Shakker
ab141df4b5
Skills: tighten env path guidance
2026-03-30 16:10:13 +01:00
Shakker
a3de1f5f55
Skills: prefer active OpenClaw paths
2026-03-30 16:10:13 +01:00
Ayaan Zaidi
2dced6b4a0
fix: allow setup-code bootstrap auth for operator pairing
2026-03-30 20:39:19 +05:30
Robin Waslander
4d369a3400
harden session-status tool visibility guard for all callers
2026-03-30 16:48:12 +02:00
Jacob Tomlinson
7a953a5227
Plugins: block install when source scan fails ( #57729 )
...
* Plugins: block unsafe install scan fallthrough
* Tests: normalize install scanner formatting
* Plugins: avoid duplicate scan failure messaging
* Plugins: preserve hook install block codes
2026-03-30 15:36:08 +01:00
Jacob Tomlinson
8db20c1965
sandbox: block sensitive external bind sources ( #56024 )
...
* sandbox: block sensitive external bind sources
* sandbox: cache blocked bind paths
* sandbox: harden blocked bind path aliases
* sandbox: block os-home bind secrets
* sandbox: refresh blocked bind path aliases
2026-03-30 15:34:53 +01:00
Jacob Tomlinson
3216df7923
gateway: enforce embeddings HTTP write scope ( #57721 )
2026-03-30 15:32:03 +01:00
Jacob Tomlinson
c5c10adc02
gateway: trim control UI bootstrap payload ( #57727 )
2026-03-30 15:08:19 +01:00
Jacob Tomlinson
a77928b108
Gateway: harden node event trust boundaries ( #57691 )
...
* Gateway: harden node event trust boundaries
* Gateway: preserve trusted summary prefixes
* Gateway: prefix multiline channel summaries
2026-03-30 14:22:15 +01:00
openperf
3d659fd356
refactor(gateway ): remove unreachable null check in resolveGatewayRequestedOperatorScopes
2026-03-30 18:51:13 +05:30
openperf
fe2eb185ff
fix(gateway ): restore default operator scopes for pure HTTP token auth
2026-03-30 18:51:13 +05:30
Jacob Tomlinson
8b88b927cb
gateway: clear unbound scopes for trusted-proxy auth ( #57692 )
...
* gateway: clear unbound scopes for trusted-proxy auth
* gateway: isolate trusted-proxy scope test branch
2026-03-30 14:19:00 +01:00
Jacob Tomlinson
566fb73d9d
reply: enforce ACP attachment roots ( #57690 )
...
* reply: enforce ACP attachment roots
* media: harden local attachment cache reads
* reply: clarify ACP attachment skip logs
* reply: keep ACP attachments path-only
2026-03-30 14:04:02 +01:00
pgondhi987
bc3b05dce4
fix(infra): block BROWSER, GIT_EDITOR, GIT_SEQUENCE_EDITOR from inherited host env ( #57559 )
2026-03-30 12:31:04 +01:00
Kunal Karmakar
34b0a19a16
fix: use azure-openai-responses for Azure custom providers ( #50851 ) (thanks @kunalk16)
...
* Add azure-openai-responses
* Unit tests update for updated API
* Add entry for PR #50851
* Add comma to address PR comment
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* Address PR comment on sanitization of output
* Address review comment
* Revert commits
* Revert commit
* Update changelog stating Azure OpenAI only
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
* Add references
* Address PR comment on sanitization of output
* Address review comment
* Revert commits
* Revert commit
* Address PR comment on sanitization of output
* Address review comment
* Revert commits
* Revert commit
* Fix generated file
* Add azure openai responses to OPENAI_RESPONSES_APIS
* Add azure openai responses to createParallelToolCallsWrapper
* Adding azure openai responses to attempt.ts
* Add azure openai responses to google.ts
* Address PR comment on sanitization of output
* Revert commit
* Address PR comment on sanitization of output
* Revert commit
* Address PR comment on sanitization of output
* Revert commit
* Fix changelog
* Fix linting
* fix: cover azure responses wrapper path (#50851 ) (thanks @kunalk16)
---------
Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-03-30 16:17:03 +05:30
Vincent Koc
2fbd5e3f5f
fix(test): trim telegram command registry imports
2026-03-30 19:34:47 +09:00
Vincent Koc
85f3136cfc
fix(test): use plugin public surfaces in reply command tests
2026-03-30 19:28:10 +09:00
Vincent Koc
54f7221465
fix(slack): restore table block mode seam ( #57591 )
...
* fix(slack): restore table block mode seam
Restore the shared markdown/config seam needed for Slack Block Kit table support, while coercing non-Slack block mode back to code.
* fix(slack): narrow table block seam defaults
Keep Slack table block mode opt-in in this seam-only PR, clamp collected placeholder offsets, and align fallback-table rendering with Slack block limits.
* fix(slack): bound table fallback rendering
Avoid spread-based maxima and bound Slack table fallback rendering by row, column, cell-width, and total-output limits to prevent resource exhaustion.
* fix(slack): keep block mode inactive in seam PR
Keep markdown table block mode schema-valid but runtime-resolved to code until the Slack send path is wired to emit table attachments.
* fix(slack): normalize configured block mode safely
Accept configured markdown table block mode at parse time, then normalize it back to code during runtime resolution so seam-only branches do not drop table content.
2026-03-30 19:25:01 +09:00
Vincent Koc
104f006916
fix(test): trim reply command registry imports
2026-03-30 19:02:40 +09:00
Vincent Koc
b4ecf2bc33
fix(test): trim matrix bind registry cleanup
2026-03-30 19:02:31 +09:00
Vincent Koc
c7d0beb98d
fix(ci): harden Windows test cleanup
2026-03-30 18:56:29 +09:00
Frank Yang
43cd29c4af
fix(agents): dispose bundled MCP runtime after local runs ( #57520 )
...
* fix(agents): dispose bundled MCP runtime after local runs
* fix(agents): scope bundle MCP cleanup to local one-shots
* fix(agents): dispose bundle MCP after local runs
* docs(changelog): note local bundle MCP cleanup fix
2026-03-30 17:12:59 +08:00
Vincent Koc
9670bd0823
fix(test): trim session binding registry imports
2026-03-30 17:46:44 +09:00
Peter Steinberger
8a0c377a2f
fix: stabilize ci task and docs checks
2026-03-30 09:25:01 +01:00
Ayaan Zaidi
0b632dde8c
fix: add facade recursion regression coverage ( #57508 ) (thanks @openperf)
2026-03-30 13:48:21 +05:30
openperf
9a03fe8181
fix(facade-runtime): add recursion guard to facade module loader to prevent infinite stack overflow
...
Place a sentinel object in the loadedFacadeModules cache before the Jiti
sync load begins. Re-entrant calls (caused by circular facade references
from constant exports evaluated at module-evaluation time) now receive the
sentinel instead of recursing infinitely. Once the real module finishes
loading, Object.assign() back-fills the sentinel so any references
captured during the circular load phase see the final exports.
The Jiti load is wrapped in try/catch: on failure the sentinel is removed
from the cache so that subsequent retry attempts re-execute the load
instead of silently returning an empty object. The function returns the
sentinel (not the raw loaded module) to guarantee a single object identity
for all callers, including those that captured a reference during the
circular load phase.
Also tightens the generic constraint from <T> to <T extends object> so
Object.assign() is type-safe, and propagates the constraint to the
test-utils callers in bundled-plugin-public-surface.ts.
Fixes #57394
2026-03-30 13:48:21 +05:30
Vincent Koc
77c7eb346b
fix(ci): repair docs and task-registry guard
2026-03-30 16:35:18 +09:00
Vincent Koc
12ae4eee7e
fix(slack): complete interactive block delivery ( #57473 )
...
* fix(slack): complete interactive block delivery
Related #12602
Related #49528
* docs(changelog): add Slack interactive delivery note
Related #12602
* fix(slack): add reply-blocks helper and tighten directives
Related #12602
Related #49528
* fix(slack): scope style parsing and recheck merged blocks
Related #12602
Related #49528
2026-03-30 16:25:51 +09:00
Vincent Koc
e4e732a77b
fix(tasks): remove sqlite merge marker
2026-03-30 16:19:28 +09:00
Vincent Koc
0a014ca63a
perf(tasks): optimize session lookups and sqlite upserts
2026-03-30 16:19:28 +09:00
Patrick Yingxi Pan
1ad88b58d1
feat(matrix): add explicit channels.matrix.proxy config ( #56930 ) ( #56931 )
...
Merged via squash.
Prepared head SHA: facdf94b655210631+patrick-yingxi-pan@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-03-30 02:51:33 -04:00
Ayaan Zaidi
05762ed8d7
test: broaden android nodes tool round trips
2026-03-30 11:18:14 +05:30
Douglas Lardo
bb2c010e07
fix(delivery): treat Matrix "User not in room" as permanent delivery error ( #57426 )
...
Merged via squash.
Prepared head SHA: 6a777197cb5000601+dlardo@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-03-30 01:35:15 -04:00
Ayaan Zaidi
96ddf30cf1
test: cover android sms permission payloads in nodes tool
2026-03-30 11:04:10 +05:30
Gustavo Madeira Santana
0b16443fa4
Tests: close ACP manager task registry before temp dir cleanup
2026-03-30 01:17:47 -04:00
Gustavo Madeira Santana
7668793e6c
Tests: close task registry before temp dir cleanup
2026-03-30 01:08:54 -04:00
Vincent Koc
1fd8164f01
fix(test): trim acp command registry imports
2026-03-30 14:08:48 +09:00
Vincent Koc
572ed05219
fix(tasks): restore user-facing task wording
2026-03-30 14:08:25 +09:00
Ayaan Zaidi
0462a7fd8c
fix: finalize android sms search ( #50146 ) (thanks @scaryshark124)
2026-03-30 10:36:43 +05:30
Vincent Koc
4a1f231f1e
test(tasks): guard task-registry import boundary ( #57487 )
...
* refactor(tasks): add executor facade
* refactor(tasks): extract delivery policy
* refactor(tasks): route acp through executor
* refactor(tasks): route subagents through executor
* refactor(cron): split main and detached dispatch
* refactor(tasks): guard executor-only producer writes
* refactor(tasks): clarify detached run surfaces
* test(tasks): guard task-registry import boundary
2026-03-30 14:02:48 +09:00
Vincent Koc
3a37421251
refactor(tasks): clarify detached run surfaces ( #57485 )
...
* refactor(tasks): add executor facade
* refactor(tasks): extract delivery policy
* refactor(tasks): route acp through executor
* refactor(tasks): route subagents through executor
* refactor(cron): split main and detached dispatch
* refactor(tasks): guard executor-only producer writes
* refactor(tasks): clarify detached run surfaces
2026-03-30 14:02:13 +09:00
Vincent Koc
8fb247c528
refactor(tasks): guard executor-only producer writes ( #57486 )
...
* refactor(tasks): add executor facade
* refactor(tasks): extract delivery policy
* refactor(tasks): route acp through executor
* refactor(tasks): route subagents through executor
* refactor(cron): split main and detached dispatch
* refactor(tasks): guard executor-only producer writes
2026-03-30 14:00:25 +09:00
Vincent Koc
1c9053802a
refactor(cron): split main and detached dispatch ( #57482 )
...
* refactor(tasks): add executor facade
* refactor(tasks): extract delivery policy
* refactor(tasks): route acp through executor
* refactor(tasks): route subagents through executor
* refactor(cron): split main and detached dispatch
2026-03-30 13:59:55 +09:00
Vincent Koc
4be290c15f
fix(test): trim onboarding registry imports
2026-03-30 13:59:37 +09:00
Gustavo Madeira Santana
10723a0013
Tests: tighten scoped channel account fixtures
2026-03-30 00:59:26 -04:00
Gustavo Madeira Santana
fca8880968
Tests: reuse QMD availability mock type
2026-03-30 00:59:26 -04:00
Vincent Koc
ec13f6d73e
refactor(tasks): route subagents through executor ( #57481 )
...
* refactor(tasks): add executor facade
* refactor(tasks): extract delivery policy
* refactor(tasks): route acp through executor
* refactor(tasks): route subagents through executor
2026-03-30 13:59:23 +09:00
Vincent Koc
126f77315f
refactor(tasks): route acp through executor ( #57478 )
...
* refactor(tasks): add executor facade
* refactor(tasks): extract delivery policy
* refactor(tasks): route acp through executor
2026-03-30 13:58:51 +09:00
Gustavo Madeira Santana
0e078e8bc0
Runtime: dedupe typing lease logic
2026-03-30 00:58:04 -04:00
Gustavo Madeira Santana
73b128e37d
Tests: trim channels add registry imports
2026-03-30 00:54:41 -04:00
