Shakker
bd4cfe0e7e
docs: document provider ids and auth contracts
2026-04-23 07:22:24 +01:00
Shakker
db1e4f811d
perf: scope models list discovery by provider
2026-04-23 07:22:24 +01:00
Shakker
3ec5558f53
fix: preserve external auth hook compatibility
2026-04-23 07:22:24 +01:00
Shakker
47ae15c059
feat: add external auth provider contracts
2026-04-23 07:22:24 +01:00
Peter Steinberger
4d1d0cd021
fix: stabilize gateway watch runtime deps
2026-04-23 07:22:10 +01:00
Peter Steinberger
33d9e1aa83
perf(test): narrow security audit plugin scope test
2026-04-23 07:21:46 +01:00
Vincent Koc
a35ed6b170
fix(ci): avoid duplicate install smoke docker build
2026-04-22 23:17:27 -07:00
Peter Steinberger
96ad6f53a2
test(models/auth): mark migration replacement fixture
2026-04-23 07:16:24 +01:00
Peter Steinberger
a7871d8212
fix(models/auth): sanitize replacement config patches
2026-04-23 07:16:24 +01:00
Neerav Makwana
a849283f80
harden: drop prototype-pollution keys in configPatch merge
...
Skip `__proto__`, `prototype`, and `constructor` keys while recursively
merging provider-auth `configPatch` payloads. Plugins construct the
patch in-process today, but JSON-parsed sources can preserve these keys
and the assignment `next[key] = value` would otherwise mutate the
merge target's prototype chain.
Made-with: Cursor
2026-04-23 07:16:24 +01:00
Neerav Makwana
14d1c9c4f0
fix(models/auth): merge agents.defaults.models on provider login
...
`openclaw models auth login` was replacing `agents.defaults.models`
wholesale whenever a provider returned a `configPatch` with that key,
even if the patch only listed the new default model. Re-authenticating
an OAuth provider such as OpenAI Codex wiped aliases and per-model
params for every other provider.
Make replacement opt-in via `ProviderAuthResult.replaceDefaultModels`.
Ordinary logins merge their allowlist patch so unrelated entries
survive; the Anthropic -> Claude CLI migration opts in because it
renames keys the merge path would otherwise keep stale.
Fixes #69414 .
Made-with: Cursor
2026-04-23 07:16:24 +01:00
Peter Steinberger
5bd8254f61
fix(docs): keep source dirs in i18n route index
2026-04-23 07:15:46 +01:00
Peter Steinberger
3ccaa1b2f1
docs: prepare 2026.4.22 changelog
2026-04-23 07:15:23 +01:00
Vincent Koc
a3d0b4307b
docs(release): use QA Lab all lanes gate
2026-04-22 23:13:29 -07:00
Peter Steinberger
c23ad91a14
fix(matrix): keep DM allowlist out of room commands
2026-04-23 07:09:34 +01:00
Vincent Koc
912dcfbc2b
test(plugins): guard startup-gated hook wiring
2026-04-22 23:08:08 -07:00
Vincent Koc
3dc3bf65d2
fix(memory): support live lancedb hook enablement
2026-04-22 23:06:39 -07:00
Peter Steinberger
4e259b0461
fix: harden parallels update smoke
2026-04-23 07:05:37 +01:00
Peter Steinberger
cc343febfb
fix: tolerate runtime deps temp cleanup races
2026-04-23 07:01:27 +01:00
Peter Steinberger
acb8fe986d
build: keep runtime dep stamps out of dist
2026-04-23 06:55:07 +01:00
Peter Steinberger
bb55e23c67
test(e2e): cover OpenAI web search minimal reasoning
2026-04-23 06:51:29 +01:00
Peter Steinberger
f600e98e5b
fix(agents): handle OpenAI web search schema rejects
2026-04-23 06:51:29 +01:00
Peter Steinberger
87c85c507a
fix: align docs with cli and provider surfaces
2026-04-23 06:39:11 +01:00
joshavant
d3a8480093
qa-live: simplify telegram pass progress log lines
2026-04-23 00:37:03 -05:00
Peter Steinberger
2194be201d
test(slack,line): reduce hot extension test imports
2026-04-23 06:28:06 +01:00
Peter Steinberger
a46d41156d
fix(matrix): ignore stale no-reply events
2026-04-23 06:27:20 +01:00
Peter Steinberger
6b126cd0de
feat(docs): add Thai translation support
2026-04-23 06:23:02 +01:00
Peter Steinberger
ebf351b138
fix(test): prevent Vitest shard stalls
2026-04-23 06:20:34 +01:00
joshavant
e6d0342629
qa-live: stream telegram scenario progress logs in realtime
2026-04-23 00:19:43 -05:00
Peter Steinberger
c78562d8a2
ci: fan out qa lab lanes
2026-04-23 06:15:01 +01:00
Peter Steinberger
76ab7c5b05
test: align channel plugin install fixtures
2026-04-23 06:13:31 +01:00
Vincent Koc
4955e57024
fix(skill-workshop): support live hook enablement
2026-04-22 22:09:10 -07:00
Peter Steinberger
db332aa8e9
ci: schedule qa lab gates
2026-04-23 06:08:29 +01:00
Peter Steinberger
e62431fd7f
test: type onboarding plugin enable mock
2026-04-23 06:07:35 +01:00
Vincent Koc
f67e48e6a0
feat(onboarding): auto-install missing provider and channel plugins
...
Squash-merge PR 70012.
2026-04-22 22:05:00 -07:00
Peter Steinberger
86ace805b7
fix(qa): align telegram commands live assertion
2026-04-23 06:04:06 +01:00
Peter Steinberger
a2db4c9cdd
ci: reuse docker e2e image across matrix
2026-04-23 06:02:51 +01:00
Peter Steinberger
66f94104c6
test: trim slow CI hotspot coverage
2026-04-23 06:02:26 +01:00
Peter Steinberger
e3caacd530
lint: enforce exhaustive switches
2026-04-23 06:02:12 +01:00
Peter Steinberger
4aa35d85fa
test: clean up voice-call event timers
2026-04-23 06:02:12 +01:00
Vincent Koc
9f437549d3
fix(scripts): guard core test tsgo in sparse worktrees
2026-04-22 22:00:17 -07:00
Peter Steinberger
404c4c1f86
docs: document fast committer escape hatch
2026-04-23 05:57:53 +01:00
Peter Steinberger
112f6e1622
test: reuse prebuilt docker e2e image
2026-04-23 05:55:42 +01:00
Peter Steinberger
61dfbd78d5
test: add npm tarball onboarding docker e2e
2026-04-23 05:52:43 +01:00
joshavant
c2f0559829
qa-live: tag telegram observed messages with scenario context
2026-04-22 23:52:06 -05:00
Peter Steinberger
6163cfffdf
test: update misc extension routing expectation
2026-04-23 05:50:57 +01:00
Peter Steinberger
69a4977fc7
fix(tooling): keep gitignore changes scoped
2026-04-23 05:50:14 +01:00
Peter Steinberger
e763ea1119
fix(plugins): stop tracking runtime deps manifests
2026-04-23 05:48:49 +01:00
Vincent Koc
ccde1c4707
fix(tooling): drop stale oxlint unicorn rule
2026-04-22 21:46:29 -07:00
Peter Steinberger
56c7ed0f8a
test(codex): mock lightweight app-server runtime
2026-04-23 05:46:00 +01:00
