Mariano Belinky
9412bdfdbe
UI: add changelog for Dreaming layout fix
2026-04-09 23:12:31 +02:00
Altay
5b268a04af
docs: remove changelog conflict marker
2026-04-09 22:11:09 +01:00
Roger Deng
1e15bb2638
fix: prevent isolated heartbeat session key :heartbeat suffix accumulation ( #59606 )
...
Merged via squash.
Prepared head SHA: c276211a8b
Co-authored-by: rogerdigital <13251150+rogerdigital@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-09 14:06:55 -07:00
Mariano
4bd720527b
fix(memory-lancedb): accept dreaming config for slot-owned memory ( #63874 )
...
Merged via squash.
Prepared head SHA: 9aaf29bd36
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-09 23:03:53 +02:00
XING
820dc38525
fix(gateway): add TTL cleanup for 3 Maps that grow unbounded causing OOM ( #52731 )
...
Merged via squash.
Prepared head SHA: 4816a29de5
Co-authored-by: artwalker <44759507+artwalker@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-09 13:58:46 -07:00
Josh Lehman
2d846e1f1a
fix: coerce integer plugin config input ( #63346 )
...
* Wizard: coerce integer plugin config input
Regeneration-Prompt: |
Fix the interactive plugin-config wizard so JSON Schema fields declared as type "integer" are coerced from text input the same way type "number" already is. Keep the change narrow in src/wizard/setup.plugin-config.ts rather than refactoring the broader prompt flow. Add a focused regression test in src/wizard/setup.plugin-config.test.ts that exercises setupPluginConfig with an integer-typed schema field, verifies the text response "3" is stored as numeric 3, and run only the relevant wizard test slice before committing.
* Wizard: type select mock in setup plugin config test
Regeneration-Prompt: |
Fix the CI type failure on PR #63346 in src/wizard/setup.plugin-config.test.ts with the smallest possible change. The new integer-coercion test needs its mocked prompter to satisfy the generic WizardPrompter select signature, matching the surrounding test style without changing production code or test behavior. After the one-line test fix, rerun pnpm tsgo --pretty false and pnpm test src/wizard/setup.plugin-config.test.ts on branch aristotle-3f605963-fix-config-integer-coercion.
* Wizard: coerce integer plugin config input
* Changelog: remove stray conflict marker
2026-04-09 13:57:06 -07:00
Mariano
2f130c418f
fix(memory-core): use startup config for dreaming cron reconciliation ( #63873 )
...
Merged via squash.
Prepared head SHA: 2ec22920cd
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-09 21:36:36 +02:00
Mariano
6af17b39e1
fix(dreaming): require admin for persistent gateway toggle ( #63872 )
...
Merged via squash.
Prepared head SHA: 2dfd2ee7a7
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-09 21:21:01 +02:00
Tak Hoffman
b83726d13e
Feat: Add Active Memory recall plugin ( #63286 )
...
* Refine plugin debug plumbing
* Tighten plugin debug handling
* Reduce active memory overhead
* Abort active memory sidecar on timeout
* Rename active memory blocking subagent wording
* Fix active memory cache and recall selection
* Preserve active memory session scope
* Sanitize recalled context before retrieval
* Add active memory changelog entry
* Harden active memory debug and transcript handling
* Add active memory policy config
* Raise active memory timeout default
* Keep usage footer on primary reply
* Clear stale active memory status lines
* Match legacy active memory status prefixes
* Preserve numeric active memory bullets
* Reuse canonical session keys for active memory
* Let active memory subagent decide relevance
* Refine active memory plugin summary flow
* Fix active memory main-session DM detection
* Trim active memory summaries at word boundaries
* Add active memory prompt styles
* Fix active memory stale status cleanup
* Rename active memory subagent wording
* Add active memory prompt and thinking overrides
* Remove active memory legacy status compat
* Resolve active memory session id status
* Add active memory session toggle
* Add active memory global toggle
* Fix active memory toggle state handling
* Harden active memory transcript persistence
* Fix active memory chat type gating
* Scope active memory transcripts by agent
* Show plugin debug before replies
2026-04-09 11:27:37 -05:00
Mason
164287f056
docs-i18n: avoid ambiguous body-only wrapper unwrap ( #63808 )
...
* docs-i18n: avoid ambiguous body-only wrapper unwrap
* docs: clarify targeted testing tip
* changelog: include docs-i18n follow-up thanks
2026-04-10 00:01:17 +08:00
Mason
06dea262c4
docs-i18n: chunk raw doc translation ( #62969 )
...
Merged via squash.
Prepared head SHA: 6a16d66486
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
Reviewed-by: @hxy91819
2026-04-09 23:22:16 +08:00
Pavan Kumar Gondhi
635bb35b68
fix(agents): guard nodes tool outPath against workspace boundary [AI-assisted] ( #63551 )
...
* fix: address issue
* fix: address review feedback
* fix: finalize issue changes
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-09 20:42:49 +05:30
zsx
1fede43b94
fix: exclude workspace shadows from channel setup catalog lookups
2026-04-09 22:46:39 +08:00
Sliverp
65b781f9ae
fix(qqbot): add stream config ( #63746 )
2026-04-09 21:23:33 +08:00
Pavan Kumar Gondhi
604777e441
fix(qqbot): enforce media storage boundary for all outbound local file paths [AI] ( #63271 )
...
* fix: address issue
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-09 17:56:37 +05:30
Neerav Makwana
2645ed154b
fix: provider-qualified session context limits ( #62493 ) (thanks @neeravmakwana)
...
* fix(sessions): provider-qualified context limits (#62472 )
* fix(sessions): honor agent context cap in memory-flush gate
* refactor(sessions): unify context token resolution
* fix: keep followup snapshot freshness on the active provider (#62493 ) (thanks @neeravmakwana)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 17:25:34 +05:30
Ayaan Zaidi
b8af4d6739
fix: start tailscale exposure before sidecars
2026-04-09 17:21:56 +05:30
Neerav Makwana
7f714609f7
fix: allow CLI task cancel for stuck background tasks ( #62506 ) (thanks @neeravmakwana)
...
* Tasks: allow openclaw tasks cancel for CLI runtime (#62419 )
Made-with: Cursor
* Tasks: address review — changelog order, CLI cancel without session, lock terminal status
Made-with: Cursor
* fix: freeze terminal task listener updates
* fix: clean changelog block for CLI task cancel (#62506 ) (thanks @neeravmakwana)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 17:16:07 +05:30
Neerav Makwana
9267c3f8f2
fix: preserve iMessage self-chat aliases ( #61619 ) (thanks @neeravmakwana)
...
* fix(imessage): avoid DM self-chat false positives
* fix(imessage): treat blank destination caller id as missing
* fix(imessage): preserve alias self-chat
* fix: preserve iMessage self-chat aliases (#61619 ) (thanks @neeravmakwana)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 17:13:22 +05:30
Neerav Makwana
5577e2d441
fix: keep gateway RPC up during startup ( #63480 )
...
Thanks @neeravmakwana.
2026-04-09 17:09:18 +05:30
Neerav Makwana
12544e24d7
fix: stable auth profile resolution for isolated cron jobs ( #62797 ) (thanks @neeravmakwana)
...
* Cron: stable auth profile resolution for isolated jobs (#62783 )
* Tests: clearer assertion for isolated cron auth profile spy (#62797 )
2026-04-09 16:48:05 +05:30
Mulualem Eshetu
4977c4ab82
fix(control-ui): preserve configured model metadata in picker ( #61382 )
...
Merged via squash.
Prepared head SHA: c738f6f146
Co-authored-by: Mule-ME <83214007+Mule-ME@users.noreply.github.com >
Co-authored-by: mukhtharcm <56378562+mukhtharcm@users.noreply.github.com >
Reviewed-by: @mukhtharcm
2026-04-09 16:28:43 +05:30
Frank Yang
46b1ecd6ed
docs: add changelog entry for FirePass Kimi fix
2026-04-09 17:27:02 +08:00
Justin Song
1b24560392
fix(status): show configured fallback models in /status output ( #33111 )
...
Merged via squash.
Prepared head SHA: 5e590aa68c
Co-authored-by: AnCoSONG <32268203+AnCoSONG@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-04-09 10:13:09 +01:00
WarrenJones
905e56d191
fix: treat zero nextRunAtMs as invalid ( #63507 ) (thanks @WarrenJones)
...
* fix(cron): repair nextRunAtMs=0 on non-schedule edits
Treat nextRunAtMs <= 0 as invalid during non-schedule updates so editing
a description or other metadata field recomputes the next run time instead
of silently keeping the corrupt value.
Made-with: Cursor
* fix(cron): treat zero nextRunAtMs as invalid
* fix: treat zero nextRunAtMs as invalid (#63507 ) (thanks @WarrenJones)
---------
Co-authored-by: WarrenJones <8704779+WarrenJones@users.noreply.github.com >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 14:39:53 +05:30
WarrenJones
40c5edb5b1
fix: preserve safe gateway env vars on reinstall ( #63136 ) (thanks @WarrenJones)
...
* fix(daemon): preserve safe env vars on gateway reinstall
Pass the existing service environment into gateway reinstall planning so safe custom variables survive LaunchAgent rewrites and existing PATH entries are merged instead of being silently dropped.
Made-with: Cursor
* fix(daemon): track managed env keys on reinstall
* fix: preserve safe gateway env vars on reinstall (#63136 ) (thanks @WarrenJones)
* fix: validate preserved PATH entries on reinstall (#63136 ) (thanks @WarrenJones)
---------
Co-authored-by: WarrenJones <8704779+WarrenJones@users.noreply.github.com >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 14:29:54 +05:30
Davanum Srinivas
08ae021d1f
fix(qqbot): guard image-size probe against SSRF ( #63495 )
...
* fix(qqbot): replace raw fetch in image-size probe with SSRF-guarded fetchRemoteMedia
Replace the bare fetch() in getImageSizeFromUrl() with fetchRemoteMedia()
from the plugin SDK, closing the blind SSRF via markdown image dimension
probing (GHSA-2767-2q9v-9326).
fetchRemoteMedia options: maxBytes 65536, maxRedirects 0, generic
public-network-only SSRF policy (no hostname allowlist, blocks
private/reserved/loopback/link-local/metadata IPs after DNS resolution).
Also fixes the repo-root resolution in scripts/lib/ts-guard-utils.mjs
which caused lint:tmp:no-raw-channel-fetch to miss extension files
entirely. The guard now walks up to .git instead of hardcoding two parent
traversals, and the allowlist is refreshed with all pre-existing raw
fetch callsites that became visible.
* fix(qqbot): guard image-size probe against SSRF (#63495 ) (thanks @dims)
---------
Co-authored-by: sliverp <870080352@qq.com >
2026-04-09 16:48:04 +08:00
HollyChou
ab49afcd27
fix: surface specific sub-issue for config validation union errors ( #40841 )
...
Merged via squash.
Prepared head SHA: 6d7da51629
Co-authored-by: Hollychou924 <128659251+Hollychou924@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-04-09 09:40:22 +01:00
Ayaan Zaidi
68781bf2c2
fix: add web_fetch RFC2544 SSRF opt-in ( #61830 ) (thanks @xing-xing-coder)
2026-04-09 13:50:18 +05:30
Luke
7c72b694f1
macOS: add MLX Talk provider MVP ( #63539 )
...
Merged via squash.
Prepared head SHA: da43563513
Co-authored-by: ImLukeF <92253590+ImLukeF@users.noreply.github.com >
Co-authored-by: ImLukeF <92253590+ImLukeF@users.noreply.github.com >
Reviewed-by: @ImLukeF
2026-04-09 17:13:34 +10:00
manuel-claw
e30d0cffc4
fix(whatsapp): drain reconnect queue after WhatsApp reconnects ( #30806 ) ( #46299 )
...
Merged via squash.
Prepared head SHA: 5ce763406e
Co-authored-by: manuel-claw <268194568+manuel-claw@users.noreply.github.com >
Co-authored-by: mcaxtr <7562095+mcaxtr@users.noreply.github.com >
Reviewed-by: @mcaxtr
2026-04-09 02:33:36 -03:00
Pavan Kumar Gondhi
b1724f8b5f
fix(browser): auto-generate browser control auth token for none/trusted-proxy modes [AI] ( #63280 )
...
* fix: address issue
* fix: address review feedback
* fix: finalize issue changes
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-09 09:55:24 +05:30
Pavan Kumar Gondhi
b024fae9e5
fix(exec): replace TOCTOU check-then-read with atomic pinned-fd open in script preflight [AI] ( #62333 )
...
* fix: address issue
* fix: address review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* address review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-09 09:46:44 +05:30
fuller-stack-dev
6384271963
fix: allow disabled plugin config writes ( #63296 ) (thanks @fuller-stack-dev)
...
* fix(config): ignore synthesized disabled plugin config on write
* test(config): keep write-prepare regression generic
* test(config): cover explicit disabled plugin config preservation
* fix(config): skip disabled plugin config validation
* fix(config): avoid tdz in plugin validation
* fix: allow disabled plugin config writes (#63296 ) (thanks @fuller-stack-dev)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-09 09:02:31 +05:30
Marcus Castro
da1da61102
fix(whatsapp): preserve replies across reconnects ( #62892 )
2026-04-09 00:05:52 -03:00
Peter Steinberger
0512059dd4
chore: prepare 2026.4.9 stable release
2026-04-09 03:24:45 +01:00
Peter Steinberger
7810ddc220
chore: prepare 2026.4.9-beta.1 release
2026-04-09 02:13:31 +01:00
Peter Steinberger
6e200f4077
fix: update command-status SDK baseline ( #63174 ) (thanks @hxy91819)
2026-04-09 01:35:15 +01:00
Vignesh Natarajan
2484064c48
chore(lint): clear extension lint regressions and add #63416 changelog
2026-04-08 17:17:29 -07:00
Peter Steinberger
ac57c7c309
docs: reorder unreleased changelog
2026-04-09 00:00:49 +01:00
Mariano
d514f4de83
Dreaming: surface grounded scene lane ( #63395 )
...
Merged via squash.
Prepared head SHA: 0c7f586f32
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-09 00:24:47 +02:00
Pinghuachiu
68630a9e6d
fix(gateway): suppress announce/reply skip chat leakage ( #51739 )
...
Merged via squash.
Prepared head SHA: 2f53f3b0b7
Co-authored-by: Pinghuachiu <9033138+Pinghuachiu@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-08 15:18:57 -07:00
Accunza
8190cc4d21
fix: inter-session messages must not overwrite established external lastRoute ( #58013 )
...
Merged via squash.
Prepared head SHA: 820ea20cb8
Co-authored-by: duqaXxX <12242811+duqaXxX@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-08 15:12:27 -07:00
Altay
554bc0a9fd
fix(plugins): keep test helpers out of contract barrels ( #63311 )
...
Merged via squash.
Prepared head SHA: 769e90c6af
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-04-08 22:59:05 +01:00
Gustavo Madeira Santana
10c87527d5
Slack: dedupe partial streaming replies ( #62859 )
...
Merged via squash.
Prepared head SHA: cbecb50c06
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-08 17:55:30 -04:00
Peter Steinberger
9286de5d95
fix(deps): patch basic-ftp advisory
2026-04-08 22:49:45 +01:00
Mariano Belinky
a71ad12044
Memory/dreaming: harden grounded backfill follow-ups
2026-04-08 23:43:39 +02:00
Peter Steinberger
6b73a74d53
docs: update unreleased changelog
2026-04-08 22:37:47 +01:00
Mariano
e8209e4cf9
Memory/dreaming: feed grounded backfill into short-term promotion ( #63370 )
...
Merged via squash.
Prepared head SHA: 5dfe246ef9
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-04-08 23:31:37 +02:00
lukeboyett
f6e1da3ab3
fix(matrix/doctor): migrate legacy channels.matrix.dm.policy 'trusted' ( fixes #62931 ) ( #62942 )
...
Merged via squash.
Prepared head SHA: d9f553bccf
Co-authored-by: lukeboyett <46942646+lukeboyett@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-08 17:00:19 -04:00