vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-16 20:10:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
31,332 Commits 1,843 Branches 149 Tags
2f9bf58a8a06f659a0a0f1dcc8dd3bdec2ffb62e
Commit Graph

5679 Commits

Author SHA1 Message Date
Vincent Koc
0a9616caa8 fix(matrix): align extension-api source aliases 2026-04-14 18:03:26 +01:00
Vincent Koc
0a87707092 fix(matrix): normalize trusted wrapper bin hints 2026-04-14 17:58:58 +01:00
Vincent Koc
3745d5b135 fix(matrix): require trusted wrapper package roots 2026-04-14 17:55:07 +01:00
Vincent Koc
30073feb6f fix(matrix): sort safe wrapper sdk subpaths 2026-04-14 17:51:06 +01:00
OfflynAI
3a371a32e2 fix: filter telegram binary caption text (#66663) (thanks @joelnishanth) 
* Telegram: filter binary content from msg.caption to prevent token explosion (#66647)

When a user sends a binary document (e.g. .mobi, .epub) via Telegram, raw
binary bytes can leak into msg.caption. getTelegramTextParts() passes this
through to the LLM prompt, causing catastrophic token explosion (~460K tokens).

Add isBinaryContent() that detects non-printable control characters (0x00-0x08,
0x0E-0x1F) and use it to sanitize the text in getTelegramTextParts() before it
reaches the prompt pipeline. When binary content is detected, the text and
entities are both replaced with empty values so the message is still processed
(media placeholder still works) but the binary junk is dropped.

Made-with: Cursor

* fix: distill telegram binary caption filtering

* fix: filter telegram binary caption text (#66663) (thanks @joelnishanth)

---------

Co-authored-by: Ayaan Zaidi <hi@obviy.us>
 2026-04-14 22:14:50 +05:30
Vincent Koc
074efc94dc fix(matrix): align wrapper scoped sdk aliases 2026-04-14 17:41:32 +01:00
Gustavo Madeira Santana
f190bf0a07 Fix Matrix media alias normalization 2026-04-14 12:36:13 -04:00
Vincent Koc
8d3bd4859e perf(whatsapp): add doctor contract fast path 2026-04-14 17:27:07 +01:00
slepybear
450c3a8ed2 fix(security): include Matrix avatar params in sandbox media normalization + preserve mxc:// URLs + log gmail watcher stop failures [AI-assisted] (#64701) 
Merged via squash.

Prepared head SHA: 54de3f019b
Co-authored-by: slepybear <108438815+slepybear@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
 2026-04-14 12:22:29 -04:00
Ayaan Zaidi
daabbce9a0 refactor(openai): import base URL helpers directly 2026-04-14 21:52:16 +05:30
Vincent Koc
5c28cfbf09 perf(channels): add lightweight doctor contract APIs 2026-04-14 17:20:46 +01:00
Ayaan Zaidi
8b404eccff test(openai): cover base URL helpers 2026-04-14 21:45:34 +05:30
Ayaan Zaidi
3624dda67d refactor(openai): isolate base URL helpers 2026-04-14 21:45:34 +05:30
Vincent Koc
b2b3bf35cd fix(openai): reuse canonical responses stream hooks 2026-04-14 17:14:53 +01:00
Vincent Koc
eea7ba5345 fix(plugin-sdk): share canonical stream hook families 2026-04-14 17:13:31 +01:00
Agustin Rivera
37d5971db3 Align QMD memory reads with canonical memory paths (#66026) 
* fix(memory): align qmd read paths

Co-authored-by: zsx <git@zsxsoft.com>

* fix(memory): add qmd exact-path read fast path

* fix(memory): tighten qmd read-path guards

* changelog: note QMD memory_get canonical-path restriction (#66026)

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-14 09:58:27 -06:00
Vincent Koc
30dcebae80 fix(minimax): share region auth builders 2026-04-14 16:50:20 +01:00
Vincent Koc
66701d5a1e fix(plugin-sdk): share opencode catalog auth helper 2026-04-14 16:48:02 +01:00
Vincent Koc
25efa8cf81 fix(minimax): share provider hook bundle 2026-04-14 16:41:46 +01:00
Vincent Koc
36f4913e30 fix(openai): share responses transport hooks 2026-04-14 16:40:05 +01:00
Vincent Koc
e5c38290a6 fix(plugin-sdk): share anthropic replay hook constants 2026-04-14 16:37:29 +01:00
Vincent Koc
4c15f1310b fix(plugin-sdk): share canonical replay hook families 2026-04-14 16:34:09 +01:00
Vincent Koc
356110c52f fix(google): share gemini provider hook bundle 2026-04-14 16:30:32 +01:00
Vincent Koc
a14f7c5c6d fix(openai): share responses stream hook family 2026-04-14 16:28:58 +01:00
Vincent Koc
60961a7f55 fix(openai): share responses transport defaults 2026-04-14 16:25:30 +01:00
Vincent Koc
9c42e6424d fix(plugins): share tool-stream defaults and align xai sdk imports 2026-04-14 16:23:40 +01:00
Vincent Koc
5237a149ff fix(plugins): drop stale provider hook dead code 2026-04-14 16:16:34 +01:00
Vincent Koc
3f8c6dd341 fix(openrouter): reuse shared replay hooks 2026-04-14 16:15:22 +01:00
Vincent Koc
e121889a9f fix(plugins): share native anthropic replay hooks 2026-04-14 16:07:16 +01:00
Peter Steinberger
7184200c17 fix: accept optional runway source mime type 2026-04-14 15:14:26 +01:00
Peter Steinberger
a88c6f0fe7 fix: bound live video generation smoke 2026-04-14 14:59:01 +01:00
Frank Yang
d86527d8c6 fix(whatsapp): harden Baileys media upload hotfix (#65966) 
Merged via squash.

Prepared head SHA: b5db59b8fe
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn
 2026-04-14 21:34:23 +08:00
Peter Steinberger
d2240a9476 test: harden qa-lab concurrent web scenarios 2026-04-14 13:42:02 +01:00
Vincent Koc
10dbb21380 fix(models): normalize google-vertex flash-lite ids 2026-04-14 13:24:46 +01:00
Peter Steinberger
3329824eed test: harden video live provider release gate 2026-04-14 12:53:33 +01:00
Vincent Koc
6c0bff111c fix(google): strip Gemini compat base suffixes (#66445) 
* fix(google): cover Gemini image /openai base URLs

* fix(google): strip Gemini compat base suffixes

* fix(google): scope Gemini /openai normalization

* fix(google): harden base URL normalization

* fix(google): restrict Gemini auth base URLs

* Update CHANGELOG.md

* Update CHANGELOG.md
 2026-04-14 11:19:41 +01:00
Vincent Koc
3587e0ef95 fix(codex): keep auth read diagnostics off stdout (#66451) 
* fix(codex): keep auth read diagnostics off stdout

* docs(changelog): fix codex auth entry

* fix(codex): sanitize auth read diagnostics

* Update CHANGELOG.md
 2026-04-14 11:13:57 +01:00
Vincent Koc
5a5ca6d62c feat(codex): add gpt-5.4-pro forward compat (#66453) 
* feat(openai-codex): add gpt-5.4-pro forward-compat #63404

* feat(openai-codex): add gpt-5.4-pro forward-compat #63404

* openai-codex: use patch.cost when forward-compat falls back to normalizeModelCompat

* feat(codex): add gpt-5.4-pro forward compat

* fix(codex): reuse gpt-5.4 fallback for gpt-5.4-pro

---------

Co-authored-by: jepson-liu <jepsonliu@gmail.com>
 2026-04-14 11:05:24 +01:00
Vincent Koc
e58d50b7a8 fix(telegram): trust explicit proxy DNS for media downloads (#66461) 2026-04-14 10:42:33 +01:00
Vincent Koc
072e8cfe62 test(discord): avoid status fast path in allow-from fixture 2026-04-14 10:04:47 +01:00
Vincent Koc
a70fdc88e0 fix(github-copilot): enable xhigh for gpt-5.4 (#66437) 
* fix(github-copilot): enable xhigh for gpt-5.4

* Update CHANGELOG.md
 2026-04-14 09:58:19 +01:00
Vincent Koc
b90d4ea3d7 fix(codex): canonicalize the gpt-5.4-codex alias (#66438) 
* fix(codex): canonicalize the gpt-5.4-codex alias

* Update CHANGELOG.md
 2026-04-14 09:56:58 +01:00
Vincent Koc
381a8e860a fix(discord): return native status replies directly (#66434) 2026-04-14 09:55:02 +01:00
Vincent Koc
33a698fe10 fix(qa-lab): correct scenario catalog type 2026-04-14 09:39:20 +01:00
Mason Huang
7eecfa411d fix(browser): unblock loopback CDP readiness under strict SSRF defaults (#66354) 
Merged via squash.

Prepared head SHA: d9030ff2f0
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Reviewed-by: @hxy91819
 2026-04-14 16:30:43 +08:00
Vincent Koc
900681751d test(qa-lab): seed broken-turn recovery scenarios (#66416) 2026-04-14 09:03:49 +01:00
Vincent Koc
37f449d7e1 fix(memory): restore ollama embedding adapter (#66269) 
* fix(memory): restore ollama embedding adapter

* Update CHANGELOG.md
 2026-04-14 09:02:31 +01:00
VACInc
26e80cc6cc [codex] Telegram: unblock status commands behind busy turns (#66226) 
* Telegram: unblock status commands behind busy turns

* fix(telegram): keep export-session on topic lane

* Update CHANGELOG.md

---------

Co-authored-by: VACInc <3279061+VACInc@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-04-14 08:57:07 +01:00
Ayaan Zaidi
213c36cf51 fix(browser): preserve legacy strict SSRF alias 2026-04-14 12:50:02 +05:30
Ayaan Zaidi
1dabfef28d fix(browser): preserve explicit strict SSRF config 2026-04-14 12:42:59 +05:30