Commit Graph

24423 Commits

Author SHA1 Message Date
Vincent Koc
4545a0ed61 fix(plugins): keep launch specs production-ready 2026-05-03 03:08:32 -07:00
Vincent Koc
26f2241a87 fix(onboarding): limit ClawHub npm fallback 2026-05-03 03:05:48 -07:00
Vincent Koc
07e0342106 fix(update): trust catalog-matched npm updates 2026-05-03 03:04:25 -07:00
Vincent Koc
423b5d6981 fix(update): trust externalized npm bridges 2026-05-03 03:02:16 -07:00
Vincent Koc
a4c1c28a17 fix(doctor): preserve catalog repair specs 2026-05-03 02:57:34 -07:00
Dallin Romney
4bb4127a33 feat(cli/logs): announce --follow gateway reconnect and add JSON notice parity (#75372) 2026-05-03 17:55:58 +08:00
Vincent Koc
3ee5df618a Revert "fix(plugins): align beta external launch metadata"
This reverts commit 34581bf46c.
2026-05-03 02:53:36 -07:00
Vincent Koc
34581bf46c fix(plugins): align beta external launch metadata 2026-05-03 02:51:18 -07:00
Vincent Koc
e7b6e0ff90 fix(plugins): pin beta-only external launch specs 2026-05-03 02:50:10 -07:00
Vincent Koc
310b1987e1 fix(cron): persist startup state sidecar repairs 2026-05-03 02:45:59 -07:00
Jesse Merhi
84a30e213e Fix managed proxy TLS hostname validation (#76442)
Summary:
- The PR wraps managed global-agent HTTPS CONNECT socket creation to preserve the target TLS host/servername, adds a Discord-style regression e2e, and records the fix in the changelog.
- Reproducibility: yes. #74809 provides exact config, logs, and a minimal global-agent repro, and source inspection confirms current main does not pass the CONNECT target host into TLS options.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(proxy): document global-agent TLS shim
- PR branch already contained follow-up commit before automerge: refactor(proxy): narrow global-agent patch typing
- PR branch already contained follow-up commit before automerge: Fix managed proxy TLS hostname validation
- PR branch already contained follow-up commit before automerge: fix(clawsweeper): address review for automerge-openclaw-openclaw-7644…

Validation:
- ClawSweeper review passed for head 058ae37663.
- Required merge gates passed before the squash merge.

Prepared head SHA: 058ae37663
Review: https://github.com/openclaw/openclaw/pull/76442#issuecomment-4365375603

Co-authored-by: Jesse Merhi <jessejmerhi@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-03 09:42:45 +00:00
scoootscooob
85e4ec1fb1 fix(doctor): persist group visible reply default (#76513) 2026-05-03 02:32:41 -07:00
Dallin Romney
de88b379c9 fix(plugins): clean up plugins search output formatting (#76000) 2026-05-03 17:30:03 +08:00
Vincent Koc
4473c56b85 fix(clawhub): clarify unreleased plugin artifacts 2026-05-03 02:26:27 -07:00
Vincent Koc
058b625154 Merge branch 'main' of https://github.com/openclaw/openclaw
* 'main' of https://github.com/openclaw/openclaw:
  fix(cli): auto-reconnect logs --follow on transient gateway disconnect #74782 (#75059)
2026-05-03 02:20:38 -07:00
Vincent Koc
2e608ad516 Revert "fix(onboarding): prefer clawhub diagnostics installs"
This reverts commit 3338581c20.
2026-05-03 02:19:06 -07:00
Shashank
23fe3559e5 fix(cli): auto-reconnect logs --follow on transient gateway disconnect #74782 (#75059)
* fix(cli): auto-reconnect logs --follow on transient gateway disconnect

* fix(cli): honor errorLine return value in follow retry warning
2026-05-03 17:18:50 +08:00
Vincent Koc
f9a1f86e64 test(secrets): audit external channel SecretRefs (#76589) 2026-05-03 02:17:41 -07:00
Vincent Koc
3338581c20 fix(onboarding): prefer clawhub diagnostics installs 2026-05-03 02:15:51 -07:00
buyitsydney
aba97a4c7c fix(memory): reindex archived session transcript updates 2026-05-03 02:15:20 -07:00
Vincent Koc
478887083e test(plugins): decouple config-gated install fixture 2026-05-03 02:14:42 -07:00
Vincent Koc
5ecd01ff94 fix(plugins): trust managed npm peer links 2026-05-03 01:49:24 -07:00
Vincent Koc
9ef35ea5c7 fix(plugin-sdk): classify channel facades 2026-05-03 01:48:53 -07:00
solodmd
d1365fef16 fix: handle ENOSPC file watcher errors gracefully (#73357)
Merged via squash.

Prepared head SHA: ce2dd6ed3e
Co-authored-by: solodmd <51304754+solodmd@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-05-03 11:42:38 +03:00
Vincent Koc
4781b46056 fix(channels): load third-party official channel packages 2026-05-03 01:30:43 -07:00
buyitsydney
2ffdb5d248 fix(memory): keep archive transcript visibility safe
Keep reset/deleted session archives searchable while preserving visibility filtering, and keep internal cron-run archives opaque when live ownership metadata is gone.\n\nRefs #56131.\nThanks @buyitsydney.
2026-05-03 01:17:45 -07:00
Vincent Koc
d583662fd9 test(tooling): isolate a2ui copy env 2026-05-03 01:07:58 -07:00
Vincent Koc
d89be34360 fix(onboarding): trust official web search installs 2026-05-03 00:48:37 -07:00
Neerav Makwana
b6cbd9225c fix(cli): load memory plugin for doctor/status when registry is cold (#76393)
Summary:
- The PR adds a scoped standalone memory-slot plugin load for doctor/status memory resolution, updates memory-runtime regression tests, and adds a changelog fix entry.
- Reproducibility: yes. source-reproducible: current main's doctor/status path reads getMemoryRuntime after on ...  registers that runtime only during plugin activation. I did not run a live macOS LaunchAgent reproduction.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(cli): load memory plugin for doctor/status when registry is cold

Validation:
- ClawSweeper review passed for head a6a1967316.
- Required merge gates passed before the squash merge.

Prepared head SHA: a6a1967316
Review: https://github.com/openclaw/openclaw/pull/76393#issuecomment-4365255585

Co-authored-by: Neerav Makwana <261249544+neeravmakwana@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-03 07:38:55 +00:00
Vincent Koc
39bc94e4dd fix(onboarding): trust official optional plugin installs 2026-05-03 00:29:04 -07:00
Vincent Koc
882ddc4665 fix(gateway): keep agent image attachment checks accurate 2026-05-03 00:21:04 -07:00
Vincent Koc
74f243a0d0 fix(cli): keep plugin toggles out of channel config (#76525) 2026-05-03 00:19:37 -07:00
Vincent Koc
b74401074b fix(gateway): keep models list read-only fast
Fixes https://github.com/openclaw/openclaw/issues/76382
2026-05-03 00:10:54 -07:00
Vincent Koc
f1da57a4a8 test(update): keep global install sidecar failure covered 2026-05-02 23:59:23 -07:00
Peter Steinberger
95cee64ca6 fix(cli): keep empty agent replies silent
* fix(cli): keep empty agent replies silent

* fix(commands): preserve empty gateway status summaries

---------

Co-authored-by: Peter Steinberger <steipete@steipete-macstudio.local>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-05-02 23:47:59 -07:00
Vincent Koc
c7bbb3f9af refactor(plugins): declare static runtime assets in package metadata 2026-05-02 23:47:25 -07:00
Vincent Koc
11a5b30f3e fix(plugins): build package-local npm runtimes 2026-05-02 23:47:25 -07:00
Vincent Koc
140c274335 test(cli): cover official external npm installs without integrity
Add catalog-derived coverage so official external npm plugin aliases without integrity pins still use the trusted official install path.
2026-05-02 23:42:26 -07:00
Vincent Koc
2a22eb68aa fix(plugins): require provenance for official npm trust
Require OpenClaw-owned install provenance before granting official npm plugin scanner trust. Direct npm package names now scan normally; catalog, onboarding, and doctor paths pass explicit provenance.\n\nValidation:\n- pnpm test:serial src/plugins/install.npm-spec.test.ts src/cli/plugins-cli.install.test.ts src/commands/onboarding-plugin-install.test.ts src/commands/doctor/shared/missing-configured-plugin-install.test.ts src/channels/plugins/contracts/channel-catalog.contract.test.ts src/commands/auth-choice.apply.plugin-provider.test.ts\n- pnpm test:serial src/plugins/install.test.ts src/plugins/provider-auth-choices.test.ts src/plugins/provider-install-catalog.test.ts src/commands/channel-setup/plugin-install.test.ts\n- pnpm exec oxfmt --check --threads=1 ...\n- node scripts/run-oxlint.mjs ...\n- Crabbox cbx_6157440c9bbe / run_cbd813956eed: pnpm check:changed passed\n\nThanks @fede-kamel and @vincentkoc.
2026-05-02 23:30:45 -07:00
Vincent Koc
f249b1c6df fix(plugins): clean managed git uninstall roots 2026-05-02 23:30:01 -07:00
Chris Zhang
cb7b2850e4 fix(build): externalize Feishu Lark SDK
Externalize @larksuiteoapi/node-sdk from the bundled Feishu ESM runtime so packaged startup loads the SDK as a plugin-local runtime dependency instead of inlining the SDK's ESM __dirname path.

Adds changelog credit and a tsdown-config regression assertion.

Fixes #76291.
Fixes #76494.

Co-authored-by: Chris Zhang <4436110+zqchris@users.noreply.github.com>
2026-05-02 23:27:13 -07:00
Vincent Koc
3c51692543 fix(config): bound clobber recovery snapshots (#76483) 2026-05-02 23:13:56 -07:00
Vincent Koc
b0a6543838 fix(agents): keep delayed sessions_send replies alive (#76484) 2026-05-02 23:08:10 -07:00
Jesse Merhi
207aa18c40 Add shell command explainer (#75004)
Summary:
- The PR adds an internal Tree-sitter-backed shell command explainer under `src/infra`, parser runtime/tests, dependency/build-policy updates, an index export, and a changelog entry.
- Reproducibility: not applicable. this is a feature PR rather than a bug report. For the prior PR blocker, source inspection shows byte-to-string span conversion and focused Unicode span coverage on the exact head.

Automerge notes:
- Ran the ClawSweeper repair loop before final review.
- Included post-review commit in the final squash: Repair shell command explainer automerge blockers
- Included post-review commit in the final squash: fix(clawsweeper): address review for automerge-openclaw-openclaw-7500…

Validation:
- ClawSweeper review passed for head 47577579e9.
- Required merge gates passed before the squash merge.

Prepared head SHA: 47577579e9
Review: https://github.com/openclaw/openclaw/pull/75004#issuecomment-4351322592

Co-authored-by: Jesse Merhi <jessejmerhi@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-03 06:05:29 +00:00
Marvinthebored
73a95d3af4 fix(gateway): read-only persisted fast path for models.list catalog (#76406)
* fix(gateway): read-only fast path for models.list catalog loading

The gateway model catalog refresh calls loadModelCatalog without
readOnly, triggering ensureOpenClawModelsJson (60-70s), full PI SDK
registry instantiation, auth storage discovery, and live provider
plugin augmentation on every Control UI list/refresh. None of this
is needed for a read-only UI listing.

Three changes:

1. Gateway catalog refresh now passes readOnly: true to loadModelCatalog.
2. In readOnly mode, skip augmentModelCatalogWithProviderPlugins — live
   provider discovery is explicit admin/background work, not a UI list
   operation.
3. Add a persisted models.json fast path: when readOnly is true, first
   try reading the existing models.json directly and converting
   providers.<provider>.models[] to catalog rows. Falls back to the
   full PI registry path if the file is missing or unreadable.

Observed improvement on a production install:
  loadGatewayModelCatalog: 967 entries / 4651ms → 89 entries / 8ms
  Live models.list during startup: ~18s → ~2s

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(gateway): preserve full model catalog view

* fix(agents): preserve read-only catalog defaults

* fix(agents): preserve provider catalog defaults

---------

Co-authored-by: Marvinthebored <peter@lindsey.jp>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-05-02 22:48:55 -07:00
Vincent Koc
2e593d07f7 fix(plugins): preserve registry manifest fast path 2026-05-02 22:40:00 -07:00
Bek
411df59916 fix(plugins): resolve official plugin install aliases
Resolve bare official external plugin IDs through the official catalog before generic npm fallback, preserving explicit npm semantics and catalog integrity through the hook-pack fallback.\n\nFixes #76373.\n\nThanks @bek91 and @vincentkoc.
2026-05-02 22:27:13 -07:00
Vincent Koc
f696be950b fix(gateway): keep runtime metadata on session rows 2026-05-02 22:10:35 -07:00
Josh Avant
b1f8172867 fix(secretrefs): resolve external channel contracts (#76449) 2026-05-02 23:48:11 -05:00
pashpashpash
8f4eaa9c00 Stop heartbeat tool turns from asking for HEARTBEAT_OK (#76338)
* fix heartbeat tool prompt sentinel

* fix: remove agent runtime fallback config
2026-05-03 13:46:26 +09:00