joshavant
9e7110bb7d
fix(exec): harden auto-review prompt boundaries
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
c82d7011b5
fix(exec): honor node runtime policy for auto-review
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
2bfc735050
fix(exec): bind node auto-review commands
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
ab84c8cc09
fix(exec): bind gateway auto-review commands
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
0aed1641c4
fix(exec): fail closed on unknown node approval policy
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
7652eda80c
test(node-host): prove suppression edits bypass auto-review
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
49ab52894a
fix(exec): honor node approval floors before auto-review
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
765477d77a
fix(codex): preserve read-only approval floors
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
b5f8191887
fix(codex): honor exec approval floors in bindings
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
adca9a7523
fix(exec): layer session exec overrides
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
a314a923bd
fix(exec): forward auto mode defaults
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
80227005a0
feat(exec): add normalized auto mode
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
Peter Steinberger
4925f84219
fix(minimax): validate directive numbers
2026-05-29 09:58:21 -04:00
Vincent Koc
b9d609edfe
refactor: share bounded release response reader
2026-05-29 15:54:36 +02:00
Peter Steinberger
af3e354ff8
fix(signal): validate reaction message ids
2026-05-29 09:53:20 -04:00
Peter Steinberger
4ef63646d2
fix(discord): validate deploy retry-after
2026-05-29 09:50:21 -04:00
Peter Steinberger
8a4573917d
fix(sandbox): validate remote hardlink counts
2026-05-29 09:47:33 -04:00
Vincent Koc
67697fa309
test: repair current main extension checks
2026-05-29 15:45:12 +02:00
Peter Steinberger
d9db23dc2f
fix(sandbox): clamp unsafe stat sizes
2026-05-29 09:43:14 -04:00
Vincent Koc
8b12be05ec
refactor: share outbound mirror block text
2026-05-29 15:38:11 +02:00
zhang-guiping
b3c7ef6e62
fix(config): preserve empty plugin allowlist ( #87883 )
...
Summary:
- The PR changes plugin auto-enable materialization so an explicit empty `plugins.allow` stays empty while non-empty restrictive allowlists are still extended, and adds a regression test.
- PR surface: Source +3, Tests +17. Total +20 across 2 files.
- Reproducibility: yes. Source inspection of current main shows an empty array reaches `ensurePluginAllowlisted`, and the linked report gives a concrete `doctor --fix` config path that matches that code.
Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.
Validation:
- ClawSweeper review passed for head c06837f5dd .
- Required merge gates passed before the squash merge.
Prepared head SHA: c06837f5dd
Review: https://github.com/openclaw/openclaw/pull/87883#issuecomment-4570537738
Co-authored-by: 张贵萍0668001030 <zhang.guiping@xydigit.com >
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com >
2026-05-29 13:37:50 +00:00
Peter Steinberger
80baa49342
fix(telegram): validate dispatch thread ids
2026-05-29 09:35:43 -04:00
Vincent Koc
a19225343b
fix(video): bound remaining provider downloads
2026-05-29 15:30:11 +02:00
Peter Steinberger
b022c6d770
fix(telegram): validate cached thread ids
2026-05-29 09:28:17 -04:00
Ayaan Zaidi
82c0a60777
fix(trajectory): bound runtime source ordering state
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
6361c46fe2
fix(trajectory): assign file-global runtime source order
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
d879340ed9
fix(trajectory): preserve runtime window order
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
39e3daa168
fix(trajectory): preserve safe path checks for window writes
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
538b405fdd
fix(trajectory): merge concurrent runtime window flushes
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
ac605a463a
fix(trajectory): keep latest runtime capture within cap
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
f17c472f26
fix(trajectory): keep latest runtime capture within cap
2026-05-29 18:55:53 +05:30
Peter Steinberger
9a1b5f9b68
fix(feishu): validate merge-forward timestamps
2026-05-29 09:22:33 -04:00
Vincent Koc
f019e27c1d
refactor: share gateway client readiness helpers
2026-05-29 15:19:29 +02:00
Peter Steinberger
8f22632a29
fix(msteams): validate bot attachment content length
2026-05-29 09:18:40 -04:00
Peter Steinberger
7fb91317ba
fix(feishu): validate thread message timestamps
2026-05-29 09:15:07 -04:00
Peter Steinberger
001da78fab
fix(feishu): validate message create time
2026-05-29 09:12:06 -04:00
Peter Steinberger
5fbeffd56b
fix(imessage): validate chat list ids
2026-05-29 09:08:39 -04:00
Peter Steinberger
3142c97c22
fix(google): validate gemini retry timeout env
2026-05-29 09:05:38 -04:00
Peter Steinberger
58e82d91ba
fix(media): centralize content length parsing
2026-05-29 09:02:21 -04:00
zhang-guiping
b5bc752a48
fix(active-memory): isolate recall lane
...
Active Memory recall now runs on its own queue lane instead of sharing the parent prompt-build lane.\n\nValidation:\n- git diff --check\n- node scripts/run-vitest.mjs extensions/active-memory/index.test.ts -t "runs recall on a dedicated active-memory lane"\n- fresh local gateway smoke with Active Memory + Memory Core + loopback OpenAI-compatible model: HTTP 200, active-memory start/done, recall elapsedMs=209\n\nFixes #79026.\nRelated: #72015 .
2026-05-29 20:57:53 +08:00
Peter Steinberger
2cb8ac1596
fix(signal): validate attachment content length
2026-05-29 08:55:44 -04:00
Peter Steinberger
63d6bce324
fix(slack): reuse timestamp parser in dispatch
2026-05-29 08:52:46 -04:00
Peter Steinberger
d7e24e024f
fix(slack): centralize timestamp parsing
2026-05-29 08:48:22 -04:00
Vincent Koc
19c70e2a29
refactor: share provider install choice fields
2026-05-29 14:44:51 +02:00
Peter Steinberger
f8c60cb9b7
fix(slack): validate dm history timestamps
2026-05-29 08:44:21 -04:00
Peter Steinberger
6235720c8a
fix(slack): validate inbound timestamp parsing
2026-05-29 08:40:37 -04:00
Peter Steinberger
93e15abdf6
fix(discord): validate deploy status codes
2026-05-29 08:36:28 -04:00
Peter Steinberger
4ad9478d68
fix(discord): validate thread binding error codes
2026-05-29 08:32:48 -04:00
Peter Steinberger
58e52e9424
fix(signal): validate container send timestamps
2026-05-29 08:29:20 -04:00
Vincent Koc
7d5dd8aad2
fix(fal): bound generated media downloads
2026-05-29 14:28:15 +02:00