Commit Graph

2955 Commits

Author SHA1 Message Date
Gustavo Madeira Santana
9d2b104868 Docs: clarify Matrix token rotation storage reuse 2026-03-11 22:34:42 +00:00
Gustavo Madeira Santana
ae61eaff3a Matrix: harden migration workflow 2026-03-11 22:34:42 +00:00
Gustavo Madeira Santana
9720b75191 Matrix: harden IndexedDB snapshot persistence 2026-03-11 22:34:02 +00:00
Gustavo Madeira Santana
581fdb80ba Docs: clarify Matrix recovery order 2026-03-11 22:34:02 +00:00
Gustavo Madeira Santana
781b171579 Matrix: add backup reset and fix migration targeting 2026-03-11 22:34:02 +00:00
Gustavo Madeira Santana
e361c1d71d Docs: expand Matrix verification docs 2026-03-11 22:34:02 +00:00
Gustavo Madeira Santana
d914d4f4e5 Matrix: fix validated review comments 2026-03-11 22:34:02 +00:00
Gustavo Madeira Santana
e460b482d8 Matrix: fix secrets scan false positives 2026-03-11 22:33:43 +00:00
Gustavo Madeira Santana
08e06db866 Docs: clarify Matrix account-scoped CLI usage 2026-03-11 22:32:26 +00:00
Gustavo Madeira Santana
e86857cb63 Docs: clarify Matrix pairing reminders 2026-03-11 22:32:26 +00:00
Gustavo Madeira Santana
e704edd36b Docs: clarify Matrix onboarding and pairing 2026-03-11 22:32:26 +00:00
Gustavo Madeira Santana
eb8fc885a7 Docs: clarify Matrix account defaults 2026-03-11 22:32:26 +00:00
Gustavo Madeira Santana
dca0f31f4e Matrix: harden live directory lookups 2026-03-11 22:32:26 +00:00
Gustavo Madeira Santana
e4900d6f7f Plugins: scope SDK imports and harden Matrix routing 2026-03-11 22:32:09 +00:00
Gustavo Madeira Santana
e5fbedf012 Matrix: improve migration startup warnings 2026-03-11 22:32:09 +00:00
Gustavo Madeira Santana
b57488d1ff Docs: clarify Matrix migration update flow 2026-03-11 22:32:09 +00:00
Gustavo Madeira Santana
dc99958e60 Matrix: replace legacy plugin with new implementation 2026-03-11 22:32:09 +00:00
Gustavo Madeira Santana
04d92f6257 Create matrix-supersession-migration.md 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
8e2383ea5f matrix-js: simplify storage paths 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
b95c5e7401 Update subagents.md 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
d415a1ce87 matrix-js: require explicit thread-bound spawn config 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
0e9bd6ed1d matrix-js: add account-aware bindings and ACP routing 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
ce971c9406 matrix-js: add startup verification policy 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
e4d041757d matrix-js: improve thread context and auto-threading 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
149729f56b matrix-js: harden reaction handling 2026-03-11 22:31:08 +00:00
Gustavo Madeira Santana
f48f066599 Matrix-js: sync with main plugin-loading standards 2026-03-11 22:31:00 +00:00
Gustavo Madeira Santana
d79ca52960 Memory: add multimodal image and audio indexing (#43460)
Merged via squash.

Prepared head SHA: a994c07190
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-03-11 22:28:34 +00:00
Peter Steinberger
5e324cf785 docs(ollama): align onboarding guidance with code 2026-03-11 20:11:51 +00:00
Bill Chirico
60aed95346 feat(memory): add gemini-embedding-2-preview support (#42501)
Merged via squash.

Prepared head SHA: c57b1f8ba2
Co-authored-by: BillChirico <13951316+BillChirico@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-03-11 14:28:53 -04:00
Luke
7761e7626f Providers: add Opencode Go support (#42313)
* feat(providers): add opencode-go provider support and onboarding

* Onboard: unify OpenCode auth handling openclaw#42313 thanks @ImLukeF

* Docs: merge OpenCode Zen and Go docs openclaw#42313 thanks @ImLukeF

* Update CHANGELOG.md

---------

Co-authored-by: Ubuntu <ubuntu@vps-90352893.vps.ovh.ca>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-03-11 01:31:06 -04:00
Josh Avant
0125ce1f44 Gateway: fail closed unresolved local auth SecretRefs (#42672)
* Gateway: fail closed unresolved local auth SecretRefs

* Docs: align node-host gateway auth precedence

* CI: resolve rebase breakages in checks lanes

* Tests: isolate LOCAL_REMOTE_FALLBACK_TOKEN env state

* Gateway: remove stale remote.enabled auth-surface semantics

* Changelog: note gateway SecretRef fail-closed fix
2026-03-10 21:41:56 -05:00
Peter Steinberger
daaf211e20 fix(node-host): fail closed on unbound interpreter approvals 2026-03-11 02:36:38 +00:00
Peter Steinberger
aad014c7c1 fix: harden subagent control boundaries 2026-03-11 01:44:38 +00:00
Peter Steinberger
8eac939417 fix(security): enforce target account configWrites 2026-03-11 01:24:36 +00:00
Peter Steinberger
201420a7ee fix: harden secret-file readers 2026-03-10 23:40:10 +00:00
Josh Avant
a76e810193 fix(gateway): harden token fallback/reconnect behavior and docs (#42507)
* fix(gateway): harden token fallback and auth reconnect handling

* docs(gateway): clarify auth retry and token-drift recovery

* fix(gateway): tighten auth reconnect gating across clients

* fix: harden gateway token retry (#42507) (thanks @joshavant)
2026-03-10 17:05:57 -05:00
Onur
8ba1b6eff1 ci: add npm release workflow and CalVer checks (#42414) (thanks @onutc) 2026-03-10 20:09:25 +01:00
Altay
0ff184397d docs(telegram): clarify group and sender allowlists (#42451)
Merged via squash.

Prepared head SHA: f30cacafb3
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-03-10 21:56:30 +03:00
Josh Avant
d30dc28b8c Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)
* Secrets: harden exec SecretRef validation and reload LKG coverage

* Tests: harden exec fast-exit stdin regression case

* Tests: align lifecycle daemon test formatting with oxfmt 0.36
2026-03-10 13:45:37 -05:00
Josh Avant
0687e04760 fix: thread runtime config through Discord/Telegram sends (#42352) (thanks @joshavant) (#42352) 2026-03-10 13:30:57 -05:00
Pejman Pour-Moezzi
466cc816a8 docs(acp): document resumeSessionId for session resume (#42280)
* docs(acp): document resumeSessionId for session resume

* docs: clarify ACP resumeSessionId thread/mode behavior (#42280) (thanks @pejmanjohn)

---------

Co-authored-by: Onur <onur@textcortex.com>
2026-03-10 18:06:09 +01:00
Teconomix
6d0547dc2e mattermost: fix DM media upload for unprefixed user IDs (#29925)
Merged via squash.

Prepared head SHA: 5cffcb072c
Co-authored-by: teconomix <6959299+teconomix@users.noreply.github.com>
Co-authored-by: mukhtharcm <56378562+mukhtharcm@users.noreply.github.com>
Reviewed-by: @mukhtharcm
2026-03-10 14:22:24 +05:30
Josh Avant
f0eb67923c fix(secrets): resolve web tool SecretRefs atomically at runtime 2026-03-09 22:57:03 -05:00
Harold Hunt
de49a8b72c Telegram: exec approvals for OpenCode/Codex (#37233)
Merged via squash.

Prepared head SHA: f243379094
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com>
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com>
Reviewed-by: @huntharo
2026-03-09 23:04:35 -04:00
Mariano
0c7f07818f acp: add regression coverage and smoke-test docs (#41456)
Merged via squash.

Prepared head SHA: 514d587352
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-03-09 22:40:14 +01:00
Mariano
8e3f3bc3cf acp: enrich streaming updates for ide clients (#41442)
Merged via squash.

Prepared head SHA: 0764368e80
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-03-09 22:26:46 +01:00
Mariano
d346f2d9ce acp: restore session context and controls (#41425)
Merged via squash.

Prepared head SHA: fcabdf7c31
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-03-09 22:17:19 +01:00
Mariano
e6e4169e82 acp: fail honestly in bridge mode (#41424)
Merged via squash.

Prepared head SHA: b5e6e13afe
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-03-09 22:01:30 +01:00
Mariano
d4e59a3666 Cron: enforce cron-owned delivery contract (#40998)
Merged via squash.

Prepared head SHA: 5877389e33
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-03-09 20:12:37 +01:00
Radek Sienkiewicz
f2f561fab1 fix(ui): preserve control-ui auth across refresh (#40892)
Merged via squash.

Prepared head SHA: f9b2375892
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Reviewed-by: @velvet-shark
2026-03-09 12:50:47 +01:00