Josh Avant
045a581069
fix(sandbox): honor explicit docker env ( #82763 )
...
* fix(sandbox): honor explicit docker env
* docs(changelog): note sandbox env fix
2026-05-16 17:36:05 -05:00
Peter Steinberger
ac99494e44
test: tighten session_status run-session proof ( #82696 )
2026-05-16 23:27:19 +01:00
wuyangfan
75a9293bf9
fix(session_status): prefer runSessionKey for implicit no-arg lookups
...
No-arg session_status calls now resolve against the live run session when
runSessionKey is available, so thinking level and other session state match
the active run instead of a stale sandbox/policy key.
Fixes openclaw/openclaw#82669
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-16 23:27:19 +01:00
Peter Steinberger
c1c67306fd
fix(openai): restore Codex xhigh thinking metadata ( #82761 )
2026-05-16 23:25:21 +01:00
Gio Della-Libera
82ab8a8785
fix(config): materialize subagent archive default ( #81998 )
2026-05-16 15:19:36 -07:00
Peter Steinberger
7b38ac9749
fix(channels): contain draft stream flush failures ( #82713 )
...
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com >
Co-authored-by: opencode <opencode@users.noreply.github.com >
2026-05-16 23:12:39 +01:00
Peter Steinberger
93bc99460e
fix(daemon): remove unused service marker helper
2026-05-16 23:06:12 +01:00
100menotu001
a1d0b2709a
Add security audit suppressions ( #76949 )
...
* Add security audit suppressions
* docs: list audit suppression dangerous flag
* fix(security): keep audit suppressions visible
* docs(changelog): thank audit suppression contributor
---------
Co-authored-by: Craig <froelich@craigs.mac.studio.froho >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-16 22:57:04 +01:00
Peter Steinberger
3536c927da
fix(doctor): avoid launchagent false positives
2026-05-16 22:56:48 +01:00
Gio Della-Libera
2762d9abbe
fix(agents): allow workspace-only reads for skills ( #82397 )
2026-05-16 14:54:19 -07:00
Peter Steinberger
fd8afc1dce
refactor: unify async media generation
...
Summary:
- Refactor image/music/video generation onto the shared async media-generation scheduler and task lifecycle.
- Make session-backed image generation async with status, duplicate guarding, active-task prompt context, and message-tool completion delivery.
- Update docs/changelog and add /tasks coverage for image-generation task visibility.
Verification:
- Codex review: no accepted/actionable findings.
- pnpm test src/auto-reply/reply/commands-tasks.test.ts src/agents/tools/image-generate-tool.test.ts src/agents/tools/image-generate-background.test.ts src/agents/image-generation-task-status.test.ts -- --reporter=dot
- Previous focused media suite: 12 files / 169 tests passed.
- Crabbox aws check:changed run run_fbd1b62c7472 passed.
- Crabbox aws live openclaw infer run run_c17929e0e224 passed with OpenAI gpt-image-2.
- GitHub CI for rebased head 74d1cda6a6 completed with no non-success code gates.
2026-05-16 22:50:06 +01:00
OpenClaw Contributor
8040f28bc5
fix(subagents): make completion handoff review-first
2026-05-16 22:48:19 +01:00
Gio Della-Libera
9e31b9d344
Fix edit recovery for file_path workspace edits ( #81909 )
...
* Recover edit tool failures for file_path
Honor file_path and related aliases when resolving edit recovery paths so post-write errors do not surface false edit failures after the file changed.
* Refresh checks after proof formatting fix
* Refresh checks after live proof update
2026-05-16 14:40:44 -07:00
Zennn
91f45d9c8a
fix(gateway): dedupe exec followup continuations ( #82717 )
...
Co-authored-by: Miya <miya@Miyas-Mac-mini.local >
2026-05-16 22:39:26 +01:00
Peter Steinberger
c4fb12ee8d
fix: preserve xAI Grok 4.3 default reasoning ( #81227 )
2026-05-16 22:25:43 +01:00
Jason O'Neal
4f886e7334
fix(xai): gate reasoning effort to supported models
2026-05-16 22:25:43 +01:00
Peter Steinberger
e9d283e13a
fix(setup): summarize gateway config
2026-05-16 22:16:32 +01:00
hclsys
9fa78718c7
fix(openai-completions): skip non-JSON thinkingSignature provenance tags
...
The openai-completions OpenRouter passthrough records the response field
name ("reasoning", "reasoning_details", "reasoning_content",
"reasoning_text", "content") as the assistant block's
`thinkingSignature`. Those values are provenance tags rather than
JSON-encoded reasoning items, so replaying them in the next request body
breaks providers that expect a structured signature (OpenRouter returns
HTTP 500 on the 2nd turn for Anthropic Claude and xAI Grok via the
openai-completions API).
Stop persisting the provenance tag (only keep replayable JSON signatures)
and harden the responses replay path with a matching JSON guard so
existing transcripts with poisoned signatures recover cleanly.
Fixes #82335
2026-05-16 22:14:57 +01:00
Peter Steinberger
4b0f16d496
fix(agents): announce auto model fallback transitions ( #82676 )
...
* fix(agents): announce model fallback transitions
* docs(agents): explain model fallback notices
# Conflicts:
# docs/concepts/model-failover.md
* fix(agents): use five minute fallback probe cadence
* fix(agents): keep fallback notices out of ACP transcripts
2026-05-16 21:56:31 +01:00
Peter Steinberger
66c64a29ee
fix(gateway): capture opt-in memory pressure snapshots ( #82674 )
...
* fix(gateway): persist critical memory pressure bundles
* docs(gateway): add memory pressure troubleshooting
* feat(gateway): gate memory pressure bundles
* feat(gateway): flatten memory pressure bundle config
* feat(gateway): rename memory pressure snapshot config
* fix(gateway): make memory pressure snapshots opt in
* docs(config): refresh config baseline
* fix(config): simplify memory pressure migration default
2026-05-16 21:52:09 +01:00
Peter Steinberger
532e42213d
fix: preserve bundle activation metadata ( #75133 )
...
Co-authored-by: 100menotu001 <64228916+100menotu001@users.noreply.github.com >
2026-05-16 21:31:56 +01:00
Agustin Rivera
f7977fb102
fix(gateway): reject malformed request targets ( #82686 )
...
* fix(gateway): reject malformed request targets
* fix(gateway): document malformed request target rejection
2026-05-16 13:25:49 -07:00
Peter Steinberger
6369bf64cd
fix(gateway): trace restart intent reasons
2026-05-16 21:23:06 +01:00
hcl
c421be6c90
fix(docs): use lowercase MCP search tool ( #82704 )
...
Fixes #82702 .
Summary:
- Use the canonical lowercase docs MCP search tool name.
- Keep docs and changelog aligned for the CLI fix.
Verification:
- node scripts/run-vitest.mjs src/commands/docs.test.ts
- pnpm lint -- src/commands/docs.ts src/commands/docs.test.ts
- pnpm exec oxfmt --check CHANGELOG.md docs/cli/docs.md src/commands/docs.ts src/commands/docs.test.ts
- pnpm docs:list
- git diff --check
- HOME=$(mktemp -d) pnpm openclaw docs "browser existing-session"
- Codex review local + branch: clean
- GitHub CI 25971835163, CodeQL Critical Quality 25971835154, Real behavior proof 25971834239: green
Co-authored-by: hclsys <hclsys@users.noreply.github.com >
2026-05-16 21:21:58 +01:00
Peter Steinberger
6d844c5900
fix(webchat): trust ACP TTS media tails ( #82701 ) (thanks @leno23)
2026-05-16 21:18:13 +01:00
wuyangfan
35e1c7ac41
fix(webchat): keep trustedLocalMedia internal to reply payloads
...
Restore Omit on public plugin-sdk ReplyPayload; set trustedLocalMedia via
runtime assertion in speech-core and explicitly on dispatch TTS-only finals.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-16 21:18:13 +01:00
wuyangfan
eec18fccb4
fix(webchat): forward trustedLocalMedia on accumulated block TTS tail
...
Avoid per-block final-mode synthesis (duplicate with dispatch tail). Mark
TTS output as trusted local media and pass the flag through the TTS-only
final payload WebChat consumes after block streaming.
Fixes #82628
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-16 21:18:13 +01:00
wuyangfan
14117c303d
fix(webchat): enable auto-TTS for block replies with trusted local media
...
WebChat streaming uses kind=block for assistant text; final-mode TTS skipped
those payloads. Mark synthesized audio as trustedLocalMedia and export the
full ReplyPayload type so the gateway can serve local TTS files.
Fixes #82628
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-16 21:18:13 +01:00
Peter Steinberger
cc8c0d4ecb
fix(config): quiet config write output
2026-05-16 21:08:36 +01:00
Vincent Koc
f345b54d04
test(qa-lab): add runtime parity axis
2026-05-17 03:32:50 +08:00
Peter Steinberger
6e4cc222cb
fix(xai): refresh oauth and model catalog
2026-05-16 20:25:07 +01:00
Vincent Koc
7d09ff89ee
fix(gateway): honor env token for remote interactive auth
2026-05-17 03:15:54 +08:00
Vincent Koc
ca1fd1b140
test: share spy lifecycle helpers
2026-05-17 03:13:46 +08:00
Peter Steinberger
1a956b6ba1
fix: require message tool for generated media completions
2026-05-16 20:12:42 +01:00
Peter Steinberger
c8782d18eb
fix(agents): probe primary after auto fallback pin ( #82707 )
2026-05-16 20:03:09 +01:00
Vincent Koc
1586085c7f
test: share node eval helpers
2026-05-17 02:51:20 +08:00
Vincent Koc
e1061a8b46
test(live): tolerate provider drift in release checks
2026-05-17 02:36:48 +08:00
Vincent Koc
a171600d1d
test: isolate broad unit state
2026-05-17 02:32:58 +08:00
Vincent Koc
b6b33ad6d3
test: harden broad qa timing
2026-05-17 02:32:57 +08:00
Vincent Koc
3a13d1e0be
test: bind Codex live API key lane through OpenAI
2026-05-17 02:32:57 +08:00
Vincent Koc
11a31e476b
test: align Codex bind live model
2026-05-17 02:32:57 +08:00
Vincent Koc
3df6499fb8
test: harden sparse Testbox scans
2026-05-17 02:32:57 +08:00
Vincent Koc
09db0892dd
test: tolerate sparse Testbox file scans
2026-05-17 02:32:34 +08:00
Vincent Koc
8330582493
test: repair broad qa surface regressions
2026-05-17 02:32:14 +08:00
Vincent Koc
b5b193076e
test: share repo file helpers
2026-05-17 02:29:55 +08:00
Vincent Koc
ec38e96884
test(agents): tolerate Anthropic cache tool drift
2026-05-17 02:15:11 +08:00
Vincent Koc
d5035bad62
fix(google): keep auth fallback logs quiet
2026-05-17 02:10:11 +08:00
Jason O'Neal
b34454f5b3
fix(google): refresh Gemini CLI OAuth tokens
2026-05-17 02:10:11 +08:00
Gio Della-Libera
489cab2738
fix(config): add --dry-run support to unset ( #81895 )
...
* Add config unset dry-run
Add --dry-run support to config unset, including JSON output and allow-exec validation parity with config set/patch dry-run handling.
* Refresh checks after proof update
* fix(config): address unset dry-run review
Return structured JSON when config unset dry-run misses a path and validate broad secret provider/default unsets against affected SecretRefs.
2026-05-16 11:09:42 -07:00
Vincent Koc
e06782d5e7
fix(gateway): land linked diagnostics fixes
...
Fix logs.tail credential-header redaction and JSON-mode gateway transport errors.\n\nFixes #66832.\nFixes #79108.\nSupersedes #67041.\nSupersedes #79233.\n\nCo-authored-by: Mil Wang <mingjwan@microsoft.com >\nCo-authored-by: Andy Ye <35905412+TurboTheTurtle@users.noreply.github.com >
2026-05-17 02:05:02 +08:00