Jesse Merhi
4ea0556f64
feat: add proxy validation command
...
Adds `openclaw proxy validate` for operator-managed proxy preflight checks, including allowed/denied destination validation, CLI output, tests, docs, and changelog coverage.
Maintainer follow-ups before landing:
- validate custom allowed URLs before probing;
- use a temporary loopback canary for default denied checks and fail custom denied transport errors as unverifiable;
- redact proxy URL userinfo, query strings, and fragments from text/JSON validation output.
Validation:
- `pnpm test src/infra/net/proxy/proxy-validation.test.ts src/cli/proxy-cli.runtime.test.ts src/cli/proxy-cli.test.ts -- --reporter=verbose`
- `pnpm exec oxfmt --check --threads=1 CHANGELOG.md src/cli/proxy-cli.ts src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.test.ts src/cli/proxy-cli.runtime.test.ts src/infra/net/proxy/proxy-validation.ts src/infra/net/proxy/proxy-validation.test.ts docs/cli/proxy.md docs/security/network-proxy.md`
- `pnpm exec oxlint src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.runtime.test.ts`
- `git diff --check`
- Testbox `pnpm install && OPENCLAW_TESTBOX=1 pnpm check:changed` on `tbx_01kqgz68ff20n3dtrgq0j1mykt`
- GitHub CI success on `321b3aaf2b8be27dec6ce2ac5e4007ed064218b5`
2026-05-01 00:19:55 -05:00
Val Alexander
df0ee092f0
fix: harden gateway recovery diagnostics and media delivery
...
Harden gateway recovery diagnostics and media delivery.\n\n- Accept gateway send asVoice and map it to outbound audioAsVoice.\n- Preserve generated Swift protocol models for the gateway send schema.\n- Keep the broader recovery hardening for install/update/status/vector/TTS paths in one reviewed PR.\n\nProof:\n- Focused local gateway/outbound/update/status/doctor/sqlite-vec tests passed.\n- oxfmt --check and git diff --check passed.\n- Testbox OPENCLAW_TESTBOX=1 pnpm check:changed passed at 2f5ef650e97763a61ff43c28e61707db84c50060.\n- GitHub required checks are green at the merge SHA; the qa-lab parity gate is optional/surface-only and was still pending.
2026-04-30 21:46:22 -05:00
Peter Steinberger
1ad50a36ac
chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30
2026-05-01 01:06:13 +01:00
Alex Knight
aa9db998f7
fix(gateway): show config recovery validation details ( #75081 )
...
* fix(gateway): show config recovery validation details
* fix(cli): let gateway recovery run before proxy bootstrap
2026-05-01 07:14:33 +10:00
pashpashpash
027ea5f08b
Isolate Codex app-server state per agent ( #74556 )
...
* fix(codex): isolate app-server home per agent
* fix(codex): isolate native Codex assets per agent
* fix(channels): mark inbound system events untrusted
* fix(doctor): warn on personal Codex agent skills
* test(doctor): cover personal Codex agent skills warning
* fix(codex): forward auth profiles to harness runs
* fix(codex): preserve auto auth for harness runs
* fix(codex): auto-select harness auth profiles
* test(codex): type harness auth mock
* feat(codex): select migrated skills
* fix(codex): satisfy migration selection lint
* docs: add codex isolation changelog
2026-05-01 04:49:02 +09:00
Peter Steinberger
46888f5afb
test(gateway): align lock conflict success expectation
2026-04-30 16:39:12 +01:00
Peter Steinberger
9289a502bb
fix(gateway): stop systemd EADDRINUSE restart loops
2026-04-30 16:30:56 +01:00
Radek Sienkiewicz
52e2d4e16a
fix(cli): avoid progress spinners in active TUI input ( #75003 )
...
Merged via squash.
Prepared head SHA: 129e23e716
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com >
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com >
Reviewed-by: @velvet-shark
2026-04-30 12:31:05 +02:00
clawsweeper[bot]
e20147a1b6
fix: warning text cli correctness issue ( #74964 )
...
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-30 01:26:01 -07:00
ethanclaw
dc0c54c7f1
fix(cron): warn when --agent is not specified on cron add ( #42245 )
...
* fix(cron): warn when --agent is not specified on cron add
Warn users when creating a cron job without specifying the --agent flag,
so they know the job will run with the default agent (main).
Fixes #42196
* fix(cron): warn when cron add omits --agent
* fix(cron): name default agent in warning
---------
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-04-30 00:45:41 -07:00
NianJiu
43ca7399e5
Fix CLI text command hangs ( #74220 )
...
* fix(cli): keep agents list off plugin preload
* docs(changelog): note cli text hang fix
* test(cli): update preaction agents list expectations
2026-04-30 06:36:24 +00:00
Peter Steinberger
e648f38efc
fix: stabilize Parallels update restart checks
2026-04-30 05:22:04 +01:00
Peter Steinberger
01254500df
fix(cli): preserve lazy command parent flags
2026-04-30 00:48:46 +01:00
Peter Steinberger
4c712d3372
fix: add bundled plugin deps repair command
2026-04-29 23:23:14 +01:00
Vignesh Natarajan
8e4035d09a
Agents: add inferred commitments
2026-04-29 14:14:53 -07:00
Peter Steinberger
df51878b0b
fix(config): preserve empty patch objects
2026-04-29 22:02:02 +01:00
Peter Steinberger
ec7536078f
fix(config): validate unresolved SecretRef refs in dry-run
2026-04-29 22:02:02 +01:00
Peter Steinberger
8b8bba9621
fix(config): tighten patch command semantics
2026-04-29 22:02:02 +01:00
Peter Steinberger
48a01798b0
feat: add config apply patch command
2026-04-29 22:02:02 +01:00
pash-openai
3b5dab372a
Keep Codex Computer Use hook relays live across turns ( #74107 )
...
* Fix Codex native hook relay across processes
* fix: harden native hook relay bridge
* test: stabilize pairing store cache assertion
---------
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-04-30 05:57:12 +09:00
Peter Steinberger
12ee7f696f
fix(ollama): avoid broad provider hooks for local runs
2026-04-29 21:20:48 +01:00
clawsweeper[bot]
7c51cd2baf
fix(device-pair): reject invalid remote setup URLs
...
Fail setup-code generation when gateway.remote.url is configured but malformed, instead of falling back to a bind-derived URL and issuing a bootstrap token.
2026-04-29 20:45:33 +01:00
Hemant Sudarshan
db6951088a
fix(telegram): keep unreachable polling sockets non-fatal
...
* Runtime: suppress transient network uncaught exceptions
* fix(telegram): keep unreachable polling sockets non-fatal
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-04-29 19:53:43 +01:00
Simone
dabf76b3de
fix(device-pair): validate public setup urls ( #74538 )
...
* fix(device-pair): validate public setup urls
* test(cli): cover invalid qr override urls
---------
Co-authored-by: Lucenx9 <185146821+Lucenx9@users.noreply.github.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-04-29 19:47:35 +01:00
Peter Steinberger
616f24fd49
refactor(gateway): consolidate lifecycle lazy boundary ( #74105 )
...
* refactor(gateway): consolidate lifecycle lazy boundary
* test(gateway): cover quoted lifecycle imports
2026-04-29 16:45:51 +01:00
Peter Steinberger
390a7598c9
fix(cli): keep tools rpc namespace off plugin startup
2026-04-29 13:47:03 +01:00
Peter Steinberger
cf43b92fc9
fix(cli): keep status usage on fast path
2026-04-29 13:20:59 +01:00
Peter Steinberger
3b10b8cf74
chore: remove unused internal barrels
2026-04-29 10:23:41 +01:00
Peter Steinberger
7e5d6dba80
build(deps): trim runtime dependency graph
2026-04-29 08:11:57 +01:00
Peter Steinberger
023d3371a5
refactor(gateway): classify gateway transport failures
...
# Conflicts:
# CHANGELOG.md
2026-04-29 08:10:15 +01:00
Peter Steinberger
e25b542100
fix(cli): fall back to file logs when local logs rpc closes
2026-04-29 08:10:15 +01:00
Vincent Koc
4eba70b532
docs(types): mark legacy aliases deprecated
2026-04-28 23:10:10 -07:00
Peter Steinberger
7994833fac
fix(gateway): align handshake client timeouts
2026-04-29 05:53:50 +01:00
Vincent Koc
09cb0b0e64
fix(cli): ignore stale memory cleanup after package update
2026-04-28 21:10:24 -07:00
Peter Steinberger
e27fe55aa8
refactor: simplify plugin cache boundaries
2026-04-29 04:33:15 +01:00
Peter Steinberger
7475b27887
fix(update): tolerate legacy doctor metadata handoff
2026-04-29 04:16:06 +01:00
Peter Steinberger
180033eeae
fix(update): resume git post-update in updated process
2026-04-29 03:39:09 +01:00
Vincent Koc
43da089790
fix(update): skip disabled plugins during post-update sync ( #73970 )
...
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
2026-04-28 19:36:11 -07:00
Vincent Koc
1f41b8b44b
fix(gateway): bound default restart deferral
2026-04-28 18:42:49 -07:00
Peter Steinberger
7229ec5e04
fix(ci): pin release validation child ref
2026-04-29 01:30:53 +01:00
Peter Steinberger
e94e9347a4
fix(cli): load plugins for local JSON agent runs
2026-04-29 01:25:50 +01:00
Peter Steinberger
45f3074ee6
fix(cli): skip plugin preload for json agent runs
2026-04-29 01:19:05 +01:00
pashpashpash
6ce1058296
Wire diagnostics through the core chat command ( #72936 )
...
* feat: wire codex diagnostics feedback
* fix: harden codex diagnostics hints
* fix: neutralize codex diagnostics output
* fix: tighten codex diagnostics safeguards
* fix: bound codex diagnostics feedback output
* fix: tighten codex diagnostics throttling
* fix: confirm codex diagnostics uploads
* docs: clarify codex diagnostics add-on
* fix: route diagnostics through core command
* fix: tighten diagnostics authorization
* fix: pin diagnostics to bundled codex command
* fix: limit owner status in plugin commands
* fix: scope diagnostics confirmations
* fix: scope codex diagnostics cooldowns
* fix: harden codex diagnostics ownership scopes
* fix: harden diagnostics command trust and display
* fix: keep diagnostics command trust internal
* fix: clarify diagnostics exec boundary
* fix: consume codex diagnostics confirmations atomically
* test: include codex diagnostics binding metadata
* test: use string codex binding timestamps
* fix: keep reserved command trust host-only
* fix: harden diagnostics trust and resume hints
* wire diagnostics through exec approval
* fix: keep diagnostics tests aligned with bundled root trust
* fix telegram diagnostics owner auth
* route trajectory exports through exec approval
* fix trajectory exec command encoding
* fix telegram group owner auth
* fix export trajectory approval hardening
* fix pairing command owner bootstrap
* fix telegram owner exec approvals
* fix: make diagnostics approval flow pasteable
* fix: route native sensitive command followups
* fix: invoke diagnostics exports with current cli
* fix: refresh exec approval protocol models
* fix: list codex diagnostics from thread bindings
* fix: fold codex diagnostics into exec approval
* fix: preserve diagnostics approval line breaks
* docs: clarify diagnostics codex workflow
2026-04-29 07:40:37 +09:00
Peter Steinberger
e583db63c6
test(ci): stabilize release validation flakes
2026-04-28 23:10:34 +01:00
Peter Steinberger
5ef6e82685
fix(cli): skip plugin bootstrap for json gateway agents
2026-04-28 22:54:42 +01:00
Peter Steinberger
d84ce5e419
fix(update): disable compile cache for post-update commands
2026-04-28 21:39:10 +01:00
Peter Steinberger
3b593bc561
fix(cli): authorize gateway model probe overrides
2026-04-28 20:55:44 +01:00
Peter Steinberger
4a24b23e3e
fix(ci): stabilize full release validation
2026-04-28 20:14:14 +01:00
Peter Steinberger
53d34e7cde
fix(cli): support image files in model probes
2026-04-28 18:52:15 +01:00
Shakker
c0ec58f4b6
fix: preserve runtime kind install fallback
2026-04-28 18:04:54 +01:00