Peter Steinberger
c0fe7ab34a
fix: keep queued system event authority structured
...
Keep queued system-event owner downgrades as structured runtime metadata while rendering the model-visible prompt as plain `System:` lines.
This preserves least-privilege wakeups for webhook/node/exec/cron/reaction/hook producers, keeps legacy `trusted: false` compatibility for installed plugins and older hosts, and updates representative gateway, agent, cron, plugin, and OpenGrep coverage.
2026-05-15 12:24:27 +01:00
Shakker
c0f2e20660
test: hook gateway event text
2026-05-12 21:59:43 +01:00
Peter Steinberger
6d10e7d784
test: dedupe gateway hook run mock calls
2026-05-12 12:48:42 +01:00
Peter Steinberger
febb121288
test: tighten gateway hook assertions
2026-05-11 05:38:24 +01:00
Shakker
0924eb0731
test: tighten gateway array assertions
2026-05-09 05:54:12 +01:00
Shakker
d52aad4cf2
test: clarify gateway hook event assertions
2026-05-08 10:36:13 +01:00
Peter Steinberger
9ef37d1907
test: tighten assertions and harness coverage
2026-05-08 05:28:12 +01:00
openclaw-clownfish[bot]
2f31184d07
fix(hooks): repair shared-hook announcement policy ( #73800 )
...
* fix(hooks): repair shared-hook announcement policy
* fix(hooks): audit suppressed hook successes
---------
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-04-29 05:28:16 -07:00
Vincent Koc
6f38425e5c
security(gateway): route hook completion events to target agent session ( #73228 )
2026-04-27 20:53:52 -07:00
Ayaan Zaidi
4c1f187da0
fix(cron): keep message tool for chat delivery
2026-04-21 12:01:06 +05:30
Pavan Kumar Gondhi
5275d008ed
fix(gateway): enforce allowRequestSessionKey gate on template-rendered mapping sessionKeys ( #69381 )
...
* fix: address issue
* fix: address review feedback
* fix: finalize issue changes
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address build failures
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-21 10:12:10 +05:30
Vincent Koc
ac717a92e8
test(gateway): avoid mapped hook provenance event race
2026-04-16 11:35:14 -07:00
Peter Steinberger
7026ddadba
test(gateway): tolerate loaded hook enqueue timing
2026-04-14 23:05:18 +01:00
Luke
0abe64a4ff
Agents: clarify local model context preflight ( #66236 )
...
Merged via squash.
Prepared head SHA: 11bfaf15f692253590+ImLukeF@users.noreply.github.com >
Co-authored-by: ImLukeF <92253590+ImLukeF@users.noreply.github.com >
Reviewed-by: @ImLukeF
2026-04-14 15:38:10 +10:00
Vincent Koc
5577d81ab6
fix(ci): avoid frozen hook test clock hangs
2026-04-14 01:27:32 +01:00
Vincent Koc
88dfc6e7b6
test(gateway): share hook session routing helper
2026-04-12 17:09:23 +01:00
Tak Hoffman
cc5c691f00
feat(ui): render assistant directives and add embed tag ( #64104 )
...
* Add embed rendering for Control UI assistant output
* Add changelog entry for embed rendering
* Harden canvas path resolution and stage isolation
* Secure assistant media route and preserve UI avatar override
* Fix chat media and history regressions
* Harden embed iframe URL handling
* Fix embed follow-up review regressions
* Restore offloaded chat attachment persistence
* Harden hook and media routing
* Fix embed review follow-ups
* feat(ui): add configurable embed sandbox mode
* fix(gateway): harden assistant media and auth rotation
* fix(gateway): restore websocket pairing handshake flows
* fix(gateway): restore ws hello policy details
* Restore dropped control UI shell wiring
* Fix control UI reconnect cleanup regressions
* fix(gateway): restore media root and auth getter compatibility
* feat(ui): rename public canvas tag to embed
* fix(ui): address remaining media and gateway review issues
* fix(ui): address remaining embed and attachment review findings
* fix(ui): restore stop control and tool card inputs
* fix(ui): address history and attachment review findings
* fix(ui): restore prompt contribution wiring
* fix(ui): address latest history and directive reviews
* fix(ui): forward password auth for assistant media
* fix(ui): suppress silent transcript tokens with media
* feat(ui): add granular embed sandbox modes
* fix(ui): preserve relative media directives in history
* docs(ui): document embed sandbox modes
* fix(gateway): restrict canvas history hoisting to tool entries
* fix(gateway): tighten embed follow-up review fixes
* fix(ci): repair merged branch type drift
* fix(prompt): restore stable runtime prompt rendering
* fix(ui): harden local attachment preview checks
* fix(prompt): restore channel-aware approval guidance
* fix(gateway): enforce auth rotation and media cleanup
* feat(ui): gate external embed urls behind config
* fix(ci): repair rebased branch drift
* fix(ci): resolve remaining branch check failures
2026-04-11 07:32:53 -05:00
Agustin Rivera
5b6e552b51
fix(hooks): mark wake hook events untrusted ( #62003 )
...
* fix(hooks): mark wake hook events untrusted
* docs(changelog): add wake-hook trust entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-06 14:17:48 -06:00
Vincent Koc
1ca12ec8bf
fix(hooks): rebind hook agent session keys to the target agent ( #58225 )
...
* fix(hooks): rebind hook agent session keys
* fix(hooks): preserve scoped hook session keys
* fix(hooks): validate normalized dispatch keys
2026-04-01 00:16:39 +09:00
Peter Steinberger
ea579ef858
fix(gateway): preserve async hook ingress provenance
2026-03-22 22:21:49 -07:00
Peter Steinberger
8225b9edbb
test: share gateway hook and cron helpers
2026-03-14 00:30:14 +00:00
Vincent Koc
2649c03cdb
fix(hooks): dedupe repeated agent deliveries by idempotency key ( #44438 )
...
* Hooks: add hook idempotency key resolution
* Hooks: dedupe repeated agent deliveries by idempotency key
* Tests: cover hook idempotency dedupe
* Changelog: note hook idempotency dedupe
* Hooks: cap hook idempotency key length
* Gateway: hash hook replay cache keys
* Tests: cover hook replay key hardening
2026-03-12 20:43:38 -04:00
Mariano
d4e59a3666
Cron: enforce cron-owned delivery contract ( #40998 )
...
Merged via squash.
Prepared head SHA: 5877389e33132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-03-09 20:12:37 +01:00
Peter Steinberger
44820dcead
fix(hooks): gate methods before auth lockout accounting
2026-03-07 18:05:09 +00:00
Glucksberg
051b380d38
fix(hooks): return 200 instead of 202 for webhook responses ( #28204 )
...
* fix(hooks): return 200 instead of 202 for webhook responses (#22036 )
* docs(webhook): document 200 status for hooks agent
* chore(changelog): add webhook ack note openclaw#28204 thanks @Glucksberg
---------
Co-authored-by: Shakker <shakkerdroid@gmail.com >
2026-03-03 00:19:31 +00:00
Peter Steinberger
6a42d09129
refactor: dedupe gateway config and infra flows
2026-03-03 00:15:14 +00:00
Peter Steinberger
9d30159fcd
refactor: dedupe channel and gateway surfaces
2026-03-02 19:57:33 +00:00
Peter Steinberger
4b71de384c
fix(core): unify session-key normalization and plugin boundary checks
2026-02-26 12:41:23 +00:00
Peter Steinberger
868c0e4c56
test: move gateway server integration suites out of e2e
2026-02-22 11:33:27 +00:00
Peter Steinberger
37e5f077b8
test: move gateway server coverage to e2e
2026-01-23 18:34:33 +00:00
Peter Steinberger
c7ca312f97
test(gateway): consolidate server suites for speed
2026-01-23 06:22:09 +00:00
Peter Steinberger
c379191f80
chore: migrate to oxlint and oxfmt
...
Co-authored-by: Christoph Nakazawa <christoph.pojer@gmail.com >
2026-01-14 15:02:19 +00:00
Peter Steinberger
90342a4f3a
refactor!: rename chat providers to channels
2026-01-13 08:40:39 +00:00
Peter Steinberger
6220106ab2
refactor: centralize main session key resolution
2026-01-09 22:13:20 +01:00
Peter Steinberger
42a0089b3b
fix: require explicit system event session keys
2026-01-09 21:59:01 +01:00
Peter Steinberger
73988506fe
feat: allow hook model overrides
2026-01-08 09:33:42 +00:00
Peter Steinberger
dbfa316d19
feat: multi-agent routing + multi-account providers
2026-01-06 18:33:37 +00:00
Peter Steinberger
246adaa119
chore: rename project to clawdbot
2026-01-04 14:38:51 +00:00
Peter Steinberger
6ae51ae3de
refactor: split gateway server helpers and tests
2026-01-03 17:34:52 +01:00
