VACInc
be14820b5d
fix: resolve voice-call SecretRef inputs ( #73632 )
...
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-01 07:21:02 +01:00
Peter Steinberger
42d73fd955
refactor: remove dead private helpers
2026-05-01 06:55:26 +01:00
Peter Steinberger
afb17eade9
fix(secrets): skip optional web fetch discovery before bind
2026-04-30 14:45:55 +01:00
Shakker
10b9adb010
fix: trust-gate manifest auth evidence
2026-04-30 00:13:12 +01:00
Shakker
dd5b96c11d
feat: expose provider auth evidence lookup
2026-04-30 00:13:12 +01:00
Peter Steinberger
e27fe55aa8
refactor: simplify plugin cache boundaries
2026-04-29 04:33:15 +01:00
Peter Steinberger
7a5b419843
refactor(plugins): simplify plugin cache boundaries
2026-04-29 03:52:22 +01:00
Vincent Koc
8e5fcfff50
fix(test): stabilize core runtime infra shard
2026-04-28 17:31:35 -07:00
Gabriel Kripalani
17ef9ef895
feat(openrouter): add video generation provider ( #72700 )
...
Adds OpenRouter video generation via video_generate, with hardened async polling/download handling, docs, and regression coverage.
Validation:
- pnpm test src/plugins/plugin-lookup-table.test.ts src/secrets/target-registry.fast-path.test.ts src/gateway/server-startup-post-attach.test.ts extensions/openrouter/video-generation-provider.test.ts src/video-generation/live-test-helpers.test.ts src/media-generation/provider-capabilities.contract.test.ts src/agents/pi-embedded-helpers/failover-matches.test.ts src/plugins/manifest-metadata-scan.test.ts src/agents/openai-transport-stream.test.ts src/media-understanding/openai-compatible-audio.test.ts src/agents/schema-normalization-runtime-contract.test.ts src/agents/provider-request-config.test.ts src/plugin-sdk/provider-stream.test.ts src/agents/pi-embedded-runner/run/attempt.spawn-workspace.websocket.test.ts -- --reporter=verbose
- OPENCLAW_LIVE_TEST=1 OPENCLAW_LIVE_TEST_QUIET=0 OPENCLAW_LIVE_VIDEO_GENERATION_MODELS=openrouter/google/veo-3.1-fast pnpm test:live src/video-generation/video-generation.live.test.ts -- --runInBand
Co-authored-by: notamicrodose <gabrielkripalani@me.com >
2026-04-28 10:57:31 +01:00
Peter Steinberger
b4ffef5c5f
fix(plugins): prune inactive bundled runtime deps
2026-04-28 10:34:24 +01:00
Peter Steinberger
7975305a89
test: cover trusted-proxy secret surfaces
2026-04-27 23:10:22 +01:00
Vincent Koc
bd51f82efa
fix(security): harden CodeQL secret ref validation
...
Remediate current-profile CodeQL findings for file SecretRef id validation and release workflow job permissions. Includes changelog credit. Thanks @vincentkoc.
2026-04-27 13:53:27 -07:00
openclaw-test-performance-agent[bot]
2f909b0b21
test: optimize slow tests
2026-04-27 17:42:22 +00:00
Peter Steinberger
7f3f108521
refactor(config): migrate plugin config access
2026-04-27 12:35:58 +01:00
Josh Avant
db09f68ce5
Support SecretRef for voice-call credentials and bundled plugin SecretInputs ( #72607 )
...
* fix: support voice-call secretrefs
* test: classify plugin secretref targets
* docs: credit voice-call secretref change
* fix: keep plugin secret target discovery lightweight
2026-04-27 01:16:50 -05:00
Peter Steinberger
5f2273e81e
fix(gateway): unify chat display projection
2026-04-26 05:33:58 +01:00
Shakker
2e7635f4f9
fix: scope web provider ownership to plugin index
2026-04-26 04:39:12 +01:00
Shakker
1a193b2d96
fix: scope cold plugin manifests to index
2026-04-26 03:47:45 +01:00
Vincent Koc
10763781fd
fix(config): resolve plugin contracts cold
2026-04-25 19:33:56 -07:00
Vincent Koc
6afac5208a
fix(secrets): resolve plugin env metadata cold
2026-04-25 19:18:30 -07:00
Peter Steinberger
0ca952cdd5
feat(tts): add per-agent voice overrides
2026-04-26 02:54:13 +01:00
Shakker
c19f8a5223
refactor: consolidate plugin install index store
2026-04-26 01:03:12 +01:00
Vincent Koc
74059aaa29
fix(secrets): honor plugin install ledger for web fetch discovery
2026-04-25 13:55:00 -07:00
Vincent Koc
70d1871db7
fix(secrets): honor plugin install ledger in web search risk
2026-04-25 13:50:44 -07:00
Peter Steinberger
7a71a66571
perf: cache provider env var lookups
2026-04-25 08:35:57 +01:00
Peter Steinberger
9e5d09c962
fix(config): reject legacy secretref env markers
2026-04-25 03:48:11 +01:00
Vincent Koc
7536993397
feat(plugins): read setup provider env vars ( #71226 )
...
* feat(plugins): read setup provider env vars
* fix(plugins): mark provider env compat deprecation
2026-04-24 12:59:02 -07:00
Peter Steinberger
11fa1d2dc7
test: mock secrets apply runtime preflight
2026-04-24 12:22:49 +01:00
Peter Steinberger
9faa9d33e6
test: mock web tools manifest lookup
2026-04-24 12:19:50 +01:00
zhang-guiping
c1f423f845
fix(secrets): harden Windows ACL fallback and strip BOM ( #70662 )
...
Fail closed when Windows ACL checks cannot be verified for file and exec secret providers unless the provider explicitly opts into allowInsecurePath. Strip UTF-8 BOMs from file-backed secrets and document the trusted-path override.\n\nThanks @zhanggpcsu.
2026-04-23 19:32:15 +01:00
Peter Steinberger
158a0d4ab4
test: trim duplicate runtime smoke work
2026-04-23 11:28:26 +01:00
Peter Steinberger
3fd2a94404
refactor: generalize command sender identity checks
2026-04-22 06:11:49 +01:00
Peter Steinberger
6639bbbc2e
refactor: generalize conversation id labels
2026-04-22 06:11:49 +01:00
Peter Steinberger
e20a5eeddb
refactor: keep legacy web search config in doctor
2026-04-22 06:11:49 +01:00
Peter Steinberger
a6dce7cf19
refactor: resolve web search secrets by target path
2026-04-22 06:11:49 +01:00
Peter Steinberger
89741c7a23
refactor: use generic web search runtime credential hooks
2026-04-22 06:11:49 +01:00
Peter Steinberger
94f670b893
refactor: use generic web search credential hooks
2026-04-22 06:11:49 +01:00
Peter Steinberger
0c863124bb
refactor: derive setup promotion rules from plugins
2026-04-22 06:11:49 +01:00
Peter Steinberger
db055a5c0d
refactor: move WhatsApp group inference out of core
2026-04-22 06:11:49 +01:00
Peter Steinberger
bdcbb6b49d
refactor: move Feishu model override parsing to plugin
2026-04-22 06:11:49 +01:00
Peter Steinberger
7189b49f81
refactor: move media defaults into plugin manifests
2026-04-22 06:11:49 +01:00
Peter Steinberger
2e775fb03e
refactor: move stale socket modes to channel status
2026-04-22 06:11:49 +01:00
Peter Steinberger
0a027ff591
refactor: derive CLI web credential targets
2026-04-22 06:11:49 +01:00
Peter Steinberger
bc9c2cc162
refactor: derive web credential secret targets from manifests
2026-04-22 06:11:49 +01:00
Gustavo Madeira Santana
24db09a19b
fix(cli): keep channel status checks off plugin runtimes ( #69479 )
...
Merged via squash.
Prepared head SHA: 63f6e416a9
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-21 13:53:08 -04:00
Peter Steinberger
982b1c9464
test(ci): reduce channel contract import cost
2026-04-21 00:40:07 +01:00
Peter Steinberger
88d97c55c7
test: share secrets runtime file fixture
2026-04-20 22:28:49 +01:00
Peter Steinberger
9cba6672d6
refactor: share inactive web provider warnings
2026-04-20 22:28:49 +01:00
Peter Steinberger
19525e1dd0
test: share media auth snapshot setup
2026-04-20 22:28:49 +01:00
Peter Steinberger
cf4354ad83
test: share plugin secret collector setup
2026-04-20 22:28:49 +01:00