Mariano
922f4e66ea
fix(agents): harden edit tool recovery ( #52516 )
...
Merged via squash.
Prepared head SHA: e23bde893a
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-03-24 13:19:16 +01:00
Peter Steinberger
43131dcc08
test: harden threaded shared-worker suites
2026-03-24 08:37:00 +00:00
Peter Steinberger
e7817ad12a
test: continue vitest threads migration
2026-03-24 08:37:00 +00:00
Peter Steinberger
2833b27f52
test: continue vitest threads migration
2026-03-24 08:37:00 +00:00
Val Alexander
b61a875d56
fix: widen installer regex allowlists and deduplicate safeExternalHref calls
...
- SAFE_GO_MODULE: allow uppercase in module paths (A-Z)
- SAFE_BREW_FORMULA: allow @ for versioned formulas (python@3.12 )
- SAFE_UV_PACKAGE: allow extras [standard] and equality pins ==
- Cache safeExternalHref result in skills detail API key section
2026-03-24 01:46:33 -05:00
Val Alexander
cb58e45130
fix(security): resolve Aisle findings — skill installer validation, terminal sanitization, URL scheme allowlisting ( #53471 ) thanks @BunsDev
...
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-03-24 01:43:48 -05:00
Tak Hoffman
5e9ea804d4
fix: finalize deferred subagent expiry cleanup
2026-03-24 01:12:54 -05:00
Peter Steinberger
5dc42dfb17
fix: format subagent registry test
2026-03-24 06:10:55 +00:00
Tak Hoffman
c3744fbfc4
fix: finalize resumed subagent cleanup give-ups
2026-03-24 01:06:39 -05:00
Peter Steinberger
a2d3b9f317
fix: unblock live harness provider discovery
2026-03-23 23:02:44 -07:00
Tak Hoffman
ab8c834aab
fix: report dropped subagent announce queue deliveries
2026-03-24 00:54:46 -05:00
Tak Hoffman
0fc27409c0
fix: preserve direct subagent dispatch failures on abort
2026-03-24 00:47:01 -05:00
Peter Steinberger
da10b6026a
test: prune low-signal live model sweeps
2026-03-24 05:43:07 +00:00
Tak Hoffman
3689a82494
fix: preserve subagent ended hooks until runtime init
2026-03-24 00:31:48 -05:00
Peter Steinberger
013385e5c2
refactor: polish trigger and manifest seams
2026-03-23 22:22:48 -07:00
Tak Hoffman
535b792808
fix: delete subagent runs after announce give-up
2026-03-24 00:20:22 -05:00
Tak Hoffman
e8ba55adbb
test: add exact-stem subagent seam tests
2026-03-24 00:09:36 -05:00
Peter Steinberger
2e1c88b728
refactor: tighten embedded prompt and sidecar guards
2026-03-23 22:09:22 -07:00
Protocol-zero-0
9f863140d5
test(agents): cover additional heartbeat prompt triggers
...
Document that default-agent heartbeat prompt injection still applies to memory-triggered and triggerless runs while cron remains excluded.
Made-with: Cursor
2026-03-23 21:55:34 -07:00
Protocol-zero-0
9d21be4193
fix(agents): suppress heartbeat prompt for cron-triggered embedded runs
...
Prevent cron-triggered embedded runs from inheriting the default heartbeat prompt so non-cron session targets stop reading HEARTBEAT.md and polluting scheduled turns.
Made-with: Cursor
2026-03-23 21:55:34 -07:00
Peter Steinberger
e864421d83
fix: unify live model auth gating
2026-03-24 04:28:53 +00:00
Peter Steinberger
38137b0cf8
refactor: split tracked ClawHub update flows
2026-03-23 20:01:51 -07:00
Peter Steinberger
7f373823b0
refactor: separate exec policy and execution targets
2026-03-23 19:36:44 -07:00
Peter Steinberger
e530865274
fix: preserve legacy clawhub skill updates ( #53206 ) (thanks @drobison00)
2026-03-23 19:34:05 -07:00
Devin Robison
003752b9b3
Remove lower casing -- preserving prior behavior
2026-03-23 19:34:05 -07:00
Devin Robison
a339d706c1
Formatting fixes and remove trailing dash acceptance
2026-03-23 19:34:05 -07:00
Devin Robison
40071ea23e
fix: tighten skill slug validation to ASCII-only
2026-03-23 19:34:05 -07:00
Peter Steinberger
d8cef14eb1
fix: split exec and policy resolution for wrapper trust ( #53134 ) (thanks @vincentkoc)
2026-03-23 19:04:04 -07:00
Peter Steinberger
e9905fd696
fix: avoid fd warnings in lock exit cleanup
2026-03-24 01:01:59 +00:00
Peter Steinberger
00d586b2ce
test: reduce flaky gemini live probe coverage
2026-03-24 00:40:17 +00:00
Peter Steinberger
dc02a7520f
test: stabilize moonshot and minimax live probes
2026-03-24 00:40:17 +00:00
Peter Steinberger
ce75f60ae9
fix: canonicalize malformed assistant replay content
2026-03-23 17:37:51 -07:00
Peter Steinberger
90fab48416
ci: stabilize sharded channel lanes
2026-03-24 00:21:50 +00:00
Peter Steinberger
d67efbfbd3
test: stabilize test isolation
2026-03-23 23:01:22 +00:00
Vincent Koc
03231c0633
fix(auth): prevent stale auth store reverts ( #53211 )
2026-03-23 15:56:46 -07:00
Robin Waslander
fb6588cb99
fix(diagnostics): redact credentials from cache-trace diagnostic output
...
Refs #53103
2026-03-23 22:59:09 +01:00
George Zhang
ade0182ae0
feat(modelstudio): add standard (pay-as-you-go) DashScope endpoints for Qwen ( #43878 )
...
Add Standard API Key auth methods for China (dashscope.aliyuncs.com)
and Global/Intl (dashscope-intl.aliyuncs.com) pay-as-you-go endpoints
alongside the existing Coding Plan (subscription) endpoints.
Also updates group label to 'Qwen (Alibaba Cloud Model Studio)' and
fixes glm-4.7 -> glm-5 in Coding Plan note messages.
Co-authored-by: wenmeng zhou <wenmengzhou@users.noreply.github.com >
2026-03-23 14:35:19 -07:00
Ayush Ojha
64f4df1886
fix: generalize api_error detection for fallback model triggering ( #49611 )
...
Co-authored-by: Ayush Ojha <7945279+ayushozha@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
2026-03-24 00:34:27 +03:00
theo674
dbe7da7684
fix: prevent delivery-mirror re-delivery and raise Slack chunk limit ( #45489 )
...
Merged via squash.
Prepared head SHA: c7664c7b6e
Co-authored-by: theo674 <261068216+theo674@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-03-24 00:11:19 +03:00
Vincent Koc
34c57487b4
fix(subagents): recheck timed-out announce waits ( #53127 )
...
Recheck timed-out subagent announce waits against the latest runtime snapshot before announcing timeout, and keep that recheck best-effort so transient gateway failures do not suppress the announcement.
Co-authored-by: Val Alexander <68980965+BunsDev@users.noreply.github.com >
2026-03-23 15:36:49 -05:00
Vincent Koc
13e81870bb
fix(agents): prefer runtime snapshot for skill secrets
2026-03-23 13:04:12 -07:00
Peter Steinberger
f9a7427e8e
test: refresh thread-safe agent fixtures
2026-03-23 10:47:02 -07:00
Jamil Zakirov
921a147196
Agents: fix runtime web_search provider selection ( #53020 )
...
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-03-23 10:30:45 -07:00
Luke
d98e3a1ea9
Tests: fix fresh-main regressions ( #53011 )
...
* Tests: fix fresh-main regressions
* Tests: avoid chat notice cache priming
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-03-23 09:54:50 -07:00
Vincent Koc
071de383ff
fix(clawhub): resolve auth token for skill browsing ( #53017 )
...
* fix(clawhub): resolve auth token for skill browsing
* docs(changelog): note clawhub skill auth fix
2026-03-23 09:53:40 -07:00
Vincent Koc
31675d65d4
fix(agents): preserve anthropic thinking block order ( #52961 )
2026-03-23 08:18:15 -07:00
wangchunyue
4e849ac127
fix: ensure env proxy dispatcher before MiniMax and OpenAI Codex OAuth flows (openclaw#52228)
...
Verified:
- pnpm install --frozen-lockfile
- NPM_CONFIG_CACHE=/tmp/openclaw-npm-cache-52228 pnpm build
- pnpm check
- pnpm test:macmini (failed on inherited pre-existing plugin contract test: src/plugins/contracts/registry.contract.test.ts missing deepseek in bundled provider contract registry outside this PR surface)
Co-authored-by: openperf <80630709+openperf@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-23 09:26:34 -05:00
Peter Steinberger
41850c3880
refactor: isolate attempt context engine thread helpers
2026-03-23 05:27:44 -07:00
Peter Steinberger
76dc854963
test: remove replaced spawn-workspace monolith
2026-03-23 05:21:59 -07:00
Peter Steinberger
4e661d5c4b
test: split attempt spawn-workspace thread fixtures
2026-03-23 05:21:59 -07:00