Peter Steinberger
04f6ffd8be
fix(ollama): resolve cloud models omitted from tags
2026-04-29 04:37:52 +01:00
Peter Steinberger
5a9c0efa54
fix(tasks): clean orphaned parent-owned acp sessions
2026-04-29 04:35:06 +01:00
Peter Steinberger
e27fe55aa8
refactor: simplify plugin cache boundaries
2026-04-29 04:33:15 +01:00
Vincent Koc
e53c45ba94
ci: shard control ui codeql quality
...
Adds a narrow CodeQL Critical Quality shard for the Control UI/control-plane surface and fixes the custom-theme font-family ReDoS finding discovered by the new shard.
2026-04-28 20:24:19 -07:00
Peter Steinberger
3dc6e408b9
ci(release): isolate channel live qa from provider latency
2026-04-29 04:22:01 +01:00
Peter Steinberger
6fcaf6ed58
docs(plugins): clarify setup metadata cache boundary
2026-04-29 04:21:37 +01:00
SATISH K C
ab5c8025c9
docs: add AllowTcpForwarding prerequisite to Hetzner SSH tunnel step
...
Fixes #54557 ; carries forward #54564 ; refs #54954 . Thanks @satishkc7, @blackstrype, and @Aftabbs.
2026-04-28 20:16:30 -07:00
nighty
6e31de5847
docs: fix custom skill naming example
...
Fix the custom skill docs example so the folder and SKILL.md frontmatter use the same hyphen-case name.
2026-04-28 20:15:36 -07:00
Arnav Panicker
eb332c2f32
docs: encode Control UI gatewayUrl examples
...
Squashed from PR #60773 after maintainer closeout.\n\nValidation:\n- Testbox tbx_01kqbkfn9nqpspssrveg5t3mrr: pnpm docs:list; OPENCLAW_TESTBOX=1 pnpm check:changed (docs-only)\n- Exact-head CI: https://github.com/openclaw/openclaw/actions/runs/25040057222
2026-04-28 20:12:51 -07:00
Alberto Farah Blair
aa03c5be82
docs(slack): document attachment vision behavior and known limits
...
Adds a Slack attachment vision reference covering downloaded media handling, PDF/file limits, thread-starter media fallback, multi-attachment behavior, and known troubleshooting cases.
Fixes #51355
Thanks @haroldfabla2-hue.
2026-04-28 20:12:44 -07:00
Peter Steinberger
7a5b419843
refactor(plugins): simplify plugin cache boundaries
2026-04-29 03:52:22 +01:00
Peter Steinberger
ba0f2e948f
ci: preinstall ffmpeg for live media checks
2026-04-29 03:48:33 +01:00
Ehsan
18237bc015
docs(install): fix gog/goplaces release URLs in docker-vm-runtime example ( #72154 )
...
Merged via squash.
Prepared head SHA: 7f06b724af
Co-authored-by: Ehsan <22658149+ebarkhordar@users.noreply.github.com >
Co-authored-by: Sally O'Malley <11166065+sallyom@users.noreply.github.com >
Reviewed-by: @sallyom
2026-04-28 22:42:37 -04:00
Vincent Koc
09e2cf1103
ci: right-size codeql quality runners
...
Run CodeQL Critical Quality on 4 vCPU Blacksmith runners.
2026-04-28 19:26:45 -07:00
Peter Steinberger
b5a90b066d
refactor: reuse docker gateway e2e helpers
2026-04-29 03:15:29 +01:00
Vincent Koc
1f41b8b44b
fix(gateway): bound default restart deferral
2026-04-28 18:42:49 -07:00
Jari Mustonen
d8a600f2ad
context-engine: pass runtime context to ContextEngineFactory ( #67243 )
...
Merged via squash.
Prepared head SHA: 9aca6a5af1
Co-authored-by: jarimustonen <1272053+jarimustonen@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-28 18:21:14 -07:00
Vincent Koc
b96e7739a9
docs(install/docker): document compose config dir default fallback
...
For 054b2e1b7e : docs/install/docker.md "Storage and persistence" now
records that the bundled docker-compose.yml falls back to
${HOME}/.openclaw (and ${HOME}/.openclaw/workspace for the workspace
mount), or /tmp/.openclaw when HOME is also unset, when
OPENCLAW_CONFIG_DIR / OPENCLAW_WORKSPACE_DIR are not provided. That
matches the new default expressions in the compose file and prevents an
empty-source volume spec on bare environments.
2026-04-28 17:38:25 -07:00
pashpashpash
4aa8da3756
Route sensitive group commands to the owner privately ( #73872 )
...
* fix(commands): route sensitive group approvals privately
* fix(commands): require owner private routes
* test(commands): cover owner-derived Telegram diagnostics routing
2026-04-29 09:27:18 +09:00
Peter Steinberger
3286e99bc2
refactor: share docker e2e instance helpers
2026-04-29 01:17:19 +01:00
Peter Steinberger
5a0702ecf8
test: add reusable OpenClaw test instance helper
2026-04-29 00:50:55 +01:00
Peter Steinberger
8f4cbbbe66
perf(prompt): stabilize channel prompt suffix
2026-04-29 00:49:57 +01:00
Peter Steinberger
d3683a61c5
fix(bonjour): recover from ciao cancellation
...
(cherry picked from commit c34ba97262 )
2026-04-29 00:49:41 +01:00
Patrick Erichsen
2a7ba582cb
Use kitchen sink for ClawHub plugin E2E ( #73821 )
2026-04-28 16:44:38 -07:00
pashpashpash
43fa40a35d
fix(telegram): use owners for exec approvals ( #73852 )
2026-04-29 08:34:46 +09:00
Patrick Erichsen
a235a487d0
docs: add clawhub rescan recovery guidance ( #73414 )
...
* docs: add clawhub rescan recovery guidance
* docs: clarify clawhub rescan wording
2026-04-28 16:34:00 -07:00
Vincent Koc
9c9dcd4d5d
ci: shard agent runtime codeql quality
...
Add the agent runtime boundary to the CodeQL Critical Quality workflow.
2026-04-28 16:18:33 -07:00
jinjim
490e6d6dc5
feat(docker): add OPENCLAW_SKIP_ONBOARDING env to skip onboarding during Docker setup ( #55518 )
...
Merged via squash.
Prepared head SHA: 2744ed8b53
Co-authored-by: jinjimz <201528812+jinjimz@users.noreply.github.com >
Co-authored-by: sallyom <11166065+sallyom@users.noreply.github.com >
Reviewed-by: @sallyom
2026-04-28 18:50:51 -04:00
Peter Steinberger
bcc6a2400d
fix(gateway): make handshake timeout configurable
2026-04-28 23:50:24 +01:00
pashpashpash
6ce1058296
Wire diagnostics through the core chat command ( #72936 )
...
* feat: wire codex diagnostics feedback
* fix: harden codex diagnostics hints
* fix: neutralize codex diagnostics output
* fix: tighten codex diagnostics safeguards
* fix: bound codex diagnostics feedback output
* fix: tighten codex diagnostics throttling
* fix: confirm codex diagnostics uploads
* docs: clarify codex diagnostics add-on
* fix: route diagnostics through core command
* fix: tighten diagnostics authorization
* fix: pin diagnostics to bundled codex command
* fix: limit owner status in plugin commands
* fix: scope diagnostics confirmations
* fix: scope codex diagnostics cooldowns
* fix: harden codex diagnostics ownership scopes
* fix: harden diagnostics command trust and display
* fix: keep diagnostics command trust internal
* fix: clarify diagnostics exec boundary
* fix: consume codex diagnostics confirmations atomically
* test: include codex diagnostics binding metadata
* test: use string codex binding timestamps
* fix: keep reserved command trust host-only
* fix: harden diagnostics trust and resume hints
* wire diagnostics through exec approval
* fix: keep diagnostics tests aligned with bundled root trust
* fix telegram diagnostics owner auth
* route trajectory exports through exec approval
* fix trajectory exec command encoding
* fix telegram group owner auth
* fix export trajectory approval hardening
* fix pairing command owner bootstrap
* fix telegram owner exec approvals
* fix: make diagnostics approval flow pasteable
* fix: route native sensitive command followups
* fix: invoke diagnostics exports with current cli
* fix: refresh exec approval protocol models
* fix: list codex diagnostics from thread bindings
* fix: fold codex diagnostics into exec approval
* fix: preserve diagnostics approval line breaks
* docs: clarify diagnostics codex workflow
2026-04-29 07:40:37 +09:00
Peter Steinberger
7e41913a20
fix(gateway): reduce TUI history startup latency
2026-04-28 23:34:59 +01:00
Peter Steinberger
f4a9d34f98
fix(model): explain rejected session overrides
2026-04-28 23:33:24 +01:00
Peter Steinberger
193c7432e3
fix(gateway): reuse paired auth for probes
2026-04-28 21:52:50 +01:00
Said Urtabajev
652bde387d
podman: wire OPENCLAW_INSTALL_BROWSER build-arg to setup script ( #63407 )
...
* podman: wire OPENCLAW_INSTALL_BROWSER build-arg to setup script
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* chore: re-trigger CI
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-04-28 16:48:58 -04:00
Vincent Koc
14f140d6f0
docs(providers/bedrock): document Opus 4.7 temperature omission
...
For 771846c5fa : docs/providers/bedrock.md "Advanced configuration" now
includes a "Claude Opus 4.7 temperature" accordion describing that
OpenClaw automatically omits `temperature` for Opus 4.7 Bedrock refs
(foundation model ids, named profiles, application inference profiles
whose underlying model resolves to Opus 4.7, and dotted `opus-4.7`
variants with regional prefixes), since Bedrock rejects the parameter on
that model. The fix has no user-facing knob, but Opus 4.7 Bedrock users
need to know the request shape changes silently.
2026-04-28 13:39:53 -07:00
Vincent Koc
4509420dd4
test(qa): add gateway CPU scenario pack
2026-04-28 13:26:43 -07:00
Peter Steinberger
5dfc14d49b
fix(tasks): close stale terminal acp sessions
2026-04-28 21:03:55 +01:00
Peter Steinberger
3cad579c4e
fix(plugin-sdk): restore discord compatibility facade
2026-04-28 20:59:26 +01:00
Peter Steinberger
0a2d635e68
fix(gateway): harden local reachability checks
...
Co-authored-by: arthurianresolve <arthurianresolve@users.noreply.github.com >
Co-authored-by: codexGW <9350182+codexGW@users.noreply.github.com >
2026-04-28 20:57:14 +01:00
Peter Steinberger
3b593bc561
fix(cli): authorize gateway model probe overrides
2026-04-28 20:55:44 +01:00
Peter Steinberger
0dcab4e347
fix(agents): harden bootstrap and ACP session routing
2026-04-28 20:47:34 +01:00
Vincent Koc
3ae69498e2
ci: shard channel codeql security
...
Add a narrow channel-runtime CodeQL critical-security shard and document it.
2026-04-28 12:46:44 -07:00
Peter Steinberger
1f26e32f5f
fix(agents): strip empty assistant transcript text
2026-04-28 20:39:58 +01:00
Vincent Koc
98f5fd12df
docs(gateway/security): list system-reminder and previous_response in outbound stripping
...
For c2d31a5e59 : docs/gateway/security/index.md "External content
special-token sanitization" section already mentions the outbound
sanitizer with `<tool_call>` and `<function_calls>` examples, but it
predates the new internal-runtime-scaffolding stripping that targets
`<system-reminder>` and `<previous_response>` tags. Adds those two tags
as explicit examples and notes the final channel delivery boundary so
operators reading the security page see the same coverage exposed by
the c2d31a5e59 sanitizer.
2026-04-28 12:39:15 -07:00
Peter Steinberger
c500e8704f
fix(gateway): recover stale session lanes
2026-04-28 20:37:29 +01:00
Peter Steinberger
1e9faa2a59
docs: document inter-session prompt guards
2026-04-28 20:34:55 +01:00
Peter Steinberger
cb8c513ce3
fix(telegram): honor final-only streaming mode
2026-04-28 20:28:06 +01:00
Peter Steinberger
f641691910
fix(discord): harden account and binding routing
2026-04-28 20:08:27 +01:00
Vincent Koc
87fd216d9a
chore(plugin-sdk): refresh api baseline
2026-04-28 12:06:27 -07:00
Vincent Koc
bb0461b682
ci: shard channel codeql quality
...
Add a narrow channel-runtime CodeQL critical-quality shard and document it.
2026-04-28 11:52:54 -07:00