Peter Steinberger
ce47e6ac53
fix(mcp): keep server config private in groups ( #103502 )
...
* fix(mcp): keep server config private in groups
* fix(config): redact underscore credential flags
* fix(config): redact plural credential flags
2026-07-10 08:09:48 +01:00
Vincent Koc
f11b2493b9
fix(ci): read Codex bindings from SQLite in live harness ( #103467 )
...
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-09 23:32:39 -07:00
Peter Steinberger
54009c15bb
improve(qa): verify native Slack chart delivery ( #103337 )
...
* test(qa): prove Slack native chart delivery
* test(qa): exercise Slack chart verifier through scenario
* fix(build): bound private QA SDK declarations separately
* fix(qa): normalize Slack chart history whitespace
2026-07-10 06:58:33 +01:00
Ayaan Zaidi
08b6996cd5
fix(mcp): redact secrets from /mcp show in group chats ( #103396 )
...
* fix(mcp): redact secrets in /mcp show replies
Prevent owner /mcp show from dumping raw headers/env credentials into
group chats. Mark MCP env values sensitive, restore redaction sentinels
on set so show→set cannot overwrite real secrets.
Fixes #103053
* test(mcp): e2e redaction of /mcp show secrets on live gateway
Spin up an ephemeral gateway process, chat.send /mcp show with live
credential-bearing config, and prove secrets never leave the reply path.
Also prove show→set sentinel restore on disk via chat and CLI.
2026-07-10 11:28:23 +05:30
krissding
1a0dc9b83f
fix(opencode-go): remove deprecated mimo-v2-omni and mimo-v2-pro model aliases ( #103329 )
...
* fix(opencode-go): remove deprecated mimo-v2-omni and mimo-v2-pro model aliases
These deprecated aliases reject agent requests from the OpenCode Go gateway.
Remove them from the provider catalog and clean up all references in probe
skip lists, CI workflows, and tests.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
* fix(opencode-go): complete deprecated MiMo cleanup
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 06:49:09 +01:00
Peter Steinberger
617f59ccd0
test: guard bundled probe PID cleanup ( #103399 )
2026-07-10 06:20:21 +01:00
Peter Steinberger
a789b92b39
fix(macos): harden fresh AI onboarding ( #102637 )
...
* fix(macos): bootstrap Codex before onboarding test
* fix(plugins): activate deferred runtimes on demand
* fix(macos): stage Codex runtime for onboarding probe
* fix(macos): expose sanitized onboarding errors
* fix(codex): reuse native CLI auth during onboarding
* fix(macos): hide Crestodian without inference
* fix(codex): honor explicit runtime policy during setup
* fix(onboarding): redact verification errors
* fix(macos): reset onboarding state with gateway route
* fix(onboarding): persist Codex plugin install metadata
* chore: refresh onboarding inventories
* fix(macos): restart AI setup after gateway change
* chore: refresh native onboarding inventory
* fix(onboarding): defer gateway restart until setup persists
* fix(macos): reset Crestodian on gateway changes
* chore(macos): refresh native i18n inventory
* fix(onboarding): harden inference setup state
* docs(skills): reuse pristine Parallels snapshots
* chore(macos): refresh onboarding i18n inventory
* fix(onboarding): prevent stale gateway and install state
* docs(skills): preserve saved Parallels sessions
* fix(macos): balance AI onboarding layout
* fix(parallels): parse npm workspace pack output
* chore(macos): refresh onboarding i18n inventory
* fix(parallels): bundle workspace runtime in package artifact
* fix(parallels): isolate canonical package helper
* fix(parallels): pack self-contained workspace artifact
* fix(packaging): exclude macOS app bundle
* fix(macos): restart inference checks after route changes
* docs(changelog): defer onboarding note to release
* fix(onboarding): enforce inference-first gateway setup
2026-07-10 04:59:15 +01:00
Peter Steinberger
cd2f70c7ab
fix(ci): pin DeepSeek live gateway models ( #103321 )
2026-07-10 04:43:16 +01:00
Peter Steinberger
6db586a388
fix(clawrouter): support managed gateway configuration ( #103299 )
...
* fix(clawrouter): support managed gateway configuration
* docs(clawrouter): refresh provider map
2026-07-10 04:25:41 +01:00
Peter Steinberger
a24139e199
ci: require enabled Telegram package proof ( #103310 )
2026-07-10 04:24:36 +01:00
Peter Steinberger
ee1450d619
fix(ci): build iOS with generic simulator ( #103259 )
2026-07-10 03:28:53 +01:00
Vincent Koc
f8527e77bc
fix(ci): pin Kova timeout signal contract ( #103264 )
2026-07-09 19:28:44 -07:00
Peter Steinberger
73db6b2aca
ci: pin docs i18n Go toolchain ( #103244 )
2026-07-10 03:02:52 +01:00
Peter Steinberger
25eaa53a8a
fix(ci): verify performance report after push timeout ( #103237 )
2026-07-10 02:50:36 +01:00
Vincent Koc
cbc087dcc5
fix(ci): pin Kova resource scope contract ( #103217 )
2026-07-09 18:40:25 -07:00
Peter Steinberger
31f76b9792
fix(release): validate GitHub notes before publish ( #103222 )
2026-07-10 02:33:23 +01:00
Peter Steinberger
28eb9e5d29
perf(test): reduce hotspot setup costs
2026-07-09 21:17:12 -04:00
Vincent Koc
968b89defe
fix(ci): remove cross-os TypeScript loader bootstrap ( #103195 )
2026-07-09 18:15:12 -07:00
Peter Steinberger
e6a8feb9c2
refactor(pairing): move device pairing store to shared SQLite state DB ( #103160 )
...
* refactor(pairing): move device pairing store to shared SQLite state DB
Device pairing, pending requests, and bootstrap tokens now live in the
device_pairing_* / device_bootstrap_tokens tables of state/openclaw.sqlite
instead of devices/{paired,pending,bootstrap}.json. Gateways import legacy
paired records once at startup (before the node-surface fold) and archive
the JSON files with a .migrated suffix; transient pending/bootstrap rows
are dropped. The unshipped node_pairing_* tables are removed from the
schema and dropped from existing DBs. Doctor now flags un-imported legacy
store files instead of corrupt-JSON reads.
* refactor(pairing): drop stale awaits now that store persistence is synchronous
* refactor(pairing): extract leaf record types to break store/domain module cycle
2026-07-10 01:46:56 +01:00
Peter Steinberger
d8624a4e1b
fix: fail release performance when reports do not publish ( #103126 )
...
* fix(ci): harden performance report publishing
* ci: use scoped app token for reports
* ci: pin Kova readiness probe fix
* ci: pin latest Kova readiness checks
* ci: pin Kova startup sequencing fix
* ci: pin calibrated Kova release policy
2026-07-10 01:27:26 +01:00
Ayaan Zaidi
f351288a0d
chore(repo): remove stale repository artifacts ( #103152 )
...
* docs: remove merged cron design document
* chore(repo): remove stale planning and proof artifacts
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-07-10 05:28:12 +05:30
Peter Steinberger
dc3d06c5d6
fix(ci): calibrate hosted startup memory
2026-07-09 19:54:42 -04:00
Peter Steinberger
88908d5ce6
perf(test): trim secrets and media setup
2026-07-09 19:32:12 -04:00
Vincent Koc
db71e497be
fix(ci): restore live OpenAI performance evidence ( #103151 )
2026-07-09 16:29:22 -07:00
Peter Steinberger
a1ce77d2a9
fix(cli): reduce plugin listing startup memory ( #103132 )
2026-07-09 23:28:11 +01:00
Peter Steinberger
6c7c97f231
fix(ci): prepare QA runtime for live shard ( #103129 )
2026-07-09 23:06:44 +01:00
Peter Steinberger
b8537cd81e
ci: pin corrected Kova release evaluator ( #103110 )
...
* ci: pin corrected Kova release evaluator
* ci: include gateway plugin calibration
2026-07-09 22:43:44 +01:00
Peter Steinberger
676cf03f7d
ci(release): retry transient MiniMax image failures ( #103114 )
2026-07-09 22:33:33 +01:00
Peter Steinberger
71f7fef7a2
fix(ci): isolate OpenWebUI release smoke ( #103095 )
...
* fix(ci): isolate OpenWebUI release smoke
* docs: format release validation table
2026-07-09 21:38:33 +01:00
Peter Steinberger
7d5eba3106
fix(ci): restore Kova managed-service scenarios ( #103085 )
2026-07-09 20:56:26 +01:00
Vincent Koc
ee9d9ea6db
fix(ci): verify live provider traffic in performance runs ( #103073 )
...
* fix(diagnostics): emit provider request timeline events
* fix(ci): verify Kova live provider evidence
2026-07-09 12:39:41 -07:00
Vincent Koc
266ca5b3a2
fix(providers): publish Meta provider ( #103070 )
2026-07-09 12:11:56 -07:00
Peter Steinberger
11fa0cf2d5
fix(ci): honor Kova performance report contracts ( #103030 )
2026-07-09 20:08:25 +01:00
Vincent Koc
a9578436de
fix(ci): accept valid Kova PASS records without violations ( #103002 )
2026-07-09 11:05:32 -07:00
Peter Steinberger
745b8c315e
fix(codex-supervisor): ship CLI metadata entry ( #102803 )
...
* fix(codex-supervisor): ship CLI metadata entry
* chore: keep release notes in PR body
---------
Co-authored-by: Peter Steinberger <peter@steipete.me >
2026-07-09 10:31:47 -07:00
Hamid Shojanazeri
08a957e0ae
feat(providers): add Meta Model API - muse-spark-1.1 ( #102873 )
...
* feat(providers): add Meta Model API - muse-spark-1.1
Adds meta-model-api provider via bundled extension:
- extensions/meta-model-api/ (provider, catalog, stream, thinking, onboarding)
- docs/providers/meta-model-api.md
- core wiring: env-api-keys, zod-schema, provider-display-names, dotenv, provider-env-vars
Model: meta-model-api/muse-spark-1.1 (Responses API at https://api.ai.meta.com/v1 )
Auth: MODEL_API_KEY (Bearer)
Default reasoning: high, maps --thinking off -> minimal (model rejects none)
Fix: bump live test maxTokens 200->4000 (high reasoning uses ~300 tokens for reasoning alone)
Co-authored-by: Meta
* fix(meta-model-api): clean reasoning lint
* test(meta-model-api): align live proof checks
* chore(meta-model-api): bundle provider metadata
* docs: fix Meta Model API setup wording
* docs: format Meta Model API provider page
---------
Co-authored-by: Dave Morin <dave@morin.com >
Co-authored-by: Colin <colin@solvely.net >
Co-authored-by: Josh Lehman <josh@martian.engineering >
2026-07-09 10:27:09 -07:00
Vincent Koc
afe00f6c7b
fix(test): tolerate Docker heartbeat clock rollover ( #102986 )
2026-07-09 09:35:07 -07:00
Vincent Koc
d18e48c928
fix(ci): ignore profiling-only resource gate failures ( #102894 )
2026-07-09 09:22:11 -07:00
Kyle Klouzal
2e160718d4
test(gateway): harden watch regression diagnostics ( #95473 )
...
Co-authored-by: kklouzal <kklouzal@users.noreply.github.com >
2026-07-09 16:36:31 +01:00
Peter Steinberger
aca96d2dcf
ci: retry transient release workflow reads ( #102896 )
2026-07-09 15:34:02 +01:00
Peter Steinberger
11dda0e5fd
ci: make release child dispatch idempotent ( #102858 )
2026-07-09 15:03:46 +01:00
Peter Steinberger
2786239080
fix(ci): refresh native i18n sentinel
2026-07-09 09:45:36 -04:00
Vincent Koc
0535679083
fix(release): validate exact prepared npm package sets ( #102759 )
...
* fix(release): validate prepared npm package sets
Forward-port the beta3 package-set preflight, Telegram, and Parallels validation to main while preserving main's existing Bun install smoke. Recompute decoded proxy response lengths and require artifact tarballs to exactly match the verified manifest.
* fix(release): lock fixture registry proxy origin
2026-07-09 05:19:24 -07:00
Sally O'Malley
e595a8c0ac
Add Vault SecretRef plugin ( #89255 )
...
* Add Vault SecretRef plugin
Signed-off-by: sallyom <somalley@redhat.com >
* expand Vault setup to registered SecretRef targets
Signed-off-by: sallyom <somalley@redhat.com >
* fix(vault): use sdk secret target seam
* fix(vault): preserve auth profile target paths
* docs(vault): document plugin enable step
* fix(vault): make status provider-alias aware
* fix(vault): reject noncanonical secret ids
* fix(vault): separate resolver timeout deadlines
* fix(vault): forward private CA trust settings
* fix(secrets): preserve plugin policy boundaries
---------
Signed-off-by: sallyom <somalley@redhat.com >
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-07-09 05:30:12 -05:00
qingminlong
a5f5282816
fix(scripts): report startup help stream errors when pipes fail ( #102436 )
...
* fix(scripts): fail startup help rendering on stream errors
* fix(scripts): preserve startup render failure provenance
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-09 09:43:40 +01:00
Peter Steinberger
42a8679c4d
fix: restore release validation on main ( #102516 )
...
* test(qqbot): assert approval fence exactly
* fix(release): wait for ClawHub publish logging
* fix(ci): repair Bun global install smoke
* test(slack): fix app identity fixture
2026-07-09 09:39:08 +01:00
joshavant
f163f32f85
fix(android): make release screenshots deterministic
2026-07-09 01:32:13 -05:00
Vincent Koc
240ca9dbd7
fix(ci): preserve all package runtime artifacts
2026-07-08 23:12:03 -07:00
Vincent Koc
a780541ea6
fix(ci): preserve AI runtime build artifacts
2026-07-08 22:58:35 -07:00
Vincent Koc
eac4214ff8
fix(ci): stabilize npm shrinkwrap metadata
2026-07-08 15:55:50 -07:00