vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 08:00:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
38,488 Commits 1,843 Branches 149 Tags
3b5dab372ac2501097f9fcc82ce107bba2db282d
Commit Graph

38488 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
pash-openai
3b5dab372a Keep Codex Computer Use hook relays live across turns (#74107) 
* Fix Codex native hook relay across processes

* fix: harden native hook relay bridge

* test: stabilize pairing store cache assertion

---------

Co-authored-by: pashpashpash <nik@vault77.ai>
 2026-04-30 05:57:12 +09:00
Peter Steinberger
9ccd015898 ci: bound install smoke docker builds 2026-04-29 21:56:54 +01:00
Vincent Koc
1a4d55de43 test(plugins): split kitchen sink qa personalities (#74612) 2026-04-29 13:56:49 -07:00
Peter Steinberger
987af6805b docs: update clawsweeper repair cap 2026-04-29 21:55:35 +01:00
Peter Steinberger
b478262a9e ci(dup): add mixed duplicate scans 2026-04-29 21:50:38 +01:00
Vincent Koc
cd6efd1a42 chore(ci): add MCP process CodeQL shard 
Adds the focused MCP/process/tool-execution CodeQL security shard and documents it in CI docs.

Proof:
- Branch CodeQL security run https://github.com/openclaw/openclaw/actions/runs/25132942030 passed on 9d8ca2bae7.
- New mcp-process-tool-boundary analysis 1200250367 returned 0 results.
- Branch open CodeQL alerts: none.
- Workflow Sanity, Blacksmith Testbox, Blacksmith Build Artifacts Testbox, and OpenGrep PR Diff passed.
 2026-04-29 13:48:53 -07:00
Peter Steinberger
06fcd3b60e docs: document clawsweeper freeform mentions 2026-04-29 21:46:18 +01:00
Vincent Koc
2fa5590a93 docs: list all control ui locales 2026-04-29 13:42:07 -07:00
Peter Steinberger
65c9eddae8 fix(heartbeat): suppress metadata-only exec completion noise 2026-04-29 21:39:47 +01:00
Peter Steinberger
470098bd26 fix: keep embedded run lanes from wedging 2026-04-29 21:37:17 +01:00
Peter Steinberger
b83b639287 ci(dup): include test root in duplicate scan 2026-04-29 21:32:07 +01:00
Vincent Koc
6516be1023 fix(ci): stop ClawSweeper dispatch PAT fallback 
Remove the maintainer PAT fallback from the ClawSweeper dispatch workflow so missing app auth fails closed instead of attributing downstream automation to a human token.
 2026-04-29 13:26:02 -07:00
Peter Steinberger
7fc0859a01 perf(tests): split plugin state runtime imports 2026-04-29 21:21:38 +01:00
Peter Steinberger
12ee7f696f fix(ollama): avoid broad provider hooks for local runs 2026-04-29 21:20:48 +01:00
Vincent Koc
f1ec163f77 fix(browser): remove unused zod dependency 2026-04-29 13:18:50 -07:00
github-actions[bot]
576f64c242 chore(ui): refresh fa control ui locale 2026-04-29 20:17:45 +00:00
github-actions[bot]
0d1ac827b3 chore(ui): refresh nl control ui locale 2026-04-29 20:17:35 +00:00
github-actions[bot]
2bf2720632 chore(ui): refresh vi control ui locale 2026-04-29 20:16:53 +00:00
github-actions[bot]
63cc63e8e0 chore(ui): refresh th control ui locale 2026-04-29 20:16:29 +00:00
github-actions[bot]
e3484727ba chore(ui): refresh pl control ui locale 2026-04-29 20:16:20 +00:00
github-actions[bot]
565cb9029b chore(ui): refresh id control ui locale 2026-04-29 20:16:18 +00:00
github-actions[bot]
b31369a701 chore(ui): refresh uk control ui locale 2026-04-29 20:15:30 +00:00
github-actions[bot]
7e9326026e chore(ui): refresh tr control ui locale 2026-04-29 20:15:16 +00:00
Peter Steinberger
1738ebb385 fix(browser): declare zod runtime dependency 2026-04-29 21:15:03 +01:00
github-actions[bot]
c16a4dfce6 chore(ui): refresh it control ui locale 2026-04-29 20:15:00 +00:00
github-actions[bot]
185a3fcab8 chore(ui): refresh ar control ui locale 2026-04-29 20:14:56 +00:00
github-actions[bot]
5802fcb405 chore(ui): refresh ko control ui locale 2026-04-29 20:14:05 +00:00
github-actions[bot]
2925c801f7 chore(ui): refresh fr control ui locale 2026-04-29 20:14:01 +00:00
github-actions[bot]
92c30630ad chore(ui): refresh ja-JP control ui locale 2026-04-29 20:13:47 +00:00
github-actions[bot]
7c4c008de8 chore(ui): refresh es control ui locale 2026-04-29 20:13:39 +00:00
github-actions[bot]
fef8203de1 chore(ui): refresh zh-TW control ui locale 2026-04-29 20:12:43 +00:00
github-actions[bot]
82629225ac chore(ui): refresh zh-CN control ui locale 2026-04-29 20:12:39 +00:00
github-actions[bot]
b8f4338a94 chore(ui): refresh de control ui locale 2026-04-29 20:12:33 +00:00
github-actions[bot]
b799f6c451 chore(ui): refresh pt-BR control ui locale 2026-04-29 20:12:29 +00:00
Shakker
9c19335276 fix: package bundled runtime deps helper 2026-04-29 21:11:59 +01:00
Agustin Rivera
b8372a714c fix(auth): bound bootstrap handoff scopes (#72919) 
* fix(auth): bound bootstrap handoff scopes

Co-authored-by: zsx <git@zsxsoft.com>

* fix(auth): log stripped bootstrap scopes

* docs: add changelog entry for bootstrap handoff scope bounds

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-29 14:11:16 -06:00
Vincent Koc
60c2a90550 fix(ui): gate control ui raw copy 2026-04-29 13:09:47 -07:00
Vincent Koc
c9156cd9a8 chore(ci): add network SSRF CodeQL shard 
Adds a narrow critical-security CodeQL shard for the network/SSRF boundary and documents the new category.
 2026-04-29 13:08:46 -07:00
Peter Steinberger
65e969aeea ci(dup): split duplicate scans 2026-04-29 21:02:24 +01:00
Agustin Rivera
fef42acda0 fix(commands): scope owner allowlist prefixes (#72928) 
* fix(commands): scope owner allowlist prefixes

Co-authored-by: zsx <git@zsxsoft.com>

* fix(commands): annotate owner allowlist short-circuit

* docs: move changelog entry to unreleased fixes

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-29 14:00:07 -06:00
Josh Lehman
f05b789736 test: align Codex provider payload test (#74536) 2026-04-29 12:56:27 -07:00
Michael Appel
665b0ef542 fix(agents): move groupId trust check into resolveGroupToolPolicy for all callers [AI-assisted] (#73720) 
* fix: address issue

* fix: address review feedback

* fix(gateway): validate groupId against session key before persisting to session entry

* test(gateway): verify groupId is validated against session key before session entry write

* fix(agents): trust stored group metadata

* fix(gateway): keep first group selectors

* docs: add group policy trust changelog entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-29 13:56:26 -06:00
clawsweeper[bot]
7c51cd2baf fix(device-pair): reject invalid remote setup URLs 
Fail setup-code generation when gateway.remote.url is configured but malformed, instead of falling back to a bind-derived URL and issuing a bootstrap token.
 2026-04-29 20:45:33 +01:00
Vincent Koc
21b3eb5c34 test(memory-wiki): remove duplicate fixture keys 2026-04-29 12:43:01 -07:00
Peter Steinberger
dac7237494 ci: shard release validation hotspots 2026-04-29 20:40:42 +01:00
Peter Steinberger
fdba408bce fix: restore codex verbose full output 2026-04-29 20:36:36 +01:00
clawsweeper[bot]
8a3507e310 fix(memory-wiki): route natural people questions 
Let route-question searches match people-routing metadata from natural-language prompts, and allow wiki_apply evidence provenance fields that the markdown parser already supports.
 2026-04-29 20:36:31 +01:00
Devin Robison
4808361fca fix: gate startup context for sandboxed spawned sessions (#73611) 
* fix: gate startup context for sandboxed spawned sessions

* docs: add startup sandbox changelog entry

* fix: address startup sandbox review feedback

* test: format startup sandbox coverage
 2026-04-29 13:35:55 -06:00
Vincent Koc
3abc90aac5 test(scripts): remove managed child race 2026-04-29 12:34:41 -07:00
Val Alexander
323985f4ca fix(ui): align sidebar trigger affordances 
Align the Control UI and exported transcript sidebar triggers around a shared accessible hamburger affordance.
 2026-04-29 20:33:39 +01:00