vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-16 16:11:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
67,697 Commits 1,843 Branches 149 Tags
8aab4ff94de89a9b4d1ba241ef2c2baf66d92555
Commit Graph

67697 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Steinberger
16fa19cd72 improve(control-ui): compress and cache bundled assets (#105890) 
* perf(control-ui): compress bundled assets

* chore(control-ui): remove release-owned changelog edit

* fix(control-ui): release assets before compression

* refactor(control-ui): split static response helpers

* perf(control-ui): precompress bundled assets

* refactor(control-ui): keep encoding internals private

* chore(control-ui): refresh LOC baseline
 2026-07-12 23:13:04 -07:00
NIO
70b3467484 fix(media): bound hung remote downloads in media store (#104624) 
* fix(media): bound remote download lifecycle

Co-authored-by: hugenshen <hu.genshen@xydigit.com>

* fix(media): keep download test seam internal

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-12 23:12:03 -07:00
Peter Steinberger
fcb45b4400 feat(ui): render streaming chat markdown live instead of plain text (#106062) 
Streaming assistant replies in the Control UI now render markdown live: the in-flight tail is repaired with remend (zero-dep, Apache-2.0, extracted from Vercel's Streamdown) before the existing markdown-it + DOMPurify pipeline, and open code fences stream as live-highlighted code blocks. Deletes the plain-text streaming tail path (toStreamingPlainTextHtml) and extracts an uncached render core so tail deltas stop churning the markdown LRU cache. Closes #106053
 2026-07-12 23:11:45 -07:00
Peter Steinberger
0633afe6a5 fix(config): reject schema-only keys (#106031) 
* fix(config): reject schema-only keys

* chore(config): refresh plugin SDK baseline

* test(config): remove stale remote enabled fixtures
 2026-07-12 23:10:12 -07:00
Peter Steinberger
6410e33cb0 refactor(ci): restore LOC ratchet headroom (#106063) 
* refactor(ci): restore TypeScript LOC ratchet

* fix(ci): keep source reply item type internal
 2026-07-12 23:09:25 -07:00
Peter Steinberger
9cdf166d2e refactor(mattermost): trim monitor gating facade (#106021) 
* refactor(mattermost): trim monitor gating facade

* chore(ci): shrink Mattermost LOC baseline

* chore(ci): refresh deadcode export baseline
 2026-07-12 23:09:15 -07:00
Paul Campbell
008f04a656 feat(mxc): add Windows MXC sandbox backend (#97086) 
* feat(mxc): add Windows MXC sandbox backend

Add the official MXC sandbox plugin package with Windows ProcessContainer execution, plugin-owned MXC SDK dependency packaging, host-backed filesystem bridge support, and configured MXC policy file loading via mxcPolicyPaths.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix(mxc): preserve Windows binary override paths

* fix: remove stray sandbox barrel export

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 9ea19539-b8ca-44fb-93bd-b8496e3deb2c

* fix(mxc): address sandbox review feedback

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): satisfy test type checks

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): clarify protected skill enforcement

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* test(mxc): align fail-closed expectations

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): satisfy extension lint

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(plugin-sdk): narrow fs-safe remove surface

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(mxc): repair rebased CI failures

* fix(scripts): declare shrinkwrap override normalizer

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Gio Della-Libera <235387111+giodl73-repo@users.noreply.github.com>
Co-authored-by: Dallin Romney <dallinromney@gmail.com>
 2026-07-12 23:07:25 -07:00
Peter Steinberger
1cbb380f02 fix: resolve agent identity workspace (#106087) 2026-07-12 23:06:53 -07:00
Peter Steinberger
aa04722c5c fix(ci): make TypeScript LOC growth reviewable (#105952) 2026-07-12 23:06:30 -07:00
Peter Steinberger
03d4b05593 style(ui): format tool card tests 2026-07-13 02:05:04 -04:00
Peter Steinberger
ebe69fd238 fix(ci): stabilize dead-export ratchet (#105945) 
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-07-12 23:03:53 -07:00
Peter Steinberger
a5883c33d1 refactor: use semver package for version ordering (#105944) 
* refactor: use semver package for version ordering

* refactor: centralize semver validation

* chore: keep release notes in PR body

* refactor: update semver LOC ratchet
 2026-07-12 23:02:25 -07:00
Vincent Koc
2454511480 refactor(sms): consolidate webhook test hooks (#106072) 2026-07-13 14:02:10 +08:00
Peter Steinberger
bebcf52d23 ci: isolate Control UI tool card tests 2026-07-13 02:00:58 -04:00
Vincent Koc
f33ab243cf fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065) 
* fix(sqlite): require WAL-reset-safe Node runtime

* docs(sqlite): document safe Node runtime floor

* fix(sqlite): defer runtime library validation until use

* fix(ci): align startup memory with Node 24.15
 2026-07-13 13:59:00 +08:00
Peter Steinberger
4349687b9d refactor(extensions): burn down Discord and Slack dead exports (#106017) 
* refactor(discord): trim dead internal exports

* refactor(slack): trim dead internal exports

* test(discord): cover inherited streaming migration

* chore(tooling): ratchet reduced extension LOC

* refactor(discord): remove stale approval helper import

* chore(deadcode): remove reintroduced transcript baseline
 2026-07-12 22:58:22 -07:00
NIO
ce990a3ad9 fix(googlechat): bound webhook cert fetch during token verification (#102924) 
* fix(googlechat): bound webhook cert fetch during token verification

* refactor(googlechat): consolidate cert timeout proof

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-12 22:56:49 -07:00
Jason (Json)
30cbc1118a fix(ui): keep restored prompts visible during runs (#106001) 2026-07-12 23:55:53 -06:00
Peter Steinberger
e4a17ee160 refactor(ui): split Workboard controller modules (#105995) 
* refactor(ui): split Workboard controller modules

* chore(ui): track moved Workboard export

* chore(ui): avoid unrelated LOC baseline validation

* ci: refresh TypeScript LOC baseline

* ci: drop stale transcript export baseline
 2026-07-12 22:55:07 -07:00
Peter Steinberger
20c5b2282e fix: render complete HTML entity set in agent workflows (#105957) 
* fix(agents): decode full HTML entity set

* fix(agents): preserve mixed-case nbsp extraction

* chore: leave release notes to release automation

* chore(ci): lower web fetch LOC baseline

* fix(agents): use literal entity radices
 2026-07-12 22:54:46 -07:00
Peter Steinberger
a0e5c15988 refactor(errors): consolidate shared error formatting (#105927) 
* refactor(errors): consolidate shared formatting

* fix(errors): preserve structured diagnostic details

* fix(errors): preserve nested cause compatibility

* chore(ci): ratchet reduced formatter files
 2026-07-12 22:48:55 -07:00
Jason (Json)
38808a43d6 ci: remove stale transcript deadcode baseline (#106064) 2026-07-13 13:46:59 +08:00
Peter Steinberger
6551786a31 docs: harden Gmail hook guidance 2026-07-12 22:42:48 -07:00
Peter Steinberger
807491e0f1 ci: consolidate SMS webhook test reset (#106070) 
* ci: clear stale dead-export surfaces

* ci: align dead-export baseline
 2026-07-12 22:41:35 -07:00
Peter Steinberger
db252ac417 refactor: move usage cost cache into agent database (#106051) 
* refactor(infra): rename usage cache lock owner field

* refactor(state): migrate usage cost cache to SQLite

* fix(state): satisfy SQLite migration gates

* refactor(state): keep usage cache access synchronous

* chore: leave release notes to release workflow

* fix(state): satisfy dependency export gate
 2026-07-12 22:39:54 -07:00
Peter Steinberger
8c7f3d087f refactor: use native abort signal composition (#105947) 
* refactor: use native abort signal composition

* style(discord): preserve media module LOC baseline

* chore(ci): lower abort refactor LOC baselines
 2026-07-12 22:39:43 -07:00
Vincent Koc
6a0eecdb44 fix(release): separate code and release SHA validation (#105948) 2026-07-13 13:38:19 +08:00
Vincent Koc
a778f891fa fix(ci): repair main validation regressions (#106037) 2026-07-13 13:37:53 +08:00
Peter Steinberger
1edc8b6c27 refactor(security): centralize timing-safe secret comparisons (#105989) 
* refactor(plugins): reuse safe secret comparator

* refactor(security): centralize remaining secret comparisons

* chore(ci): lower refactored file baselines
 2026-07-12 22:37:21 -07:00
Peter Steinberger
f025311e1b fix(config): preserve nested defaults across deep merges (#105953) 
* fix(config): preserve deep-merge semantics with defu

* chore: keep release notes in PR body

* fix(config): avoid defu type suppressions

* chore(ci): ratchet merged helper line counts
 2026-07-12 22:36:45 -07:00
Peter Steinberger
6f0072d574 improve(channels): reuse loaded plugin lookup view (#105977) 
* perf(channels): memoize loaded plugin lookups

* chore(channels): update deadcode export baseline

* test(channels): preserve loaded registry mock exports
 2026-07-12 22:35:23 -07:00
Peter Steinberger
5cb074ece5 refactor: dedupe small async primitives (#105961) 
* refactor(sqlite): remove unused async Kysely driver

Co-authored-by: Sarah Fortune <sarah.fortune@gmail.com>

* refactor(media): share promise memoization

* chore(sqlite): prune stale Kysely guardrails

* chore(media): lower runner LOC baseline

* style(shared): format promise memo tests

* chore(deadcode): refresh main export baseline

---------

Co-authored-by: Sarah Fortune <sarah.fortune@gmail.com>
 2026-07-12 22:34:53 -07:00
Peter Steinberger
bd7f3cffd3 fix(ci): stabilize QA and UI validation (#106061) 2026-07-12 22:34:38 -07:00
Josh Avant
bb75950159 fix(worktrees): normalize dashed base refs (#104105) (#106048) 2026-07-13 00:34:26 -05:00
Peter Steinberger
b9f0246765 feat(plugin-sdk): add shared HTML escaping seam (#105975) 2026-07-12 22:33:53 -07:00
Ayaan Zaidi
6908e6a63b fix(gateway): allowlist default-model config edits and explain protected-path refusals 
agents.list[].model was agent-tunable while agents.defaults.model was
refused — the same capability gated by config shape (partially reverts
the defaults-spelling removal from #90145; token/auth/exec paths stay
protected). The bare refusal string also caused agents to misread the
injection boundary as an authorization failure and argue with the owner;
it now states the contract, the remedy, and the agent-tunable paths.
Guard moved to gateway-config-guard.ts (gateway-tool.ts 652->390).

Closes #106059
 2026-07-13 11:03:50 +05:30
Peter Steinberger
125ad94d6d ci: remove stale transcript export baseline 2026-07-13 01:26:06 -04:00
Peter Steinberger
26210c1600 refactor: remove browser and codex dead exports (#105867) 
* refactor(browser): collapse Playwright export paths

* refactor(browser): remove dead plugin exports

* refactor(codex): remove dead app-server exports

* refactor(codex): remove remaining dead exports

* test(codex): use canonical private-type owners

* test(browser): isolate proxy startup state

* test(browser): remove stale chrome imports

* refactor(codex): privatize remaining helpers

* chore(deadcode): refresh export baseline after rebase

* refactor(browser): finish canonical helper ownership

* refactor: fix dead-export cleanup gates

* refactor(codex): keep runtime facades LOC-neutral

* chore(ci): refresh TypeScript LOC baseline

* chore(deadcode): refresh ratchets after rebase

* chore(ci): refresh LOC baseline after main advance

* chore(deadcode): align ratchets with latest main
 2026-07-12 22:23:11 -07:00
Peter Steinberger
d13e3c6adf ci: clear unused-export drift from sms webhook and transcript readers (#106052) 2026-07-12 22:19:30 -07:00
Peter Steinberger
28a4effd4c improve(gateway): reduce startup work before readiness (#105913) 
* perf(gateway): defer optional startup work

* refactor(gateway): isolate optional startup work

* fix(gateway): refresh deferred lifecycle state

* chore(gateway): ratchet startup file sizes

* fix(ci): reconcile dead export drift
 2026-07-12 22:18:10 -07:00
Peter Steinberger
2ecd485cd5 refactor(ui): deduplicate layout, clipboard, and polling scaffolds (#106003) 
* refactor(ui): share dock panel layout

* refactor(ui): centralize clipboard writes

* refactor(ui): centralize polling lifecycle

* refactor(ui): reuse shared byte formatter

* chore(ci): refresh UI LOC ratchet

* fix(ui): keep dock layout type internal
 2026-07-12 22:05:09 -07:00
Peter Steinberger
2a6ccac40c ci: tolerate inherited TypeScript LOC drift (#106042) 
* ci: reconcile LOC baseline drift safely

* ci: tolerate pre-existing LOC drift
 2026-07-12 22:04:36 -07:00
Peter Steinberger
5084280d55 refactor: factor transport stream fixtures (#106006) 
* test: factor OpenAI transport fixtures

* test: share dispatch config harness
 2026-07-12 22:02:36 -07:00
Pavan Kumar Gondhi
ef9383d88a fix: protect SMS webhook callback quota [AI] (#103620) 
* fix: scope SMS webhook rate limiting after validation

* fix: separate SMS webhook validation throttles

* fix: loosen SMS pre-validation throttle

* docs: clarify SMS webhook quota stages

* fix: preserve signed sms callback capacity

* fix: name sms invalid request limiter

* test: cover sms validation disabled quota

* fix: skip signed limiter without sms validation

* docs: clarify sms webhook request budget

* fix: keep sms disabled validation dispatch cap
 2026-07-13 10:29:59 +05:30
Peter Steinberger
7c99322e3f chore(ci): shrink TypeScript LOC guard files 2026-07-13 05:58:32 +01:00
Ayaan Zaidi
143fed81c1 feat(sessions): reopen history around search hits 2026-07-13 10:27:29 +05:30
Ayaan Zaidi
432da8b3cb feat(agent): preserve interrupted turn context 
Inspired by Codex: codex-rs/core/src/context/turn_aborted.rs and codex-rs/core/src/tasks/mod.rs.
 2026-07-13 10:27:29 +05:30
Peter Steinberger
ac31549853 fix(cron): avoid ambiguous direct delivery retries (#105941) 2026-07-12 21:56:47 -07:00
Peter Steinberger
8a2da4b1bf fix(imessage): narrow recovered projection before use (#106022) 2026-07-12 21:43:17 -07:00
Ayaan Zaidi
9d07a96ac9 fix(agents): route unbound OAuth compaction through auth-aware harness selection 
Out-of-run compaction (budget preflight, /compact, subagent announce)
forced harness selection to the core runtime whenever a session had no
bound/planned/explicit harness, so ChatGPT-OAuth-only sessions on the
implicit Codex runtime failed auth against openai/openai-responses and
subagent completion announcements were dropped after retries.

Leave the selection override unset in both compaction paths so prepared
OAuth auth can select the credential-owning harness (as live runs do),
and ensure the policy-selected harness plugin is loaded before
selection. Native transcript compaction stays gated on the resolved
harness only.

Fixes #90925
 2026-07-13 10:11:08 +05:30