Peter Steinberger
07694c639d
feat: add meeting notes plugin
...
Adds source-only external meeting notes plugin, SDK source-provider contract, CLI access, date-sharded storage, and Discord voice source.
2026-05-23 10:38:09 +01:00
Gio Della-Libera
a94f3444a0
Policy: add agent workspace conformance checks ( #85096 )
...
* feat(policy): add agent workspace conformance
* chore(policy): refresh agent workspace checks
* fix(policy): require enabled sandbox for workspace policy
* fix(policy): align agent workspace evidence with runtime
2026-05-22 20:24:31 -07:00
Peter Steinberger
64d13c017a
docs: refresh contributor docs
...
Co-authored-by: Quratulain-bilal <umayaimanshah@gmail.com >
Co-authored-by: Mariano Belinky <mbelinky@gmail.com >
Co-authored-by: tao <itaofe@gmail.com >
Co-authored-by: julian <julian@tencent.com >
Co-authored-by: xenouzik <xenouziq@gmail.com >
Co-authored-by: Olamiposi <56056759+posigit@users.noreply.github.com >
Co-authored-by: surlymochan <surlymo@apache.org >
Co-authored-by: Janaka A <contact@janaka.co.uk >
Co-authored-by: choiking <samsamuels1927@gmail.com >
2026-05-22 22:58:27 +01:00
Gio Della-Libera
dcc5e45b50
Policy: add gateway exposure checks ( #81981 )
...
* feat(policy): add gateway exposure conformance
* fix(policy): align custom bind exposure evidence
2026-05-22 14:18:01 -07:00
Gio Della-Libera
c85feace54
Policy: add secret and auth conformance checks ( #81974 )
...
* feat(policy): add secrets auth conformance
* fix(policy): include sandbox ssh secret data
* fix(policy): complete secret input provenance
* fix(policy): cover media request secrets
* fix(policy): satisfy policy lint
* fix(policy): narrow secret conformance evidence
* fix(policy): cover request bearer token secrets
2026-05-22 12:48:14 -07:00
狼哥
57178b188b
docs(voyage): clarify API key setup ( #81803 )
2026-05-22 20:20:22 +01:00
Peter Steinberger
86b87df7e3
docs: refine maintainer docs sweep
...
Co-authored-by: Niels Kaspers <kaspersniels@gmail.com >
Co-authored-by: Zhaocun <zhaocunsun@gmail.com >
Co-authored-by: Henson <zccyman@163.com >
2026-05-22 19:22:40 +01:00
Vincent Koc
d70dc4be19
fix(plugins): drop stale tlon tool contract
2026-05-22 16:32:09 +02:00
Bryan P
f9d35dc681
fix(codex): deliver native subagent completions
...
Deliver Codex-native subagent completions through the generic plugin harness task runtime.
Proof:
- Autoreview clean on final branch.
- Testbox changed gate: tbx_01ks80eqs7d2e3jq3p99zbm4wd, pnpm check:changed, exit 0.
- Live Codex harness: tbx_01ks80p4ky32sqv2ksan2p0w0q, codex/gpt-5.5 API-key auth, native parent/child bridge tokens observed, exit 0.
Co-authored-by: bryanpearson <bryanmpearson@gmail.com >
2026-05-22 15:28:46 +01:00
Josh Lehman
cff5244a5b
feat: add context-engine host capability requirements ( #84994 )
...
* feat(context-engine): add host capability requirements
* fix(context-engine): advertise pi host capabilities
* fix: repair incompatible context engine slots
2026-05-22 10:28:08 -04:00
Peter Steinberger
9914e25638
fix: opt acpx out of bundled runtime deps
2026-05-22 12:56:10 +01:00
Peter Steinberger
fcecbd8655
fix: opt codex out of bundled runtime deps
2026-05-22 12:56:10 +01:00
Peter Steinberger
976da39038
fix: publish explicit plugin bundled dependencies
2026-05-22 12:56:10 +01:00
Peter Steinberger
de022bb69d
feat: bundle plugin npm dependencies
2026-05-22 12:56:10 +01:00
Peter Steinberger
b6c8807ca0
chore: add shrinkwrap to plugin npm packages
2026-05-22 12:56:10 +01:00
Kaspre
1e1e45b72b
fix(code-mode): align outer exec hook params
2026-05-22 09:46:27 +01:00
fuller-stack-dev
65471a2da6
feat: add xai oauth web search and provider timeouts
2026-05-22 08:49:53 +01:00
Kaspre
5f0bec4479
fix(agent): await local agent_end hooks ( #85007 )
...
Summary:
- The PR adds an awaited `agent_end` helper, uses it for no-channel local CLI and Codex app-server terminal pa ... erves fire-and-forget behavior for channel-backed paths, and updates docs, changelog, and regression tests.
- Reproducibility: yes. by source inspection. Current main calls `runAgentHarnessAgentEndHook` without awaiting in local CLI and Codex terminal paths, and the PR's pending-hook tests encode the failure and desired split.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(agents): await local agent_end hooks
- PR branch already contained follow-up commit before automerge: test: fix agent_end hook helper fixture
- PR branch already contained follow-up commit before automerge: ci: retry security checkout
- PR branch already contained follow-up commit before automerge: ci: allowlist qa-lab lifecycle fixtures
- PR branch already contained follow-up commit before automerge: fix CLI channel agent_end delivery
- PR branch already contained follow-up commit before automerge: ci: drop stale qa-lab deadcode entries
Validation:
- ClawSweeper review passed for head 97b31379d797b31379d7https://github.com/openclaw/openclaw/pull/85007#issuecomment-4509911851
Co-authored-by: Kaspre <kaspre@gmail.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com >
2026-05-22 04:12:22 +00:00
Bob
ae4806ed9a
feat(plugins): add embedding provider contract ( #84947 )
...
Summary:
- Merged feat(plugins): add embedding provider contract after ClawSweeper review.
Automerge notes:
- PR branch already contained follow-up commit before automerge: chore(plugins): refresh embedding provider sdk baseline
- PR branch already contained follow-up commit before automerge: docs(plugins): document embedding provider contract
- PR branch already contained follow-up commit before automerge: fix(plugins): restore embedding providers after snapshot loads
- PR branch already contained follow-up commit before automerge: fix(plugins): resolve embedding providers from manifests
- PR branch already contained follow-up commit before automerge: fix(plugin-sdk): keep embedding provider registry mutators internal
- PR branch already contained follow-up commit before automerge: chore(plugin-sdk): refresh embedding provider API baseline
Validation:
- ClawSweeper review passed for head 41ebd66ab441ebd66ab4https://github.com/openclaw/openclaw/pull/84947#issuecomment-4514762026
Co-authored-by: Bob <dutifulbob@gmail.com >
Co-authored-by: Mariano Belinky <mbelinky@gmail.com >
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: osolmaz
Co-authored-by: osolmaz <2453968+osolmaz@users.noreply.github.com >
2026-05-22 03:36:51 +00:00
Vincent Koc
60d200f797
fix(codex): make post-tool raw assistant timeout configurable ( #84974 )
...
* fix(codex): make post-tool raw assistant timeout configurable
* docs(codex): align post-tool assistant timeout docs
* docs(changelog): move codex timeout note to unreleased
---------
Co-authored-by: 0x505badc0de <32790662+rozmiarD@users.noreply.github.com >
2026-05-22 09:39:38 +08:00
Kevin Lin
6fe3088bc6
docs: refactor plugin bundle docs
2026-05-21 17:34:42 -07:00
Peter Steinberger
e2c92be90b
chore(release): bump version to 2026.5.21
2026-05-22 00:09:45 +01:00
Josh Avant
ba06376c79
fix: harden codex sandbox execution
...
Harden the Codex app-server native execution bridge for OpenClaw sandboxed runs. The change keeps core sandbox policy in OpenClaw while exposing the process, filesystem, and HTTP relay behavior Codex needs inside a scoped exec server.
The large exec-server/test files were split into focused modules before landing, and the PR was rebased onto current main with focused tests, Testbox changed checks, CI, and Codex autoreview green.
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-05-21 23:47:32 +01:00
Peter Steinberger
cabb55380f
feat(plugin-sdk): add session entry workflow helpers
...
Co-authored-by: Eduardo Piva <efpiva@gmail.com >
2026-05-21 22:41:45 +01:00
100menotu001
0212188cb6
fix(discord): preserve reusable presentation buttons
...
Preserve `reusable` for portable message presentation buttons and carry it through Discord component registration so repeatable callbacks stay available after a successful interaction.
Also keeps `reusable` through legacy presentation-to-interactive conversion and documents the user-visible change in the changelog.
Verification:
- `pnpm test src/interactive/payload.test.ts extensions/discord/src/shared-interactive.test.ts extensions/discord/src/components.test.ts -- --reporter=verbose`
- `git diff --check`
- `AUTOREVIEW_AUTO_TESTS=0 .agents/skills/autoreview/scripts/autoreview --mode local`
- PR CI at `52f25221b3e01f3255d8df37df73d0357ab7410b`: all completed checks green/skipped/neutral except pending CodeQL `Security High (mcp-process-tool-boundary)` at time auto-merge was armed.
Co-authored-by: OpenClaw Contributor <100menotu001@users.noreply.github.com >
2026-05-21 22:02:16 +01:00
Peter Steinberger
1b1580cbc3
chore(release): refresh generated baselines
2026-05-21 15:52:04 +01:00
Gio Della-Libera
6dbd5bd446
Policy: add model, network, and MCP conformance checks ( #80783 )
...
* feat(policy): add model network and mcp conformance checks
* fix(policy): validate conformance rule shapes
* fix(policy): quote dynamic evidence paths
* fix(policy): scan per-agent model maps
* fix(policy): normalize model provider conformance
2026-05-21 07:27:16 -07:00
Vincent Koc
43c6c260de
fix(doctor): detect Codex bwrap namespace denials
...
Fixes #83018 .
2026-05-21 16:13:53 +08:00
Jason (Json)
48a14e41e2
feat(discord): add realtime voice bootstrap context
...
Add bounded realtime profile context for Discord realtime voice sessions.
Default to `IDENTITY.md`, `USER.md`, and `SOUL.md`; `voice.realtime.bootstrapContextFiles: []` disables the extra context.
Document the config/SDK surface and refresh generated metadata.
Co-authored-by: FullerStackDev <263060202+fuller-stack-dev@users.noreply.github.com >
2026-05-20 14:13:59 +01:00
Gio Della-Libera
cbf72e5e26
feat(policy): add channel conformance checks ( #80407 )
...
Summary:
- Add the bundled Policy plugin with policy-backed doctor checks for channel conformance.
- Add `openclaw policy check` attestations, accepted-attestation drift checks, and opt-in doctor repair.
- Add policy CLI docs, generated plugin inventory/reference docs, and changelog credit.
Verification:
- node --import tsx scripts/sync-plugin-versions.ts --check
- pnpm plugins:inventory:check
- pnpm docs:list
- git diff --check origin/main..HEAD
- node scripts/run-vitest.mjs extensions/policy/src/policy-state.test.ts extensions/policy/src/cli.test.ts extensions/policy/src/doctor/register.test.ts src/flows/bundled-health-checks.test.ts src/cli/program/register.maintenance.test.ts
- codex review --uncommitted; accepted finding fixed, reran clean
- codex review --commit HEAD
- GitHub CI for 4e09b067f4giodl73@gmail.com >
Co-authored-by: Gio Della-Libera <giodl@microsoft.com >
2026-05-20 11:50:21 +01:00
Peter Steinberger
167e73cd5f
build: bump bundled Codex harness to 0.132.0
2026-05-20 10:38:35 +01:00
clawsweeper[bot]
eb814b0216
Fix Codex image generation tool timeout ( #84369 )
...
Summary:
- The branch gives Codex `image_generate` dynamic-tool calls a 120s default watchdog in main and side-thread paths and updates docs, tests, and changelog.
- Reproducibility: yes. Source inspection on current main shows unconfigured Codex `image_generate` calls fall ... -tool default, and the linked source PR includes live Gateway before/after output for the timeout behavior.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(clawsweeper): address review for automerge-openclaw-openclaw-8425…
- PR branch already contained follow-up commit before automerge: Fix Codex image generation tool timeout
Validation:
- ClawSweeper review passed for head 10c7f8702310c7f87023https://github.com/openclaw/openclaw/pull/84369#issuecomment-4493288493
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: moritzmmayerhofer <254141390+moritzmmayerhofer@users.noreply.github.com >
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com >
2026-05-20 02:29:49 +00:00
pash-openai
e0d1a2a9b9
Move Codex soul context to developer instructions ( #84331 )
...
* Move Codex soul context to developer instructions
* Route Codex workspace context by lifetime
* Refresh Codex prompt snapshots
* Update prompt snapshot expectations
* Fix Codex workspace context diagnostics
2026-05-19 16:47:32 -07:00
Kevin Lin
9b97e1ef2f
feat(codex): add plugin list enable disable commands ( #83293 )
...
* feat(codex): add plugin enable disable list commands
* fix(codex): escape plugin management output
* test(codex): narrow plugin command coverage
* fix(codex): gate plugin management writes
* test(codex): type command plugin context
* docs(codex): document plugin management commands
2026-05-19 11:39:50 -07:00
clawsweeper[bot]
6f7d9736e2
fix(deepseek): normalize mcp union tool schemas ( #83848 )
...
Summary:
- The PR adds DeepSeek provider-owned `anyOf`/`oneOf` tool-schema normalization, normalizes late materialized bundled tools, and updates focused tests, docs, and changelog.
- Reproducibility: yes. Source inspection shows current main appends materialized bundled MCP tools after prov ... aw/issues/83361 provides the concrete DeepSeek `400 Invalid schema` failure for an MCP `anyOf` tool schema.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(deepseek): normalize mcp union tool schemas
Validation:
- ClawSweeper review passed for head 1bbbb44d2b1bbbb44d2bhttps://github.com/openclaw/openclaw/pull/83848#issuecomment-4483638498
Co-authored-by: Andy Ye <35905412+TurboTheTurtle@users.noreply.github.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com >
2026-05-19 01:54:29 +00:00
Josh Avant
eb6dd2c65d
Fix memory plugin CLI help dispatch ( #83841 )
...
* fix cli help for active memory plugin
* docs add changelog for memory cli help
* test fix root help mock type
2026-05-18 20:35:55 -05:00
Peter Steinberger
c32878d1b7
fix(messages): keep Codex source replies tool-gated
2026-05-18 13:51:21 +01:00
Peter Steinberger
4b35003051
fix(messages): keep Codex direct replies automatic
2026-05-18 13:51:21 +01:00
Peter Steinberger
384ddae86f
fix(codex): keep dynamic tools available in code mode ( #83583 )
2026-05-18 13:13:30 +01:00
Eva
2a0350b5b4
Separate prompt surfaces by selected harness ( #83454 )
...
* fix: scope agent prompt surfaces
* fix(codex): preserve lightweight project doc suppression
* fix(codex): demote openclaw context for native turns
* fix(codex): report demoted prompt context
* fix(codex): align demoted prompt observability
* docs: format codex runtime table
* docs: align codex prompt overlay docs
* test: align codex prompt snapshots
* test: update prompt snapshot contract
---------
Co-authored-by: Eva (agent) <eva+agent-78055@100yen.org >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-18 13:00:53 +01:00
Lior Balmas
81f20d8464
feat(admin-http-rpc): allow web QR login methods ( #83259 )
...
* feat(admin-http-rpc): allow web QR login methods
* docs(changelog): note admin HTTP RPC web login methods
* test(codex): refresh prompt snapshots for code mode config
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-18 12:24:27 +01:00
Peter Steinberger
419eea2462
fix(codex): stop forcing code-mode-only turns ( #83561 )
2026-05-18 11:39:31 +01:00
Peter Steinberger
957d50ad49
fix: hide unsupported video audio refs
2026-05-18 10:48:39 +01:00
Peter Steinberger
adc37670e8
fix(codex): preserve sandbox egress for app-server turns
...
Fixes #83347 .
2026-05-18 09:00:51 +01:00
Jason (Json)
f79d842029
fix(codex): keep OpenClaw session spawn searchable
...
Keep OpenClaw session spawning searchable in Codex mode while steering Codex-native delegation through native subagents.
Verification:
- pnpm docs:list
- git diff --check
- pnpm prompt:snapshots:gen
- pnpm prompt:snapshots:check
- node scripts/run-vitest.mjs extensions/codex/src/app-server/dynamic-tools.test.ts extensions/codex/src/app-server/run-attempt.test.ts extensions/codex/src/app-server/thread-lifecycle.test.ts -t "turn-yield|searchable OpenClaw dynamic tools|Codex-native subagents primary"
- .agents/skills/autoreview/scripts/autoreview --mode local
- GitHub checks on d9237f7294263060202+fuller-stack-dev@users.noreply.github.com >
2026-05-18 06:49:05 +01:00
Peter Steinberger
e453a39d6b
build: align node version floor
2026-05-18 06:28:14 +01:00
Kevin Lin
d85a7c6b67
docs: fix building plugin typebox import
2026-05-17 13:36:09 -07:00
Kevin Lin
d0736919aa
docs: clean up building plugins guide
...
Refactor docs/plugins/building-plugins.md into the scoped plugin-author guide, preserving the legacy registering-agent-tools anchor and restoring the original Next steps section.
2026-05-17 13:32:15 -07:00
Peter Steinberger
ee72ce8cf7
refactor: deprecate legacy interactive reply APIs
2026-05-17 14:18:23 +01:00
Peter Steinberger
ad861d4c9d
feat: add presentation capability limits
2026-05-17 14:18:23 +01:00
