vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 08:20:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
36,641 Commits 1,843 Branches 149 Tags
61fc06f33f29804dcc1c3ec90cbd66f1946df714
Commit Graph

36641 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mason Huang
61fc06f33f fix(gateway): preserve existing skill secrets on redacted round-trips 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-27 16:20:17 +08:00
Mason Huang
8dae600677 docs(changelog): restore skills.update redaction entry 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-04-27 16:13:32 +08:00
Ziy1-Tan
7e3084f405 test: assert exact redaction sentinel in skills.update response test 
Use __OPENCLAW_REDACTED__ sentinel value instead of .not.toBe() to
properly verify the redaction contract — weak negation checks would
pass even if the field were silently dropped or set to null.
 2026-04-27 16:12:09 +08:00
Ziy1-Tan
3cf89613f1 fix(gateway): redact secrets in skills.update response 
skills.update was returning the full updated SkillConfig entry including
plaintext apiKey and env values in the RPC response. This could leak
credentials into Control UI WebSocket traffic, client logs, or session
transcripts.

Fix by passing the response config through the existing redactConfigObject()
utility, which already handles all sensitive paths (apiKey, tokens, passwords,
secret-named env keys, etc.) via isSensitiveConfigPath(). Config is still
written to disk in full — only the response payload is redacted.

Fixes #66769
 2026-04-27 16:12:09 +08:00
Peter Steinberger
d76f924be3 fix(plugins): avoid registry barrel topology cycle 2026-04-27 09:09:31 +01:00
Peter Steinberger
5b616e2bec fix(agents): narrow session lock scope 2026-04-27 09:09:19 +01:00
Peter Steinberger
5ff49ae03e fix(gateway): skip local model pricing refreshes 2026-04-27 09:09:19 +01:00
bbddbb
563718c2e4 feat(control-ui): confirm dreaming restart changes 
Require explicit confirmation before applying restart-impacting Dreaming mode changes in the Control UI.

- Add pending/confirm/loading state for the Dreaming toggle path
- Render a restart confirmation dialog before sending the config patch
- Sync Control UI locale metadata and cover the confirmation flow in browser tests

Fixes #63804
 2026-04-27 03:08:59 -05:00
Peter Steinberger
276291d399 fix: hide bonjour Windows ARP shell probe 2026-04-27 09:08:40 +01:00
Peter Steinberger
8bdfa58cbb fix(migrations): avoid partial Hermes config apply after conflict 2026-04-27 09:07:59 +01:00
Vincent Koc
0055e404cf docs(hermes): rework CLI migrate page and add user-facing migration guide 
- cli/migrate: convert flat reference into structured Mintlify page (Tip pointer, ParamField for flags, AccordionGroup for safety model, sub-sections for Hermes provider with what's imported, .env keys, archive-only state, and plugin contract)
- install/migrating-hermes: new dedicated user guide modeled after migrating-matrix.md (Tabs for onboarding vs CLI, AccordionGroup for what gets imported, Steps for recommended flow, Warning for --overwrite, Troubleshooting accordions)
- docs.json: add install/migrating-hermes to Maintenance group alongside migrating and migrating-matrix
 2026-04-27 01:04:00 -07:00
Peter Steinberger
184b024fb6 test(migrate-hermes): keep config runtime stateful 2026-04-27 09:02:14 +01:00
Peter Steinberger
87b8072a85 test: cover qqbot channel guardrails 2026-04-27 08:58:13 +01:00
Peter Steinberger
f7081a3879 fix(lmstudio): trust configured local endpoints 2026-04-27 08:55:45 +01:00
Peter Steinberger
9510906669 fix: stop hook fallback after security blocks 2026-04-27 08:55:38 +01:00
Peter Steinberger
5a3d01e480 docs: format plugin sdk subpaths 2026-04-27 08:53:31 +01:00
Peter Steinberger
f21c8c3f0c test(migrate-hermes): use OpenClaw temp root 2026-04-27 08:53:27 +01:00
Peter Steinberger
58037cc89d fix: resolve browser playwright runtime deps 2026-04-27 08:50:56 +01:00
Peter Steinberger
c1d827844c test: speed up unit fast lane 2026-04-27 08:49:09 +01:00
Shakker
45b0d5ccc2 chore: add plugin lookup startup trace metrics 2026-04-27 08:48:18 +01:00
Shakker
bed76c26e7 fix: reuse lookup table for deferred plugin reload 2026-04-27 08:48:18 +01:00
Shakker
e068165036 docs: note plugin lookup reuse followups 2026-04-27 08:48:18 +01:00
Shakker
8b396bcfd2 docs: document plugin lookup table 2026-04-27 08:48:18 +01:00
Shakker
7c985890af refactor: reuse lookup table during gateway plugin load 2026-04-27 08:48:18 +01:00
Shakker
b2deb74694 fix: include setup cli backends in plugin lookup 2026-04-27 08:48:18 +01:00
Shakker
5228b24927 fix: avoid spread in provider owner lookup 2026-04-27 08:48:18 +01:00
Shakker
af29ccd98f fix: copy lookup startup plugin ids for gateway load 2026-04-27 08:48:18 +01:00
Shakker
f41126bc2e refactor: resolve contribution owners from lookup maps 2026-04-27 08:48:17 +01:00
Shakker
fbf0a29195 refactor: expand plugin lookup owner maps 2026-04-27 08:48:17 +01:00
Shakker
dc6ac472db refactor: use plugin lookup table for gateway load fallback 2026-04-27 08:48:17 +01:00
Shakker
123dee0513 fix: avoid duplicate plugin lookup diagnostics 2026-04-27 08:48:17 +01:00
Shakker
635af612d5 refactor: expose plugin lookup table normalizer 2026-04-27 08:48:17 +01:00
Shakker
354eb37ff5 refactor: reuse manifest registry for plugin id normalization 2026-04-27 08:48:17 +01:00
Shakker
b8c9426911 refactor: reuse plugin lookup table for contribution owners 2026-04-27 08:48:17 +01:00
Shakker
e985acbc1c docs: note plugin startup lookup table 2026-04-27 08:48:17 +01:00
Shakker
3f38d3af88 refactor: add plugin lookup table 2026-04-27 08:48:17 +01:00
Peter Steinberger
66f4b52db3 fix(docker): route local provider setup to host gateway 2026-04-27 08:46:33 +01:00
Alex Knight
4e19bc80c9 Fix null params for parameterless tools (#72673) 
* fix tool null params for parameterless schemas

* guard composite required tool schemas
 2026-04-27 17:45:59 +10:00
Vincent Koc
f4ca0612b2 Merge branch 'main' of https://github.com/openclaw/openclaw 
* 'main' of https://github.com/openclaw/openclaw:
  docs: point maintainer triage at gitcrawl
  fix: clean runtime deps backup owner marker
  test(browser): close hanging attach-only sockets
  fix(plugins): normalize windows override imports
  fix: preserve live runtime deps temp dirs
  fix(lmstudio): promote bracketed tool calls
  Add Google Meet realtime consult agentId (#72381)
  fix: normalize lazy service override imports
  test: split ui unit tests from generic lane
  feat(migrations): add plugin-owned Hermes import
  fix(ci): expose package deps to Telegram QA harness (#72680)
  fix: hide bundled runtime npm windows
 2026-04-27 00:44:30 -07:00
Vincent Koc
0286bb9817 docs: point maintainer triage at gitcrawl 
Update the OpenClaw PR maintainer skill to use gitcrawl for local triage commands.
 2026-04-27 00:43:07 -07:00
Peter Steinberger
84929bf85b fix: clean runtime deps backup owner marker 2026-04-27 08:43:03 +01:00
Peter Steinberger
bfdee5fa72 test(browser): close hanging attach-only sockets 2026-04-27 08:40:25 +01:00
Peter Steinberger
15e634d50c fix(plugins): normalize windows override imports 2026-04-27 08:39:42 +01:00
Peter Steinberger
4514a73170 fix: preserve live runtime deps temp dirs 2026-04-27 08:39:35 +01:00
Peter Steinberger
da55212c6e fix(lmstudio): promote bracketed tool calls 2026-04-27 08:38:53 +01:00
BsnizND
d5e6abcb3d Add Google Meet realtime consult agentId (#72381) 
Remote proof:
- CI run 24982271745 passed on 6122e13c9f.
- Blacksmith Testbox tbx_01kq6vwehcszjfpp52f0pb3v1q passed focused Google Meet formatting, docs/link checks, realtime consult runtime tests, Google Meet tests, extension test typecheck, the core-unit-fast-support shard, and the core support boundary shard.

Thanks @BsnizND.

Co-authored-by: BSnizND <199837910+BsnizND@users.noreply.github.com>
 2026-04-27 08:36:59 +01:00
Vincent Koc
29f4cdfcbb docs: point maintainer triage at gitcrawl 2026-04-27 00:36:32 -07:00
Peter Steinberger
f6db86f9a0 fix: normalize lazy service override imports 2026-04-27 08:35:45 +01:00
Peter Steinberger
98e7242b53 test: split ui unit tests from generic lane 2026-04-27 08:35:04 +01:00
Vincent Koc
1fc5b2b703 feat(migrations): add plugin-owned Hermes import 
* feat: add migration providers

* feat: offer Hermes migration during onboarding

* feat(hermes): map imported config surfaces

* feat(onboard): require fresh migration imports

* docs(cli): clarify Hermes import coverage

* chore(migrations): rename Hermes importer package

* chore(migrations): rewire Hermes importer id

* fix(migrations): redact migration JSON details

* fix(hermes): use provider runtime for config imports

* test(hermes): cover missing source planning

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-04-27 00:34:29 -07:00