Commit Graph

2315 Commits

Author SHA1 Message Date
Peter Steinberger
52eee27f30 refactor: hide command helper internals 2026-05-02 06:54:02 +01:00
Peter Steinberger
811d90778f refactor: trim unused nodes cli type export 2026-05-02 06:29:53 +01:00
Peter Steinberger
04b9f5fc98 fix(cli): avoid directory plugin reinstall prompts 2026-05-02 06:14:29 +01:00
Peter Steinberger
ebe8f615e5 fix: reject agent-scoped model default writes 2026-05-02 04:19:11 +01:00
Peter Steinberger
eee3aeae00 [codex] add Crestodian plugin management (#75869)
Summary:
- The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes.
- Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks.

ClawSweeper fixups:
- Included follow-up commit: Repair Crestodian plugin management config schema drift

Validation:
- ClawSweeper review passed for head c29cda6005.
- Required merge gates passed before the squash merge.

Prepared head SHA: c29cda6005
Review: https://github.com/openclaw/openclaw/pull/75869#issuecomment-4362360704

Co-authored-by: Peter Steinberger <steipete@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-02 03:12:38 +00:00
Peter Steinberger
82a8006f77 fix: reserve legacy tool cli token 2026-05-02 04:06:46 +01:00
Peter Steinberger
a22f065043 fix(slack): support exact message reads 2026-05-02 03:24:36 +01:00
Peter Steinberger
37426a6e64 fix(slack): use live directory readers in cli 2026-05-02 03:04:29 +01:00
Vincent Koc
0c6c1cac76 feat(plugins): prefer clawhub for bundled cutovers 2026-05-01 18:13:03 -07:00
Peter Steinberger
5c3043bb37 refactor: trim auth cli type exports 2026-05-02 01:54:25 +01:00
Peter Steinberger
5046cbc6f9 refactor: trim local type exports 2026-05-02 01:44:51 +01:00
Vincent Koc
824cfa196d feat(plugins): show clawpack source facts in inspect 2026-05-01 17:40:05 -07:00
Vincent Koc
0aa8022e88 refactor(plugins): rename clawhub storepack metadata to clawpack 2026-05-01 17:32:22 -07:00
Peter Steinberger
0217db5387 refactor: trim cli tagline exports 2026-05-02 01:11:18 +01:00
Vincent Koc
20e8769d93 feat(plugins): persist clawhub storepack metadata 2026-05-01 17:05:47 -07:00
Peter Steinberger
900e21fb1a refactor: trim cli helper type exports 2026-05-02 00:55:11 +01:00
Peter Steinberger
20945b84b4 feat: generalize message access groups (#75813) 2026-05-01 23:55:26 +01:00
Peter Steinberger
fe8966b4ea fix: stop channel runtime before WhatsApp removal 2026-05-01 22:37:30 +01:00
Peter Steinberger
4b9aa3021a fix: restore release ci guardrails 2026-05-01 22:28:37 +01:00
Peter Steinberger
5c7362fe9d refactor: trim cli shape exports 2026-05-01 22:08:43 +01:00
Peter Steinberger
4def4073d4 refactor: trim cli helper exports 2026-05-01 22:05:19 +01:00
Peter Steinberger
4b7a000dcb chore: clean up plugin dependency leftovers 2026-05-01 21:37:08 +01:00
Peter Steinberger
ed8f50f240 refactor: simplify plugin dependency handling
Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths.

Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.
2026-05-01 21:32:22 +01:00
Vincent Koc
579acc3a91 fix(plugins): avoid source rebuilds for policy toggles
Reuse current installed-plugin registry records for policy-only enable and disable refreshes.\n\nThanks @vincentkoc
2026-05-01 09:01:13 -07:00
Vincent Koc
f858b5de22 fix(security): keep plain audit off plugin runtimes
Keep routine security audit on config/filesystem checks by default, reserving plugin runtime collectors for deep audit paths.\n\nThanks @vincentkoc
2026-05-01 08:22:06 -07:00
Peter Steinberger
5c95fc06fa test(plugin-sdk): align facade loader windows fast path 2026-05-01 14:43:08 +01:00
Shakker
5e33bfee10 test(plugins): mock install slot registry 2026-05-01 14:39:21 +01:00
Vincent Koc
70095f08f4 fix(plugins): satisfy slot registry type 2026-05-01 06:07:16 -07:00
Vincent Koc
f0c7c430f5 fix(plugins): scope install slot selection 2026-05-01 06:07:15 -07:00
Vincent Koc
cad2cef0fb fix(update): use service env for doctor 2026-05-01 05:06:14 -07:00
Vincent Koc
debb8ac76c fix(update): verify daemon restart port 2026-05-01 05:06:14 -07:00
Peter Steinberger
7b3dfbf214 refactor: trim cli program test exports 2026-05-01 12:39:10 +01:00
Peter Steinberger
050f0f50c9 refactor: trim cli test helper exports 2026-05-01 12:31:52 +01:00
Peter Steinberger
b48dcab1b5 fix(cli): repair agent runtime deps during startup 2026-05-01 12:06:26 +01:00
Peter Steinberger
7ddf28c0d4 feat: support git plugin installs 2026-05-01 10:59:10 +01:00
Peter Steinberger
067375cee3 fix: retry update channel persistence 2026-05-01 09:30:10 +01:00
Peter Steinberger
250376f885 fix: simplify bundled runtime dependency repair (#75183)
Summary:
- Merged fix: simplify bundled runtime dependency repair after ClawSweeper review.

ClawSweeper fixups:
- Included follow-up commit: fix: verify cached bundled runtime roots
- Included follow-up commit: refactor: simplify plugin runtime startup paths
- Included follow-up commit: refactor: trim plugin startup policy helpers
- Included follow-up commit: refactor: trust package manager runtime deps materialization
- Included follow-up commit: fix: narrow channel runtime deps skip policy
- Included follow-up commit: refactor: defer startup plugin runtime deps
- Ran the ClawSweeper repair loop before final review.

Validation:
- ClawSweeper review passed for head 04dc566534.
- Required merge gates passed before the squash merge.

Prepared head SHA: 04dc566534
Review: https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786

Co-authored-by: Peter Steinberger <steipete@gmail.com>
Co-authored-by: Shakker <shakkerdroid@gmail.com>
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-05-01 07:49:02 +00:00
Peter Steinberger
a379ac0562 fix: guard plugin HTTP calls in CI 2026-05-01 08:26:29 +01:00
Peter Steinberger
42d73fd955 refactor: remove dead private helpers 2026-05-01 06:55:26 +01:00
Jesse Merhi
4ea0556f64 feat: add proxy validation command
Adds `openclaw proxy validate` for operator-managed proxy preflight checks, including allowed/denied destination validation, CLI output, tests, docs, and changelog coverage.

Maintainer follow-ups before landing:
- validate custom allowed URLs before probing;
- use a temporary loopback canary for default denied checks and fail custom denied transport errors as unverifiable;
- redact proxy URL userinfo, query strings, and fragments from text/JSON validation output.

Validation:
- `pnpm test src/infra/net/proxy/proxy-validation.test.ts src/cli/proxy-cli.runtime.test.ts src/cli/proxy-cli.test.ts -- --reporter=verbose`
- `pnpm exec oxfmt --check --threads=1 CHANGELOG.md src/cli/proxy-cli.ts src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.test.ts src/cli/proxy-cli.runtime.test.ts src/infra/net/proxy/proxy-validation.ts src/infra/net/proxy/proxy-validation.test.ts docs/cli/proxy.md docs/security/network-proxy.md`
- `pnpm exec oxlint src/cli/proxy-cli.runtime.ts src/cli/proxy-cli.runtime.test.ts`
- `git diff --check`
- Testbox `pnpm install && OPENCLAW_TESTBOX=1 pnpm check:changed` on `tbx_01kqgz68ff20n3dtrgq0j1mykt`
- GitHub CI success on `321b3aaf2b8be27dec6ce2ac5e4007ed064218b5`
2026-05-01 00:19:55 -05:00
Val Alexander
df0ee092f0 fix: harden gateway recovery diagnostics and media delivery
Harden gateway recovery diagnostics and media delivery.\n\n- Accept gateway send asVoice and map it to outbound audioAsVoice.\n- Preserve generated Swift protocol models for the gateway send schema.\n- Keep the broader recovery hardening for install/update/status/vector/TTS paths in one reviewed PR.\n\nProof:\n- Focused local gateway/outbound/update/status/doctor/sqlite-vec tests passed.\n- oxfmt --check and git diff --check passed.\n- Testbox OPENCLAW_TESTBOX=1 pnpm check:changed passed at 2f5ef650e97763a61ff43c28e61707db84c50060.\n- GitHub required checks are green at the merge SHA; the qa-lab parity gate is optional/surface-only and was still pending.
2026-04-30 21:46:22 -05:00
Peter Steinberger
1ad50a36ac chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30 2026-05-01 01:06:13 +01:00
Alex Knight
aa9db998f7 fix(gateway): show config recovery validation details (#75081)
* fix(gateway): show config recovery validation details

* fix(cli): let gateway recovery run before proxy bootstrap
2026-05-01 07:14:33 +10:00
pashpashpash
027ea5f08b Isolate Codex app-server state per agent (#74556)
* fix(codex): isolate app-server home per agent

* fix(codex): isolate native Codex assets per agent

* fix(channels): mark inbound system events untrusted

* fix(doctor): warn on personal Codex agent skills

* test(doctor): cover personal Codex agent skills warning

* fix(codex): forward auth profiles to harness runs

* fix(codex): preserve auto auth for harness runs

* fix(codex): auto-select harness auth profiles

* test(codex): type harness auth mock

* feat(codex): select migrated skills

* fix(codex): satisfy migration selection lint

* docs: add codex isolation changelog
2026-05-01 04:49:02 +09:00
Peter Steinberger
46888f5afb test(gateway): align lock conflict success expectation 2026-04-30 16:39:12 +01:00
Peter Steinberger
9289a502bb fix(gateway): stop systemd EADDRINUSE restart loops 2026-04-30 16:30:56 +01:00
Radek Sienkiewicz
52e2d4e16a fix(cli): avoid progress spinners in active TUI input (#75003)
Merged via squash.

Prepared head SHA: 129e23e716
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Reviewed-by: @velvet-shark
2026-04-30 12:31:05 +02:00
clawsweeper[bot]
e20147a1b6 fix: warning text cli correctness issue (#74964)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-30 01:26:01 -07:00
ethanclaw
dc0c54c7f1 fix(cron): warn when --agent is not specified on cron add (#42245)
* fix(cron): warn when --agent is not specified on cron add

Warn users when creating a cron job without specifying the --agent flag,
so they know the job will run with the default agent (main).

Fixes #42196

* fix(cron): warn when cron add omits --agent

* fix(cron): name default agent in warning

---------

Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-04-30 00:45:41 -07:00
NianJiu
43ca7399e5 Fix CLI text command hangs (#74220)
* fix(cli): keep agents list off plugin preload

* docs(changelog): note cli text hang fix

* test(cli): update preaction agents list expectations
2026-04-30 06:36:24 +00:00