Commit Graph

51990 Commits

Author SHA1 Message Date
Peter Steinberger
cf46f2e3a0 fix(docker): parse peer-suffixed lockfile packages 2026-05-24 09:51:39 +01:00
Peter Steinberger
f799da0947 fix(docker): seed lockfile packages before prune 2026-05-24 09:33:34 +01:00
Peter Steinberger
2cd93f1c0d fix(docker): seed lockfile snapshot tarballs before prune 2026-05-24 09:18:04 +01:00
Peter Steinberger
a4ef3a2c9a test(codex): type thread start mock params 2026-05-24 08:53:29 +01:00
Peter Steinberger
11bf6424ca test(codex): avoid full sandbox run in thread-start test 2026-05-24 08:40:58 +01:00
Vincent Koc
abdd8a40cc fix(plugins): harden Windows npm package staging 2026-05-24 09:32:17 +02:00
Peter Steinberger
c14a0c6d63 test(codex): complete sandbox turn inline 2026-05-24 08:19:01 +01:00
Vincent Koc
a56f452972 fix(release): harden Windows npm shim verification 2026-05-24 09:02:44 +02:00
Peter Steinberger
f8789599f0 test(release): type metadata snapshot mock params 2026-05-24 07:56:34 +01:00
Peter Steinberger
e9ca3115f0 test(release): finish plugin metadata prerelease sync 2026-05-24 07:42:56 +01:00
Rubén Cuevas
501f2cbfe4 fix(update): avoid broad tag fetches for dev updates (#84737)
Summary:
- The PR changes dev-channel git updates to fetch branches with `--no-tags`, adds targeted fetching for explicit dev tag refs, updates update-runner tests, and adds a changelog entry.
- Reproducibility: yes. Current main source shows dev updates still run a broad tag fetch, and the PR body sup ... al local bare-remote moved-tag reproducer showing that command fails before the branch update can continue.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(update): avoid broad tag fetches for dev updates

Validation:
- ClawSweeper review passed for head 733680b1bc.
- Required merge gates passed before the squash merge.

Prepared head SHA: 733680b1bc
Review: https://github.com/openclaw/openclaw/pull/84737#issuecomment-4503692161

Co-authored-by: Ruben Cuevas <hi@rubencu.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-24 06:37:21 +00:00
homer-byte
4d150209c3 Fix iMessage slash command acknowledgements (#82642)
Merged via squash.

Prepared head SHA: ecc8791393
Co-authored-by: homer-byte <262247270+homer-byte@users.noreply.github.com>
Co-authored-by: omarshahine <10343873+omarshahine@users.noreply.github.com>
Reviewed-by: @omarshahine
2026-05-23 23:33:33 -07:00
Peter Steinberger
02f53e6453 test(release): align prerelease contracts 2026-05-24 07:23:32 +01:00
Peter Steinberger
56eb23dda4 test(release): align plugin prerelease checks 2026-05-24 06:47:42 +01:00
Peter Steinberger
0ba6b23534 fix(docker): copy prepare hook before install 2026-05-24 06:21:29 +01:00
Peter Steinberger
d6c9387c0f fix: share signed thinking replay policy 2026-05-24 06:10:47 +01:00
Peter Steinberger
906476af0c fix: preserve signed thinking tool ids 2026-05-24 06:10:47 +01:00
NianJiuZst
41329c0e14 fix(memory): strip invalid thinking signatures for signed-thinking providers 2026-05-24 06:10:47 +01:00
Vincent Koc
d21abb88e4 fix(scripts): harden Windows install checks 2026-05-24 07:03:49 +02:00
Peter Steinberger
b972ac1940 fix(release): keep private QA markers out of bundled alias code 2026-05-24 06:03:21 +01:00
Peter Steinberger
fdfcb0795a fix(discord): harden realtime voice wake joins 2026-05-24 05:54:10 +01:00
Peter Steinberger
3839b48615 test(parallels): harden release VM smoke isolation 2026-05-24 05:50:03 +01:00
Peter Steinberger
0f83c93740 fix: keep blank agent allowlists fail closed (#85849) 2026-05-24 05:40:16 +01:00
Peter Steinberger
88aa713c03 fix: harden session allowlist glob matching (#85849) (thanks @SebTardif) 2026-05-24 05:40:16 +01:00
Sebastien Tardif
1463d3d72c fix(security): replace regex wildcard matching with linear-time glob in session-visibility
The agentToAgent allow-pattern matcher converted user wildcards like
`*a*b*c*` into `^.*a.*b.*c.*$` via RegExp.  Multiple overlapping
`.*` groups cause O(n^k) polynomial backtracking against non-matching
input, where k is the number of wildcards.

Replace the regex path with a segment-based glob matcher that splits on
`*` and checks prefix/suffix/interior segments in order.  The new
matcher runs in O(n*k) worst case and eliminates the regex engine
entirely from this path.

Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>
2026-05-24 05:40:16 +01:00
Peter Steinberger
ae9308bfe0 docs(changelog): note restart recovery notice 2026-05-24 05:38:59 +01:00
Peter Steinberger
32631eb9d4 fix(telegram): normalize legacy action targets 2026-05-24 05:38:59 +01:00
Paul Frederiksen
cf61b876ec fix: notify chat when main session recovery fails 2026-05-24 05:38:59 +01:00
NianJiu
d4e42d61c9 fix(minimax): normalize OAuth token expiry to absolute millisecond timestamp (#83480)
* fix(minimax): normalize OAuth token expiry to absolute millisecond timestamp

MiniMax returns expired_in from the token endpoint as a relative duration
in seconds (standard OAuth expires_in semantics), but the auth profile
store's hasUsableOAuthCredential() expects an absolute millisecond
timestamp.  Without conversion the token appears perpetually expired,
triggering a slow OAuth refresh network call to api.minimaxi.com on
every request — the root cause of the 30-50s auth-stage delay.

Fixes #83449.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(minimax): cover oauth expiry normalization

* fix: polish minimax oauth expiry normalization (#83480) (thanks @NianJiuZst)

* fix: update minimax raw fetch allowlist (#83480)

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-05-24 05:21:22 +01:00
David
55f994a8d0 fix(memory-wiki): show vault totals in palace summary (#85824)
* fix(memory-wiki): show vault totals in palace summary

* fix(memory-wiki): avoid zero-page legacy question label

---------

Co-authored-by: nxmxbbd <32288+nxmxbbd@users.noreply.github.com>
2026-05-24 05:11:12 +01:00
clawsweeper[bot]
8deb1ef7db Isolate boot-md startup sessions (#85919)
Summary:
- The branch updates gateway boot startup handling to use an `agent:<id>:boot` session, suppress prompt persis ...  that boot mapping after the run, and adds focused gateway boot regression coverage plus a changelog entry.
- Reproducibility: yes. there is a high-confidence source reproduction path: current main passes the generated ... idence of repeated persisted boot prompts. I did not execute the gateway scenario in this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: Fix boot-md test lint
- PR branch already contained follow-up commit before automerge: Isolate boot-md startup sessions

Validation:
- ClawSweeper review passed for head 5d5338c2d9.
- Required merge gates passed before the squash merge.

Prepared head SHA: 5d5338c2d9
Review: https://github.com/openclaw/openclaw/pull/85919#issuecomment-4527318708

Co-authored-by: Andy Ye <35905412+TurboTheTurtle@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>
2026-05-24 04:05:45 +00:00
AirLin
d0751111a4 Guard OpenAI image compression for PNG outputs (#85776)
* Guard OpenAI image compression for PNG outputs

* Fix OpenAI image compression type narrowing

* docs(changelog): note OpenAI PNG compression fix

* Revert "docs(changelog): note OpenAI PNG compression fix"

This reverts commit b11e4bff01.

---------

Co-authored-by: airlin <airlin@airlins-Mac-mini.local>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-05-24 05:01:55 +01:00
rendrag-git
1d1a7c26d8 fix(agents): clamp proxy completions caps after payload shaping (#85889)
Clamp proxy-like OpenAI Chat Completions output caps against the estimated final outbound request payload after compatibility transforms. This prevents strict local/API-compatible servers from rejecting requests whose prompt already consumes part of the effective context window, while avoiding over-clamping dropped replay turns.

Co-authored-by: rendrag-git <253747599+rendrag-git@users.noreply.github.com>
2026-05-24 04:57:23 +01:00
Peter Steinberger
17dcdead00 fix: gate discord realtime voice by wake name (#85915) 2026-05-24 04:47:16 +01:00
Gio Della-Libera
c074d09f1e fix(update): ignore inherited launchd xpc for respawn (#85789) 2026-05-23 20:42:05 -07:00
Gio Della-Libera
6b337ff3ea fix: allow symlinked workspace write parents (#85818) 2026-05-23 20:42:01 -07:00
Gio Della-Libera
af765100ff fix(agents): preserve latest thinking replay signatures (#85579) 2026-05-23 20:41:57 -07:00
Gio Della-Libera
e6d5b7db96 fix(plugins): return plugin gateway method results (#85785) 2026-05-23 20:41:52 -07:00
Gio Della-Libera
068b9acb51 fix(gateway): hide duplicate ACP chat replies (#85775) 2026-05-23 20:41:45 -07:00
Gio Della-Libera
566d8cdf39 fix(update): ignore restart script spawn failures (#85761) 2026-05-23 20:41:40 -07:00
Gio Della-Libera
617335250e fix(telegram): honor explicit default account warning (#85752) 2026-05-23 20:41:35 -07:00
Gio Della-Libera
82af6119fa fix: honor OPENCLAW_HOME defaults (#85802)
* fix: honor OPENCLAW_HOME defaults

* fix(install): preserve openclaw home upgrade defaults

* fix(install): satisfy shellcheck tilde patterns
2026-05-23 20:39:59 -07:00
Gio Della-Libera
2e8dee7f28 fix(browser): avoid cold mac chrome version timeouts (#85460) 2026-05-23 20:39:47 -07:00
Gio Della-Libera
76221b53c2 fix(doctor): prune stale bundled plugin paths (#85038) 2026-05-23 20:39:42 -07:00
Peter Steinberger
c38a9a883a fix: label meeting note transcript speakers
Include speaker-labeled transcript lines in Meeting Notes summaries and structured summary artifacts.
2026-05-24 04:29:01 +01:00
Peter Steinberger
8f783cdcad fix(release): keep memory plugin npm package small 2026-05-24 04:27:42 +01:00
Peter Steinberger
bae0e3fae5 fix(release): speed plugin bundled dependency installs 2026-05-24 04:27:42 +01:00
Peter Steinberger
4daf1aab55 fix(release): keep plugin bundled install lock-compatible 2026-05-24 04:27:42 +01:00
Peter Steinberger
7a85f1ee94 test(matrix): stabilize thread binding sweep persistence 2026-05-24 04:27:42 +01:00
Kaspre
6008375655 fix(gateway): honor restart drain budget for embedded runs
Honor configured restart drain budgets for embedded runs and avoid a second active-work drain after forced deferral timeout restarts.

Includes maintainer changelog entry.
2026-05-24 04:22:27 +01:00