Peter Steinberger
9f8550e8b7
fix(reef): restore inbox recovery after gateway restart ( #110100 )
...
* fix(reef): persist inbox recovery progress
* chore(reef): leave changelog to release flow
* fix(reef): keep inbox recovery internals private
* fix(reef): reset healthy reconnect backoff
* chore(reef): remove stale lint suppression
2026-07-17 20:32:17 +01:00
Peter Steinberger
8020dd3e08
fix(reef): discover trusted peers as conversations ( #109905 )
...
* fix(reef): discover trusted peer conversations
* test(reef): document temporary state cleanup
* test(gateway): include conversation discovery in method order
* chore: leave changelog to release automation
* fix(gateway): preserve configured conversation discovery
* fix(gateway): validate turns before session binding
* fix(gateway): preserve directory conversation identity
2026-07-17 13:55:30 +01:00
Wynne668
708d2020d8
fix(reef): prevent blank guard keys from denying every message ( #109667 )
...
* fix(reef): reject blank guard credentials
* fix(reef): type fetch mock in guard credential test
Co-authored-by: Cursor <cursoragent@cursor.com >
* refactor: normalize Reef guard credentials canonically
Co-authored-by: ZengWen-DT <ceng.wen@xydigit.com >
---------
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-17 10:19:21 +01:00
Peter Steinberger
0e792b6de3
refactor(channels): centralize inbound orchestration and remove internal compat ( #109716 )
...
* refactor(channels): centralize inbound turn orchestration
* refactor(runtime): remove stale compatibility paths
* chore(guards): reject internal deprecated API use
* refactor(channels): simplify core turn planning
* chore(guards): keep deprecated checks boundary-focused
* refactor(memory): keep modern config off compat barrel
* fix(msteams): preserve feedback learning
* test(channels): align modern inbound fixtures
* refactor(channels): finish modern inbound migration
* refactor(channels): tighten core inbound kernel
* fix(channels): preserve turn assembly narrowing
* test(sdk): keep runtime mock binding immutable
* test(matrix): isolate read policy runtime
* test(msteams): mock canonical reply factory
* test(slack): mock core inbound turn dispatch
* test(telegram): inject core session recorder
* test(signal): inject core session recorder
* test(googlechat): assert canonical inbound routing
* test(synology-chat): align core turn fixture
* fix(sdk): preserve direct DM runtime compat
* refactor(channels): own inbound envelope compat in core
* refactor(channels): trim inbound dispatch seams
* refactor(channels): remove redundant async wrappers
* test(synology-chat): type canonical dispatcher mock
* refactor(channels): remove remaining dead compat seams
* chore(sdk): refresh API baseline after rebase
* fix(channels): preserve direct DM identity metadata
2026-07-17 00:56:46 -07:00
Peter Steinberger
a2ec3f6904
refactor: separate external conversations from local sessions ( #109411 )
...
* feat: separate external conversations from sessions
* test: cover conversation tool authorization
* chore: refresh session schema baseline
* fix: persist effective conversation delivery text
* fix: bind conversation identity to delivery target
* fix: preserve pending conversation deliveries
* fix: make conversation delivery outcomes synchronous
* refactor: make conversation delivery durable
* fix: harden durable conversation retries
* fix: close durable conversation pre-send gaps
* fix: terminally reject invalid conversation deliveries
* refactor: route external conversations through gateway
* fix: namespace conversation delivery queue intents
* refactor: remove obsolete transcript replacement path
* test: prove conversation delivery v10 migration
* test: keep conversation action mock typed
* fix: clear conversation refactor CI gates
* test: align Reef delivery coverage
* chore: refresh Android conversation strings
* fix: harden external conversation state
* fix: close conversation race edges
* fix: preserve conversation delivery identity
* fix: replay durable conversation operations
* fix: unify agent schema at version 11
* chore: move release note context to PR
* fix: make required queue persistence force core delivery
* chore: refresh plugin SDK baseline
2026-07-17 00:09:51 -07:00
Peter Steinberger
83d82c9302
refactor(channels): persist runtime state in plugin SQLite ( #109380 )
...
* refactor(channels): move reef, msteams, matrix, zalouser file state to SQLite with doctor imports
* fix(channels): harden SQLite state migrations
* test(reef): use SQLite flow stores in receipt suites
* fix(reef): validate restored request policy
* fix(reef): retain replay state through relay window
* docs(reef): describe durable state import
* fix(reef): honor configured legacy state path
* chore: leave changelog to release flow
* fix(reef): use managed temp root in flow tests
* fix(matrix): omit undefined device id from state
2026-07-16 17:05:28 -07:00
Peter Steinberger
39cddf847e
fix(reef): keep routine agent replies from disappearing ( #109160 )
...
* fix(reef): relax guard and surface rejections
* fix(reef): preserve ordered rejection notices
* fix(reef): bound rejection notice retries
* fix(reef): persist correlated rejection notices
* fix(reef): align receipt entry typing
* test(reef): type owner notice fixtures
* fix(reef): make rejection feedback restart-safe
* fix(reef): retry rejection state reads
* fix(reef): quarantine invalid receipts
* chore(reef): leave changelog to release
* fix(reef): bind receipts to recipient identity
* refactor(reef): keep receipt types private
* test(reef): preserve notice mock call typing
* fix(reef): reconcile keys before resend recovery
* fix(reef): keep rejection recovery durable
* fix(reef): preserve in-flight receipt upgrades
* test(reef): split receipt flow coverage
* fix(reef): cap automatic guard retries
2026-07-16 12:36:22 -07:00
Sally O'Malley
11c7360af5
fix(chat): keep internal metadata out of transcripts ( #109056 )
...
* fix(chat): keep internal metadata out of transcripts
Signed-off-by: sallyom <somalley@redhat.com >
* fix(gateway): harden control reply projection
Co-authored-by: sallyom <somalley@redhat.com >
* chore: leave changelog to release tooling
---------
Signed-off-by: sallyom <somalley@redhat.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-16 10:47:43 -07:00
pick-cat
419c61a590
fix(reef): add WebSocket handshake timeout to inbox connection ( #109052 )
...
* fix(reef): add WebSocket handshake timeout to inbox connection
Stalled Reef relay TCP peers that never complete the HTTP upgrade could
hang createReefWebSocket forever. Bound the handshake at 30s like sibling
channel WebSocket clients.
Co-authored-by: Cursor <cursoragent@cursor.com >
* test(reef): prove inbox WebSocket handshake timeout on never-upgrade peer
Co-authored-by: Cursor <cursoragent@cursor.com >
* chore(ci): retrigger checks after OpenGrep install flake
Co-authored-by: Cursor <cursoragent@cursor.com >
* test(reef): simplify handshake timeout proof
Co-authored-by: Pick-cat <huang.ting3@xydigit.com >
* style(reef): satisfy promise executor lint
---------
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-16 10:29:01 -07:00
Peter Steinberger
f89c624ebb
fix(reef): bound inbox WebSocket frames ( #108886 )
2026-07-16 03:17:52 -07:00
pick-cat
9026b9f4ac
fix(reef): bound relay HTTP JSON response body reads ( #106456 )
...
* fix(reef): bound relay HTTP JSON response body reads
* test(reef): cover relay response boundaries
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-16 01:00:35 -07:00
Peter Steinberger
ff4d854167
fix(reef): migrate legacy peer trust config ( #108417 )
...
* fix(reef): migrate legacy peer trust config
* chore(reef): leave changelog to release flow
* build(reef): refresh bundled config metadata
* fix(reef): keep identity scope internal
2026-07-15 11:37:32 -07:00
Peter Steinberger
f810fb35d5
refactor(reef): centralize peer trust in SQLite ( #108375 )
...
* feat(plugin-sdk): support removing pairing requests
* refactor(reef): centralize peer trust in SQLite
* chore: defer Reef release note
* fix(reef): share runtime state across module instances
* refactor(reef): narrow trust store boundary
* test(reef): pass config to account description
2026-07-15 10:21:54 -07:00
Peter Steinberger
c56d1bbbbb
fix(reef): send through the connected gateway ( #107373 )
...
* fix(reef): route outbound through gateway
* chore: keep Reef release note in PR
2026-07-14 04:08:36 -07:00
Peter Steinberger
d361b4ccb8
feat(reef): headless openclaw reef CLI for agent-driven registration and pairing
...
Adds a non-interactive command surface (openclaw reef register|status|friend code|request|list|remove) so an agent can claim a handle and manage guarded friendships when its owner asks, without the interactive wizard. --json emits machine-readable output for automation. Registration is crash-safe and idempotent: guard defaults are provider-coupled, the full config is validated before the single-use magic-link token is consumed, a duplicate-handle claim recovers by proving key ownership and reconciling the relay's request policy, the exchanged session is cached scoped to relay+email (never printed) so reruns recover, one state dir is pinned to one identity, and friend removal revokes both the pin and the allowlist entry. Manifest gains commandAliases/onCommands so the CLI resolves; docs cover the agent-driven path.
2026-07-13 16:23:13 -07:00
Peter Steinberger
6315dd8e2d
fix(reef): adopt self-initiated friendships via durable outbound-intent markers
2026-07-13 13:03:55 -07:00
Peter Steinberger
2d5803a250
fix(reef): use bundled-channel-entry contract so channelConfigs surfaces load
2026-07-13 08:52:14 -07:00
Peter Steinberger
882b2fe900
feat(channels): bundle Reef guarded claw-to-claw channel ( #106232 )
...
* feat(channels): bundle Reef guarded claw-to-claw channel
Moves the Reef channel extension from openclaw/reef into the bundled extensions tree with the wire protocol vendored under extensions/reef/protocol. Includes channelConfigs manifest metadata, runtime status reporting via setStatus/buildAccountSnapshot, abort-aware inbox shutdown, monotonic device-auth timestamps, and immutable-model guard admission (dated snapshots plus documented gpt-5.6 ids).
* fix(reef): pin zod exactly per dependency pin guard
* style(reef): satisfy extension lint gates
Curly braces in vendored protocol, explicit type re-exports, typed catch callbacks, Object.assign over map-spread, abort-aware loop restructure.
* fix(reef): CI gates — knip workspace, boundary tsconfig, facade imports, cycle break, contract baselines
- knip: reef workspace project includes vendored protocol/ (owns noble deps)
- tsconfig: conform to canonical extension package-boundary include/exclude; add @openclaw/plugin-sdk devDependency
- imports: channel-inbound/channel-outbound facades instead of deprecated subpaths
- protocol: home ReplayStore contract in envelope.ts to break the envelope<->replay type cycle
- baselines: reef in unguarded runtime-api list; regenerate bundled channel config metadata
* feat(reef): plugin catalog cover art, channel label, changelog revert
* fix(reef): drop unused error-class exports, register lint suppression
* fix(reef): knip entry surface for vendored protocol, explicit WebSocketLike export
2026-07-13 05:17:44 -07:00
