Peter Steinberger
30e1556cda
refactor: extract model catalog core package
...
* refactor: extract model catalog core package
* refactor: route model catalog imports through package boundary
* build: include model catalog in plugin sdk package dts
* fix: preserve static fallback model metadata
2026-05-30 16:33:45 +01:00
Peter Steinberger
65fe2b7e91
ci: tolerate release branches without llm core package
2026-05-30 14:48:08 +01:00
Peter Steinberger
470fc879e8
feat: add hosted model providers ( #88247 )
...
* feat(providers): add GMI provider
* feat(providers): add Novita provider
* feat(providers): add Qwen OAuth provider
* feat(providers): add Ollama Cloud provider
* docs: add hosted provider pages
* test(providers): align qwen catalog result typing
2026-05-30 08:26:16 +02:00
Peter Steinberger
aa0d6e1bca
refactor: extract LLM core packages ( #88117 )
...
* refactor: extract llm core packages
* chore: drop generated llm package artifacts
* fix: align llm package export artifacts
* test: fix moving main CI expectations
* fix: align llm core subpath aliases
* fix: use llm package exports
* fix: stabilize llm package boundary artifacts
* fix: sync llm boundary path contract
* test: isolate crabbox provider env
* test: pin crabbox configured-provider cases
* test: apply crabbox lease provider override
2026-05-30 07:45:04 +02:00
Dallin Romney
29b32050c1
feat(ci): autoscrub dependency lockfile-only PR changes ( #87796 )
...
* ci: autoscrub dependency lockfile residue
* ci: harden dependency autoscrub commits
* ci: scope dependency autoscrub tokens
* ci: split autoscrub base reads
* ci: expand autoscrub proof comment
2026-05-29 19:37:16 -07:00
Dallin Romney
784fbcfd16
ci: relax platform checkout fetch timeout ( #88199 )
2026-05-29 19:17:29 -07:00
Peter Steinberger
63a06e312d
ci: reduce main workflow critical path
2026-05-29 23:29:32 +01:00
Peter Steinberger
1c8de09ba9
ci: stabilize main checks
2026-05-29 22:49:06 +01:00
Peter Steinberger
239523668e
ci(release): make plugin publish retries idempotent
2026-05-29 15:18:18 +01:00
Peter Steinberger
cb765f1664
ci(release): require all plugins for core publish
2026-05-29 12:07:03 +01:00
Peter Steinberger
86ed25af34
feat: add workboard dashboard plugin
2026-05-29 11:04:37 +01:00
Peter Steinberger
0b84d8b521
ci: refresh live gateway release lanes
2026-05-29 10:30:23 +01:00
Vincent Koc
9bf48660b3
fix(ci): keep Windows Crabbox hydrate fetch alive
2026-05-29 11:12:22 +02:00
Peter Steinberger
f4c6c0aec4
refactor: extract net policy package
2026-05-29 09:45:14 +01:00
Peter Steinberger
8363d6596c
ci: retry transient checkout fetch timeouts
2026-05-29 09:00:45 +01:00
Dallin Romney
ed36f423da
fix(ci): bound manual git fetches ( #87839 )
...
* fix(ci): bound manual git fetches
* fix(ci): cover platform fetch guards
* fix(ci): fail timed out target fetches
* fix(ci): repair typecheck regressions
* fix(ci): refresh CI expectations
* fix(ci): preserve main cron coverage
2026-05-28 22:56:54 -07:00
Dallin Romney
cdeafd1895
chore: revert dependency guard backfill machinery ( #87867 )
...
* Revert "ci: isolate dependency guard backfill label (#87882 )"
This reverts commit 21b33bd04d .
* Revert "ci: add dependency guard backfill label trigger (#87866 )"
This reverts commit 5a6472718d .
* ci: preserve clawsweeper bot label filter
2026-05-28 22:50:59 -07:00
Peter Steinberger
1188aa3b81
feat: add Claude Opus 4.8 support ( #87890 )
...
* feat: add Claude Opus 4.8 support
* fix: omit Vertex Opus sampling overrides
* fix: preserve Opus adaptive thinking levels
* fix: clamp Anthropic max effort support
* fix: use sha256 for QA mock call ids
* fix: type Anthropic transport test model metadata
* test: update PDF model default for Opus 4.8
2026-05-29 06:10:42 +01:00
Dallin Romney
21b33bd04d
ci: isolate dependency guard backfill label ( #87882 )
2026-05-28 21:21:13 -07:00
Ramrajprabu
f3cfd752d3
feat(copilot): add GitHub Copilot agent runtime
...
Adds the opt-in bundled GitHub Copilot agent runtime, pinned SDK install path, docs/inventory, SDK/tool/sandbox/auth wiring, and replay/tool-safety fixes.
Verification:
- Local: git diff --check; fnm exec --using 24.15.0 pnpm tsgo:extensions; fnm exec --using 24.15.0 pnpm check:test-types; fnm exec --using 24.15.0 pnpm build.
- Autoreview local: clean for the replay-safety fix; branch autoreview engine returned empty output twice, so local autoreview plus local/Crabbox/CI proof was used.
- Crabbox focused Copilot: run_2c0db9f48a4a, 19 files / 485 tests passed.
- Crabbox additional boundary shard: run_26a246a1aa24, prompt snapshots and plugin SDK boundary/export checks passed.
- Crabbox live Copilot: run_d128e4048b4e, real gpt-4.1 turn with live_echo phase-1-green and clean session-file check.
- GitHub checks: green on head 7cc8657e0d , including Dependency Guard after exact-head approval.
Co-authored-by: Ramraj Balasubramanian <ramrajba@microsoft.com >
2026-05-29 05:15:22 +01:00
Dallin Romney
5a6472718d
ci: add dependency guard backfill label trigger ( #87866 )
2026-05-28 20:26:32 -07:00
Peter Steinberger
9dd3bce549
feat: add codex supervisor extension
...
* feat: add codex supervisor plugin
* fix: restore merged branch checks
* fix: unblock supervisor extension CI
* fix: restore merged agent checks
2026-05-29 03:49:43 +01:00
Dallin Romney
e0aa820257
ci: rename dependency guard workflow ( #87842 )
2026-05-28 18:26:49 -07:00
Peter Steinberger
b1117d9862
refactor: extract gateway client package ( #87797 )
...
* refactor: extract gateway client package
* chore: drop generated gateway package artifacts
* refactor: move gateway protocol package
* refactor: remove old gateway protocol tree
* test: keep auth compat split in run mode
* test: expose gateway wrapper options for internals
* fix: watch moved gateway package sources
* test: normalize slash command import guard
* chore: teach knip gateway package entries
* ci: route gateway client package checks
* fix: reuse ipaddr for gateway client hosts
* fix: sync gateway protocol usage schema
2026-05-29 02:23:42 +01:00
Dallin Romney
c8f2bbf76d
ci: guard dependency graph PR changes ( #87791 )
2026-05-28 18:13:54 -07:00
Dallin Romney
93c30de17b
ci: restore timing summary artifact ( #87832 )
...
* ci: restore timing summary artifact
* ci: report pnpm warmup fanout timing
* ci: run timing summary from trusted base
2026-05-28 18:08:12 -07:00
Peter Steinberger
592277cd77
ci(release): bound cross-os baseline packing
2026-05-29 01:13:10 +01:00
Dallin Romney
aeeccdf27f
fix(ci): bound ClawHub docs checkout ( #87811 )
2026-05-28 16:25:09 -07:00
Peter Steinberger
201fe25dad
ci(release): let Telegram QA wait on credential leases
2026-05-28 23:58:52 +01:00
Vincent Koc
7b8ec95108
fix(ci): stabilize agentic drift checks ( #87786 )
...
* fix(ci): stabilize agentic drift checks
* fix(ci): refresh opengrep scanner pin
* fix(ci): avoid full-depth opengrep checkout
2026-05-28 23:33:47 +01:00
Peter Steinberger
bd77ebc761
ci(release): fix release smoke timeouts
2026-05-28 23:13:33 +01:00
Peter Steinberger
6d39b94a7b
ci(release): serialize Telegram CI bot consumers
2026-05-28 22:42:06 +01:00
Dallin Romney
563ad77d13
ci: sparse checkout CodeQL actions shard ( #87775 )
2026-05-28 14:36:31 -07:00
Dallin Romney
2be9eb1e97
ci: consolidate Blacksmith runner defaults ( #87503 )
2026-05-28 13:28:22 -07:00
Peter Steinberger
ea682182d0
fix: isolate npm plugin installs per package ( #87647 )
...
* fix: isolate npm plugin installs per package
* test: assert isolated npm plugin projects in upgrade survivor
* test: assert plugin lifecycle npm project roots
* test: resolve npm project deps in live assertions
* fix: resolve codex bins from isolated npm projects
* docs: document isolated npm plugin projects
* ci: configure testbox workflow for crabbox
* fix: stabilize npm project fingerprint
* fix: keep fetch runtime import side-effect free
* test: keep dynamic live model unit hermetic
* ci: handle empty node toolcache roots
* test: make nounset toolcache probe deterministic
2026-05-28 21:16:07 +01:00
Dallin Romney
c629270f23
ci: filter release workflow matrices ( #87508 )
2026-05-28 13:12:54 -07:00
Dallin Romney
3dee915b3b
ci: warm pnpm store before node fanout ( #87518 )
...
* ci: warm pnpm store before node fanout
* test: update pnpm cache acceptance key
* ci: clarify pnpm cache save controls
2026-05-28 13:11:20 -07:00
Vincent Koc
f9834a3f95
ci: pin macOS runner labels
2026-05-28 20:52:52 +02:00
Dallin Romney
5f9d71f8af
fix(ci): raise plugin sdk strict smoke heap ( #87729 )
2026-05-28 10:39:32 -07:00
Peter Steinberger
910354b07f
docs: point release process at public evidence repo
2026-05-28 15:04:33 +01:00
Ayaan Zaidi
3cb7ae5350
fix(docker): alias main images to latest release
2026-05-28 19:30:17 +05:30
Vincent Koc
44451eaa47
fix(ci): run CodeQL on main pushes
2026-05-28 15:49:18 +02:00
Ayaan Zaidi
dc31f73b39
ci(docker): publish browser release images
2026-05-28 18:48:45 +05:30
Vincent Koc
4bd711e1c4
fix(security): avoid fetching untrusted proof refs
2026-05-28 12:39:12 +02:00
Vincent Koc
3844e035bb
fix(security): avoid CodeQL legacy auth patterns
2026-05-28 12:32:49 +02:00
Vincent Koc
f9aec04167
fix(qa): stabilize live transport lanes
...
Wire QA fallback models into live gateway config, fix Slack allowlist-block coverage, and keep WhatsApp live artifacts useful while redacting raw credential metadata.\n\nVerification: focused QA Vitest; autoreview clean; AWS Crabbox pnpm check:changed run_0207de7d47aa; QA-Lab branch-defined transport run 26565521272 with Matrix transport 56/56 and Slack/Discord/Telegram/parity clear. WhatsApp remains blocked by stale shared Convex WhatsApp Web credentials returning Baileys 401 before scenarios.
2026-05-28 10:38:09 +01:00
Vincent Koc
b008989bef
fix(security): address OpenClaw CodeQL alerts
2026-05-28 11:34:32 +02:00
Peter Steinberger
ca1829c3f4
fix(ci): bound optional performance report publishing
2026-05-28 07:01:55 +01:00
Dallin Romney
53704b26e8
perf(ci): instrument build artifacts phases ( #87514 )
2026-05-27 22:31:32 -07:00
joshavant
8f6a2f0f6b
chore: clarify bug report issue scope
2026-05-27 22:07:44 -07:00