and map it to outbound audioAsVoice.\n- Preserve generated Swift protocol models for the gateway send schema.\n- Keep the broader recovery hardening for install/update/status/vector/TTS paths in one reviewed PR.\n\nProof:\n- Focused local gateway/outbound/update/status/doctor/sqlite-vec tests passed.\n- oxfmt --check and git diff --check passed.\n- Testbox OPENCLAW_TESTBOX=1 pnpm check:changed passed at 2f5ef650e97763a61ff43c28e61707db84c50060.\n- GitHub required checks are green at the merge SHA; the qa-lab parity gate is optional/surface-only and was still pending.
2026-04-30 21:46:22 -05:00
Peter Steinberger
1ad50a36ac
chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30
2026-05-01 01:06:13 +01:00
Alex Knight
aa9db998f7
fix(gateway): show config recovery validation details ( #75081 )
...
* fix(gateway): show config recovery validation details
* fix(cli): let gateway recovery run before proxy bootstrap
2026-05-01 07:14:33 +10:00
pashpashpash
027ea5f08b
Isolate Codex app-server state per agent ( #74556 )
...
* fix(codex): isolate app-server home per agent
* fix(codex): isolate native Codex assets per agent
* fix(channels): mark inbound system events untrusted
* fix(doctor): warn on personal Codex agent skills
* test(doctor): cover personal Codex agent skills warning
* fix(codex): forward auth profiles to harness runs
* fix(codex): preserve auto auth for harness runs
* fix(codex): auto-select harness auth profiles
* test(codex): type harness auth mock
* feat(codex): select migrated skills
* fix(codex): satisfy migration selection lint
* docs: add codex isolation changelog
2026-05-01 04:49:02 +09:00