1228 Commits

Author	SHA1	Message	Date
pashpashpash	6ce1058296	Wire diagnostics through the core chat command (#72936) ... * feat: wire codex diagnostics feedback * fix: harden codex diagnostics hints * fix: neutralize codex diagnostics output * fix: tighten codex diagnostics safeguards * fix: bound codex diagnostics feedback output * fix: tighten codex diagnostics throttling * fix: confirm codex diagnostics uploads * docs: clarify codex diagnostics add-on * fix: route diagnostics through core command * fix: tighten diagnostics authorization * fix: pin diagnostics to bundled codex command * fix: limit owner status in plugin commands * fix: scope diagnostics confirmations * fix: scope codex diagnostics cooldowns * fix: harden codex diagnostics ownership scopes * fix: harden diagnostics command trust and display * fix: keep diagnostics command trust internal * fix: clarify diagnostics exec boundary * fix: consume codex diagnostics confirmations atomically * test: include codex diagnostics binding metadata * test: use string codex binding timestamps * fix: keep reserved command trust host-only * fix: harden diagnostics trust and resume hints * wire diagnostics through exec approval * fix: keep diagnostics tests aligned with bundled root trust * fix telegram diagnostics owner auth * route trajectory exports through exec approval * fix trajectory exec command encoding * fix telegram group owner auth * fix export trajectory approval hardening * fix pairing command owner bootstrap * fix telegram owner exec approvals * fix: make diagnostics approval flow pasteable * fix: route native sensitive command followups * fix: invoke diagnostics exports with current cli * fix: refresh exec approval protocol models * fix: list codex diagnostics from thread bindings * fix: fold codex diagnostics into exec approval * fix: preserve diagnostics approval line breaks * docs: clarify diagnostics codex workflow	2026-04-29 07:40:37 +09:00
Peter Steinberger	193c7432e3	fix(gateway): reuse paired auth for probes	2026-04-28 21:52:50 +01:00
Peter Steinberger	0a2d635e68	fix(gateway): harden local reachability checks ... Co-authored-by: arthurianresolve <arthurianresolve@users.noreply.github.com> Co-authored-by: codexGW <9350182+codexGW@users.noreply.github.com>	2026-04-28 20:57:14 +01:00
Vincent Koc	98f5fd12df	docs(gateway/security): list system-reminder and previous_response in outbound stripping ... For c2d31a5e59: docs/gateway/security/index.md "External content special-token sanitization" section already mentions the outbound sanitizer with `<tool_call>` and `<function_calls>` examples, but it predates the new internal-runtime-scaffolding stripping that targets `<system-reminder>` and `<previous_response>` tags. Adds those two tags as explicit examples and notes the final channel delivery boundary so operators reading the security page see the same coverage exposed by the c2d31a5e59 sanitizer.	2026-04-28 12:39:15 -07:00
Radek Sienkiewicz	dd643c82b5	fix(whatsapp): expose Baileys socket timing (#73580) ... Merged via squash. Prepared head SHA: d34755262f Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com> Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com> Reviewed-by: @velvet-shark	2026-04-28 15:46:47 +02:00
Peter Steinberger	5a1ff1347d	fix(slack): bound inbound media downloads	2026-04-28 11:35:26 +01:00
Vincent Koc	d70191f8af	feat(sandbox): add Docker GPU passthrough ... Add opt-in `sandbox.docker.gpus` config plumbing for Docker sandbox containers. - thread the optional GPU passthrough field through config types, schema, resolution, and Docker create args - reject empty config values and emit `--gpus` as a separate Docker argv pair - document the Docker-only behavior and credit the original contributor in the changelog Fixes #57976. Carries forward #58124 from @cyan-ember. Co-authored-by: cyan-ember <5855097+cyan-ember@users.noreply.github.com>	2026-04-28 03:33:28 -07:00
Vincent Koc	cfbf4d1fa4	docs: note default sandbox image fail-fast behavior ... For 47dc9f7fc0: docs/gateway/sandboxing.md now warns under "Build the default image" that OpenClaw no longer silently retags plain debian:bookworm-slim as openclaw-sandbox:bookworm-slim when the default image is missing. Sandbox runs fail with a build instruction so the python3 tooling required by sandbox write/edit helpers is preserved instead of being silently dropped.	2026-04-28 02:40:26 -07:00
Peter Steinberger	fac116cfa4	fix: resolve providerless image model refs	2026-04-28 10:18:07 +01:00
Scott Hanselman	8f277e4b7f	fix: allow safe Windows companion node commands (#71884) ... Merged via squash. Prepared head SHA: 24e2b79fe4 Co-authored-by: shanselman <2892+shanselman@users.noreply.github.com> Co-authored-by: shanselman <2892+shanselman@users.noreply.github.com> Reviewed-by: @shanselman	2026-04-28 02:01:20 -07:00
Peter Steinberger	2790825ae5	test(auto-reply): assert bare reset acknowledgement	2026-04-28 09:56:41 +01:00
Vincent Koc	fe7865aad6	docs: cover Anthropic beta header suppression and claude-cli fallback prelude ... - docs/concepts/model-providers.md: add proxy-route shaping rule for the 09ec5d2c4d fix that suppresses implicit Anthropic beta headers (`claude-code-20250219`, `interleaved-thinking-2025-05-14`, OAuth markers) on non-direct endpoints, parallel to the existing OpenAI `compat.supportsDeveloperRole` rule. - docs/gateway/cli-backends.md: add a "Fallback prelude from claude-cli sessions" section for a96f1fa5ef so users know that non-CLI fallback candidates after a claude-cli failure are now seeded with a context prelude harvested from Claude Code's `~/.claude/projects/` JSONL (preferring the latest `/compact` summary, coalescing tool blocks, skipping same-provider `--resume` fallbacks).	2026-04-28 01:42:25 -07:00
Peter Steinberger	fb3ea9efb1	fix: keep gateway model probes raw	2026-04-28 09:11:47 +01:00
Peter Steinberger	f95f720b25	docs: separate mintlify list closings	2026-04-28 08:43:20 +01:00
Peter Steinberger	1dd011984a	fix: add pricing bootstrap opt-out and sdk compat exports	2026-04-28 08:35:11 +01:00
Peter Steinberger	78a12706ec	fix(docs): make docs formatter mintlify-safe	2026-04-28 08:13:21 +01:00
Peter Steinberger	bdba90a20b	feat: add authenticated iOS background presence beacon (#73330) ... * feat: add iOS background presence beacon Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com> * fix: keep iOS background reconnects ahead of beacon throttle * build: refresh gateway protocol swift models * fix: emit swift protocol string enums --------- Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com>	2026-04-28 08:10:35 +01:00
Peter Steinberger	12962dd883	fix(models): keep agent primaries strict	2026-04-28 08:01:42 +01:00
Peter Steinberger	cd1343c244	docs: fix heartbeat paramfield lists	2026-04-28 08:00:27 +01:00
Peter Steinberger	3256cf4fc7	docs: clarify group visible replies	2026-04-28 07:55:40 +01:00
Peter Steinberger	424560c6c2	docs: normalize mintlify component closings	2026-04-28 07:54:15 +01:00
Peter Steinberger	fb40ed99a7	fix(sessions): remove session store rotation	2026-04-28 07:46:24 +01:00
Peter Steinberger	b5371bfd63	fix(auth): migrate flat auth profiles in doctor	2026-04-28 06:53:48 +01:00
Peter Steinberger	59a4d7fb06	fix(telegram): normalize bot endpoint api roots	2026-04-28 06:36:38 +01:00
Peter Steinberger	5916237962	fix(onboard): infer custom model image input	2026-04-28 06:34:16 +01:00
Peter Steinberger	a644e30245	fix(memory-core): retry unavailable dreaming model	2026-04-28 06:15:28 +01:00
Vincent Koc	7b18bd03bb	fix(gateway): allow explicit loopback trusted proxy auth ... Fixes #59167. Supersedes #63379.	2026-04-27 22:01:06 -07:00
Peter Steinberger	540cbe24be	fix: allow memory flush model override	2026-04-28 05:50:55 +01:00
Peter Steinberger	870d993eb8	fix(ui): request configured model list	2026-04-28 05:21:08 +01:00
Peter Steinberger	738f5f7508	fix: prevent channel login exec wedges	2026-04-28 05:16:43 +01:00
Peter Steinberger	5a2e5446a4	fix: explain heartbeat model bleed overflows	2026-04-28 04:32:55 +01:00
Peter Steinberger	2fbbc6e2fa	docs: clarify plugin disable doctor behavior	2026-04-28 00:07:02 +01:00
Peter Steinberger	ccc9dd5eef	fix: keep session history redaction forced	2026-04-27 23:59:47 +01:00
Peter Steinberger	dd0f5937d2	fix(doctor): avoid companion gateway service false positives	2026-04-27 23:30:29 +01:00
Peter Steinberger	abf5dea7dd	fix(daemon): filter missing service path fallbacks	2026-04-27 23:16:04 +01:00
Peter Steinberger	1a98938479	fix: allow trusted-proxy local password fallback	2026-04-27 23:10:22 +01:00
Peter Steinberger	42dddbbe78	fix(cli): streamline local model probes	2026-04-27 23:02:26 +01:00
Peter Steinberger	24b45a038c	fix(gateway): bound supervised lock recovery	2026-04-27 22:44:37 +01:00
Peter Steinberger	d519dc6976	docs(channels): add channel docking concept	2026-04-27 22:37:58 +01:00
Peter Steinberger	582debbec8	docs(channels): explain dock commands	2026-04-27 22:32:44 +01:00
Peter Steinberger	016a0b4de9	fix(gateway): avoid echoing rotated device tokens	2026-04-27 15:10:05 +01:00
Peter Steinberger	2e99c1d227	fix(subagents): enforce explicit spawn allowlists	2026-04-27 14:53:17 +01:00
Peter Steinberger	877b5a14f1	fix(sessions): batch store cap maintenance	2026-04-27 14:51:53 +01:00
Peter Steinberger	ad0f600450	fix(gateway): avoid systemd service split-brain	2026-04-27 14:32:49 +01:00
Peter Steinberger	df65a75f92	fix(memory): avoid live embedding probes in status	2026-04-27 13:55:51 +01:00
Peter Steinberger	750c180a6c	fix(ollama): warn on WSL2 CUDA crash loop risk	2026-04-27 13:24:04 +01:00
Peter Steinberger	7fb2a356e8	fix(nodes): allow removing stale paired nodes	2026-04-27 13:20:52 +01:00
Peter Steinberger	63eaf8ea51	fix(models): default local custom providers to completions	2026-04-27 13:09:59 +01:00
Peter Steinberger	769d04b4ce	docs(models): clarify local chat completions routing	2026-04-27 12:53:46 +01:00
Vincent Koc	9be54044eb	docs(doctor): document stale channel plugin cleanup (edb3e84898) ... Trace to edb3e84898 (fix: clean stale plugin channel config). When openclaw doctor --fix removes a missing channel plugin, it also cascades the cleanup to dangling channel config, heartbeat targets, and channel model overrides, preventing gateway boot loops after failed plugin reinstalls. Added an Accordion 11d to docs/gateway/doctor.md listing the exact config keys that get pruned alongside the plugin entry.	2026-04-27 04:40:49 -07:00