vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-07 14:40:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
31,546 Commits 1,843 Branches 149 Tags
a4e550d69be3891f248849615aedb1aeca6ca91c
Commit Graph

19609 Commits

Author SHA1 Message Date
Daniel Dali
89fbd197ea fix(agents): classify replay-invalid connection mismatches 2026-04-15 22:36:30 +03:00
Peter Steinberger
943cb47274 fix(qa): use exported runner sdk seam 2026-04-15 20:26:12 +01:00
Peter Steinberger
4caa882476 test: harden gateway live docker flake handling 2026-04-15 20:13:28 +01:00
Devin Robison
52ef42302e fix: tighten trusted tool media passthrough (#67303) 
* fix: tighten trusted tool media passthrough

* changelog: tighten trusted tool media passthrough (#67303)

* address review: thread rawToolName into emitToolResultOutput and keep plugin-tool media passthrough

- Pass rawToolName through emitToolResultOutput params so the emit and
  collect calls no longer reference an out-of-scope identifier
  (ReferenceError on any verbose tool-output path).
- Widen builtinToolNames to all effective tool raw names for this run
  (core + bundled/trusted plugin tools), so plugin tools on the trusted
  media list still receive local MEDIA: passthrough. Admission-time
  client-tool conflict check keeps using the core-only set so unrelated
  plugin names do not spuriously reject client definitions; MEDIA
  passthrough is still gated by the raw-name set, so a client tool that
  normalize-collides with a plugin name cannot inherit its media trust.
- Add unit coverage for bundled-plugin raw-name passthrough and for
  case-variant plugin-name collisions.

* drop redundant String() casts flagged by oxlint no-useless-cast

The names from effectiveTools, client tool function names, and the
existingToolNames iterable are already typed as string, so wrapping them
in String(...) adds nothing and trips oxlint's no-useless-cast rule.
 2026-04-15 13:12:44 -06:00
Peter Steinberger
23dca0a089 test: fix upstream type drift 2026-04-15 19:31:10 +01:00
Peter Steinberger
4efd3c3d74 test: harden beta release gates 2026-04-15 19:28:49 +01:00
Pavan Kumar Gondhi
1470de5d3e fix(webchat): reject remote-host file:// URLs in media embedding path [AI-assisted] (#67293) 
* fix: address issue

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge
 2026-04-15 23:58:01 +05:30
hcl
be7f4a2342 fix(terminal): tolerate undefined path in formatDocsLink (#67076, #67074) (#67086) 
formatDocsLink called path.trim() unconditionally. The typed contract
says 'docsPath: string' (required on ChannelMeta), but a handful of
channel plugins and catalog rows leave it unset at runtime, so
onboarding flows that call formatChannelSelectionLine(entry.meta, ...)
hit a TypeError on the first meta without a docsPath:

  TypeError: Cannot read properties of undefined (reading 'trim')

Symptom: 'openclaw onboard --install-daemon' and the 'Select channel
(QuickStart)' -> 'Skip for now' path both crash on 2026.4.12 and
2026.4.14.

Fix: widen formatDocsLink's path parameter to 'string | undefined |
null' and fall back to the docs root when path is missing. The single
call site that guards with 'if (params.docsPath)' stays fine; the
unguarded channel-selection path now degrades gracefully.

Fixes #67076
Fixes #67074
 2026-04-15 23:40:52 +05:30
Tak Hoffman
4f00b76925 fix(context-window): Tighten context limits and bound memory excerpts (#67277) 
* Tighten context limits and bound memory excerpts

* Align startup context defaults in config docs

* Align qmd memory_get bounds with shared limits

* Preserve qmd partial memory reads

* Fix shared memory read type import

* Add changelog entry for context bounds
 2026-04-15 13:06:02 -05:00
Peter Steinberger
89d2c145df test: harden gateway live docker test assertions 2026-04-15 18:47:40 +01:00
Pavan Kumar Gondhi
6e58f1f9f5 fix(gateway): enforce localRoots containment on webchat audio embedding path [AI-assisted] (#67298) 
* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge
 2026-04-15 22:54:06 +05:30
Peter Steinberger
229eb72cf6 build: exclude private QA from npm package 2026-04-15 09:39:51 -07:00
Gustavo Madeira Santana
78ac118427 fix(plugins): stabilize bundled setup runtimes (#67200) 
Merged via squash.

Prepared head SHA: e8d6738fd0
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
 2026-04-15 12:35:18 -04:00
neo1027144
ee6b7daca3 fix(cron): suppress trailing NO_REPLY in announce delivery path [AI-assisted] (#65004) 
Merged via squash.

Prepared head SHA: b7f1996d60
Co-authored-by: neo1027144-creator <267440006+neo1027144-creator@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
 2026-04-15 09:31:35 -07:00
ly85206559
3e60eaa884 fix(docker): verify matrix-sdk-crypto native addon without hardcoded pnpm path (#65608) (#67143) 
Merged via squash.

Prepared head SHA: 325e97ead5
Co-authored-by: ly85206559 <12526624+ly85206559@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
 2026-04-15 11:37:14 -04:00
Peter Steinberger
69ba56d2c8 build(config): refresh generated schema version for 2026.4.15-beta.1 2026-04-15 15:06:13 +01:00
Peter Steinberger
ef98bcf630 fix(discord): raise carbon slow listener threshold 2026-04-15 06:40:14 -07:00
Ayaan Zaidi
33154ce745 fix: simplify ollama onboarding (#67005) 
* feat(ollama): split interactive cloud and local setup

* test(ollama): cover cloud onboarding flow

* docs(ollama): simplify provider setup docs

* docs(onboarding): update ollama wizard copy

* fix(ollama): restore web search auth helper

* fix(ollama): harden setup auth and ssrf handling

* fix(ollama): address review regressions

* fix(ollama): scope ssrf hardening to ollama

* feat(ollama): add hybrid onboarding mode

* fix(ollama): tighten cloud credential setup

* refactor(ollama): distill host-backed setup modes

* fix(ollama): preserve cloud api key in config

* fix: simplify ollama onboarding (#67005)
 2026-04-15 19:06:21 +05:30
Peter Steinberger
20cce166ef test: isolate Docker live profile-key auth 2026-04-15 06:31:20 -07:00
Chen Chia Yang
d2a219ea44 fix(media): allow host-local CSV and Markdown uploads via Slack (#67047) 
Merged via squash.

Prepared head SHA: 5ce11d0bac
Co-authored-by: Unayung <1853105+Unayung@users.noreply.github.com>
Co-authored-by: frankekn <712880+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn
 2026-04-15 20:38:17 +08:00
Peter Steinberger
931581070a test(plugins): allow packaged runtime mirrors 2026-04-15 12:57:32 +01:00
Vincent Koc
3830e687dd test(perf): speed up slow gateway specs 2026-04-15 12:30:48 +01:00
Vincent Koc
7d2e068b27 test(agents): trim extraparams anthropic passthrough cost 2026-04-15 12:28:08 +01:00
Vincent Koc
c5b3f00d11 test(plugins): align jiti loader cache expectations 2026-04-15 12:14:34 +01:00
Vincent Koc
890e299e30 fix(ci): align docker smoke cache tests and reuse built dist 2026-04-15 12:12:58 +01:00
Vincent Koc
bb4498cef7 test(plugins): align unreadable manifest traversal failure code 2026-04-15 12:10:24 +01:00
Vincent Koc
c727388f93 fix(plugins): localize bundled runtime deps to extensions (#67099) 
* fix(plugins): localize bundled runtime deps to extensions

* fix(plugins): move staged runtime deps out of root

* fix(packaging): harden prepack and runtime dep staging

* fix(packaging): preserve optional runtime dep staging

* Update CHANGELOG.md

* fix(packaging): harden runtime staging filesystem writes

* fix(docker): ship preinstall warning in bootstrap layers

* fix(packaging): exclude staged plugin node_modules from npm pack
 2026-04-15 12:04:31 +01:00
Vincent Koc
f09a4d9ba0 fix(agents): move lean local-model mode behind experimental flag 2026-04-15 11:41:28 +01:00
Mason Huang
edfa074e0f Tests: align pnpm test expectations with main (#67001) 
Merged via squash.

Prepared head SHA: 29c8068053
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Reviewed-by: @hxy91819
 2026-04-15 18:31:23 +08:00
Vincent Koc
becd14424d fix(gateway): stabilize imsg alias test coverage 2026-04-15 11:24:19 +01:00
Pengfei Ni
804bb0f2c3 fix(configure): re-read config hash after persist to avoid stale-hash race (#64188) (#66528) 
Merged via squash.

Prepared head SHA: 0c4003a5be
Co-authored-by: feiskyer <676637+feiskyer@users.noreply.github.com>
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com>
Reviewed-by: @vincentkoc
 2026-04-15 11:03:09 +01:00
Pengfei Ni
e99a24d645 fix(security): redact secrets in exec approval prompts (#61077) (#64790) 
Merged via squash.

Prepared head SHA: 324202d37e
Co-authored-by: feiskyer <676637+feiskyer@users.noreply.github.com>
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com>
Reviewed-by: @vincentkoc
 2026-04-15 11:02:10 +01:00
Vincent Koc
9c32c2bf26 fix(gateway): clear fired close timeout handles 2026-04-15 10:46:37 +01:00
Pengfei Ni
88d3620a85 feat(github-copilot): add embedding provider for memory search (#61718) 
Merged via squash.

Prepared head SHA: 05a78ce7f2
Co-authored-by: feiskyer <676637+feiskyer@users.noreply.github.com>
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com>
Reviewed-by: @vincentkoc
 2026-04-15 10:39:28 +01:00
Vincent Koc
7821fae05d test(types): fix perf test follow-up mocks 2026-04-15 10:36:41 +01:00
Vincent Koc
7320dfc1ff test(perf): speed up slow cron infra and secrets specs 2026-04-15 10:22:43 +01:00
Vincent Koc
f49d9bcae9 test(gateway): harden non-isolated channel mocks 2026-04-15 10:02:05 +01:00
Srinivas Pavan
fb4395c1fe fix(cron): preserve all fields in announce delivery by removing summarization instruction (#65638) 
* fix(cron): preserve all fields in announce delivery by removing summarization instruction

The delivery instruction appended to the cron agent prompt contained the word
'summary', causing LLMs to condense structured output non-deterministically and
drop fields on delivery. Replace with 'response' and add explicit instruction
to reproduce all fields exactly.

Fixes #58535

* chore(changelog): add cron announce entry

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-04-15 09:40:26 +01:00
Vincent Koc
ea4889ecdc fix(update): keep dist verify compat-safe 2026-04-15 09:39:18 +01:00
Vincent Koc
9e665e4328 fix(ts): use typed runtime semver helpers 2026-04-15 09:20:26 +01:00
Vincent Koc
7f35f76914 fix(update): harden dist inventory handling 2026-04-15 09:16:46 +01:00
Ayaan Zaidi
a1d4eb255a fix(inventory): omit qa-matrix dist artifacts 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
2791b00e72 fix(build): move compat sidecars into src 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
8b79141997 fix(update): infer legacy bundled sidecars 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
2a8226f8e2 fix(postinstall): reject dist symlink escapes 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
64f258fc49 fix(update): keep downgrade follow-ups in-process 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
60e2ccbd5b fix(update): preserve legacy downgrade verify 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
aaa6b05f3b fix(update): preserve legacy global verify 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
5e7306bcfc fix(update): filter dist inventory to packed files 2026-04-15 13:22:04 +05:30
Ayaan Zaidi
18d0af3a13 fix(update): verify packaged dist inventory 2026-04-15 13:22:04 +05:30