Vincent Koc
93fa065fb3
fix(ci): update Vitest past browser advisory
2026-06-16 06:16:04 +08:00
joshavant
9092578d8d
feat: configure ios app store release upload
2026-06-15 19:27:55 +02:00
joshavant
a23de348b2
feat: configure ios app store release signing
2026-06-15 19:27:55 +02:00
joshavant
5a2641fc41
test: add ios screenshot automation
2026-06-15 19:27:55 +02:00
joshavant
ec2788cf80
fix: launch configured ios bundle
2026-06-15 19:27:55 +02:00
Josh Lehman
8ded756284
refactor: add transcript reader seam ( #89121 )
...
Merged via squash.
Prepared head SHA: 7ea7ea47ef
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-06-15 09:41:50 -07:00
Galin Iliev
50c82b3020
fix(scripts): add database-first legacy store guard
...
Adds a required database-first legacy-store guard and regression coverage for legacy runtime state write patterns.
The guard is wired into architecture/preflight/changed checks, narrows the documented guard contract to the implemented filesystem-write scope, and tightens extension migration exemptions to explicit owner APIs. Also includes a small memory-core lint unblocker after current CI flagged an unnecessary non-null assertion.
Verification:
- pnpm check:database-first-legacy-stores
- pnpm lint:scripts
- node scripts/run-vitest.mjs test/scripts/check-database-first-legacy-stores.test.ts -- --reporter=verbose
- node scripts/run-oxlint.mjs extensions/memory-core/src/memory/manager-embedding-ops.ts
- git diff --check
- .agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main
- GitHub CI green for PR head 34dde2c620
Closes #91628 .
2026-06-14 20:08:06 -07:00
Josh Lehman
ef47dd610c
refactor: add session accessor seam with gateway consumer ( #90463 )
...
Merged via squash.
Prepared head SHA: 58aa59eaf8
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-06-14 06:18:47 -07:00
Ayaan Zaidi
d498b1cce4
fix(plugin-sdk): expose delivery hints without utility imports
2026-06-14 18:18:20 +05:30
Dallin Romney
1affe4fcdf
Fold Telegram RTT sampling into live QA evidence ( #92550 )
...
* refactor(qa): fold telegram rtt into live evidence
* test: default package telegram rtt samples
* refactor(qa-lab): fold telegram rtt into live evidence
* fix(qa-lab): keep package telegram rtt optional for focused runs
* fix(qa-lab): avoid stale rtt evidence on failed samples
* fix(qa-lab): pass telegram live env into credential leasing
* fix(qa-lab): update telegram canary remediation artifacts
* docs(qa): remove stale telegram observed artifact guidance
* fix(qa-lab): clarify telegram empty-reply remediation
* fix(qa-lab): honor telegram rtt timeout
* ci(qa): drop stale telegram capture env
* refactor: align telegram evidence coverage fields
* fix: ignore stale telegram observed artifacts
* fix: preserve telegram rtt coverage mapping
* fix: omit unused telegram rtt catch binding
* docs: document telegram rtt check selector
2026-06-14 17:02:33 +08:00
Dallin Romney
777edadb36
fix: update esbuild audit pin ( #92540 )
2026-06-12 15:36:49 -07:00
Galin Iliev
301213a05f
test(sqlite): add state perf query plan harness
...
Adds a SQLite state query-plan regression test and smoke benchmark, wires the smoke artifact into source performance evidence, validates SQLite smoke output in the performance summary, and removes a retired ClawHub nav entry that broke docs link checks.
Fixes #91616
2026-06-11 14:49:26 -07:00
Vincent Koc
b4cdd92119
fix(codex): avoid guardian review for local models ( #88630 )
...
* fix(codex): avoid guardian review for local models
* fix(codex): route app-server auto exec review
* fix(codex): make guardian requirements provider-aware
* fix(codex): block unrouted bound approvals
* fix(channels): satisfy ingress queue lint
* fix(codex): use local-model policy for side forks
* fix(extensions): satisfy ingress lint
* fix(codex): require trusted exec reviewer model
* fix(exec): share control command approval guards
* fix(codex): fail closed for unknown guardian model provider
* fix(codex): reject custom exec reviewer endpoints
* fix(codex): preserve bound providers on app-server reuse
* fix(codex): prefer qualified app-server model providers
* fix(codex): preserve guardian on model control switches
* fix(codex): retain local providers across model switches
* fix(codex): distrust aliased reviewer model refs
* fix(codex): preserve providers after thread rotation
* fix(codex): clear stale providers on qualified model switches
* fix(codex): prefer qualified models over legacy providers
* fix(codex): validate reviewer trust before auto approvals
* fix(codex): recompute reviewer policy after binding rotation
* fix(codex): normalize reviewer aliases before trust checks
* fix(codex): retain bound providers for slashed local models
* fix(codex): normalize provider trust checks for exec review
* fix(codex): ignore stale bindings for explicit providers
* fix(codex): share trusted reviewer endpoint policy
* fix(codex): keep network approvals on plugin path
* fix(codex): route provider-qualified model refs
* fix(codex): reject blank masked OpenAI base overrides
* fix(codex): scope exec reviewer alias trust
* fix(codex): distrust exec reviewer transport overrides
2026-06-09 21:38:22 -07:00
Onur Solmaz
3137110167
fix(memory): move local llama.cpp runtime to provider plugin
...
* fix(memory): move local llama.cpp runtime to provider plugin
* chore: ignore llama cpp dynamic dependency
* test: remove invalid local provider alias fixture
* chore: refresh llama cpp shrinkwrap
* chore: drop stale memory embedding defaults facade
2026-06-09 14:30:35 +08:00
Peter Steinberger
b14923d1f3
fix: remove extension-owned root dependency
2026-06-08 22:25:58 +01:00
Peter Steinberger
9aa6bfccce
chore: update dependencies
2026-06-08 21:44:57 +01:00
Jason (Json)
57e0bdaabe
feat: add live provider model catalog helper
...
Summary:
- Add a shared live provider catalog runtime for SDK-backed providers.
- Route OpenAI, xAI, OpenCode Go, Chutes, DeepInfra, Venice, NVIDIA, and Vercel AI Gateway live model discovery through the shared helper.
- Remove duplicated provider-local live catalog caching and harden auth marker stripping, empty live-result retries, and OpenAI custom-base-url handling.
Verification:
- node scripts/run-vitest.mjs extensions/openai/openai-provider.test.ts src/plugin-sdk/provider-catalog-live-runtime.test.ts src/commands/models/list.source-plan.test.ts extensions/opencode-go/index.test.ts extensions/nvidia/provider-catalog.test.ts
- pnpm plugin-sdk:api:check
- pnpm lint --threads=8
- pnpm run lint:extensions:bundled
- pnpm run test:extensions:package-boundary:compile
- pnpm check:import-cycles
- pnpm exec oxfmt --check extensions/openai/openai-provider.ts extensions/openai/openai-provider.test.ts
- git diff --check origin/main...HEAD
- autoreview clean: no accepted/actionable findings reported
- AWS Crabbox focused remote proof: run_364680d1bff8 / cbx_2456fffafe01
- Earlier same-PR AWS Crabbox live proof: run_1f05ccab368e / cbx_7375c79fcf9b
Known proof gap:
- Final current-code true live-provider smoke was blocked by Crabbox secret hydration, documented in the PR proof comment.
2026-06-07 14:16:00 -07:00
Vincent Koc
da88940c6c
fix(android): skip gradle resource tasks on linux arm
2026-06-05 08:14:42 -07:00
Shakker
b4e47ae395
docs: document env mutation report
2026-06-04 20:06:24 +01:00
Vincent Koc
71bda851d1
test(ui): harden control ui vitest setup
2026-06-04 07:35:02 -07:00
Vincent Koc
392af2e612
fix(deps): keep managed overrides in workspace metadata
2026-06-03 17:43:09 -07:00
Vincent Koc
99e627b283
fix(deps): align root override metadata
2026-06-03 16:54:52 -07:00
Peter Steinberger
1878ca0820
chore(release): prepare 2026.6.2 beta
2026-06-04 00:06:52 +01:00
Peter Steinberger
e254346bc2
chore(release): prepare 2026.6.3 beta
2026-06-03 23:42:34 +01:00
Vincent Koc
0fa384c6f6
fix(tooling): run knip through pnpm package dlx
2026-06-03 02:52:16 +02:00
Vincent Koc
1ff2ffa160
chore(scripts): drop legacy moltbot rpc alias
2026-06-02 19:37:07 +02:00
Peter Steinberger
a14eacf372
chore(release): set version 2026.6.2
2026-06-01 23:06:55 +01:00
Peter Steinberger
8e28c773fe
chore(release): prepare 2026.6.1
2026-06-01 10:30:15 +01:00
amittell
945faf8e67
fix(memory-lancedb): reject envelope metadata sludge
...
Summary:
- Strip memory-lancedb envelope and metadata sludge before auto-capture/recall, including pending history wrappers, current-message reply context, message-tool delivery hints, media annotations, and marker-free channel envelopes.
- Expose bundled chat-channel IDs/prefixes through the plugin SDK so sanitizer matching follows the channel catalog.
- Refactor cron tool schemas to fresh factory instances while preserving runtime nullable clears and provider-facing OpenAPI projection.
Verification:
- git diff --check origin/main...HEAD
- ./node_modules/.bin/oxfmt --check src/plugin-sdk/chat-channel-ids.ts src/plugin-sdk/chat-channel-ids.test.ts extensions/memory-lancedb/index.ts extensions/memory-lancedb/index.test.ts src/agents/tools/cron-tool.ts src/agents/tools/cron-tool.schema.test.ts
- pnpm plugin-sdk:api:check
- node scripts/run-vitest.mjs run src/plugin-sdk/chat-channel-ids.test.ts extensions/memory-lancedb src/agents/tools/cron-tool.schema.test.ts src/agents/tools/cron-tool.test.ts --reporter=dot
- pnpm lint:extensions --threads=8
- .agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main
- GitHub checks on 62d1da1257 : 139 pass, 0 pending, 0 fail, 22 skipped.
2026-06-01 00:57:25 -04:00
Peter Steinberger
ebcdb637bb
perf(memory-core): defer embedding engine startup imports
2026-06-01 04:22:22 +01:00
Peter Steinberger
e681569536
feat: add code-mode MCP API files
...
* feat: add code-mode MCP API files
* fix: satisfy code-mode MCP lint
2026-05-31 21:29:06 +01:00
Peter Steinberger
0d17623f00
chore: bump OpenClaw version to 2026.5.31
...
Bumps OpenClaw release metadata to 2026.5.31 across package manifests, app version files, plugin metadata, changelog headings, and generated shrinkwraps.
Verification:
- pnpm plugins:sync:check
- pnpm ios:version:check
- pnpm deps:shrinkwrap:check
- git diff --check
- stale 2026.5.30/build-code scan across changed files
- autoreview clean: no accepted/actionable findings
- PR CI green for real gates: Checks, security scans, dependency guard, app lanes, real behavior proof
Known non-code workflow issue:
- label workflow failed because this PR hits GitHub's 100-label issue cap before the size-label step.
2026-05-31 14:46:17 +01:00
Peter Steinberger
48ccc50282
chore: update dependencies
2026-05-31 09:07:53 +01:00
Vincent Koc
84385898ec
fix(deps): remove photon root runtime
2026-05-30 16:27:48 +01:00
Peter Steinberger
c635e560d0
build: update rastermill to 0.3.1
2026-05-30 16:01:14 +01:00
Vincent Koc
38a463fe93
fix(deps): remove sharp from root package
2026-05-30 13:15:05 +01:00
Vincent Koc
b13529767b
refactor: share inline image data URL sanitizer
2026-05-30 10:08:54 +02:00
Peter Steinberger
99ffd714ce
refactor: extract markdown core package ( #88265 )
...
* refactor: extract markdown core package
* refactor: remove old markdown sources
* fix: use source paths for markdown core imports
* fix: clean markdown package dependency ownership
* fix: refresh root shrinkwrap for markdown dependency move
2026-05-30 09:33:24 +02:00
Peter Steinberger
cd07d013ba
chore(release): bump version to 2026.5.30
2026-05-30 06:49:13 +01:00
Dallin Romney
bd04d2db0d
feat: only include the current changelog section in tarball ( #88107 )
...
* build: package current changelog section
* build: guard packaged changelog section size
2026-05-29 17:18:35 -07:00
Vincent Koc
c01a0f5588
refactor: share provider oauth runtime helpers
2026-05-30 01:31:10 +02:00
Vincent Koc
f3f85ae5f7
refactor: share live transport scenario helpers
2026-05-30 01:05:56 +02:00
Peter Steinberger
bc848b367f
refactor: add shared sqlite state database
...
Adds the shared SQLite state database base, moves plugin keyed state into it with doctor migration coverage, and keeps generated Kysely guardrails aligned. Proof: focused SQLite/plugin-state tests, db:kysely:check, lint:kysely, architecture/dependency guards, autoreview, and PR CI all clean.
2026-05-30 00:52:23 +02:00
Sally O'Malley
6037a74660
Add plugin manifest contract for SecretRef provider integrations ( #82326 )
...
* secret-provider-integrations
Signed-off-by: sallyom <somalley@redhat.com >
* feat(secrets): configure plugin provider presets
* secrets: use plugin-managed provider refs
Signed-off-by: sallyom <somalley@redhat.com >
* fix secretref auth profile service env
* test secret provider integration e2e
* fix secretref plugin config service env
* fix secret provider preset schema alignment
* stabilize secret provider service proof
* validate secret provider plugin integrations
* harden secret provider resolver paths
* scope secret provider config validation
* stabilize openai secret provider proof
* fix secret provider metadata proof
* stabilize config baseline proof
* fix secret provider e2e lint
---------
Signed-off-by: sallyom <somalley@redhat.com >
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-05-29 18:20:45 -04:00
Peter Steinberger
2b15850b47
build(plugins): externalize tokenjuice
2026-05-29 21:00:29 +01:00
Peter Steinberger
99b24a80fb
build(plugins): externalize copilot runtime
2026-05-29 20:14:38 +01:00
joshavant
80227005a0
feat(exec): add normalized auto mode
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
Peter Steinberger
fbf900c746
refactor: move plugin state consumers to sqlite
...
Summary:
- add plugin-state runtime SDK subpaths backed by the existing sidecar DB
- migrate Discord model-picker preferences and Feishu dedup state to plugin-state keyed stores
- wire doctor legacy-state migration imports, including TTL preservation, for existing plugin JSON state
Verification:
- pnpm plugin-sdk:api:check
- focused plugin-state, doctor, Discord, Feishu, and package-boundary Vitest suites
- git diff --check origin/main...HEAD
- env -u OPENCLAW_TESTBOX pnpm check:changed
- autoreview --mode branch --base origin/main
- GitHub Actions PR checks green on 1025c2b570
2026-05-29 11:12:15 +01:00
Peter Steinberger
5871d118ad
fix: restore package CI after net policy split
2026-05-29 10:04:57 +01:00
Ramrajprabu
f3cfd752d3
feat(copilot): add GitHub Copilot agent runtime
...
Adds the opt-in bundled GitHub Copilot agent runtime, pinned SDK install path, docs/inventory, SDK/tool/sandbox/auth wiring, and replay/tool-safety fixes.
Verification:
- Local: git diff --check; fnm exec --using 24.15.0 pnpm tsgo:extensions; fnm exec --using 24.15.0 pnpm check:test-types; fnm exec --using 24.15.0 pnpm build.
- Autoreview local: clean for the replay-safety fix; branch autoreview engine returned empty output twice, so local autoreview plus local/Crabbox/CI proof was used.
- Crabbox focused Copilot: run_2c0db9f48a4a, 19 files / 485 tests passed.
- Crabbox additional boundary shard: run_26a246a1aa24, prompt snapshots and plugin SDK boundary/export checks passed.
- Crabbox live Copilot: run_d128e4048b4e, real gpt-4.1 turn with live_echo phase-1-green and clean session-file check.
- GitHub checks: green on head 7cc8657e0d , including Dependency Guard after exact-head approval.
Co-authored-by: Ramraj Balasubramanian <ramrajba@microsoft.com >
2026-05-29 05:15:22 +01:00