vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-04 07:11:41 +00:00
Code Issues Packages Projects Releases Wiki Activity
73,397 Commits 1,843 Branches 149 Tags
0211407d8a2c2733daeef7e830a6ed9105e02fac
Commit Graph

10213 Commits

Author SHA1 Message Date
Peter Steinberger
bde6b166c0 refactor(channels): deduplicate ingress monitor shells (#115792) 
* refactor(channels): deduplicate ingress monitor shells

* fix(channels): preserve ingress error overload types

* fix(channels): type ingress error overload implementation

* chore(plugin-sdk): ratchet ingress error surface
 2026-07-29 05:33:00 -04:00
Hannes Rudolph
6dc55fa65e fix(plugins): recover user turns with scoped reply hooks (#114836) 
Allow before_agent_reply plugins to declare host-enforced trigger eligibility so scheduled-only hooks do not block interrupted user-turn recovery. Keep omitted and malformed scopes fail-closed, scope both memory-core maintenance hooks, and cover three runner reload cycles through the public registration contract.

Refs: #111442

Source: #114836

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-07-29 17:22:16 +08:00
Peter Steinberger
e8524a5839 feat: add Fish Audio S2.1 and local MLX speech (#115790) 
* feat: add Fish Audio speech support

* chore: remove unused speech exports

* chore: keep Fish API constant private

* test: remove stale code mode import

* style: use bracket access for Fish voice ids

* test: restore QA evidence validator import
 2026-07-29 05:15:33 -04:00
Peter Steinberger
994ca7d259 fix(msteams): honor group and channel conversation allowlists (#115746) 
* fix(msteams): honor group conversation allowlists

Fixes #95737. Preserve opaque Teams conversation identities, the documented group fallback, personal-DM isolation, and display-name spoof protection.

Based on the original contributor fix in #95764.

Co-authored-by: 周鹤0668001310 <zhou.he3@xydigit.com>

* test(msteams): isolate conversation allowlist regression proof

Co-authored-by: 周鹤0668001310 <zhou.he3@xydigit.com>

---------

Co-authored-by: 周鹤0668001310 <zhou.he3@xydigit.com>
 2026-07-29 05:05:42 -04:00
Peter Steinberger
fb788b79cf feat(memory): retain recent project scopes per session (#115731) 
* feat(memory): retain active project set

* refactor(memory): require prepared active set

* docs(memory): explain active project set
 2026-07-29 04:58:14 -04:00
Peter Steinberger
94025985f7 fix(feishu): reject unsupported initial document content (#115697) 2026-07-29 04:53:11 -04:00
Peter Steinberger
c402688894 feat(media): probe duration and dimensions for playback metadata (#115728) 
* feat(media): probe playback metadata

* fix(media): satisfy CI gates

* fix(media): satisfy lint rules
 2026-07-29 04:52:17 -04:00
Vincent Koc
30346f9788 fix(sandbox): scope runtimes by workspace (#115766) 
Qualify non-shared sandbox identities by resolved workspace while preserving shared runtime names. Existing non-shared runtimes reset once under the new identity.

Related: #51363

Co-authored-by: Tayoun <39609208+tayoun@users.noreply.github.com>
 2026-07-29 16:50:38 +08:00
Peter Steinberger
f14e8607e7 fix(agents): bound completed background process retention (#115760) 
Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-29 04:45:08 -04:00
Vincent Koc
80707db7ab fix(plugins): bound hook execution and retire stale registrations (#115695) 
* fix(plugins): bound hooks and own legacy registrations

* docs(hooks): clarify internal handler ownership

* fix(cli): retain message hook shutdown deadline
 2026-07-29 16:44:05 +08:00
Peter Steinberger
382ea7b74e refactor: centralize channel streaming config hints (#115739) 
* refactor: centralize channel streaming config hints

* fix: repair code mode static checks

* fix: restore QA evidence validator import
 2026-07-29 04:42:23 -04:00
Pavan Kumar Gondhi
36984fe1af fix(diagnostics): keep internal thinking out of telemetry [AI] (#115261) 
* fix(diagnostics): exclude internal thinking from telemetry

* fix(diagnostics): redact replay reasoning fields

* fix(diagnostics): omit replay signatures from telemetry

* chore: sync removed test helper
 2026-07-29 14:05:45 +05:30
Vincent Koc
5578f27ce7 fix(agents): run reply hooks for restart recovery (#115711) 
Co-authored-by: sweetcornna <96944678+sweetcornna@users.noreply.github.com>
 2026-07-29 16:32:44 +08:00
Peter Steinberger
7441362014 feat(openai): support GPT-Live over backend WebSocket (#115622) 
* feat(openai): add GPT-Live websocket bridge

* chore: defer GPT-Live changelog to release

* fix(android): preserve GPT-Live relay readiness gate

* fix(openai): normalize GPT-Live assistant completion
 2026-07-29 04:15:03 -04:00
Peter Steinberger
a2c88e2a18 feat(ui): path-based agent and panel URLs on Settings > Agents (#115673) 
* feat(ui): add agent panel path URLs

* test(ui): clarify unknown agent route fallback

* fix(ui): reject agent URL dot segments

* test(ui): clarify agent panel switch proof

* chore(ui): localize panel id table and refresh docs map

* test(ui): keep agent panel cases test-local

* chore(ui): keep agent route path type local
 2026-07-29 04:12:46 -04:00
Vincent Koc
bf91a5786c fix(plugins): enforce hook security invariants (#115701) 2026-07-29 16:10:34 +08:00
Peter Steinberger
e1a00726a3 feat(gateway): add least-privilege voice-node pairing (#115712) 
* feat(gateway): add least-privilege voice-node pairing

* chore: leave voice-node note to release

* fix(gateway): keep bootstrap helpers private

* fix(ci): remove unused Code Mode type export

* fix(ci): remove stale model matrix import

* fix(ci): align QA evidence timeout guard
 2026-07-29 04:09:37 -04:00
Zakaria Rahali
014ec7d50a docs(install): npm 12 blocks openclaw install scripts by default (#115224) 
The documented `npm install -g openclaw@latest` does not run OpenClaw's
preinstall/postinstall steps on npm 12, which blocks package lifecycle
scripts by default. Nothing in the install docs mentioned this.

Adds a note to the npm tab with the working command. The pnpm tab
already documents its equivalent (`pnpm approve-builds -g`), so npm was
the only tab without one.

Scoped to npm 12 rather than 11.16: `strict-allow-scripts` is undefined
on npm 11.12.1 and false on both 11.16.0 and 12.0.1, and only npm 12
reports the scripts as "blocked because they are not covered by
allowScripts". npm 11.16.x warns that they are "not yet covered" and
still runs them, so the note describes it as warning-only and keeps the
ENOMATCH caveat about the approve-scripts remedy it suggests.

Closes #114665

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-29 03:53:35 -04:00
Peter Steinberger
b2cc5f5042 fix(memory): promote durable facts after repeated recall (#115715) 
* fix(memory): calibrate promotion gate defaults

* docs: refresh generated docs map
 2026-07-29 03:51:59 -04:00
Vincent Koc
14940edf15 feat(skills): add Skill Workshop lifecycle hooks (#115606) 
* feat(skills): add lifecycle hook contracts

* feat(plugins): expose skill hook contracts

* feat(plugins): identify skill evaluators

* feat(skills): persist proposal evaluation lifecycle

* feat(skills): add agent evaluation action

* feat(skills): emit committed skill lifecycle changes

* feat(gateway): expose skill proposal evaluation lifecycle

* feat(ui): add Skill Workshop evaluations

* fix(skills): bind lifecycle state to proposal revisions

* fix(skills): preserve lifecycle events without artifacts

* feat(cli): evaluate skill proposals

* fix(ui): bind evaluations to proposal revisions

* docs(skills): document lifecycle hook primitives

* chore(plugin-sdk): refresh skill hook surface

* fix(skills): harden proposal evaluator execution

* fix(plugins): isolate skill evaluator inputs

* fix(cli): align skill lifecycle deadlines

* fix(skills): preserve evaluation replay invariants

* test(ui): capture Skill Workshop evaluation proof

* fix(skills): bind apply to evaluated target tree

* fix(skills): preserve evaluation contract edges

* fix(skills): bound evaluation event storage

* chore(skills): keep lifecycle helpers internal

* refactor(skills): isolate evaluation persistence

* fix(skills): satisfy lifecycle validation gates

* chore(protocol): refresh Skill Workshop clients

* docs: refresh Skill Workshop map

* chore: keep release notes in PR metadata

* docs: refresh merged docs map

* fix(ci): type Code Mode catch errors

* fix(skills): freeze lifecycle observation payloads

* fix(protocol): keep proposal inspect backward-decodable

* fix(skills): enforce final evaluator bundle limits

* fix(skills): preserve lifecycle caller attribution

* chore: drop subsumed Code Mode formatting

* test(plugins): adapt lifecycle hook mocks
 2026-07-29 15:49:44 +08:00
Peter Steinberger
a7cecc85d3 fix(codex): safely deliver remote workspace files and images (#115668) 
* fix(codex): safely deliver remote workspace files and images

* chore(codex): keep release notes in pull request

* style(scripts): repair current main formatting gate

* refactor(codex): remove unused remote filesystem RPC types

* docs: refresh generated documentation map

* test(codex): type remote workspace reader mock

* fix(ci): preserve plugin test ownership boundary

* refactor(codex): split remote transfer protocol and projection types
 2026-07-29 03:37:50 -04:00
Dallin Romney
f027d7bcf6 refactor(qa): make Matrix sharding execution-owned (#115589) 
* refactor(qa): make sharding execution-owned

* test(qa): simplify transport selection coverage
 2026-07-29 15:23:37 +08:00
Vincent Koc
dd3d1d1a8b fix(ui): hide pre-thread changes from session diffs (#115708) 
* fix(ui): scope session diffs to thread changes

* docs: refresh generated map
 2026-07-29 15:17:47 +08:00
Sanjay Santhanam
b8b9f8949d docs: fix unsupported pnpm approve-builds -g in global install (#106180) 
Closes #106166

Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-29 02:15:18 -04:00
Peter Steinberger
921b0e1dda feat(openai): support GA realtime over ChatGPT OAuth (#115623) 2026-07-29 02:14:23 -04:00
Vincent Koc
1c36054494 feat(agents): add code mode model acceptance matrix (#115305) 
* feat(agents): add code mode model acceptance matrix

* fix(qa): emit canonical Code Mode matrix evidence

* fix(qa): reserve code mode matrix output safely

* fix(qa): require fresh matrix builds

* fix(qa): protect matrix evidence paths
 2026-07-29 14:12:20 +08:00
Peter Steinberger
8fd49c84aa feat: make self-learning automatic by default (#115576) 
* feat: make self-learning automatic by default

* fix: preserve capture authorization boundaries

* test: split autonomous capture coverage
 2026-07-29 02:04:57 -04:00
Peter Steinberger
117e44cb80 fix(linux): package media codecs for deb and AppImage (#115616) 
* fix(linux): package media codecs

* fix(linux): bundle AppImage media codecs

* docs: refresh Linux page map
 2026-07-29 02:03:55 -04:00
Peter Steinberger
032defb172 fix(nodes): cancel paired local inference when callers disconnect (#115624) 2026-07-29 02:00:22 -04:00
Peter Steinberger
26bfa88bb2 fix: restore native Talk transcripts, fallback, and microphone access (#115577) 
* fix(ios): decode frameless Talk events

* fix(android): keep browser-only Talk models native

* fix(macos): gate dashboard media capture

* docs(talk): clarify native platform fallbacks

* chore(i18n): refresh native source inventory

* fix(android): gate relay entry on provider-level browser-only models too
 2026-07-29 01:55:47 -04:00
Peter Steinberger
5fe07e4ae8 fix(update): honor declared plugin entrypoints during repair (#115610) 2026-07-29 01:43:30 -04:00
Kevin Lin
310396f1e1 fix(codex): enable configured apps in service sessions (#115433) 
* fix(codex): attest configured plugin apps before turns

* fix(codex): tighten plugin thread config

* fix(codex): expose account app admission wrapper
 2026-07-28 22:39:20 -07:00
Peter Steinberger
a24c1ceb3a fix(channels): release inbound debounce at admission (#115603) 
Track full dispatch completion separately for error handling and shutdown drain while allowing same-session follow-ups to steer active runs. Fixes #113180.

Co-authored-by: Taksh <takshkothari09@gmail.com>
 2026-07-29 01:38:15 -04:00
Alex Knight
be24db5f72 fix(auth): reuse Claude CLI logins natively and stop forwarding expired OAuth tokens (#115134) 
* fix(auth): refresh selected Claude CLI profiles

* fix(auth): run imported Claude CLI logins as verified native passthrough

* fix(auth): satisfy CLI auth failure exhaustiveness

* docs: remove PR changelog entry

---------

Co-authored-by: Alex Knight <15041791+amknight@users.noreply.github.com>
 2026-07-29 01:30:07 -04:00
Peter Steinberger
33ca26807a feat(ui): add plugin Discover path URL (#115587) 2026-07-29 01:28:13 -04:00
Dallin Romney
781744e125 fix(qa): run profile scenarios on every eligible channel (#115540) 
* fix(qa): resolve channels for portable live scenarios

* fix(qa): expand profile scenarios across eligible channels
 2026-07-29 13:14:37 +08:00
Peter Steinberger
04eb57d299 feat(ui): add contextual Settings documentation links (#115560) 
* feat(config): add contextual settings docs URLs

* feat(ui): add contextual settings guide links

* docs: add settings guide pages

* docs: refresh generated docs map

* docs: polish settings guide pages prose
 2026-07-29 01:00:15 -04:00
Peter Steinberger
46dd03ad0a fix(talk): add GPT-Live consult safety parity (#115562) 2026-07-29 00:55:33 -04:00
Peter Steinberger
dd5b9c8c04 fix(slack): prevent duplicate MPIM mention replies (#115528) 
* fix(slack): make MPIM app mentions type-safe

Resolve typeless app mentions through explicit metadata, the scoped event cache, then conversations.info so modern C-prefixed MPIMs cannot be misclassified by event ordering. Add a real Slack QA scenario that requires one reply and cleans up its temporary MPIM.

Co-authored-by: moeealii <75953662+moeealii@users.noreply.github.com>

* fix(slack): type unresolved mention metadata

* fix(slack): satisfy MPIM type contracts

---------

Co-authored-by: moeealii <75953662+moeealii@users.noreply.github.com>
 2026-07-29 00:23:06 -04:00
joshavant
a6d58f0e6d fix(codex): attest safe Node network options 2026-07-28 23:22:52 -05:00
Peter Steinberger
ac7154eeb4 fix(ui): give Memory settings path-based tab URLs (#115515) 
* fix(ui): add path-based memory tab URLs

* chore: remove release-owned changelog entry
 2026-07-29 00:12:09 -04:00
ooiuuii
8ffc567075 fix(plugins): keep bulk updates on the beta channel (#115083) 
* fix(plugins): preserve beta channel on bulk update

* docs(plugins): document beta bulk update fallback

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-07-29 12:04:38 +08:00
Peter Steinberger
d41a56fca1 feat(memory): isolate curated entries by project (#115438) 
* feat(memory): scope recall to active projects

* feat(memory): preserve project scope in promotion

* docs(memory): explain project-scoped recall

* fix(memory): chunk curated files per entry

* refactor(memory): narrow project scope internals

* fix(memory): exclude annotations from concept tags

* fix(memory): tighten project isolation boundaries

* fix(memory): preserve project path casing

* fix(memory): prioritize project bootstrap candidates

* docs: refresh memory architecture map

* test(memory): cover project scope schema repair

* fix(memory): complete project isolation paths

* fix(memory): close project ranking checks

* fix(memory): reinitialize search provider before ranking

* fix(memory): tolerate missing bootstrap paths
 2026-07-28 23:55:49 -04:00
Peter Steinberger
c4ffc972ec docs: document gateway and memory chat wizards (#115487) 2026-07-28 22:26:19 -04:00
Shakker
7620475a2f docs: explain native subagent handoff 2026-07-29 02:22:09 +01:00
Peter Steinberger
5922dd4380 fix(memory): fall back to keyword search when embeddings cannot start (#115397) 
* fix(memory): degrade bootstrap failures to keyword search

* docs(memory): clarify recovery status projection

* fix(memory): handle bootstrap embedding failures

* fix(memory): trust resolved provider diagnostics

* fix(memory): keep degraded syncs keyword-only

* fix(memory): confirm embedding recovery before semantic mode

* fix(memory): restore semantic readiness after recovery
 2026-07-28 21:01:44 -04:00
metaforismo
cc8fd57a01 feat(mattermost): read channel history with guarded permissions (#110875) 
* feat(mattermost): add guarded channel history reads

* chore: refresh Mattermost generated metadata

* fix(channels): scope Mattermost read authorization

* test(mattermost): redact fixture credentials

* test(mattermost): use safe credential placeholders

* fix(mattermost): report directional pagination

* fix(mattermost): authorize current DM reads

* test(mattermost): cover named read policy inheritance

* fix(mattermost): make history reads opt in

* style(mattermost): align channel import ordering
 2026-07-28 19:54:39 -05:00
Ayaan Zaidi
895bf61ea0 feat(agents): surface watched-session awareness to the model (#114835) 2026-07-29 07:39:20 +09:00
Manan Bansal
ec56892b74 fix(infra): resolve ssh client from trusted system dirs (#83289) (#93030) 
resolveSshConfig and startSshPortForward spawned a hard-coded /usr/bin/ssh,
so SSH config discovery and gateway tunneling failed wherever the system ssh
client lives elsewhere: Windows (built-in OpenSSH under System32\OpenSSH) and
NixOS (/run/current-system/sw/bin).

Route both helpers through the existing resolveSystemBin("ssh", { trust:
"strict" }) resolver, and add the Windows built-in OpenSSH directory to the
resolver's trusted Windows locations (it had System32 but not the
System32\OpenSSH subdirectory where ssh.exe actually ships). Fail closed with
a clear diagnostic when no system ssh client is present.

Closes #83289.

Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-28 18:35:58 -04:00
Vincent Koc
4d439805aa fix(sandbox): reject and migrate browser network none (#115250) 
* fix(sandbox): reject browser network none

* test(ui): reset location after tools panel tests

* chore(sandbox): drop release-owned changelog entry

* fix(config): migrate unsupported sandbox browser network

* fix(sandbox): isolate browser network constant

* fix(config): preserve blank browser network overrides

* chore: leave release changelog untouched
 2026-07-29 06:22:33 +08:00