Vincent Koc
2282fcd9ec
ci: serialize gateway watch artifact check
2026-06-17 22:10:15 +02:00
Vincent Koc
abb6f04e0c
ci(release): harden release controls
...
One-time maintainer-authorized bootstrap merge for the release-gate verifier policy. Exact hosted CI and all supporting workflow gates passed on 66133de419 .
2026-06-18 03:11:20 +08:00
Vincent Koc
76658cd159
fix(ci): keep ci workflow edits off fast-only routing
2026-06-16 20:28:23 +02:00
Vincent Koc
55c047e77e
fix(ci): relax checkout fetch timeout
2026-06-16 17:51:06 +08:00
Vincent Koc
74c6f175c7
fix(ci): skip transcript guard for older release targets
2026-06-16 07:40:47 +08:00
Josh Lehman
8ded756284
refactor: add transcript reader seam ( #89121 )
...
Merged via squash.
Prepared head SHA: 7ea7ea47ef
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-06-15 09:41:50 -07:00
Mason Huang
06431fd99b
test: add temp directory helper guidance ( #87298 )
...
Summary:
- Merged test: add temp directory helper guidance after ClawSweeper review.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(scripts): honor temp report failure mode
- PR branch already contained follow-up commit before automerge: fix(scripts): reduce temp report noise
- PR branch already contained follow-up commit before automerge: fix(scripts): cover test support temp reports
- PR branch already contained follow-up commit before automerge: fix(scripts): report temp use in test helpers
- PR branch already contained follow-up commit before automerge: fix(scripts): broaden temp report test surface
- PR branch already contained follow-up commit before automerge: fix(scripts): cover nested test temp reports
Validation:
- ClawSweeper review passed for head 132f14a381 .
- Required merge gates passed before the squash merge.
Prepared head SHA: 132f14a381
Review: https://github.com/openclaw/openclaw/pull/87298#issuecomment-4704338581
Co-authored-by: masonxhuang <masonxhuang@tencent.com >
Co-authored-by: Mason Huang <masonxhuang@tencent.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
2026-06-15 03:51:43 +00:00
Vincent Koc
fc6d448138
fix(ci): skip session accessor guard for older targets
2026-06-14 21:35:37 +08:00
Josh Lehman
ef47dd610c
refactor: add session accessor seam with gateway consumer ( #90463 )
...
Merged via squash.
Prepared head SHA: 58aa59eaf8
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-06-14 06:18:47 -07:00
dependabot[bot]
646bc0d274
build(deps): bump the android-deps group in /apps/android with 3 updates ( #91365 )
...
* build(deps): bump the android-deps group in /apps/android with 3 updates
Bumps the android-deps group in /apps/android with 3 updates: androidx.core:core-ktx, [org.jetbrains.kotlin.plugin.compose](https://github.com/JetBrains/kotlin ) and [org.jetbrains.kotlin.plugin.serialization](https://github.com/JetBrains/kotlin ).
Updates `androidx.core:core-ktx` from 1.18.0 to 1.19.0
Updates `org.jetbrains.kotlin.plugin.compose` from 2.3.21 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases )
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md )
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0 )
Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.21 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases )
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md )
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0 )
Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.21 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases )
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md )
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0 )
---
updated-dependencies:
- dependency-name: androidx.core:core-ktx
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: android-deps
- dependency-name: org.jetbrains.kotlin.plugin.compose
dependency-version: 2.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: android-deps
- dependency-name: org.jetbrains.kotlin.plugin.serialization
dependency-version: 2.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: android-deps
- dependency-name: org.jetbrains.kotlin.plugin.serialization
dependency-version: 2.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: android-deps
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix(android): support compile SDK 37
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-06-08 15:34:28 -07:00
Peter Steinberger
08ae0e6d29
refactor: store Zalo hosted media in plugin state
...
Move Zalo hosted outbound media metadata and expiry into plugin state, add SDK chunked hosted media storage, and keep CI/type/lint gates green after rebase.
2026-06-06 22:56:48 -07:00
Mason Huang
8b29ff5f16
fix(ci): scope PR merge diff checks to first parent ( #90287 )
...
Summary:
- This PR adds opt-in first-parent merge-head diff-base handling for CI changed-scope, changed-lanes, and OpenGrep PR scans, plus synthetic merge coverage and small lint/type cleanups.
- PR surface: Source +6, Tests +204, Config +1, Other +179. Total +390 across 15 files.
- Reproducibility: yes. The synthetic merge tests and PR body live-ref proof show the stale payload-base path can include main-only files, and first-parent mode narrows it to PR-owned paths.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(ci): update workflow guard expectations
- PR branch already contained follow-up commit before automerge: fix(ci): resolve plugin guardrail lint failures
- PR branch already contained follow-up commit before automerge: fix(ci): preserve plugin run context typing
- PR branch already contained follow-up commit before automerge: fix(ci): scope PR merge diff checks to first parent
Validation:
- ClawSweeper review passed for head 40235e8c3d .
- Required merge gates passed before the squash merge.
Prepared head SHA: 40235e8c3d
Review: https://github.com/openclaw/openclaw/pull/90287#issuecomment-4621155576
Co-authored-by: Mason Huang <masonxhuang@tencent.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
2026-06-04 17:24:03 +00:00
Peter Steinberger
e8120a72e1
ci(release): retry quiet node shard stalls
2026-06-01 23:43:03 +01:00
Dallin Romney
8ba6dfeaf6
fix(ci): restore dist cache before artifact builds ( #89169 )
2026-06-01 10:55:27 -07:00
Peter Steinberger
d62bfab946
ci: split startup and shrinkwrap checks
2026-05-31 15:55:43 -04:00
zhang-guiping
b6e9473e9f
fix(auth): skip Anthropic API keys for usage status
...
Fixes #85124 .
Anthropic standard API keys no longer resolve as provider usage auth for `openclaw status --usage`, so valid inference keys are not sent to Anthropic's OAuth usage endpoint and surfaced as misleading invalid bearer-token errors.
The provider usage-auth SDK result now has an explicit handled/no-token shape so provider hooks can suppress generic fallback without widening the OAuth helper contract. Docs, Plugin SDK API baseline, and extension package-boundary cache inputs were updated with the new contract.
Thanks @zhangguiping-xydt.
Proof:
- node scripts/run-vitest.mjs src/infra/provider-usage.auth.normalizes-keys.test.ts src/infra/provider-usage.auth.plugin.test.ts extensions/anthropic/index.test.ts
- pnpm plugin-sdk:api:check
- pnpm plugin-sdk:check-exports
- git diff --check origin/main...HEAD
- pnpm docs:list
- pnpm run test:extensions:package-boundary:compile
- autoreview clean: no accepted/actionable findings
- PR CI rollup green: 131 success, 22 skipped, 1 neutral, 0 failures
Co-authored-by: 张贵萍0668001030 <zhang.guiping@xydigit.com >
2026-05-31 18:26:03 +01:00
mochiexists
096bd13962
build(OpenClawKit): make ElevenLabsKit optional behind Talk trait
...
Adds a default-enabled SwiftPM Talk trait for OpenClawKit so chat-only consumers can opt out with traits: [] and avoid resolving ElevenLabsKit. Default traits preserve existing talk/TTS API and bundled app behavior; macOS CI now verifies the trait-off dependency graph and build.
Verification:
- CI at 85f00ebc04 passed macos-swift and Real behavior proof.
- Local Swift 6.3.2: trait-off dependency graph omitted ElevenLabsKit; full swift build with default traits disabled built through OpenClawChatUI; default dependency graph still included ElevenLabsKit; trait-off OpenClawKit target build passed.
- merge-tree against latest origin/main 4eba3e5d7d was clean.
- Current main already fails plugin-SDK declaration gates in unrelated TS files; reproduced locally with node scripts/run-tsgo.mjs -p tsconfig.plugin-sdk.dts.json --declaration true.
Thanks @mochiexists.
Co-authored-by: mochiexists <259077624+mochiexists@users.noreply.github.com >
Co-authored-by: atlascodesai <76924051+atlascodesai@users.noreply.github.com >
2026-05-31 07:40:35 +01:00
Peter Steinberger
287687da20
feat: add internal code mode namespaces ( #88043 )
...
* feat: add internal code mode namespaces
* test: add code mode namespace live proof
* test: add live code mode Docker repro
* chore: keep code mode docker repro out of package scripts
* fix: break code mode namespace type cycle
* fix: clean code mode namespace ci drift
* fix: route code mode namespaces through tools
* fix: preserve explicit agent global sessions
* docs: explain code mode namespace registry
* test: cap realtime websocket payload
* fix: normalize code mode timeout results
* fix: satisfy code mode timeout lint
* chore: rerun code mode CI
* ci: extend node shard silence watchdog
* test: avoid child process mock deadlocks
* test: fix code mode repro shebang
* fix: scope explicit agent sentinel sessions
* test: preserve child process mock actual loader
* fix: dispatch namespace tools by exact id
* test: satisfy restart execFile mock type
2026-05-30 22:42:57 +01:00
Peter Steinberger
e24a9c5457
ci: keep harness changes on fast checks ( #88429 )
2026-05-30 20:27:59 +01:00
Peter Steinberger
30e1556cda
refactor: extract model catalog core package
...
* refactor: extract model catalog core package
* refactor: route model catalog imports through package boundary
* build: include model catalog in plugin sdk package dts
* fix: preserve static fallback model metadata
2026-05-30 16:33:45 +01:00
Peter Steinberger
65fe2b7e91
ci: tolerate release branches without llm core package
2026-05-30 14:48:08 +01:00
Peter Steinberger
aa0d6e1bca
refactor: extract LLM core packages ( #88117 )
...
* refactor: extract llm core packages
* chore: drop generated llm package artifacts
* fix: align llm package export artifacts
* test: fix moving main CI expectations
* fix: align llm core subpath aliases
* fix: use llm package exports
* fix: stabilize llm package boundary artifacts
* fix: sync llm boundary path contract
* test: isolate crabbox provider env
* test: pin crabbox configured-provider cases
* test: apply crabbox lease provider override
2026-05-30 07:45:04 +02:00
Dallin Romney
784fbcfd16
ci: relax platform checkout fetch timeout ( #88199 )
2026-05-29 19:17:29 -07:00
Peter Steinberger
63a06e312d
ci: reduce main workflow critical path
2026-05-29 23:29:32 +01:00
Peter Steinberger
1c8de09ba9
ci: stabilize main checks
2026-05-29 22:49:06 +01:00
Peter Steinberger
8363d6596c
ci: retry transient checkout fetch timeouts
2026-05-29 09:00:45 +01:00
Dallin Romney
ed36f423da
fix(ci): bound manual git fetches ( #87839 )
...
* fix(ci): bound manual git fetches
* fix(ci): cover platform fetch guards
* fix(ci): fail timed out target fetches
* fix(ci): repair typecheck regressions
* fix(ci): refresh CI expectations
* fix(ci): preserve main cron coverage
2026-05-28 22:56:54 -07:00
Dallin Romney
93c30de17b
ci: restore timing summary artifact ( #87832 )
...
* ci: restore timing summary artifact
* ci: report pnpm warmup fanout timing
* ci: run timing summary from trusted base
2026-05-28 18:08:12 -07:00
Dallin Romney
aeeccdf27f
fix(ci): bound ClawHub docs checkout ( #87811 )
2026-05-28 16:25:09 -07:00
Dallin Romney
2be9eb1e97
ci: consolidate Blacksmith runner defaults ( #87503 )
2026-05-28 13:28:22 -07:00
Dallin Romney
3dee915b3b
ci: warm pnpm store before node fanout ( #87518 )
...
* ci: warm pnpm store before node fanout
* test: update pnpm cache acceptance key
* ci: clarify pnpm cache save controls
2026-05-28 13:11:20 -07:00
Vincent Koc
f9834a3f95
ci: pin macOS runner labels
2026-05-28 20:52:52 +02:00
Dallin Romney
5f9d71f8af
fix(ci): raise plugin sdk strict smoke heap ( #87729 )
2026-05-28 10:39:32 -07:00
Dallin Romney
53704b26e8
perf(ci): instrument build artifacts phases ( #87514 )
2026-05-27 22:31:32 -07:00
Agustin Rivera
b860a0d4d0
fix: harden qqbot direct media uploads
...
Harden QQBot direct media URL uploads by downloading through the local SSRF guard before QQ upload, disabling redirects, bounding fetch/setup and body reads, and routing downloaded buffers through the existing one-shot/chunked size gate.
Co-authored-by: Agustin Rivera <agustin@rivera-web.com >
2026-05-28 04:21:46 +01:00
Peter Steinberger
8d990378a6
ci: fall back from stale workflow dispatch refs
2026-05-27 03:39:28 -04:00
Peter Steinberger
a1934e9d0e
fix(cli): handle Bun launcher module misses
...
Fixes #86198 .
Co-authored-by: Gio Della-Libera <giodl73@gmail.com >
2026-05-27 01:20:14 +01:00
Peter Steinberger
ce4db4f9f3
ci: allow Windows Node 22 patch range
2026-05-26 22:26:08 +01:00
Peter Steinberger
b546998b9b
ci: fix post-merge Rastermill checks
2026-05-26 22:11:50 +01:00
Vincent Koc
c867ecb136
fix(ci): kill wedged checkout fetches
2026-05-26 19:38:34 +02:00
Peter Steinberger
4c6aeb9bb2
ci: use local node toolcache setup
2026-05-26 13:47:19 +01:00
Peter Steinberger
8d6a6e9f89
ci: use unauthenticated workflow fetches
2026-05-26 13:28:32 +01:00
Peter Steinberger
df13d3a724
ci: avoid token-backed read checkouts
2026-05-26 13:28:32 +01:00
Peter Steinberger
3b0805414e
ci: report memory metrics
2026-05-25 22:49:23 +01:00
Peter Steinberger
d42bc0b684
ci: harden manual checkout auth
2026-05-23 19:11:13 +01:00
Peter Steinberger
d9f73cfe33
ci: persist checkout credentials for release validation
2026-05-23 16:17:24 +01:00
Peter Steinberger
b6940b5dc4
ci(release): pass node pin to pnpm setup
2026-05-22 19:27:56 +01:00
Peter Steinberger
a0702e195d
build(pnpm): use packageManager as pnpm source
...
Recreated from #85108 because the original branch could not be updated by maintainers.
Preserves current-main pnpm install hardening while switching workflow pnpm setup to packageManager, and adds exact version-scoped release-age exclusions for already-locked packages that pnpm 11.2.2 audits during install.
Co-authored-by: Altay <altay@hey.com >
2026-05-22 19:17:43 +01:00
Vincent Koc
9d24fde283
fix(release): keep shrinkwrap pinned to pnpm lock
2026-05-22 16:21:52 +02:00
Peter Steinberger
eca402da79
ci: consolidate short CI shards
2026-05-18 06:29:14 +01:00