Commit Graph

54163 Commits

Author SHA1 Message Date
joshavant
9e7110bb7d fix(exec): harden auto-review prompt boundaries
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
c82d7011b5 fix(exec): honor node runtime policy for auto-review
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
2bfc735050 fix(exec): bind node auto-review commands
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
ab84c8cc09 fix(exec): bind gateway auto-review commands
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
0aed1641c4 fix(exec): fail closed on unknown node approval policy
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
7652eda80c test(node-host): prove suppression edits bypass auto-review
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
49ab52894a fix(exec): honor node approval floors before auto-review
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
765477d77a fix(codex): preserve read-only approval floors
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
b5f8191887 fix(codex): honor exec approval floors in bindings
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
adca9a7523 fix(exec): layer session exec overrides
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
a314a923bd fix(exec): forward auto mode defaults
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
joshavant
80227005a0 feat(exec): add normalized auto mode
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-30 00:04:06 +10:00
Peter Steinberger
4925f84219 fix(minimax): validate directive numbers 2026-05-29 09:58:21 -04:00
Vincent Koc
b9d609edfe refactor: share bounded release response reader 2026-05-29 15:54:36 +02:00
Peter Steinberger
af3e354ff8 fix(signal): validate reaction message ids 2026-05-29 09:53:20 -04:00
Peter Steinberger
4ef63646d2 fix(discord): validate deploy retry-after 2026-05-29 09:50:21 -04:00
Peter Steinberger
8a4573917d fix(sandbox): validate remote hardlink counts 2026-05-29 09:47:33 -04:00
Vincent Koc
67697fa309 test: repair current main extension checks 2026-05-29 15:45:12 +02:00
Peter Steinberger
d9db23dc2f fix(sandbox): clamp unsafe stat sizes 2026-05-29 09:43:14 -04:00
Vincent Koc
8b12be05ec refactor: share outbound mirror block text 2026-05-29 15:38:11 +02:00
zhang-guiping
b3c7ef6e62 fix(config): preserve empty plugin allowlist (#87883)
Summary:
- The PR changes plugin auto-enable materialization so an explicit empty `plugins.allow` stays empty while non-empty restrictive allowlists are still extended, and adds a regression test.
- PR surface: Source +3, Tests +17. Total +20 across 2 files.
- Reproducibility: yes. Source inspection of current main shows an empty array reaches `ensurePluginAllowlisted`, and the linked report gives a concrete `doctor --fix` config path that matches that code.

Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.

Validation:
- ClawSweeper review passed for head c06837f5dd.
- Required merge gates passed before the squash merge.

Prepared head SHA: c06837f5dd
Review: https://github.com/openclaw/openclaw/pull/87883#issuecomment-4570537738

Co-authored-by: 张贵萍0668001030 <zhang.guiping@xydigit.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>
2026-05-29 13:37:50 +00:00
Peter Steinberger
80baa49342 fix(telegram): validate dispatch thread ids 2026-05-29 09:35:43 -04:00
Vincent Koc
a19225343b fix(video): bound remaining provider downloads 2026-05-29 15:30:11 +02:00
Peter Steinberger
b022c6d770 fix(telegram): validate cached thread ids 2026-05-29 09:28:17 -04:00
Ayaan Zaidi
82c0a60777 fix(trajectory): bound runtime source ordering state 2026-05-29 18:55:53 +05:30
Ayaan Zaidi
6361c46fe2 fix(trajectory): assign file-global runtime source order 2026-05-29 18:55:53 +05:30
Ayaan Zaidi
d879340ed9 fix(trajectory): preserve runtime window order 2026-05-29 18:55:53 +05:30
Ayaan Zaidi
39e3daa168 fix(trajectory): preserve safe path checks for window writes 2026-05-29 18:55:53 +05:30
Ayaan Zaidi
538b405fdd fix(trajectory): merge concurrent runtime window flushes 2026-05-29 18:55:53 +05:30
Ayaan Zaidi
ac605a463a fix(trajectory): keep latest runtime capture within cap 2026-05-29 18:55:53 +05:30
Ayaan Zaidi
f17c472f26 fix(trajectory): keep latest runtime capture within cap 2026-05-29 18:55:53 +05:30
Peter Steinberger
9a1b5f9b68 fix(feishu): validate merge-forward timestamps 2026-05-29 09:22:33 -04:00
Vincent Koc
f019e27c1d refactor: share gateway client readiness helpers 2026-05-29 15:19:29 +02:00
Peter Steinberger
8f22632a29 fix(msteams): validate bot attachment content length 2026-05-29 09:18:40 -04:00
Peter Steinberger
7fb91317ba fix(feishu): validate thread message timestamps 2026-05-29 09:15:07 -04:00
Peter Steinberger
001da78fab fix(feishu): validate message create time 2026-05-29 09:12:06 -04:00
Peter Steinberger
5fbeffd56b fix(imessage): validate chat list ids 2026-05-29 09:08:39 -04:00
Peter Steinberger
3142c97c22 fix(google): validate gemini retry timeout env 2026-05-29 09:05:38 -04:00
Peter Steinberger
58e82d91ba fix(media): centralize content length parsing 2026-05-29 09:02:21 -04:00
zhang-guiping
b5bc752a48 fix(active-memory): isolate recall lane
Active Memory recall now runs on its own queue lane instead of sharing the parent prompt-build lane.\n\nValidation:\n- git diff --check\n- node scripts/run-vitest.mjs extensions/active-memory/index.test.ts -t "runs recall on a dedicated active-memory lane"\n- fresh local gateway smoke with Active Memory + Memory Core + loopback OpenAI-compatible model: HTTP 200, active-memory start/done, recall elapsedMs=209\n\nFixes #79026.\nRelated: #72015.
2026-05-29 20:57:53 +08:00
Peter Steinberger
2cb8ac1596 fix(signal): validate attachment content length 2026-05-29 08:55:44 -04:00
Peter Steinberger
63d6bce324 fix(slack): reuse timestamp parser in dispatch 2026-05-29 08:52:46 -04:00
Peter Steinberger
d7e24e024f fix(slack): centralize timestamp parsing 2026-05-29 08:48:22 -04:00
Vincent Koc
19c70e2a29 refactor: share provider install choice fields 2026-05-29 14:44:51 +02:00
Peter Steinberger
f8c60cb9b7 fix(slack): validate dm history timestamps 2026-05-29 08:44:21 -04:00
Peter Steinberger
6235720c8a fix(slack): validate inbound timestamp parsing 2026-05-29 08:40:37 -04:00
Peter Steinberger
93e15abdf6 fix(discord): validate deploy status codes 2026-05-29 08:36:28 -04:00
Peter Steinberger
4ad9478d68 fix(discord): validate thread binding error codes 2026-05-29 08:32:48 -04:00
Peter Steinberger
58e52e9424 fix(signal): validate container send timestamps 2026-05-29 08:29:20 -04:00
Vincent Koc
7d5dd8aad2 fix(fal): bound generated media downloads 2026-05-29 14:28:15 +02:00