Commit Graph

30681 Commits

Author SHA1 Message Date
Rubén Cuevas
501f2cbfe4 fix(update): avoid broad tag fetches for dev updates (#84737)
Summary:
- The PR changes dev-channel git updates to fetch branches with `--no-tags`, adds targeted fetching for explicit dev tag refs, updates update-runner tests, and adds a changelog entry.
- Reproducibility: yes. Current main source shows dev updates still run a broad tag fetch, and the PR body sup ... al local bare-remote moved-tag reproducer showing that command fails before the branch update can continue.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(update): avoid broad tag fetches for dev updates

Validation:
- ClawSweeper review passed for head 733680b1bc.
- Required merge gates passed before the squash merge.

Prepared head SHA: 733680b1bc
Review: https://github.com/openclaw/openclaw/pull/84737#issuecomment-4503692161

Co-authored-by: Ruben Cuevas <hi@rubencu.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-24 06:37:21 +00:00
Peter Steinberger
02f53e6453 test(release): align prerelease contracts 2026-05-24 07:23:32 +01:00
Peter Steinberger
56eb23dda4 test(release): align plugin prerelease checks 2026-05-24 06:47:42 +01:00
Peter Steinberger
0ba6b23534 fix(docker): copy prepare hook before install 2026-05-24 06:21:29 +01:00
Peter Steinberger
d6c9387c0f fix: share signed thinking replay policy 2026-05-24 06:10:47 +01:00
Peter Steinberger
906476af0c fix: preserve signed thinking tool ids 2026-05-24 06:10:47 +01:00
NianJiuZst
41329c0e14 fix(memory): strip invalid thinking signatures for signed-thinking providers 2026-05-24 06:10:47 +01:00
Peter Steinberger
b972ac1940 fix(release): keep private QA markers out of bundled alias code 2026-05-24 06:03:21 +01:00
Peter Steinberger
0f83c93740 fix: keep blank agent allowlists fail closed (#85849) 2026-05-24 05:40:16 +01:00
Peter Steinberger
88aa713c03 fix: harden session allowlist glob matching (#85849) (thanks @SebTardif) 2026-05-24 05:40:16 +01:00
Sebastien Tardif
1463d3d72c fix(security): replace regex wildcard matching with linear-time glob in session-visibility
The agentToAgent allow-pattern matcher converted user wildcards like
`*a*b*c*` into `^.*a.*b.*c.*$` via RegExp.  Multiple overlapping
`.*` groups cause O(n^k) polynomial backtracking against non-matching
input, where k is the number of wildcards.

Replace the regex path with a segment-based glob matcher that splits on
`*` and checks prefix/suffix/interior segments in order.  The new
matcher runs in O(n*k) worst case and eliminates the regex engine
entirely from this path.

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>
2026-05-24 05:40:16 +01:00
Peter Steinberger
32631eb9d4 fix(telegram): normalize legacy action targets 2026-05-24 05:38:59 +01:00
Paul Frederiksen
cf61b876ec fix: notify chat when main session recovery fails 2026-05-24 05:38:59 +01:00
clawsweeper[bot]
8deb1ef7db Isolate boot-md startup sessions (#85919)
Summary:
- The branch updates gateway boot startup handling to use an `agent:<id>:boot` session, suppress prompt persis ...  that boot mapping after the run, and adds focused gateway boot regression coverage plus a changelog entry.
- Reproducibility: yes. there is a high-confidence source reproduction path: current main passes the generated ... idence of repeated persisted boot prompts. I did not execute the gateway scenario in this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: Fix boot-md test lint
- PR branch already contained follow-up commit before automerge: Isolate boot-md startup sessions

Validation:
- ClawSweeper review passed for head 5d5338c2d9.
- Required merge gates passed before the squash merge.

Prepared head SHA: 5d5338c2d9
Review: https://github.com/openclaw/openclaw/pull/85919#issuecomment-4527318708

Co-authored-by: Andy Ye <35905412+TurboTheTurtle@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>
2026-05-24 04:05:45 +00:00
rendrag-git
1d1a7c26d8 fix(agents): clamp proxy completions caps after payload shaping (#85889)
Clamp proxy-like OpenAI Chat Completions output caps against the estimated final outbound request payload after compatibility transforms. This prevents strict local/API-compatible servers from rejecting requests whose prompt already consumes part of the effective context window, while avoiding over-clamping dropped replay turns.

Co-authored-by: rendrag-git <253747599+rendrag-git@users.noreply.github.com>
2026-05-24 04:57:23 +01:00
Peter Steinberger
17dcdead00 fix: gate discord realtime voice by wake name (#85915) 2026-05-24 04:47:16 +01:00
Gio Della-Libera
c074d09f1e fix(update): ignore inherited launchd xpc for respawn (#85789) 2026-05-23 20:42:05 -07:00
Gio Della-Libera
6b337ff3ea fix: allow symlinked workspace write parents (#85818) 2026-05-23 20:42:01 -07:00
Gio Della-Libera
af765100ff fix(agents): preserve latest thinking replay signatures (#85579) 2026-05-23 20:41:57 -07:00
Gio Della-Libera
e6d5b7db96 fix(plugins): return plugin gateway method results (#85785) 2026-05-23 20:41:52 -07:00
Gio Della-Libera
068b9acb51 fix(gateway): hide duplicate ACP chat replies (#85775) 2026-05-23 20:41:45 -07:00
Gio Della-Libera
566d8cdf39 fix(update): ignore restart script spawn failures (#85761) 2026-05-23 20:41:40 -07:00
Gio Della-Libera
82af6119fa fix: honor OPENCLAW_HOME defaults (#85802)
* fix: honor OPENCLAW_HOME defaults

* fix(install): preserve openclaw home upgrade defaults

* fix(install): satisfy shellcheck tilde patterns
2026-05-23 20:39:59 -07:00
Gio Della-Libera
76221b53c2 fix(doctor): prune stale bundled plugin paths (#85038) 2026-05-23 20:39:42 -07:00
Kaspre
6008375655 fix(gateway): honor restart drain budget for embedded runs
Honor configured restart drain budgets for embedded runs and avoid a second active-work drain after forced deferral timeout restarts.

Includes maintainer changelog entry.
2026-05-24 04:22:27 +01:00
Peter Steinberger
6e994ad343 fix: preserve provider defaults during config saves (#85903) 2026-05-24 04:22:15 +01:00
Peter Steinberger
fc4bd448b6 fix: prefer aborted stop reason over blocked lifecycle 2026-05-24 04:08:15 +01:00
Peter Steinberger
8df01a8683 fix: treat aborted subagent lifecycle events as killed 2026-05-24 04:08:15 +01:00
JARVIS-Glasses
4d502b3d1e fix(agents): treat aborted subagent runs as terminal 2026-05-24 04:08:15 +01:00
Cavit Erginsoy
bd91107fc6 Fix foreground reply fence visibility 2026-05-24 04:02:59 +01:00
Peter Steinberger
08159d87d2 fix: address PR review comments 2026-05-24 03:55:49 +01:00
Peter Steinberger
6a482584ee fix(ci): address review sweep regressions 2026-05-24 03:55:49 +01:00
Peter Steinberger
679b6776d5 fix(node): avoid stale TLS pins when retargeting 2026-05-24 03:55:49 +01:00
Peter Steinberger
97c63e63b1 fix(cli): keep secrets configure JSON singular 2026-05-24 03:55:49 +01:00
Peter Steinberger
6ce9e0dd9b fix(cli): keep completion and Twitch races bounded 2026-05-24 03:55:49 +01:00
Peter Steinberger
25ccadd22a fix(acp): require allow option for auto approvals 2026-05-24 03:55:49 +01:00
Peter Steinberger
9410eb30cf fix(cli): preserve explicit command intent 2026-05-24 03:55:49 +01:00
Peter Steinberger
a4e95cf7b1 fix(cli): bound node media file writes 2026-05-24 03:55:49 +01:00
Peter Steinberger
6d6b2479ad fix(gateway): scope imported history identity 2026-05-24 03:55:49 +01:00
Peter Steinberger
eeb5f12293 fix(plugins): fail stalled runtime operations 2026-05-24 03:55:49 +01:00
Peter Steinberger
9ab0af270a fix(cli): keep plugin command metadata intact 2026-05-24 03:55:49 +01:00
Peter Steinberger
15ff89bf5d fix(cli): preserve command option state 2026-05-24 03:55:49 +01:00
Peter Steinberger
308af85991 fix(cli): harden generated completions 2026-05-24 03:55:49 +01:00
Peter Steinberger
459cee5315 fix(cli): reject malformed timeout options 2026-05-24 03:55:49 +01:00
Kaspre
96959ec3d7 fix(codex): defer native-hook-relay unregister to avoid cleanup race
Keep successful Codex native hook relays alive through a bounded grace window so late hook callbacks still reach OpenClaw enforcement, while interrupted, aborted, timed-out, and failed turns unregister immediately.\n\nCo-authored-by: Kaspre <kaspre@gmail.com>
2026-05-24 03:53:00 +01:00
NianJiu
0abedd546a fix(models): preserve source snapshots for SecretRef providers
* fix(models): preserve source snapshots for SecretRef providers

* docs: add models SecretRef changelog entry

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-05-24 03:48:05 +01:00
samzong
31145e0dd9 [Fix] Preflight runtime SecretRefs before config writes (#84454)
* fix(config): preflight runtime secret refs before writes

* fix(config): restore include rollback env

* docs(changelog): note SecretRef config preflight

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-05-24 03:40:15 +01:00
Shakker
81dee15406 test: narrow transcript rewrite message content access 2026-05-24 03:37:43 +01:00
Shakker
321d98b982 test: cover source reply media transcript backing 2026-05-24 03:37:43 +01:00
Shakker
39226ea35b fix: back source reply media in transcripts 2026-05-24 03:37:43 +01:00