Commit Graph

38561 Commits

Author SHA1 Message Date
Shakker
9307affe59 fix: align runtime auth evidence with config trust 2026-04-30 00:13:12 +01:00
Shakker
10b9adb010 fix: trust-gate manifest auth evidence 2026-04-30 00:13:12 +01:00
Shakker
b8c77c1bd7 test: type google setup registration coverage 2026-04-30 00:13:12 +01:00
Shakker
68aedf3908 fix: register google vertex setup provider 2026-04-30 00:13:12 +01:00
Shakker
78f3470368 fix: preserve explicit auth evidence path semantics 2026-04-30 00:13:12 +01:00
Shakker
5a606947b5 docs: document manifest auth evidence 2026-04-30 00:13:12 +01:00
Shakker
dec5de8a2c fix: declare google vertex local auth evidence 2026-04-30 00:13:12 +01:00
Shakker
225620a9b3 refactor: resolve env auth evidence generically 2026-04-30 00:13:12 +01:00
Shakker
dd5b96c11d feat: expose provider auth evidence lookup 2026-04-30 00:13:12 +01:00
Shakker
1d1edca92f feat: add setup auth evidence metadata 2026-04-30 00:13:12 +01:00
Marcus Castro
4cba08df01 fix(whatsapp): remove exposeErrorText config (#74642)
* fix(whatsapp): remove exposeErrorText config

* fix(whatsapp): mark internal system events trusted
2026-04-29 20:03:58 -03:00
Peter Steinberger
426107d2f8 fix(telegram): retry invalid native quotes 2026-04-30 00:02:13 +01:00
Vincent Koc
d115faa367 chore: update security codeowners team 2026-04-29 15:57:17 -07:00
Vincent Koc
847d8fa0e1 chore(ci): add Plugin SDK reply CodeQL quality shard
Adds a focused non-security CodeQL quality shard for Plugin SDK reply/session delivery runtime contracts.
2026-04-29 15:56:41 -07:00
Peter Steinberger
6acd588bdd test(ci): update changed gate expectations 2026-04-29 23:49:48 +01:00
Vincent Koc
8f50920c45 chore(ci): add session diagnostics CodeQL quality shard
Adds a focused non-security CodeQL quality shard for session diagnostics, delivery queues, and related diagnostic contracts.
2026-04-29 15:29:03 -07:00
Peter Steinberger
c7e2aceb05 ci(dup): guard duplicate scan coverage 2026-04-29 23:24:57 +01:00
Peter Steinberger
4c712d3372 fix: add bundled plugin deps repair command 2026-04-29 23:23:14 +01:00
Peter Steinberger
9a3a341d93 refactor(channels): route remaining turns through kernel 2026-04-29 23:16:16 +01:00
Peter Steinberger
9a9cd0c0ab refactor(channels): add shared turn kernel 2026-04-29 23:16:16 +01:00
Peter Steinberger
4396361f35 fix(config): regenerate base schema help 2026-04-29 23:09:39 +01:00
Peter Steinberger
fa467c20e3 test: allow browser indirect zod runtime dependency 2026-04-29 23:03:06 +01:00
Vincent Koc
6717f8b334 chore(ci): add plugin trust CodeQL shard
Adds the plugin trust-boundary CodeQL security shard on Blacksmith and documents the rollout scope.
2026-04-29 15:02:06 -07:00
Peter Steinberger
a31b55a8d8 fix(config): document queue help options 2026-04-29 23:01:39 +01:00
Peter Steinberger
18faf22e15 fix(plugins): mirror global-agent runtime dependency (#74593)
* fix(plugins): mirror global-agent runtime dependency

* fix(plugins): update bundled dependency drift guard
2026-04-29 21:55:46 +00:00
Peter Steinberger
36ff8d78e4 fix: explain stuck session diagnostics 2026-04-29 22:55:27 +01:00
Peter Steinberger
4a6e10ece8 feat: default queueing to steer 2026-04-29 22:48:10 +01:00
Peter Steinberger
83267e99b0 chore: update dependencies 2026-04-29 22:42:45 +01:00
Vignesh Natarajan
05627f797e Docs: skip unsupported Mintlify locale nav 2026-04-29 14:38:56 -07:00
Michael Marr
aaf4cc6862 docs(slack): warn that groupPolicy allowlist requires channel IDs not names (#53112) 2026-04-29 14:36:38 -07:00
Gabriel A. Mays
f0f1635f9f Docs: add VPS admin hardening note (#54685) 2026-04-29 14:36:33 -07:00
Vincent Koc
71ab341f46 chore(ci): rename CodeQL auth security shard
Renames the default auth/secrets CodeQL security category from the generic javascript-typescript label to core-auth-secrets.

Proof:
- Branch CodeQL security run https://github.com/openclaw/openclaw/actions/runs/25134871512 passed on 1d9f727bfd.
- Core auth/secrets analysis 1200412263 returned 0 results.
- Branch open CodeQL alerts: none.
- Workflow Sanity, Blacksmith Testbox, Blacksmith Build Artifacts Testbox, and OpenGrep PR Diff passed.

Scope is label/config only: same paths, query pack, filters, timeout, and runner.
2026-04-29 14:32:34 -07:00
Peter Steinberger
b552e31563 test: update install smoke workflow contract 2026-04-29 22:31:17 +01:00
Peter Steinberger
ebff12e84f fix(agents): finalize embedded lifecycle backstop 2026-04-29 22:29:07 +01:00
Vignesh Natarajan
d51af16fab Docs: document inferred commitments 2026-04-29 14:28:22 -07:00
Peter Steinberger
21e2168b8f ci: shard install smoke release checks 2026-04-29 22:25:55 +01:00
Vincent Koc
bdbce3b1c2 fix(ci): align postpublish mirror fixtures 2026-04-29 14:25:26 -07:00
Peter Steinberger
fd8fae7af2 ci(dup): scan docs and security scripts 2026-04-29 22:23:52 +01:00
Vincent Koc
9b536ed3a9 fix(ci): declare bundled root mirrors 2026-04-29 14:20:06 -07:00
Peter Steinberger
6e351f2f05 docs: prefer clawsweeper mentions in skill 2026-04-29 22:18:44 +01:00
Vignesh Natarajan
aecde2b3ac Agents: simplify inferred commitment config (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
11771ec172 Agents: annotate post-compaction system event trust (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
7451415f36 Agents: fix heartbeat rebase conflict (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
f569ed0803 Agents: use runtime config for commitments command (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
95bf450dc9 Agents: address inferred commitments review (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
8e4035d09a Agents: add inferred commitments 2026-04-29 14:14:53 -07:00
clawsweeper[bot]
95a1356278 fix: Found one reliability bug: the new Docker-daemon-unavailable bran (#74520)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:10:38 -07:00
clawsweeper[bot]
cdb424a642 fix: Found one regression in the runtime dependency staging cache. The (#74517)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:09:31 -07:00
clawsweeper[bot]
12a82aa788 fix: Found two heartbeat regressions in the changed behavior: default (#74523)
* fix: Found two heartbeat regressions in the changed behavior: default

* fix: repair heartbeat task-block stripping

---------

Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-04-29 14:09:11 -07:00
clawsweeper[bot]
0b48a69ff2 fix: Found two actionable issues in the bundled runtime-deps staging c (#74526)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:08:57 -07:00