pashpashpash
4aa8da3756
Route sensitive group commands to the owner privately ( #73872 )
...
* fix(commands): route sensitive group approvals privately
* fix(commands): require owner private routes
* test(commands): cover owner-derived Telegram diagnostics routing
2026-04-29 09:27:18 +09:00
Peter Steinberger
3286e99bc2
refactor: share docker e2e instance helpers
2026-04-29 01:17:19 +01:00
Peter Steinberger
5a0702ecf8
test: add reusable OpenClaw test instance helper
2026-04-29 00:50:55 +01:00
Peter Steinberger
8f4cbbbe66
perf(prompt): stabilize channel prompt suffix
2026-04-29 00:49:57 +01:00
Peter Steinberger
d3683a61c5
fix(bonjour): recover from ciao cancellation
...
(cherry picked from commit c34ba97262 )
2026-04-29 00:49:41 +01:00
Patrick Erichsen
2a7ba582cb
Use kitchen sink for ClawHub plugin E2E ( #73821 )
2026-04-28 16:44:38 -07:00
pashpashpash
43fa40a35d
fix(telegram): use owners for exec approvals ( #73852 )
2026-04-29 08:34:46 +09:00
Patrick Erichsen
a235a487d0
docs: add clawhub rescan recovery guidance ( #73414 )
...
* docs: add clawhub rescan recovery guidance
* docs: clarify clawhub rescan wording
2026-04-28 16:34:00 -07:00
Vincent Koc
9c9dcd4d5d
ci: shard agent runtime codeql quality
...
Add the agent runtime boundary to the CodeQL Critical Quality workflow.
2026-04-28 16:18:33 -07:00
jinjim
490e6d6dc5
feat(docker): add OPENCLAW_SKIP_ONBOARDING env to skip onboarding during Docker setup ( #55518 )
...
Merged via squash.
Prepared head SHA: 2744ed8b53
Co-authored-by: jinjimz <201528812+jinjimz@users.noreply.github.com >
Co-authored-by: sallyom <11166065+sallyom@users.noreply.github.com >
Reviewed-by: @sallyom
2026-04-28 18:50:51 -04:00
Peter Steinberger
bcc6a2400d
fix(gateway): make handshake timeout configurable
2026-04-28 23:50:24 +01:00
pashpashpash
6ce1058296
Wire diagnostics through the core chat command ( #72936 )
...
* feat: wire codex diagnostics feedback
* fix: harden codex diagnostics hints
* fix: neutralize codex diagnostics output
* fix: tighten codex diagnostics safeguards
* fix: bound codex diagnostics feedback output
* fix: tighten codex diagnostics throttling
* fix: confirm codex diagnostics uploads
* docs: clarify codex diagnostics add-on
* fix: route diagnostics through core command
* fix: tighten diagnostics authorization
* fix: pin diagnostics to bundled codex command
* fix: limit owner status in plugin commands
* fix: scope diagnostics confirmations
* fix: scope codex diagnostics cooldowns
* fix: harden codex diagnostics ownership scopes
* fix: harden diagnostics command trust and display
* fix: keep diagnostics command trust internal
* fix: clarify diagnostics exec boundary
* fix: consume codex diagnostics confirmations atomically
* test: include codex diagnostics binding metadata
* test: use string codex binding timestamps
* fix: keep reserved command trust host-only
* fix: harden diagnostics trust and resume hints
* wire diagnostics through exec approval
* fix: keep diagnostics tests aligned with bundled root trust
* fix telegram diagnostics owner auth
* route trajectory exports through exec approval
* fix trajectory exec command encoding
* fix telegram group owner auth
* fix export trajectory approval hardening
* fix pairing command owner bootstrap
* fix telegram owner exec approvals
* fix: make diagnostics approval flow pasteable
* fix: route native sensitive command followups
* fix: invoke diagnostics exports with current cli
* fix: refresh exec approval protocol models
* fix: list codex diagnostics from thread bindings
* fix: fold codex diagnostics into exec approval
* fix: preserve diagnostics approval line breaks
* docs: clarify diagnostics codex workflow
2026-04-29 07:40:37 +09:00
Peter Steinberger
7e41913a20
fix(gateway): reduce TUI history startup latency
2026-04-28 23:34:59 +01:00
Peter Steinberger
f4a9d34f98
fix(model): explain rejected session overrides
2026-04-28 23:33:24 +01:00
Peter Steinberger
193c7432e3
fix(gateway): reuse paired auth for probes
2026-04-28 21:52:50 +01:00
Said Urtabajev
652bde387d
podman: wire OPENCLAW_INSTALL_BROWSER build-arg to setup script ( #63407 )
...
* podman: wire OPENCLAW_INSTALL_BROWSER build-arg to setup script
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* chore: re-trigger CI
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-04-28 16:48:58 -04:00
Vincent Koc
14f140d6f0
docs(providers/bedrock): document Opus 4.7 temperature omission
...
For 771846c5fa : docs/providers/bedrock.md "Advanced configuration" now
includes a "Claude Opus 4.7 temperature" accordion describing that
OpenClaw automatically omits `temperature` for Opus 4.7 Bedrock refs
(foundation model ids, named profiles, application inference profiles
whose underlying model resolves to Opus 4.7, and dotted `opus-4.7`
variants with regional prefixes), since Bedrock rejects the parameter on
that model. The fix has no user-facing knob, but Opus 4.7 Bedrock users
need to know the request shape changes silently.
2026-04-28 13:39:53 -07:00
Vincent Koc
4509420dd4
test(qa): add gateway CPU scenario pack
2026-04-28 13:26:43 -07:00
Peter Steinberger
5dfc14d49b
fix(tasks): close stale terminal acp sessions
2026-04-28 21:03:55 +01:00
Peter Steinberger
3cad579c4e
fix(plugin-sdk): restore discord compatibility facade
2026-04-28 20:59:26 +01:00
Peter Steinberger
0a2d635e68
fix(gateway): harden local reachability checks
...
Co-authored-by: arthurianresolve <arthurianresolve@users.noreply.github.com >
Co-authored-by: codexGW <9350182+codexGW@users.noreply.github.com >
2026-04-28 20:57:14 +01:00
Peter Steinberger
3b593bc561
fix(cli): authorize gateway model probe overrides
2026-04-28 20:55:44 +01:00
Peter Steinberger
0dcab4e347
fix(agents): harden bootstrap and ACP session routing
2026-04-28 20:47:34 +01:00
Vincent Koc
3ae69498e2
ci: shard channel codeql security
...
Add a narrow channel-runtime CodeQL critical-security shard and document it.
2026-04-28 12:46:44 -07:00
Peter Steinberger
1f26e32f5f
fix(agents): strip empty assistant transcript text
2026-04-28 20:39:58 +01:00
Vincent Koc
98f5fd12df
docs(gateway/security): list system-reminder and previous_response in outbound stripping
...
For c2d31a5e59 : docs/gateway/security/index.md "External content
special-token sanitization" section already mentions the outbound
sanitizer with `<tool_call>` and `<function_calls>` examples, but it
predates the new internal-runtime-scaffolding stripping that targets
`<system-reminder>` and `<previous_response>` tags. Adds those two tags
as explicit examples and notes the final channel delivery boundary so
operators reading the security page see the same coverage exposed by
the c2d31a5e59 sanitizer.
2026-04-28 12:39:15 -07:00
Peter Steinberger
c500e8704f
fix(gateway): recover stale session lanes
2026-04-28 20:37:29 +01:00
Peter Steinberger
1e9faa2a59
docs: document inter-session prompt guards
2026-04-28 20:34:55 +01:00
Peter Steinberger
cb8c513ce3
fix(telegram): honor final-only streaming mode
2026-04-28 20:28:06 +01:00
Peter Steinberger
f641691910
fix(discord): harden account and binding routing
2026-04-28 20:08:27 +01:00
Vincent Koc
87fd216d9a
chore(plugin-sdk): refresh api baseline
2026-04-28 12:06:27 -07:00
Vincent Koc
bb0461b682
ci: shard channel codeql quality
...
Add a narrow channel-runtime CodeQL critical-quality shard and document it.
2026-04-28 11:52:54 -07:00
Peter Steinberger
7191f1a1eb
fix(discord): tune gateway intents and metadata timeout
2026-04-28 19:39:49 +01:00
Vincent Koc
e476523082
ci: shard gateway codeql quality
...
Add a narrow gateway/runtime CodeQL critical-quality shard and document it.
2026-04-28 11:16:48 -07:00
Peter Steinberger
53d34e7cde
fix(cli): support image files in model probes
2026-04-28 18:52:15 +01:00
Peter Steinberger
3f780bb27d
test: share Docker test-state wrapper
2026-04-28 18:47:45 +01:00
Vincent Koc
6d323ee736
docs(channels/groups): note native command bypass of visibleReplies
...
For 195f704c74 : docs/channels/groups.md "Visible replies" section now
records that native slash commands (Discord, Telegram, and other surfaces
with native command support) reply visibly even when
`messages.groupChat.visibleReplies` is `"message_tool"`, so the channel-
native command UI gets the response it expects. Text-typed `/...` commands
and ordinary chat turns still follow the configured group default.
2026-04-28 10:24:14 -07:00
Vincent Koc
7d2d8732d0
docs(plugins/hooks): document per-hook timeoutMs registration option
...
For 891c7d9f1c : docs/plugins/hooks.md "Quick start" now lists the `priority`
and new `timeoutMs` opts that `api.on(...)` accepts, explaining that the
per-hook budget aborts a slow handler instead of letting plugin setup or
recall work consume the caller's configured model timeout. The change is
traceable to the new `OpenClawPluginApi.on` `{ priority?; timeoutMs? }`
signature and `PluginHookRegistration.timeoutMs` field added in the same
SHA.
2026-04-28 10:12:44 -07:00
Shakker
c0ec58f4b6
fix: preserve runtime kind install fallback
2026-04-28 18:04:54 +01:00
Shakker
a48ffda7f7
chore: trace plugin lifecycle phases
2026-04-28 18:03:01 +01:00
Tak Hoffman
f256eeba43
fix(active-memory): use bundled recall tool
...
Fixes #73502 .
Active Memory now allows its hidden recall sub-agent to use both bundled memory tool contracts: memory_recall for memory-lancedb and memory_search/memory_get for memory-core. The prompt prefers memory_recall when available and falls back to the legacy tool pair when that is the active backend surface.
Also updates Active Memory docs, QA mock fixtures, and debug parsing compatibility for the two recall paths.
2026-04-28 09:03:47 -05:00
Radek Sienkiewicz
dd643c82b5
fix(whatsapp): expose Baileys socket timing ( #73580 )
...
Merged via squash.
Prepared head SHA: d34755262f
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com >
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com >
Reviewed-by: @velvet-shark
2026-04-28 15:46:47 +02:00
Peter
ba17b8b728
docs(active-memory): document cacheTtlMs bounds ( #65708 ) (openclaw#65737)
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test (local full suite failed in unrelated plugin/logging shards; PR-specific docs/changelog checks and GitHub checks passed)
- GitHub status checks for c2c5a94df8 completed without failure
Co-authored-by: WuKongAI-CMU <210765158+WuKongAI-CMU@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-04-28 08:42:16 -05:00
quengh
373e7fc242
feat(active-memory): add allowedChatIds/deniedChatIds per-conversation filters (openclaw#67977)
...
Verified:
- pnpm install --frozen-lockfile
- git diff --check
- pnpm exec oxfmt --check --threads=1 extensions/active-memory/index.ts extensions/active-memory/index.test.ts docs/concepts/active-memory.md CHANGELOG.md
- OPENCLAW_TEST_HEAVY_CHECK_LOCK_HELD=1 OPENCLAW_VITEST_FS_MODULE_CACHE_PATH=.vitest-cache-pr67977 pnpm test extensions/active-memory/index.test.ts extensions/active-memory/config.test.ts
- gh pr checks 67977 --repo openclaw/openclaw --required
Co-authored-by: quengh <3940773+quengh@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-04-28 08:37:55 -05:00
Vincent Koc
c478aeca5a
docs: cover cron_changed plugin hook and legacy env-var deprecation
...
- docs/plugins/hooks.md: add `cron_changed` to the Lifecycle hook catalog and
a Gateway lifecycle paragraph describing its typed event payload, run
status, delivery status, and removed-event job snapshot, so plugin authors
picking up f155a5f955 (#72773 ) have a canonical reference beyond the
sdk-overview bullet that already shipped in the same SHA.
- docs/help/environment.md: add a "Legacy environment variables" section for
aa1834a3ff so users see that `CLAWDBOT_*` and `MOLTBOT_*` prefixes are now
ignored and trigger an `OPENCLAW_LEGACY_ENV_VARS` deprecation warning,
with a rename example to `OPENCLAW_*`.
2026-04-28 04:40:38 -07:00
Alex Knight
f155a5f955
Add cron changed plugin hook ( #72773 )
...
* feat: add cron changed plugin hook
* fix: improve cron_changed hook correctness and code quality
- Fix PluginHookGatewayCronDeliveryStatus: replace 'error' with 'unknown'
to match internal CronDeliveryStatus enum
- Add job snapshot to CronEvent so removed events carry the deleted job
- Extract pickDefined helper, replace 14-field verbose spread mapping
- Add toPluginCronJob mapper for explicit internal→public type boundary
- Fix schedule union: use literal-only kind discriminants for TS narrowing
- Use loadConfig() (runtime) instead of params.cfg (startup) in hook ctx
- Use formatErrorMessage instead of String(err) for stack preservation
- Fix pre-existing getCron TS2322 with explicit cast (matches gateway_start)
- Re-export supporting types from hooks.ts for plugin consumers
- Add tests: removed events with job, finished with full fields, runtime cfg
2026-04-28 21:34:42 +10:00
Vincent Koc
e10f493160
ci: shard config codeql quality
...
Split config quality CodeQL results into a separate category while keeping the default quality bucket narrow.
2026-04-28 04:00:14 -07:00
Vincent Koc
75ba8398f9
fix(gateway): expose event loop health in readiness
2026-04-28 03:56:58 -07:00
loongfay
7b07a0ab8f
feat(channel) add yuanbao docs entrance ( #73443 )
...
* feat(channel) add yuanbao docs entrance
* feat(channel): add yuanbao docs entrance (#73443 ) (thanks @loongfay)
---------
Co-authored-by: loongzhao <loongzhao@tencent.com >
Co-authored-by: sliverp <870080352@qq.com >
2026-04-28 18:47:09 +08:00
Peter Steinberger
5de284c2e3
fix(release): restore main release checks
2026-04-28 11:44:44 +01:00