Tak Hoffman
bf544bc9e9
docs: fix active memory gateway command
2026-04-10 23:02:13 -05:00
Peter Steinberger
3b6fac85ea
chore: prepare 2026.4.10 release
2026-04-11 03:22:18 +01:00
Peter Steinberger
c3aeb71f74
feat(fal): add HeyGen video-agent model
2026-04-11 02:58:04 +01:00
Coy Geek
192ee081e7
fix: Implicit latest-device approval can pair the wrong requester ( #64160 )
...
* fix: require confirmation before implicit device approval
Keep re-requested pairing entries from jumping the queue and force operators to confirm implicit latest-request approval so a refreshed attacker request cannot be silently approved.
* fix: require exact device pairing approval
* fix: stabilize reply CI checks
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-04-11 02:55:01 +01:00
Peter Steinberger
69244f837f
test: speed provider retry imports
2026-04-11 02:37:51 +01:00
Peter Steinberger
b56cd114e7
feat: add Seedance 2 fal video models
2026-04-11 02:18:31 +01:00
Peter Steinberger
202f80792e
feat: add plugin text transforms
2026-04-11 02:17:39 +01:00
Peter Steinberger
c94888dbee
fix: honor heartbeat timeoutSeconds ( #64491 )
2026-04-11 00:39:21 +01:00
Vincent Koc
84d4e5deac
docs(ci): refresh release notes lane references
2026-04-11 00:36:06 +01:00
Vincent Koc
9e2e4cde19
ci(test): align node lane names with boundary split
2026-04-11 00:36:06 +01:00
Gustavo Madeira Santana
25445a9f2e
qa-lab: add Matrix live transport QA lane ( #64489 )
...
Merged via squash.
Prepared head SHA: ae9bb37751
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-10 19:35:08 -04:00
Peter Steinberger
46a6746bca
docs: clarify codex harness validation
2026-04-11 00:13:08 +01:00
Peter Steinberger
47c0ce5f85
refactor: narrow codex harness selection
2026-04-11 00:13:08 +01:00
Peter Steinberger
6281dd7379
perf: reduce test import overhead
2026-04-10 23:09:37 +01:00
Peter Steinberger
c59fc764db
docs(codex): document harness command smoke
2026-04-10 23:07:25 +01:00
Peter Steinberger
09b1117271
agents: add strict-agentic execution contract
2026-04-10 22:56:37 +01:00
Peter Steinberger
67f1a20136
docs: add Codex harness recipes
2026-04-10 22:43:44 +01:00
Peter Steinberger
31a0b7bd42
feat: add Codex app-server controls
2026-04-10 22:19:00 +01:00
Peter Steinberger
1a83731ea1
fix: label embedded harness config
2026-04-10 22:03:47 +01:00
Peter Steinberger
c66afe472a
docs: add codex harness setup guide
2026-04-10 21:45:32 +01:00
Peter Steinberger
972ed139a7
fix: make docs anchor audit use Mintlify CLI
2026-04-10 21:39:52 +01:00
Peter Steinberger
c16b1b7433
docs: document harness fallback policy
2026-04-10 21:27:26 +01:00
Peter Steinberger
2d80bbc43d
feat(agents): allow disabling PI harness fallback
2026-04-10 21:22:16 +01:00
Peter Steinberger
6e4d78ce80
fix(codex): require supported app-server version
2026-04-10 21:22:16 +01:00
Peter Steinberger
bfc0889776
docs: document Codex harness plugin workflow
2026-04-10 21:22:16 +01:00
Agustin Rivera
905f19230a
Align external marker span mapping ( #63885 )
...
* fix(markers): align external marker spans
* fix(browser): ssrfPolicy defaults fail-closed for unconfigured installs (GHSA-53vx-pmqw-863c)
* fix(browser): enforce strict default SSRF policy
* chore(changelog): add browser SSRF default + marker alignment entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 12:35:20 -06:00
Peter Steinberger
bac98d4218
test: reduce media contract import cost
2026-04-10 17:31:08 +01:00
Peter Steinberger
a1262e15a3
perf: reduce heartbeat prompt tokens
2026-04-10 15:38:39 +01:00
Peter Steinberger
9fd08f9d0f
refactor: remove type-only import cycles
2026-04-10 15:14:27 +01:00
Peter Steinberger
beaff3c553
fix: clarify plugin command alias diagnostics ( #64242 ) (thanks @feiskyer)
2026-04-10 14:56:12 +01:00
Peter Steinberger
3027efaf21
test: raise QA suite default concurrency
2026-04-10 13:45:57 +01:00
Peter Steinberger
4c14f55c62
test: parallelize QA suite scenarios
2026-04-10 13:45:57 +01:00
Peter Steinberger
89d7a24a35
fix(cli-runner): wire OpenClaw skills into Claude CLI
...
Co-authored-by: Omar López <zomars@me.com >
2026-04-10 13:45:02 +01:00
Mariano
46f8c4dfd5
fix(memory-core): harden request-scoped dreaming fallback ( #64156 )
...
* memory-core: harden request-scoped dreaming fallback
* memory-core: tighten request-scoped fallback classification
2026-04-10 12:11:57 +02:00
Peter Steinberger
0b0c062e97
fix: avoid Claude CLI subscription prompt classifier
2026-04-10 10:52:35 +01:00
Peter Steinberger
b53d6ebc21
docs: add active memory to docs nav
2026-04-10 09:15:03 +01:00
sudie-codes
828ebd43d4
feat(msteams): handle signin/tokenExchange and signin/verifyState for SSO ( #60956 ) ( #64089 )
...
* feat(msteams): handle signin/tokenExchange and signin/verifyState for SSO (#60956 )
* test(msteams): mock conversationStore.get in thread session fixture
---------
Co-authored-by: Brad Groux <bradgroux@users.noreply.github.com >
2026-04-10 02:38:01 -05:00
Peter Steinberger
7e2a1db53b
fix: recover silent LLM idle timeouts
2026-04-10 08:09:17 +01:00
samzong
723dec0432
[Feat] Gateway: add commands.list RPC method ( #62656 )
...
Merged via squash.
Co-authored-by: samzong <samzong.lu@gmail.com >
Co-authored-by: Frank Yang <frank.ekn@gmail.com >
Reviewed-by: @frankekn
2026-04-10 14:28:47 +08:00
Tak Hoffman
4bf94aa0d6
feat: add local exec-policy CLI ( #64050 )
...
* feat: add local exec-policy CLI
* fix: harden exec-policy CLI output
* fix: harden exec approvals writes
* fix: tighten local exec-policy sync
* docs: document exec-policy CLI
* fix: harden exec-policy rollback and approvals path checks
* fix: reject exec-policy sync when host remains node
* fix: validate approvals path before mkdir
* fix: guard exec-policy rollback against newer approvals writes
* fix: restore exec approvals via hardened rollback path
* fix: guard exec-policy config writes with base hash
* docs: add exec-policy changelog entry
* fix: clarify exec-policy show for node host
* fix: strip stale exec-policy decisions
2026-04-10 01:16:03 -05:00
Qasim Soomro
71617ef2f0
fix: allow private network provider request opt-in ( #63671 )
...
* feat(models): allow private network via models.providers.*.request
Add optional request.allowPrivateNetwork for operator-controlled self-hosted
OpenAI-compatible bases (LAN/overlay/split DNS). Plumbs the flag into
resolveProviderRequestPolicyConfig for streaming provider HTTP and OpenAI
responses WebSocket so SSRF policy can allow private-resolved model URLs
when explicitly enabled.
Updates zod schema, config help/labels, and unit tests for sanitize/merge.
* agents thread provider request into websocket stream
* fix(config): scope allowPrivateNetwork to model requests
* fix(agents): refresh websocket manager on request changes
* fix(agents): scope runtime private-network overrides to models
* fix: allow private network provider request opt-in (#63671 ) (thanks @qas)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-10 11:11:03 +05:30
Josh Avant
f096fc4406
Browser: unify /act route action execution and contract errors ( #63977 )
...
* Browser: unify agent act route execution and contracts
* Browser tests: lock act error codes and dedupe harness dispatch
* Browser tests: slim act harness dispatch map
* Browser act: enforce top-level targetId match
* Browser tests: cover missing act error codes
* Browser act: restore wait cap and reject zero resize dims
* Docs: document /act error contract
* Browser act: lock selector precedence and positive resize validation
* Browser act: restore interaction cap and harden contract tests
* docs: note browser act contract consolidation (#63977 ) (thanks @joshavant)
2026-04-09 22:54:33 -05:00
Shakker
655cfb477a
docs: clarify multipass live auth support
2026-04-09 23:53:13 +01:00
Shakker
a04c331cc1
docs: document qa multipass runner
2026-04-09 23:53:13 +01:00
Tak Hoffman
b83726d13e
Feat: Add Active Memory recall plugin ( #63286 )
...
* Refine plugin debug plumbing
* Tighten plugin debug handling
* Reduce active memory overhead
* Abort active memory sidecar on timeout
* Rename active memory blocking subagent wording
* Fix active memory cache and recall selection
* Preserve active memory session scope
* Sanitize recalled context before retrieval
* Add active memory changelog entry
* Harden active memory debug and transcript handling
* Add active memory policy config
* Raise active memory timeout default
* Keep usage footer on primary reply
* Clear stale active memory status lines
* Match legacy active memory status prefixes
* Preserve numeric active memory bullets
* Reuse canonical session keys for active memory
* Let active memory subagent decide relevance
* Refine active memory plugin summary flow
* Fix active memory main-session DM detection
* Trim active memory summaries at word boundaries
* Add active memory prompt styles
* Fix active memory stale status cleanup
* Rename active memory subagent wording
* Add active memory prompt and thinking overrides
* Remove active memory legacy status compat
* Resolve active memory session id status
* Add active memory session toggle
* Add active memory global toggle
* Fix active memory toggle state handling
* Harden active memory transcript persistence
* Fix active memory chat type gating
* Scope active memory transcripts by agent
* Show plugin debug before replies
2026-04-09 11:27:37 -05:00
Mason
164287f056
docs-i18n: avoid ambiguous body-only wrapper unwrap ( #63808 )
...
* docs-i18n: avoid ambiguous body-only wrapper unwrap
* docs: clarify targeted testing tip
* changelog: include docs-i18n follow-up thanks
2026-04-10 00:01:17 +08:00
Neerav Makwana
7f714609f7
fix: allow CLI task cancel for stuck background tasks ( #62506 ) (thanks @neeravmakwana)
...
* Tasks: allow openclaw tasks cancel for CLI runtime (#62419 )
Made-with: Cursor
* Tasks: address review — changelog order, CLI cancel without session, lock terminal status
Made-with: Cursor
* fix: freeze terminal task listener updates
* fix: clean changelog block for CLI task cancel (#62506 ) (thanks @neeravmakwana)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 17:16:07 +05:30
Ayaan Zaidi
ac3999ac8c
refactor(web-fetch): distill rfc2544 policy handling
2026-04-09 13:50:18 +05:30
xing-xing-coder
9ed448088b
fix(web-fetch): finalize RFC2544 SSRF policy support
2026-04-09 13:50:18 +05:30
Peter Steinberger
d41188b65e
ci: add runtime import cycle guard
2026-04-09 03:56:22 +01:00