vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-20 21:41:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
66,940 Commits 1,843 Branches 149 Tags
7303f429177b04c0465bf697da170fa91d5e2854
Commit Graph

491 Commits

Author SHA1 Message Date
Peter Steinberger
f4659b7d4d fix(updater): scope restart log audits to managed checkout (#105030) 
* fix(updater): scope restart log audits

* test(updater): declare log source argument

* fix(updater): preserve configured plugin logs

* fix(updater): normalize plugin log sources

* fix(updater): reuse managed plugin config

* fix(updater): resolve relative plugin roots

* fix(updater): handle unset gateway workdir

* fix(updater): audit effective plugin roots

* fix(updater): bind logs to managed runtime

* fix(updater): canonicalize log source roots
 2026-07-12 11:21:00 +01:00
Vincent Koc
9b7f828d01 chore(skills): sync canonical autoreview (#105250) 2026-07-12 17:37:15 +08:00
Peter Steinberger
68553bed84 fix: live updater survives launchd teardown and retargets wrapped gateways (#105022) 
* fix(updater): tolerate launchd teardown and replace plist args safely

* test(updater): declare plist argument helper
 2026-07-12 09:35:53 +01:00
Vincent Koc
86af5f08b3 fix(release): support explicit provenance overrides 2026-07-12 16:12:23 +08:00
Peter Steinberger
23d4e48172 fix: harden live updater snapshot recovery (#105007) 
* fix(updater): harden snapshot recovery

* fix(updater): avoid snapshot code execution
 2026-07-12 06:29:41 +01:00
Vincent Koc
dc6b447c07 fix(release): verify named backport provenance 2026-07-12 13:12:30 +08:00
Peter Steinberger
2263272a32 fix(updater): build snapshot control client safely (#104964) 2026-07-11 22:02:50 -07:00
Peter Steinberger
f802a6f8bc fix: update managed macOS Gateways from runtime snapshots (#104946) 
* fix(updater): migrate validated gateway snapshots

* test(updater): declare snapshot maintenance helpers
 2026-07-11 21:20:08 -07:00
Vincent Koc
e4a9398396 fix(release): allow generated ledger repair 2026-07-12 12:08:10 +08:00
Vincent Koc
b1cda07878 fix(release): preserve original PRs for named backports 2026-07-12 12:08:10 +08:00
Peter Steinberger
3fe61030be fix: rebuild mac app for generated protocol changes (#104839) 2026-07-11 18:00:42 -07:00
Peter Steinberger
0fbd28476e fix: fence live updater maintenance (#104802) 2026-07-11 17:05:35 -07:00
Vincent Koc
fd9f84ffdc chore(autoreview): align canonical skill (#104701) 2026-07-12 05:00:26 +08:00
Peter Steinberger
43c40a3b3e fix: recover delayed live Mac bundle restores (#104613) 2026-07-11 11:18:39 -07:00
Vincent Koc
b3136854f0 chore(autoreview): align org review defaults (#104343) 
* docs(autoreview): sync canonical review policy

* fix(autoreview): sync isolated review runtime

* test(autoreview): sync hardening coverage

* fix(autoreview): sync final isolation hardening

* test(autoreview): sync final isolation coverage

* fix(autoreview): sync final input hardening

* test(autoreview): sync final hardening coverage

* fix(autoreview): sync reviewer trust hardening

* test(autoreview): sync fallback coverage

* test(autoreview): sync boundary coverage

* docs(autoreview): align runtime contracts

* fix(autoreview): reject unbundled gitlinks

* test(autoreview): cover final trust guards

* feat(autoreview): accept max Codex reasoning
 2026-07-11 22:49:50 +08:00
Peter Steinberger
325679a335 fix: reuse built control UI for live Mac updates (#104482) 
* fix: reuse built control UI for live Mac updates

* fix: pin live updater Mac build inputs
 2026-07-11 06:36:42 -07:00
Peter Steinberger
fa77fe10d5 chore: migrate active GPT-5.5 references to GPT-5.6 (#104452) 
* chore(models): migrate active GPT-5.5 references

* test(workboard): expect GPT-5.6 Sol default

* chore: keep release notes in PR body

* test(models): align picker fixtures with Sol default

* test: update PDF default model expectation

* test(qa): migrate thinking smoke to Luna

* test(gateway): align mock catalog with Sol default

* ci: retrigger exact-head PR checks

* test(gateway): document default catalog invariant
 2026-07-11 06:30:57 -07:00
Peter Steinberger
5e8a534fad fix: retry live Gateway readiness proof (#104374) 
* fix: retry live Gateway readiness proof

* style: format live updater readiness helper
 2026-07-11 03:11:34 -07:00
Peter Steinberger
c702719eda fix: preserve Mac bundle during live builds (#104376) 2026-07-11 03:06:50 -07:00
Peter Steinberger
14a056ac83 fix: stop Gateway without source rebuild (#104357) 2026-07-11 02:45:07 -07:00
Peter Steinberger
107b95e1ad fix: isolate Gateway from live builds (#104329) 2026-07-11 02:02:28 -07:00
Peter Steinberger
2ed2424618 feat: harden live gateway and mac restarts (#104314) 
* feat: audit gateway logs after live restarts

* fix: keep mac app running during replacement build
 2026-07-11 01:41:27 -07:00
Peter Steinberger
7bf80dc2c6 chore(tooling): enforce formatting and refresh TypeScript checks (#104239) 
* chore(tooling): enforce current formatter and refresh checks

* chore(tooling): keep release changelog formatter-owned

* chore(tooling): retain compatible Node type surface

* ci: enforce formatting for docs-only changes

* ci: isolate docs formatter check

* chore(tooling): apply updated lint and format rules

* chore(tooling): satisfy updated switch lint

* style(ui): apply Linux formatter layout

* test(doctor): match quiet local audio contribution

* test(doctor): assert quiet output only

* test(doctor): follow restored information contract
 2026-07-11 01:09:51 -07:00
Peter Steinberger
ab8da6de1a docs: align PR gate policy 2026-07-11 07:20:53 +01:00
Peter Steinberger
2ace363e98 feat: add live updater maintainer skill (#104202) 
* feat: add live updater maintainer skill

* fix: restore updater dependencies before probes
 2026-07-10 22:52:02 -07:00
Vincent Koc
2158873a3c fix(release): preserve canonical main PR provenance (#104166) 
* fix(release): canonicalize changelog PR provenance

* fix(release): finalize changelog provenance policy

* fix(release): resolve canonical PRs from current main

* fix(release): support divergent beta baselines
 2026-07-11 13:21:15 +08:00
Vincent Koc
c47ceb0f3d improve(release): reuse exact-SHA validation evidence (#104162) 
* perf(release): share changelog verification snapshots

* perf(release): reuse exact-SHA validation evidence

* feat(release): checkpoint candidate workflow state

* feat(release): watch CI transitions compactly

* fix(testbox): rotate stale reusable leases

* refactor(release): move CI verifier into scripts

* fix(release): preserve verifier executable mode

* fix(testbox): force noninteractive remote hydration

* perf(testbox): skip sync for proven clean heads

* fix(testbox): keep changed gates synchronized

* fix(testbox): isolate git state probes

* fix(testbox): isolate wrapper git commands

* fix(testbox): preserve git command contracts

* fix(release): validate reused SHA evidence

* fix(release): resume serialized plugin selections

* fix(testbox): sync source on every lease reuse

* fix(release): verify from trusted workflow checkout

* fix(release): gate evidence reuse on trusted lineage

* fix(release): support legacy verifier checkouts

* fix(testbox): export CI across shell snippets

* fix(release): revalidate reused evidence before publish

* fix(release): reject untrusted reuse before lookup

* fix(release): reuse SHA-pinned root evidence

* fix(ci): allow unreleased notes in QA packages

* fix(release): satisfy script lint contracts

* fix(release): handle Unicode workflow refs safely
 2026-07-11 12:48:27 +08:00
Vincent Koc
14ebfc88c4 fix(release): avoid caching GitHub errors 2026-07-10 17:47:32 -07:00
Vincent Koc
80d44bf000 feat(release): add shadow preparation controller 2026-07-10 17:47:32 -07:00
Vincent Koc
a835584537 perf(release): cache changelog GitHub discovery 2026-07-10 17:47:32 -07:00
Vincent Koc
b0e3c85a61 fix(release): bind publish children to trusted SHAs (#103913) 
Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-10 23:25:26 +01:00
Vincent Koc
54cc90b1b1 fix(release): publish ClawHub bootstrap artifacts immutably (#103809) 
* fix(release): harden ClawHub bootstrap

* fix(release): centralize publication artifact verification

* fix(release): harden publication artifact verification

* fix(release): lock ClawHub bootstrap toolchain

* test(release): assert locked ClawHub binary

* fix(release): pack with trusted ClawHub harness

* fix(release): bound beta verifier artifact reads

* fix(release): bind target and tooling identities

* fix(release): stabilize signed package ordering

* fix(release): bind ClawHub pretag proof

* fix(release): bind ClawHub OIDC readback

* fix(release): bind ClawHub OIDC readback
 2026-07-10 13:33:20 -07:00
Peter Steinberger
fece8c9f54 fix(release): keep validation evidence immutable across reruns (#103906) 
* fix(release): bind validation evidence to exact attempts

* test(release): cover exact validation attempts
 2026-07-10 20:16:19 +01:00
Peter Steinberger
b597a8d364 fix(release): restore prerelease and release validation startup (#103834) 
* fix(release): split image publication from validation

* fix(ci): honor install smoke caller input

* fix(ci): harden Docker rerun targeting
 2026-07-10 18:46:08 +01:00
Vincent Koc
daa653c5cc ci(release): add plugin npm artifact preflight (#103759) 
* ci(release): add plugin npm preflight proof

* fix(release): bind plugin preflight package evidence

* fix(release): harden plugin preflight trust

* fix(release): bind plugin registry readback

* fix(release): retry npm packument bodies

* fix(release): retry malformed npm packuments

* fix(release): satisfy npm preflight lint
 2026-07-10 09:39:10 -07:00
Peter Steinberger
e43f225c81 fix(release): prevent stale beta validation evidence (#103798) 
* fix(release): ignore nested squash revert markers

* fix(release): preserve squash revert targets

* docs(release): state installer doctor contract

* fix(release): recognize conventional squash reverts
 2026-07-10 17:26:56 +01:00
Vincent Koc
cbe3731f77 fix(release): make validation proof no-write (#103737) 
* fix(release): make validation proof no-write

* test(release): align no-write workflow contracts
 2026-07-10 08:18:44 -07:00
Peter Steinberger
c2b4ac02da fix(release): align correction sections, retries, and merged ledger semantics 
Codex review + test findings on the pipeline convergence:
- candidate changelog provenance now validates the same section the
  renderer publishes (correction tags may carry their own heading) via a
  shared correctionVersionForTag helper
- guard_existing_public_release accepts a canonical proofless body with
  intact dependency evidence, matching the renderer's documented
  proof-omitted-at-limit state; retries re-append the proof
- ledgerFor regains main's noteReferences threading so prose-cited PRs
  keep their contribution-record rows, and the ledger/verify tests pin
  the merged entry shape (externalReferences) and highlight gate
 2026-07-10 02:06:52 -07:00
Peter Steinberger
336e43c314 fix(release): converge on the render-github-release-notes pipeline 
Two competing release-notes pipelines existed: the release branch's
hardened render/verify/provenance pipeline (a486f3ab08 + dcee1da876,
battle-tested by 2026.7.1) and main's lighter prepare-github-release-notes
size gate (#103222). Repo policy is one canonical path; the release-branch
pipeline wins and main's unique value is grafted in:

- scripts/render-github-release-notes.mjs becomes the canonical release
  body renderer (full/compact 125k char+byte modes, tag-pinned record
  link, verification tail, canonical shipped-baseline format), now also
  preferring a correction tag's dedicated changelog section (from
  prepare's heading matrix).
- verify-release-notes.mjs is a three-way merge: release's --shipped-ref
  cumulative baselines, provenance checks, highlights gate, and the
  excluded-record rewrite fix, plus main's compact contribution rows,
  externalReferences threading, and both-heading parser compat.
- release-candidate-checklist.mjs gains validateCandidateCheckout and
  changelog-provenance gates that run before any dispatch.
- openclaw-release-publish.yml keeps main's fail-before-mutation early
  notes gate (retargeted to the renderer) and adopts release's
  render/verify_release_tag_target/canonical_release_body_matches flow.
- scripts/prepare-github-release-notes.mjs and its test are deleted;
  release-notes-ledger.test.ts stays and pins the merged verify exports.
- .gitignore tracks every repo skill for Git-aware syncs; SKILL.md
  runbooks and RELEASING.md document the converged contract.
 2026-07-10 02:06:52 -07:00
Peter Steinberger
a789b92b39 fix(macos): harden fresh AI onboarding (#102637) 
* fix(macos): bootstrap Codex before onboarding test

* fix(plugins): activate deferred runtimes on demand

* fix(macos): stage Codex runtime for onboarding probe

* fix(macos): expose sanitized onboarding errors

* fix(codex): reuse native CLI auth during onboarding

* fix(macos): hide Crestodian without inference

* fix(codex): honor explicit runtime policy during setup

* fix(onboarding): redact verification errors

* fix(macos): reset onboarding state with gateway route

* fix(onboarding): persist Codex plugin install metadata

* chore: refresh onboarding inventories

* fix(macos): restart AI setup after gateway change

* chore: refresh native onboarding inventory

* fix(onboarding): defer gateway restart until setup persists

* fix(macos): reset Crestodian on gateway changes

* chore(macos): refresh native i18n inventory

* fix(onboarding): harden inference setup state

* docs(skills): reuse pristine Parallels snapshots

* chore(macos): refresh onboarding i18n inventory

* fix(onboarding): prevent stale gateway and install state

* docs(skills): preserve saved Parallels sessions

* fix(macos): balance AI onboarding layout

* fix(parallels): parse npm workspace pack output

* chore(macos): refresh onboarding i18n inventory

* fix(parallels): bundle workspace runtime in package artifact

* fix(parallels): isolate canonical package helper

* fix(parallels): pack self-contained workspace artifact

* fix(packaging): exclude macOS app bundle

* fix(macos): restart inference checks after route changes

* docs(changelog): defer onboarding note to release

* fix(onboarding): enforce inference-first gateway setup
 2026-07-10 04:59:15 +01:00
Peter Steinberger
31f76b9792 fix(release): validate GitHub notes before publish (#103222) 2026-07-10 02:33:23 +01:00
Dallin Romney
ff0a3f2d0b docs(skills): add backporting to release maintainer (#99266) 
* docs(skills): add stable backport workflow

* docs(skills): prepare complete stable patch sets

* docs(skills): align backports with extended stable

* docs(skills): fold backports into release maintainer

* docs(release): clarify plugin selector repair
 2026-07-09 16:50:22 -07:00
Peter Steinberger
71f7fef7a2 fix(ci): isolate OpenWebUI release smoke (#103095) 
* fix(ci): isolate OpenWebUI release smoke

* docs: format release validation table
 2026-07-09 21:38:33 +01:00
Peter Steinberger
9aa19fef2f docs: gate recent maintainer PRs in triage 2026-07-09 03:24:08 -04:00
Vincent Koc
f643c9b2f8 perf(ci): raise Node shard parallelism to 28 (#101174) 2026-07-06 21:59:22 -07:00
Peter Steinberger
1a7f1133db chore: sync canonical autoreview skill (#100210) 
* chore: sync canonical autoreview skill

* fix: preserve autoreview Cursor aliases

* fix: harden autoreview isolation

* fix: require explicit trust for Cursor reviews

* fix: preserve autoreview closeout integrity

* fix: close autoreview isolation gaps

* fix: reject incomplete autoreview inputs

* fix: isolate tool-less autoreview engines

* fix: fail closed for unsupported Droid isolation

* fix: fail closed for unsupported Droid isolation

* fix: fail closed for unsupported Droid isolation

* test: route package git fixture through temp dir tests

* fix: fail closed for unsupported Droid isolation

* fix: fail closed for unsupported Droid isolation

* fix: fail closed for unsupported Droid isolation
 2026-07-05 05:31:13 -07:00
Peter Steinberger
7137be38e8 docs(maint): raise PR close batch limit (#100253) 
* docs(maint): raise PR close batch limit

* docs(maint): raise PR close batch limit
 2026-07-05 02:57:18 -07:00
Peter Steinberger
b6f4cf5ac4 docs: default agent validation to remote runners (#100220) 
* docs: default agent validation to remote runners

* docs: isolate untrusted validation networking

* fix: harden untrusted Crabbox validation

* docs: refresh generated docs map
 2026-07-05 02:01:51 -07:00
Vincent Koc
f8dd649485 docs(release): carry approval through publish (#100239) 2026-07-05 01:57:03 -07:00
Mason Huang
1c46fe72c9 docs: clarify plugin package live proof (#99962) 
Summary:
- The branch adds plugin package live-proof guidance to the testing skill and plugin docs, separating npm-pack package validation from official-trust proof and documenting runtime dependency and compiled-entry checks.
- PR surface: Docs +111. Total +111 across 3 files.
- Reproducibility: not applicable. this is a documentation and skill-guidance clarification PR rather than a bug report. I validated the documented claims against current source, adjacent docs, tests, and live PR checks.

Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.

Validation:
- ClawSweeper review passed for head b56efcffc5.
- Required merge gates passed before the squash merge.

Prepared head SHA: b56efcffc5
Review: https://github.com/openclaw/openclaw/pull/99962#issuecomment-4882084565

Co-authored-by: Mason Huang <masonxhuang@tencent.com>
Approved-by: hxy91819
 2026-07-04 13:41:46 +00:00