Coy Geek
516356835d
fix: Admin HTTP RPC can execute against another live gateway instance ( #83487 )
...
* fix(ar-gdn-cross-gateway-admin-rpc-context-confusion): apply security fix
Generated by staged fix workflow.
* fix(ar-gdn-cross-gateway-admin-rpc-context-confusion): apply security fix
Generated by staged fix workflow.
* fix(gateway): bind plugin HTTP dispatch to server context
* fix(gateway): scope dynamic plugin HTTP routes
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-18 15:59:28 +01:00
Peter Steinberger
ae29d14abf
test: speed up slow test fixtures
2026-05-18 15:55:40 +01:00
Peter Steinberger
4f4d108639
chore(lint): remove underscore-dangle allow list ( #83542 )
...
* chore(lint): reduce underscore-dangle exceptions
* chore(lint): reduce more underscore exceptions
* chore(lint): remove underscore-dangle allow list
* fix(lint): repair underscore cleanup regressions
* test(lint): track version define suppression
2026-05-18 14:56:06 +01:00
Eva
2a0350b5b4
Separate prompt surfaces by selected harness ( #83454 )
...
* fix: scope agent prompt surfaces
* fix(codex): preserve lightweight project doc suppression
* fix(codex): demote openclaw context for native turns
* fix(codex): report demoted prompt context
* fix(codex): align demoted prompt observability
* docs: format codex runtime table
* docs: align codex prompt overlay docs
* test: align codex prompt snapshots
* test: update prompt snapshot contract
---------
Co-authored-by: Eva (agent) <eva+agent-78055@100yen.org >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-18 13:00:53 +01:00
Peter Steinberger
3132969c68
fix: fall back from official ClawHub artifact blocks ( #83566 )
...
* fix: fall back from official ClawHub artifact blocks
* test: refresh codex prompt snapshots
* test: refresh code mode prompt snapshots
* test: refresh linux prompt snapshots
2026-05-18 13:00:05 +01:00
Peter Steinberger
57c952f679
fix: add resilient media processing fallbacks ( #83568 )
2026-05-18 11:59:12 +01:00
Peter Steinberger
957d50ad49
fix: hide unsupported video audio refs
2026-05-18 10:48:39 +01:00
Peter Steinberger
2976517bc7
fix(plugins): gate onboarding ClawHub npm fallback
2026-05-18 07:21:42 +01:00
Peter Steinberger
00205cab08
fix(plugins): restrict ClawHub npm fallback scope
2026-05-18 07:21:42 +01:00
Peter Steinberger
aec0c56386
fix(update): harden legacy package handoff
2026-05-18 07:21:42 +01:00
samzong
51d44ab1fc
fix: scope plugin service startup traces
...
Signed-off-by: samzong <samzong.lu@gmail.com >
2026-05-18 06:51:44 +01:00
samzong
e292d3976a
feat(gateway): attribute ACPX startup probe cost
...
Signed-off-by: samzong <samzong.lu@gmail.com >
2026-05-18 06:51:44 +01:00
Peter Steinberger
29653e4106
fix: harden Mac gateway transport selection
2026-05-18 04:06:17 +01:00
Peter Steinberger
48f7db23f0
fix: harden clawpatch-reported edge cases
2026-05-18 03:18:55 +01:00
Peter Steinberger
691d62630f
test: keep slow tests under duration cap
2026-05-18 00:26:44 +01:00
clawsweeper[bot]
1760881574
fix(plugins): default 15s timeout for before_agent_start hook ( #48534 ) ( #83147 )
...
Summary:
- The PR adds a 15-second default timeout for legacy `before_agent_start` modifying hooks, regression tests for hung handlers, and a changelog fix entry.
- Reproducibility: yes. Registering a `before_agent_start` handler that returns a never-settling promise is en ... ts the hook and the runner awaits directly; the linked source PR also supplies before/after terminal proof.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(plugins): default 15s timeout for before_agent_start hook (#48534 )
Validation:
- ClawSweeper review passed for head 8d2c5b8808 .
- Required merge gates passed before the squash merge.
Prepared head SHA: 8d2c5b8808
Review: https://github.com/openclaw/openclaw/pull/83147#issuecomment-4471169756
Co-authored-by: Rahul <rahulnilvan43@gmail.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-17 15:31:32 +00:00
Peter Steinberger
868315aef0
test: fix install readdir mock typing
2026-05-17 14:12:55 +01:00
Peter Steinberger
e43a2efcdb
test: harden wsl2 fixtures
2026-05-17 13:45:21 +01:00
Kaspre
69a0c925b8
fix(codex): cover side-question native hooks ( #82559 )
...
* fix(codex): cover side-question native hooks
* fix(codex): enforce native approvals for app-server requests
* fix(codex): preserve approval fallback after native relay noop
* fix(codex): satisfy approval relay json typing
* fix(codex): run approval relay in report mode
* fix(codex): keep relay pre-tool decisions deny-only
* fix(codex): remove dead relay approval branch
* fix(codex): dedupe app-server relay approvals
* fix(codex): fail closed on native relay rewrites
* fix(codex): preserve side-question provider context
* fix(codex): route side-question replies to origin
* fix(codex): preserve native hook channel context
* test(codex): align native relay rewrite assertion
* fix(codex): align side-question hook config
* fix(codex): route side-question approvals safely
* test(codex): fix side-question hook typing
* fix(codex): preserve side-question hook policy context
* fix(codex): close native hook relay review gaps
* fix(codex): keep dynamic tool hook channel context
* fix(codex): preserve native finalize hook channel context
* fix(codex): scope dynamic tool result hooks by channel
* fix(codex): drop stale deadcode allowlist entry
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-17 12:02:17 +01:00
Peter Steinberger
0165560f70
test: align plugin metadata test snapshots
2026-05-17 11:29:39 +01:00
Peter Steinberger
9feca3e11e
fix: stabilize release validation gates
2026-05-17 11:24:01 +01:00
Josh Avant
f29bcff4da
fix(models): reuse plugin metadata snapshot ( #83033 )
...
* fix(models): reuse plugin metadata snapshot
* docs: add models performance changelog
* test: satisfy models metadata fixture types
2026-05-17 04:51:59 -05:00
Peter Steinberger
fe680e47ce
fix(cli): scope web command secret refs
2026-05-17 10:42:57 +01:00
Peter Steinberger
06e85d5eaf
fix: honor explicit message tool allowlists ( #82889 )
2026-05-17 05:11:49 +01:00
Vincent Koc
662fcb81c9
fix(plugins): align bundled runtime surface roots
2026-05-17 09:52:19 +08:00
Vincent Koc
77f7c8df8d
fix(plugins): contain bundled entry paths
2026-05-17 09:52:19 +08:00
Peter Steinberger
f453904165
feat: add fal and OpenRouter music generation ( #82789 )
...
* feat: add fal and OpenRouter music generation
* fix: repair music generation CI gates
* chore: refresh proof gate
2026-05-17 02:05:22 +01:00
Peter Steinberger
a6225060f1
fix(memory): abort timed-out embedding requests ( #82770 )
...
* fix(memory): abort timed-out embedding requests
* test: stabilize gateway ci shards
* test: pin control ui origin fixture
* test: stabilize gateway ci fixtures
* test: isolate forged origin fixture
* test: decouple setup code from gateway net mocks
* test: repair run-node and config preaction CI
* test: fix run-node progress fixture typing
* test: remove unused pairing setup helper
* fix: stabilize embedding timeout errors
2026-05-17 02:04:17 +01:00
Vincent Koc
e0c3c80ebc
test: share Windows platform spy helpers
2026-05-17 08:56:56 +08:00
Shakker
193bfd3a4d
fix: avoid stale workspace metadata reuse
2026-05-17 01:55:16 +01:00
Shakker
c90e42aaa7
fix: reuse plugin metadata during runtime loading
2026-05-17 01:55:16 +01:00
Josh Avant
ad450a7dfb
Fix Windows image model event loop stalls ( #82799 )
...
* fix media image model event loop stalls
* changelog for image event loop fix
* fix async auth test mock
2026-05-16 19:49:11 -05:00
Peter Steinberger
07f05e972e
refactor: move inbound event classification into core
2026-05-17 00:10:29 +01:00
Peter Steinberger
532e42213d
fix: preserve bundle activation metadata ( #75133 )
...
Co-authored-by: 100menotu001 <64228916+100menotu001@users.noreply.github.com >
2026-05-16 21:31:56 +01:00
Vincent Koc
ca1fd1b140
test: share spy lifecycle helpers
2026-05-17 03:13:46 +08:00
Vincent Koc
1586085c7f
test: share node eval helpers
2026-05-17 02:51:20 +08:00
Vincent Koc
3df6499fb8
test: harden sparse Testbox scans
2026-05-17 02:32:57 +08:00
Vincent Koc
b5b193076e
test: share repo file helpers
2026-05-17 02:29:55 +08:00
Vincent Koc
cb313d5378
test: share fs scan assertions
2026-05-17 01:35:39 +08:00
Vincent Koc
c277138959
test(plugins): share archive fixture packing
2026-05-17 01:35:39 +08:00
Peter Steinberger
97d1f5fd15
fix: bypass npm freshness filters during updates
...
Bypass npm min-release-age/before quarantine for OpenClaw-managed package installs and update installer scripts/tests/docs.\n\nFixes #82630 .
2026-05-16 18:17:18 +01:00
Gio Della-Libera
caf8fa2ebf
Revert "Fix bundled channel dist-runtime setup roots" ( #82612 )
...
This reverts commit 1bd10cfee6 .
Co-authored-by: Gio Della-Libera <giodl@microsoft.com >
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-16 07:07:39 -07:00
Gio Della-Libera
1bd10cfee6
Fix bundled channel dist-runtime setup roots
...
* Fix bundled channel dist-runtime setup roots
Resolve bundled channel generated entries from dist-runtime before falling back to source paths, and select the dist-runtime plugin root as the boundary root for packaged setup modules. This keeps the fs-safe module open boundary check intact while preventing packaged bundled setup entries from being checked against the source extensions root.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* Repair session store validation test fixtures
Update current-main tests that wrote persisted session entries without valid session IDs after session store loading started filtering invalid entries. Keep the fixture-only repair separate from the bundled channel loader fix.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* Repair pairing and cron validation fixtures
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-16 06:05:34 -07:00
Vincent Koc
f410a95081
fix(providers): lock auth setup profile writes
2026-05-16 20:52:12 +08:00
Vincent Koc
bede89dba6
fix(auth): lock cli provider auth writes
2026-05-16 20:52:12 +08:00
Peter Steinberger
862be9fb3d
fix: normalize Xiaomi array tool schemas ( #82575 )
2026-05-16 13:34:52 +01:00
Vincent Koc
a85cd65775
fix(plugins): deprecate deactivate hook alias
2026-05-16 18:36:27 +08:00
Vincent Koc
33be0fbea7
fix(plugins): accept deactivate hook alias
2026-05-16 17:47:14 +08:00
Vincent Koc
e650f8930d
fix(test): avoid scanning plugin archive entries
2026-05-16 14:35:24 +08:00
Vincent Koc
2be9abfb1c
fix(test): avoid scanning bundled plugin metadata
2026-05-16 14:26:17 +08:00