vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-12 17:51:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
30,368 Commits 1,241 Branches 104 Tags
8a8fdc971ca26e80c1cf8d0d0046943862dc1998
Commit Graph

286 Commits

Author SHA1 Message Date
Peter Steinberger
8a8fdc971c perf: share web boundary source scans 2026-04-11 12:50:45 +01:00
Vincent Koc
7899f5c5ce fix(dev): throttle local tsgo by default 2026-04-11 11:56:23 +01:00
Vincent Koc
25c47231bb ci(checks): shorten node shard names 2026-04-11 11:12:33 +01:00
Peter Steinberger
69244f837f test: speed provider retry imports 2026-04-11 02:37:51 +01:00
Vincent Koc
9e2e4cde19 ci(test): align node lane names with boundary split 2026-04-11 00:36:06 +01:00
Tak Hoffman
f16a66fa43 fix: release local heavy-check locks on success 2026-04-10 17:05:26 -05:00
Tak Hoffman
afff0716f7 ci: shard checks-node-test by vitest suite 2026-04-10 15:59:41 -05:00
Peter Steinberger
bfc0889776 docs: document Codex harness plugin workflow 2026-04-10 21:22:16 +01:00
Peter Steinberger
0ebeee8b0d chore: enable consistent-return 2026-04-10 20:56:43 +01:00
Peter Steinberger
04c8026d03 chore: enable no-unnecessary-type-arguments 2026-04-10 20:14:49 +01:00
Peter Steinberger
fe05983d91 chore: enable no-unnecessary-type-assertion 2026-04-10 20:14:48 +01:00
Peter Steinberger
c077af987f perf: add narrow inbound roots sdk surface 2026-04-10 17:34:41 +01:00
Peter Steinberger
be9bef32df perf: cache local tsgo checks 2026-04-10 17:06:28 +01:00
Peter Steinberger
e9fb4c7f93 perf: skip tsgo declaration transforms 2026-04-10 15:52:07 +01:00
Peter Steinberger
2ccb5cff22 test: move Vitest configs under test 2026-04-10 13:44:51 +01:00
Peter Steinberger
0b0c062e97 fix: avoid Claude CLI subscription prompt classifier 2026-04-10 10:52:35 +01:00
Altay
8cf02e7c47 fix(ci): clear check-additional follow-up regressions (#63934) 
* fix(ci): route messaging temp files through openclaw tmp dir

* fix(ci): clear qa-lab follow-up guardrails

* fix(ci): own-check ACP fallback resolvers

* fix(ci): preserve memory-core write error causes

* fix(ci): narrow qa-channel boundary alias

* fix(test): type memory-core dreaming api stubs
 2026-04-09 23:47:59 +01:00
Davanum Srinivas
08ae021d1f fix(qqbot): guard image-size probe against SSRF (#63495) 
* fix(qqbot): replace raw fetch in image-size probe with SSRF-guarded fetchRemoteMedia

Replace the bare fetch() in getImageSizeFromUrl() with fetchRemoteMedia()
from the plugin SDK, closing the blind SSRF via markdown image dimension
probing (GHSA-2767-2q9v-9326).

fetchRemoteMedia options: maxBytes 65536, maxRedirects 0, generic
public-network-only SSRF policy (no hostname allowlist, blocks
private/reserved/loopback/link-local/metadata IPs after DNS resolution).

Also fixes the repo-root resolution in scripts/lib/ts-guard-utils.mjs
which caused lint:tmp:no-raw-channel-fetch to miss extension files
entirely. The guard now walks up to .git instead of hardcoding two parent
traversals, and the allowlist is refreshed with all pre-existing raw
fetch callsites that became visible.

* fix(qqbot): guard image-size probe against SSRF (#63495) (thanks @dims)

---------

Co-authored-by: sliverp <870080352@qq.com>
 2026-04-09 16:48:04 +08:00
Mason Huang
aa15de8fdc plugin-sdk: split command status surface 2026-04-09 01:35:15 +01:00
Peter Steinberger
aa79b9fb7d test(docker): quiet success-path e2e logs 2026-04-09 00:29:24 +01:00
Peter Steinberger
edf6b490a6 fix: harden bundled plugin dependency release checks 2026-04-08 15:15:44 +01:00
Nimrod Gutman
6681878339 feat(ios): pin calver release versioning (#63001) 
* feat(ios): decouple app versioning from gateway

* feat(ios): pin calver release versioning

* refactor(ios): drop prerelease version helper fields

* docs(changelog): note pinned ios release versioning (#63001) (thanks @ngutman)
 2026-04-08 11:25:35 +03:00
Vincent Koc
45542fa726 fix(test): stabilize windows tooling assertions 2026-04-08 09:12:08 +01:00
Vincent Koc
be530f085d refactor(plugin-sdk): share tool payload extraction 2026-04-08 09:07:28 +01:00
Vincent Koc
490c9c80ef perf(plugin-sdk): split web search config contract 2026-04-08 09:03:07 +01:00
Peter Steinberger
f180474c2d ci: prepare extension lint artifacts 2026-04-08 03:54:03 +01:00
Gustavo Madeira Santana
cfe71e2e44 Docs: document approval adapter subpaths 2026-04-07 16:06:02 -04:00
Gustavo Madeira Santana
d78512b09d Refactor: centralize native approval lifecycle assembly (#62135) 
Merged via squash.

Prepared head SHA: b7c20a7398
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
 2026-04-07 14:40:26 -04:00
Peter Steinberger
e973275fd0 fix: harden claude-cli live switch smoke 2026-04-07 16:05:54 +01:00
Peter Steinberger
b96155e4e7 test(boundary): align package path invariants 2026-04-07 13:41:00 +01:00
Vincent Koc
dfb6c9c920 perf(plugin-sdk): split channel secret runtime helpers 2026-04-07 13:09:12 +01:00
Peter Steinberger
5390eadc4e Tests: fix boundary and late-run drift 2026-04-07 19:59:51 +08:00
Vincent Koc
29732c1459 test(plugins): lock xai boundary path drift 2026-04-07 11:21:04 +01:00
Peter Steinberger
e3cb19d162 test(boundary): unify package sdk type paths 2026-04-07 10:26:35 +01:00
Vincent Koc
fb64ba7bf7 refactor(plugins): harden package boundary sdk prep 2026-04-07 09:44:43 +01:00
Peter Steinberger
d56831f81b fix: align gemini cli live backend runs 2026-04-07 09:06:09 +01:00
Peter Steinberger
fd6d3f270d fix: repair ci lockfile and boundary drift 2026-04-07 09:02:26 +01:00
Vincent Koc
d5ed6d26e9 chore(plugins): bulk add package boundary tsconfig rollout 2026-04-07 08:48:23 +01:00
Peter Steinberger
86361f4fca fix: restore ci after rebase drift 2026-04-07 08:40:35 +01:00
Peter Steinberger
424b65b697 refactor: dedupe bluebubbles and zalouser readers 2026-04-07 08:40:34 +01:00
Vincent Koc
49fbecbf16 perf(plugin-sdk): add web fetch contract artifacts 2026-04-07 08:35:27 +01:00
Vincent Koc
55eb9841d9 fix(plugins): use canonical sdk dts for boundaries 2026-04-07 08:09:59 +01:00
Vincent Koc
fb10773a38 fix(plugins): repair package boundary sdk paths 2026-04-07 08:09:59 +01:00
Peter Steinberger
37dccb52ed test: add gemini acp bind docker coverage 2026-04-07 07:59:45 +01:00
Vincent Koc
e318f48ff2 perf(secrets): narrow channel secret-ref imports 2026-04-07 07:38:34 +01:00
Peter Steinberger
b7be963501 refactor: dedupe record guards 2026-04-07 05:06:54 +01:00
Peter Steinberger
7dc085890e refactor: dedupe script error formatting 2026-04-07 05:06:54 +01:00
Vincent Koc
2a6e8dca47 fix(plugin-sdk): add web-search contract subpath 2026-04-06 23:30:56 +01:00
Peter Steinberger
80c8567f9d fix: resolve merge conflicts and preserve runtime test fixes 2026-04-06 22:46:33 +01:00
Peter Steinberger
7a3497c8bd refactor: dedupe image generation runtime surface 2026-04-06 22:21:00 +01:00