Alix-007
4d6befe7cd
fix(doctor): clear inert legacy cron notify markers ( #89396 )
...
Stop repeated cron doctor warnings by removing inert top-level `notify` metadata when `cron.webhook` is unset. Existing delivery stays unchanged, while configured invalid webhook URLs keep the actionable warning.
Fixes #44460 .
Co-authored-by: Alix-007 <li.long15@xydigit.com >
Reviewed-by: @steipete
2026-06-17 16:21:22 +02:00
huangjianxiong
73df6d48af
fix(secrets): explicitly pass BWS_SERVER_URL to resolver for self-hosted instances ( #93929 )
...
Merged via squash after the required `scripts/pr merge-run` workflow falsely flagged a non-overlapping mainline refactor as an overlap.
Prepared head SHA: dc0bba965a
Co-authored-by: Pandah97 <80405497+Pandah97@users.noreply.github.com >
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-17 22:04:48 +08:00
Alix-007
0e46fd1081
feat(docker): support offline setup reruns ( #89062 )
...
Add a strict offline rerun mode for Docker setup. Preflight required images, Docker socket/browser policy, and prevent pulls or builds across setup, restart, and rollback paths.
Fixes #70443 .
Co-authored-by: Alix-007 <li.long15@xydigit.com >
Reviewed-by: @steipete
2026-06-17 13:50:46 +02:00
Vincent Koc
5645dd4d22
refactor(agents): delete unused helper paths
2026-06-17 19:11:20 +08:00
Vincent Koc
1c0b38f960
fix(sdk): refresh plugin surface baselines
2026-06-17 12:25:42 +02:00
Vincent Koc
cf7850040e
fix(codex): align network proxy profile config
2026-06-17 17:27:34 +08:00
Vincent Koc
5c34695491
feat(codex): support app-server network proxy profiles ( #93538 )
...
Merged via squash.
Prepared head SHA: 9900b14dd5
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-17 17:01:47 +08:00
Momo
db4bcd7d09
Expose verified ClawHub source in skill verify output ( #93532 )
...
* fix(skills): expose verified ClawHub source in verify output
* fix(ci): repair verify check regressions
* fix(ci): refresh prompt snapshots
* fix(skills): require pinned ClawHub verify commits
2026-06-17 16:35:36 +08:00
Vincent Koc
91bcc4cf2a
docs(i18n): add Cohere glossary entries
2026-06-17 16:23:52 +08:00
Vincent Koc
a079d98eb4
docs(plugins): refresh Cohere inventory
2026-06-17 16:23:52 +08:00
Vincent Koc
85d5d94519
feat(cohere): add provider plugin
2026-06-17 16:23:52 +08:00
Alix-007
93e3bcef7a
fix(cli): clarify MCP list registry scope ( #87487 )
...
Clarify that `openclaw mcp list`, `show`, `set`, and `unset` manage the OpenClaw `mcp.servers` registry and do not include the separate mcporter registry.
Co-authored-by: Alix-007 <li.long15@xydigit.com >
2026-06-17 10:18:18 +02:00
Vincent Koc
bed5bf339e
fix(sdk): refresh plugin api baseline
2026-06-17 10:00:29 +02:00
Vincent Koc
9e3db6bedd
refactor(agents): remove unused compaction reserve helper
2026-06-17 14:03:05 +08:00
Ayaan Zaidi
68eb5031bd
fix(telegram): surface rich-message disabled state
2026-06-17 11:26:52 +05:30
Vincent Koc
04255b247c
revert(providers): remove ClawRouter provider
2026-06-17 12:15:17 +08:00
Vincent Koc
922aea7d28
fix(sdk): refresh plugin api baseline
2026-06-17 05:47:07 +02:00
Vincent Koc
c83c37b4d2
docs(providers): document ClawRouter integration
2026-06-17 11:46:57 +08:00
Shakker
c6b5ef9b20
docs: update Gemini CLI backend defaults
2026-06-17 03:31:14 +01:00
Shakker
c6d7d85763
fix: parse Gemini CLI stream output
2026-06-17 03:31:14 +01:00
Vincent Koc
93216e1ca1
fix(sdk): refresh plugin api baseline hash
2026-06-17 03:07:56 +02:00
Patrick Erichsen
5b9a3d05b6
docs: list all ClawHub docs in sidebar
2026-06-16 17:19:12 -07:00
Vincent Koc
06ddc85857
docs(release): require stable main closeout
2026-06-17 08:18:00 +08:00
Vincent Koc
cfb27e6437
fix(ci): align plugin SDK surface budget
2026-06-17 07:28:26 +08:00
ragesaq
f94a2506d2
feat(context-engine): pass runtime settings into lifecycle ( #88750 )
...
Merged via squash.
Prepared head SHA: 9a19334ee5
Co-authored-by: ragesaq <11304287+ragesaq@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-06-16 16:23:19 -07:00
Shakker
920e6a8eec
chore: set version 2026.6.9
2026-06-16 19:54:07 +01:00
Goutam Adwant
2c286c3465
fix(google-meet): declare realtime provider secret inputs ( #93677 )
...
* fix(google-meet): declare realtime provider secret inputs
* test(secrets): cover Google Meet installed manifest
---------
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
2026-06-17 01:58:37 +08:00
Vincent Koc
617f97d4b9
fix(plugin-sdk): refresh API baseline hash
2026-06-16 18:34:45 +02:00
joshavant
0af07bb378
chore(ios): migrate release signing to fastlane match
2026-06-16 15:59:02 +02:00
Dave Morin
c48b36a255
Keep key-free web search providers opt-in ( #93616 )
...
Merged via squash.
Prepared head SHA: 5de02da038
Co-authored-by: davemorin <78139+davemorin@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-16 21:02:07 +08:00
Alix-007
9dbc423aa4
fix(whatsapp): bound stalled read-receipt socket operations ( #93303 )
...
Merged via squash.
Prepared head SHA: 27752b17a0
Co-authored-by: Alix-007 <267018309+Alix-007@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-16 19:21:12 +08:00
Eldar Shlomi
fcdbef732c
fix(acp): keep bridge sessions out of stale ACP classification [AI-assisted] ( #93573 )
...
Merged via squash.
Prepared head SHA: f26140a4b4
Co-authored-by: eldar702 <72104254+eldar702@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-16 18:39:53 +08:00
Vincent Koc
fa33f5bbb8
fix(plugin-sdk): refresh API baseline hash
2026-06-16 12:32:39 +02:00
xiayu
a89e6e05ef
fix(cli): summarize cleanup dry-run by label ( #93565 )
...
Merged via squash.
Prepared head SHA: b0dd1d0833
Co-authored-by: AgentArcLab <19233945+AgentArcLab@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-16 17:22:54 +08:00
Vincent Koc
1ae0eacf4b
fix(scripts): avoid downgrade release upgrade baselines
2026-06-16 09:35:39 +02:00
Vincent Koc
63825369a2
fix(auto-reply): allow attachment sends in legacy group automatic replies ( #93529 )
...
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
2026-06-16 14:48:16 +08:00
Stellar鱼
ca1a53aca4
feat(cron): add compact list responses ( #93395 )
...
Merged via squash.
Prepared head SHA: 4965e7e630
Co-authored-by: yu-xin-c <175149126+yu-xin-c@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-16 14:40:00 +08:00
Stellar鱼
bbfea21a18
fix(security): audit open dm tool exposure ( #92883 )
...
* fix(security): audit open dm tool exposure
* fix(security): align open DM audit precedence
---------
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
2026-06-16 14:38:39 +08:00
Jason (Json)
1e0062b44a
feat: add Codex hosted web search ( #93446 )
...
Adds Codex as a selectable hosted web-search provider, routes native Codex search safely across model overrides, and isolates bounded hosted-search workers from configured tools.\n\nVerification: focused post-merge regression suite passed 202/202 tests on exact head 23824af49a .
2026-06-16 00:38:16 -06:00
Martin Kessler
840cfd69cd
fix(telegram): bind bot mentions to assistant identity ( #93088 )
...
* fix(telegram): bind bot mentions to assistant identity
* fix(telegram): satisfy context payload mention typing
* refactor(telegram): carry mention facts as one context object
* test(telegram): use neutral bot handle fixture
* fix(ci): terminate heartbeat command groups
* fix(ci): preserve heartbeat shell functions
* fix(telegram): project effective mention facts
* fix(telegram): keep mention identity portable
* test(telegram): align mention facts mock
---------
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
2026-06-16 14:35:14 +08:00
Vincent Koc
ccf83ace38
fix(plugins): repair missing required platform packages
2026-06-16 14:00:11 +08:00
Vincent Koc
983e0f2ba0
docs: refresh generated API baselines
2026-06-16 07:26:19 +02:00
ly-wang19
ca5c3e677a
fix(cron): clear delivery routing fields from cron edit ( #93495 )
...
* fix(cron): clear delivery routing fields from cron edit
cron edit could set delivery channel/to/thread-id/account but could not unset them: an empty value (e.g. --to "") builds delivery.X = undefined, which is omitted from the JSON-RPC patch, so mergeCronDelivery never sees the key and the field is silently kept. The gateway RPC already accepts an explicit null to clear each field (CronDeliveryPatchSchema + mergeCronDelivery via normalizeOptionalString); the CLI just never sent it.
Add --clear-channel/--clear-to/--clear-thread-id/--clear-account, each emitting null (mirroring the existing --clear-model), with mutual-exclusion guards against the matching set flag and against --webhook.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
* fix(cron): preserve delivery defaults when clearing routes
* fix(cron): validate cleared prefixed routes
---------
Co-authored-by: ly-wang19 <ly-wang19@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
2026-06-16 13:24:33 +08:00
Patrick Erichsen
99a398a4b1
docs: add ClawHub content rights to sidebar ( #93489 )
2026-06-15 21:35:24 -07:00
Onur Solmaz
8c108c294d
fix(agents): honor disabled envelope timestamps at model boundary ( #93238 )
...
Merged via squash.
Prepared head SHA: 53f7117a4b
Co-authored-by: osolmaz <2453968+osolmaz@users.noreply.github.com >
Reviewed-by: @osolmaz
2026-06-16 12:13:24 +08:00
Vincent Koc
ac8a3f367c
fix(sqlite): disable WAL on network filesystems
2026-06-16 09:36:32 +08:00
openclaw-clownfish[bot]
8694fe7e81
fix(gateway): block internal HTTP session overrides
...
Reject HTTP session-key overrides that target reserved internal session namespaces while preserving normal explicit session keys.
Co-authored-by: RichardCao <4612401+RichardCao@users.noreply.github.com >
2026-06-16 09:30:27 +08:00
Vincent Koc
1c2363def6
fix(plugin-sdk): refresh QA self-check API baseline
2026-06-16 02:56:41 +02:00
Gio Della-Libera
55263b3dfa
feat(policy): cover exec approvals artifact ( #90003 )
...
Add exec approvals artifact evidence to Policy.
- add the execApprovals policy namespace and check IDs for required artifact presence, default/per-agent security posture, autoAllowSkills, and allowlist drift
- read the active exec-approvals.json artifact only when execApprovals policy rules are configured, honoring OPENCLAW_STATE_DIR before the default ~/.openclaw path
- emit redacted posture evidence and stable oc:// references without socket tokens, command text, resolved paths, timestamps, or approval-session details
- document the public policy surface and add focused scanner, doctor, conformance, and CLI coverage
Validation:
- GitHub Actions for head b82eefe492 are green, including Real behavior proof.
- ClawSweeper re-review completed for the same head with proof: sufficient and status: ready for maintainer look.
- Maintainer artifact-boundary acceptance is recorded in the PR discussion and body.
Co-authored-by: Gio Della-Libera <235387111+giodl73-repo@users.noreply.github.com >
2026-06-15 17:30:48 -07:00
NianJiu
a375d6c849
fix(telegram): gate rich messages behind opt-in ( #93279 )
...
Restore readable standard Telegram text delivery by default after Bot API 10.1 rich messages rendered as unsupported in current clients. Keep native rich tables and structured messages available through the account-level richMessages opt-in, with account-aware capability advertising and documented structural limits.
Fixes #93263 .
2026-06-15 17:22:41 -07:00