Commit Graph

40665 Commits

Author SHA1 Message Date
Vincent Koc
188c3b74ba fix(plugins): declare host peer in npm runtime packs 2026-05-02 23:47:25 -07:00
Vincent Koc
25ceffbf25 refactor(plugins): centralize npm runtime package planning 2026-05-02 23:47:25 -07:00
Vincent Koc
fb6893cf48 docs(changelog): note plugin runtime package fix 2026-05-02 23:47:25 -07:00
Vincent Koc
13d2bfb742 test(plugins): add npm runtime build sweep 2026-05-02 23:47:25 -07:00
Vincent Koc
b44cbecdf8 fix(plugins): keep package dry-run json clean 2026-05-02 23:47:25 -07:00
Vincent Koc
11a5b30f3e fix(plugins): build package-local npm runtimes 2026-05-02 23:47:25 -07:00
Vincent Koc
ac7e7f0512 docs(changelog): credit sqlite-vec report 2026-05-02 23:47:04 -07:00
Vincent Koc
95001d6c41 fix(memory): keep sqlite-vec optional 2026-05-02 23:44:01 -07:00
Vincent Koc
140c274335 test(cli): cover official external npm installs without integrity
Add catalog-derived coverage so official external npm plugin aliases without integrity pins still use the trusted official install path.
2026-05-02 23:42:26 -07:00
Vincent Koc
2a22eb68aa fix(plugins): require provenance for official npm trust
Require OpenClaw-owned install provenance before granting official npm plugin scanner trust. Direct npm package names now scan normally; catalog, onboarding, and doctor paths pass explicit provenance.\n\nValidation:\n- pnpm test:serial src/plugins/install.npm-spec.test.ts src/cli/plugins-cli.install.test.ts src/commands/onboarding-plugin-install.test.ts src/commands/doctor/shared/missing-configured-plugin-install.test.ts src/channels/plugins/contracts/channel-catalog.contract.test.ts src/commands/auth-choice.apply.plugin-provider.test.ts\n- pnpm test:serial src/plugins/install.test.ts src/plugins/provider-auth-choices.test.ts src/plugins/provider-install-catalog.test.ts src/commands/channel-setup/plugin-install.test.ts\n- pnpm exec oxfmt --check --threads=1 ...\n- node scripts/run-oxlint.mjs ...\n- Crabbox cbx_6157440c9bbe / run_cbd813956eed: pnpm check:changed passed\n\nThanks @fede-kamel and @vincentkoc.
2026-05-02 23:30:45 -07:00
Vincent Koc
f249b1c6df fix(plugins): clean managed git uninstall roots 2026-05-02 23:30:01 -07:00
Chris Zhang
cb7b2850e4 fix(build): externalize Feishu Lark SDK
Externalize @larksuiteoapi/node-sdk from the bundled Feishu ESM runtime so packaged startup loads the SDK as a plugin-local runtime dependency instead of inlining the SDK's ESM __dirname path.

Adds changelog credit and a tsdown-config regression assertion.

Fixes #76291.
Fixes #76494.

Co-authored-by: Chris Zhang <4436110+zqchris@users.noreply.github.com>
2026-05-02 23:27:13 -07:00
Vincent Koc
14312ff570 fix(feishu): avoid duplicate voice reply text 2026-05-02 23:18:42 -07:00
Vincent Koc
3c51692543 fix(config): bound clobber recovery snapshots (#76483) 2026-05-02 23:13:56 -07:00
Vincent Koc
b0a6543838 fix(agents): keep delayed sessions_send replies alive (#76484) 2026-05-02 23:08:10 -07:00
Jesse Merhi
207aa18c40 Add shell command explainer (#75004)
Summary:
- The PR adds an internal Tree-sitter-backed shell command explainer under `src/infra`, parser runtime/tests, dependency/build-policy updates, an index export, and a changelog entry.
- Reproducibility: not applicable. this is a feature PR rather than a bug report. For the prior PR blocker, source inspection shows byte-to-string span conversion and focused Unicode span coverage on the exact head.

Automerge notes:
- Ran the ClawSweeper repair loop before final review.
- Included post-review commit in the final squash: Repair shell command explainer automerge blockers
- Included post-review commit in the final squash: fix(clawsweeper): address review for automerge-openclaw-openclaw-7500…

Validation:
- ClawSweeper review passed for head 47577579e9.
- Required merge gates passed before the squash merge.

Prepared head SHA: 47577579e9
Review: https://github.com/openclaw/openclaw/pull/75004#issuecomment-4351322592

Co-authored-by: Jesse Merhi <jessejmerhi@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-03 06:05:29 +00:00
Vincent Koc
e27b7c2d74 docs(changelog): credit secretref channel fix 2026-05-02 22:55:31 -07:00
Arnab Saha
b83b2e3f1c fix(openai-codex): honor providerConfig.baseUrl in dynamic-model synthesis fallback (#76428)
* fix(openai-codex): honor providerConfig.baseUrl in dynamic-model synthesis fallback

The synthesis fallback in resolveCodexForwardCompatModel hardcoded
OPENAI_CODEX_BASE_URL when the model registry had no template row to
clone, which meant openai-codex providers configured with a custom
baseUrl (e.g. a local proxy that forwards Codex traffic) silently
fell back to api.openai.com / chatgpt.com - bypassing the proxy and
typically failing the auth contract.

Synthesis now reads ctx.providerConfig.baseUrl when present, with the
existing OPENAI_CODEX_BASE_URL constant as the fallback. No effect on
template-clone or registry-find paths, which already inherit the
configured baseUrl through the cloned template.

* docs(changelog): add Unreleased Fixes entry for #76428 codex synthesis baseUrl honor
2026-05-02 22:52:29 -07:00
Marvinthebored
73a95d3af4 fix(gateway): read-only persisted fast path for models.list catalog (#76406)
* fix(gateway): read-only fast path for models.list catalog loading

The gateway model catalog refresh calls loadModelCatalog without
readOnly, triggering ensureOpenClawModelsJson (60-70s), full PI SDK
registry instantiation, auth storage discovery, and live provider
plugin augmentation on every Control UI list/refresh. None of this
is needed for a read-only UI listing.

Three changes:

1. Gateway catalog refresh now passes readOnly: true to loadModelCatalog.
2. In readOnly mode, skip augmentModelCatalogWithProviderPlugins — live
   provider discovery is explicit admin/background work, not a UI list
   operation.
3. Add a persisted models.json fast path: when readOnly is true, first
   try reading the existing models.json directly and converting
   providers.<provider>.models[] to catalog rows. Falls back to the
   full PI registry path if the file is missing or unreadable.

Observed improvement on a production install:
  loadGatewayModelCatalog: 967 entries / 4651ms → 89 entries / 8ms
  Live models.list during startup: ~18s → ~2s

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(gateway): preserve full model catalog view

* fix(agents): preserve read-only catalog defaults

* fix(agents): preserve provider catalog defaults

---------

Co-authored-by: Marvinthebored <peter@lindsey.jp>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-05-02 22:48:55 -07:00
Vincent Koc
de24a05d6d test(gateway): satisfy shard splitter lint 2026-05-02 22:40:00 -07:00
Vincent Koc
833a42c253 test(gateway): split full-suite gateway-server shard 2026-05-02 22:40:00 -07:00
Vincent Koc
3ad0ad994a test(gateway): avoid stuck gateway-server fork shard 2026-05-02 22:40:00 -07:00
Vincent Koc
2e593d07f7 fix(plugins): preserve registry manifest fast path 2026-05-02 22:40:00 -07:00
Vincent Koc
d69d610bf0 fix(ui): guard app custom element registration 2026-05-02 22:40:00 -07:00
Bek
411df59916 fix(plugins): resolve official plugin install aliases
Resolve bare official external plugin IDs through the official catalog before generic npm fallback, preserving explicit npm semantics and catalog integrity through the hook-pack fallback.\n\nFixes #76373.\n\nThanks @bek91 and @vincentkoc.
2026-05-02 22:27:13 -07:00
Vincent Koc
f696be950b fix(gateway): keep runtime metadata on session rows 2026-05-02 22:10:35 -07:00
openclaw-clownfish[bot]
22748b1c36 feat(whatsapp): support native outbound mentions (#73961)
Merged via squash.

Prepared head SHA: bb1df9e681
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com>
Reviewed-by: @BunsDev
2026-05-02 23:50:54 -05:00
Josh Avant
b1f8172867 fix(secretrefs): resolve external channel contracts (#76449) 2026-05-02 23:48:11 -05:00
pashpashpash
8f4eaa9c00 Stop heartbeat tool turns from asking for HEARTBEAT_OK (#76338)
* fix heartbeat tool prompt sentinel

* fix: remove agent runtime fallback config
2026-05-03 13:46:26 +09:00
Vincent Koc
775c27433f docs(changelog): credit oversized transcript fix 2026-05-02 21:44:25 -07:00
Vincent Koc
fda6ba3818 docs(changelog): credit lightweight session list fix 2026-05-02 21:42:15 -07:00
Vincent Koc
a7d3da71f7 test(gateway): expect lightweight session list rows 2026-05-02 21:37:06 -07:00
Vincent Koc
b1d7901a79 style(gateway): format lightweight session row path 2026-05-02 21:35:01 -07:00
Vincent Koc
5a9cf2c43f fix(gateway): preserve oversized transcript tree leaves 2026-05-02 21:34:36 -07:00
Marvinthebored
7fe4ba013f fix(gateway): add lightweight row path for sessions.list to reduce event-loop blocking
sessions.list calls buildGatewaySessionRow for every visible session,
running transcript usage fallback, display model inference, cost/context
recomputation, thinking level enumeration, agent runtime metadata, and
plugin extension projection per row. On installs with 30-50+ sessions
this blocks the event loop for 20-80+ seconds, starving Discord
heartbeats and Control UI RPCs.

Add skipTranscriptUsageFallback and lightweightListRow flags to
buildGatewaySessionRow. In lightweight mode, skip transcript usage
fallback, display model inference, cost/context recomputation, thinking
level options, agent runtime metadata, and plugin extension projection.
Use persisted entry fields directly for cost, tokens, and model identity.

listSessionsFromStoreAsync now passes both flags for bulk list rows.
Detail endpoints and single-row loads are unaffected.

Observed improvement on a production install (33 sessions):
sessions.list row construction dropped from ~82s to ~6s.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit 803879ec54)
2026-05-02 21:34:29 -07:00
Marvinthebored
4c9a557533 fix(gateway): skip oversized JSONL lines to prevent event-loop starvation
Large transcript JSONL records (multi-MB tool results, file content)
block the event loop via JSON.parse before truncation logic can skip
them. Add a 256 KiB line-size guard to parseTailTranscriptRecord and
extractUsageSnapshotFromTranscriptLine, and replace the full transcript
index scan in readSessionTitleFieldsFromTranscriptAsync with the
existing bounded sync reader.

Observed improvement on a production install (33 sessions):
chat.history dropped from 13-16s to ~1.2s, event loop utilization
from 0.999 to normal, steady-state CPU from ~100% to 0.2-0.3%.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-02 21:34:21 -07:00
Vincent Koc
d122a3492d fix(gateway): preserve oversized transcript tree leaves 2026-05-02 21:31:53 -07:00
Omar Shahine
1a5ad6104d docs(changelog): move file-transfer highlight to Unreleased
The 2026.4.30 changelog section maps to a beta-only tag with no public
release page, so the file-transfer highlight was invisible on the
releases page. Moving to Unreleased so it lands in the next published
release.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-03 04:30:54 +00:00
Val Alexander
2810f1219a fix(ui): surface compaction checkpoints in chat history
Fixes #76415.

- Explains compacted history boundaries in WebChat.
- Adds an Open checkpoints action for pre-compaction recovery.
- Updates WebChat docs and changelog with Thanks @BunsDev.
- Validated targeted UI tests, formatting/diff checks, Testbox changed gate, and exact-head CI.

Security: UI/docs/tests/styles-only change that reuses existing checkpoint APIs; no new dependencies, filesystem reads, workflow changes, or secret handling.
2026-05-02 23:29:28 -05:00
Val Alexander
85c000de1e fix: keep ClawHub publish dry-run preflight
Preserve the ClawHub CLI dry-run preflight while making the printed publish preview include CLAWHUB_WORKDIR. Add regression coverage that stubs the ClawHub CLI and verifies --dry-run is forwarded through the publish script.
2026-05-02 23:27:44 -05:00
Vincent Koc
b258c3fc65 fix(secretrefs): preserve exec resolver env 2026-05-02 21:21:51 -07:00
clawsweeper[bot]
d04a8976b1 fix(feishu): repair media-aware message dedupe (#76408)
Summary:
- The PR adds a Feishu-local media-aware dedupe-key helper, wires it through inbound receive/debounce/persistent/broadcast dedupe paths, adds Feishu regression coverage, and adds an Unreleased changelog entry.
- Reproducibility: yes. Source inspection shows a high-confidence path: two Feishu audio events for the same a ... _key` values collide in current-main receive and persistent dedupe before media parsing distinguishes them.

Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.

Validation:
- ClawSweeper review passed for head c0229f8a48.
- Required merge gates passed before the squash merge.

Prepared head SHA: c0229f8a48
Review: https://github.com/openclaw/openclaw/pull/76408#issuecomment-4365292618

Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: SymbolStar <24540119+SymbolStar@users.noreply.github.com>
2026-05-03 04:20:02 +00:00
Vincent Koc
a32fe82bd2 fix(gateway): preserve oversized transcript placeholders 2026-05-02 21:16:16 -07:00
Ayaan Zaidi
e8756d99ae Preserve delivered assistant replies in session repair (#76420)
Summary:
- The PR removes session-file repair's trailing-assistant disk trim, updates regression coverage, clarifies transcript hygiene docs, and adds a changelog entry for the Telegram/WebChat history loss fix.
- Reproducibility: yes. Current main has a clear source path: a normal trailing assistant JSONL record is popped by `repairSessionFileIfNeeded`, and the main-branch test suite asserts that deletion.

Automerge notes:
- PR branch already contained follow-up commit before automerge: docs(agents): clarify session repair preservation
- PR branch already contained follow-up commit before automerge: fix(agents): preserve delivered assistant replies in session repair

Validation:
- ClawSweeper review passed for head 66c187fd76.
- Required merge gates passed before the squash merge.

Prepared head SHA: 66c187fd76
Review: https://github.com/openclaw/openclaw/pull/76420#issuecomment-4365323320

Co-authored-by: Ayaan Zaidi <hi@obviy.us>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-03 04:04:11 +00:00
NVIDIAN
6a3f5d0b1f fix(cli): reject missing plugin ids before config writes (#73554)
Merged via squash.

Prepared head SHA: f0d3e61de2
Co-authored-by: ai-hpc <183861985+ai-hpc@users.noreply.github.com>
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Reviewed-by: @hxy91819
2026-05-03 11:49:14 +08:00
NVIDIAN
c81c0171cd fix(cli): block gateway-owned package updates (#75819)
Merged via squash.

Prepared head SHA: acdf73e6d0
Co-authored-by: ai-hpc <183861985+ai-hpc@users.noreply.github.com>
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Reviewed-by: @hxy91819
2026-05-03 11:40:36 +08:00
Peter Steinberger
55c738ad4b build(protocol): refresh Swift gateway models 2026-05-03 04:37:08 +01:00
Peter Steinberger
0135071833 fix(xai): allow slower image edits 2026-05-03 04:34:21 +01:00
Josh Avant
ba31afb099 fix(discord): surface stalled transport health (#76327)
* fix(discord): surface stalled transport health

* fix(discord): surface stalled transport health

* fix(discord): surface stalled transport health

---------

Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-02 22:33:19 -05:00
Peter Steinberger
9891f30422 test(e2e): relax kitchen-sink diagnostic exhaustiveness 2026-05-03 04:25:15 +01:00