vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-02 18:11:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
73,908 Commits 1,843 Branches 149 Tags
dac0ef6f0ecbfae5ea46f2a8a168b39fe5fb6a77
Commit Graph

1382 Commits

Author SHA1 Message Date
pash-openai
e52354ea13 fix(build): pin typebox to a published release (#116333) 2026-07-30 09:58:51 +00:00
Peter Steinberger
ec46d30fbf fix(codex): preserve requester across approval bridge (#116152) 2026-07-29 18:16:51 -07:00
Brian Snyder
cce8a21492 fix(codex): accept finalizer prompt echoes (#116044) 
Co-authored-by: BSnizND <199837910+BsnizND@users.noreply.github.com>
 2026-07-30 09:03:01 +08:00
Peter Steinberger
a19132e7eb fix(codex): prevent approval promotion from blocking unattended runs (#116117) 
* fix(codex): honor hook approval ownership

* fix(codex): keep permission grants human-gated
 2026-07-29 17:00:16 -07:00
Peter Steinberger
b9377f6048 fix(codex): enforce native MCP tool access (#116054) 
* fix(codex): enforce native MCP tool access

* chore: remove prerelease changelog entry

* chore: restore changelog to main

* refactor(codex): build MCP server patches from entries
 2026-07-29 17:06:49 -04:00
Stellar鱼
42e23c11e0 feat(plugins): allow per-turn tool narrowing in prompt hooks (#114151) 
* feat(plugins): allow per-turn tool narrowing in prompt hooks

* fix(hooks): keep prompt tool policy baseline internal

* fix(test): track active tools in embedded session fixture

* test(agents): preserve active tool fixture state

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-07-30 03:28:45 +08:00
Josh Lehman
6beaff450e fix(codex): avoid transcript mirror snapshot churn (#115070) 2026-07-29 11:59:14 -07:00
WhatsSkiLL
d4436e9a17 perf(codex): stream large CLI session JSONL scans (#115997) 
* fix(codex): stream CLI session JSONL scans

* perf(codex): scan JSONL in bounded chunks

* perf(codex): keep small JSONL reads fast

* perf(codex): avoid rescanning long rollout records

* test(codex): prove streamed rollout recovery

* refactor(codex): isolate JSONL line scanning

* fix(codex): avoid env ratchet token in relay constant

---------

Co-authored-by: IWhatsskill <284122573+IWhatsskill@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-07-30 02:35:41 +08:00
Naka Masato
68dbf92281 fix(plugins): scope Codex relay with tool matchers (#109603) 
* fix(plugins): scope Codex relay matchers

Co-authored-by: Masato Naka <masatonaka1989@gmail.com>

* fix(plugins): reject sparse tool hook matchers

* test(plugins): cover mixed relay matcher scopes

* fix(plugins): fail closed on invalid policy matchers

* test(plugins): prove composed relay policy scope

* fix(plugins): keep matcher scope internal

* fix(plugins): satisfy matcher static checks

* fix(plugins): enforce canonical tool hook matchers

* fix(codex): project native hook matcher aliases

* fix(plugins): scope Codex relay with tool matchers

* chore: keep release changelog maintainer-owned

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 2026-07-30 01:39:08 +08:00
Peter Steinberger
34e81ca0dc feat(codex): support the openai-api-curated marketplace wire name (#115955) 2026-07-29 11:07:16 -04:00
Vincent Koc
afe74b10fc test(codex): drive plugin discovery deadline deterministically (#115927) 2026-07-29 22:05:31 +08:00
Peter Steinberger
8ec4a059fc fix(codex): keep stressed inference turns isolated and observable (#115893) 2026-07-29 09:11:20 -04:00
Peter Steinberger
32b2e161a5 fix(codex): harden app inventory invalidation and targeted publishes (#115866) 
* fix(codex): harden app inventory invalidation and targeted publishes

* fix(codex): scope inventory invalidation and stop renewing unrefreshed rows

* fix(codex): retire scoped invalidations incrementally across covering refreshes

* fix(codex): renew targeted inventory freshness when refresh covers the cached scope

* fix(codex): replace expired inventory entries instead of merging into them
 2026-07-29 08:33:26 -04:00
Peter Steinberger
44d011380c fix(codex): classify curated marketplace load failures by sync root (#115865) 
* fix(codex): classify curated marketplace load failures by sync root

* test(codex): assert deny-all patch contract instead of racy plugin/list step
 2026-07-29 08:07:28 -04:00
Peter Steinberger
ef63df8afd fix(memory): preserve taint across transcript runtimes (#115850) 
* fix(memory): propagate taint across transcript owners

* test(copilot): consolidate taint journal coverage

* fix(codex): keep event projector within lint budget

* fix(codex): preserve projector merge-head budget
 2026-07-29 08:06:17 -04:00
Peter Steinberger
e6fec4d51b fix(codex): keep completed answers over audit gaps (#115849) 2026-07-29 06:52:21 -04:00
stevenlee-oai
a00438a867 fix(codex): restore connected apps for token-authenticated runs (#115075) 
* fix(codex): restore connected apps for token-authenticated runs

* fix(codex): keep app inventory protocol types private

* fix(codex): align native runtime with Codex 0.146.0

Co-authored-by: Steven Lee <stevenlee@openai.com>

* fix(codex): clean up latest app-server integration

Co-authored-by: Steven Lee <stevenlee@openai.com>

* fix(codex): keep internal protocol types private

* fix(ci): repair current main Codex landing gates

* fix(ci): format inherited code mode matrix

* fix(codex): reconcile native app-server contracts with main

Prepare a verified GitHub-hosted mainline merge while preserving the reviewed Codex 0.146.0 fixes and canonical OpenAI authentication.

Co-authored-by: Steven Lee <stevenlee@openai.com>

* fix(codex): keep QA evidence in its owning plugin

Resolve the current-main Code Mode test rename without resurrecting the retired core test path.

Co-authored-by: Steven Lee <stevenlee@openai.com>

* fix(codex): enforce canonical OpenAI app-server auth

Reject retired provider aliases without runtime compatibility, direct operators to the doctor migration, and remove the redundant OpenAI API-key predicate.

Co-authored-by: Steven Lee <stevenlee@openai.com>

* chore(codex): reconcile latest main dependency graph

Preserve current main dependency changes while preparing the original Codex PR for an ancestry-preserving signed mainline merge.

Co-authored-by: Steven Lee <stevenlee@openai.com>

* fix(codex): unify bundled Codex 0.146 runtimes

Keep the ACP adapter on the same 0.146.0 Codex release as the managed runtime, remove obsolete 0.145.0 platform artifacts and unused semver compatibility, and preserve the latest main dependency upgrades.

Co-authored-by: Steven Lee <stevenlee@openai.com>

---------

Co-authored-by: Peter Steinberger <peter@steipete.me>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-29 06:21:25 -04:00
Peter Steinberger
7bc453f508 fix(codex): classify hosted search timeouts (#115837) 2026-07-29 06:21:11 -04:00
Vincent Koc
25c375e47f refactor: reuse canonical record guards (#115810) 
* docs(agents): standardize canonical record guards

* refactor(model-catalog): use canonical record guard

* refactor(scripts): use canonical record guard

* refactor(ui): use canonical record guard

* refactor(codex): use canonical record guard

* refactor(agents): use canonical record guard

* refactor(sessions): use canonical record guard

* refactor(doctor): use canonical record guard

* refactor(infra): use canonical record guard
 2026-07-29 11:43:36 +02:00
Peter Steinberger
4232126bba chore: update dependencies across workspace (#115677) 
* chore(deps): update dependencies

* fix(deps): restore CI compatibility
 2026-07-29 05:16:42 -04:00
Peter Steinberger
c5d0b7dd39 refactor: retire legacy provider and secret paths (#115655) 
* refactor: retire legacy provider and secret paths

* fix: remove stale cache retention import

* test: remove retired secret marker fallback
 2026-07-29 04:36:20 -04:00
Peter Steinberger
a7cecc85d3 fix(codex): safely deliver remote workspace files and images (#115668) 
* fix(codex): safely deliver remote workspace files and images

* chore(codex): keep release notes in pull request

* style(scripts): repair current main formatting gate

* refactor(codex): remove unused remote filesystem RPC types

* docs: refresh generated documentation map

* test(codex): type remote workspace reader mock

* fix(ci): preserve plugin test ownership boundary

* refactor(codex): split remote transfer protocol and projection types
 2026-07-29 03:37:50 -04:00
Peter Steinberger
6090386dc7 fix: make Codex harness caching and benchmark parity exact (#115663) 2026-07-29 03:33:36 -04:00
Peter Steinberger
fed427a50e fix(codex): scope ephemeral runs to physical session bindings (#115601) 
* fix(codex): scope ephemeral session bindings

* test(codex): normalize startup assertion errors
 2026-07-29 01:56:46 -04:00
Kevin Lin
310396f1e1 fix(codex): enable configured apps in service sessions (#115433) 
* fix(codex): attest configured plugin apps before turns

* fix(codex): tighten plugin thread config

* fix(codex): expose account app admission wrapper
 2026-07-28 22:39:20 -07:00
joshavant
a6d58f0e6d fix(codex): attest safe Node network options 2026-07-28 23:22:52 -05:00
Peter Steinberger
d5567ed61e fix: prevent duplicate agent turns and slow Codex harness runs (#115474) 
* fix(agents): deduplicate turns and speed up Codex harnesses

* test(agents): keep keyed transcript fixtures type-safe

* fix(codex): simplify linear native skill traversal

* fix(agents): preserve admitted SQLite turns during orphan repair

* test: split session user idempotency regressions
 2026-07-28 22:56:12 -04:00
Shakker
f6bd2b6518 fix: scope subagent handoff to direct tools (#115466) 2026-07-29 02:22:09 +01:00
Shakker
b2efac5134 fix: clarify native subagent completion handoff 2026-07-29 02:22:09 +01:00
Peter Steinberger
a49a5bfa74 perf(codex): serve catalog pages stale-while-revalidate and skip warm-client start resolution (#115403) 
* perf(codex): serve catalog pages stale-while-revalidate and skip warm-client start resolution

* fix(codex): skip empty-tool runtime discovery
 2026-07-28 19:24:39 -04:00
Ayaan Zaidi
895bf61ea0 feat(agents): surface watched-session awareness to the model (#114835) 2026-07-29 07:39:20 +09:00
Alix-007
4ce534aec2 fix(codex): bound Computer Use process inspection (#109091) 
* fix(codex): bound Computer Use process repair

Co-authored-by: Alix-007 <li.long15@xydigit.com>

* test(codex): isolate review policy fixtures

Co-authored-by: Alix-007 <li.long15@xydigit.com>

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-07-28 17:14:30 -04:00
Peter Steinberger
826beb724d feat(skills): enable self-learning review for Codex sessions (#114501) 
* feat(skills): enable Codex experience review

* style(codex): keep event projector within ratchet
 2026-07-28 14:21:42 -04:00
Peter Steinberger
0f91859382 fix: keep isolated gateway workspaces and skills inside state dir (#114487) 
* fix: isolate non-default state workspaces and skills

* fix(codex): isolate native personal skills

* chore: refresh plugin SDK API manifest

* fix: keep SDK manifest generation scoped

* refactor(codex): keep isolation plugin-local

* test: satisfy optional skill snapshot typing

* refactor(codex): extract thread lifecycle preflight
 2026-07-28 13:48:21 -04:00
Peter Steinberger
5de0366d95 fix(codex): stabilize prompts and expose real cache regressions (#115238) 
* fix(codex): stabilize prompt caching and measure uncached work

* test(codex): refresh stable dynamic-tool prompt snapshots

* fix(qa): account for cache rewrites and incomplete telemetry

* fix(qa): reject inconsistent measured cache totals

* fix(qa): preserve live profile eligibility and parity topology

* fix(qa): extract acyclic runtime parity usage contract
 2026-07-28 13:26:04 -04:00
Vincent Koc
8d5a652ed8 Merge pull request #115211 from openclaw/fix/realtime-oauth-supported-protocol 
* commit 'b90f2d1db8bcb65a86d2785e3956b419c5114b25':
  test(ui): reset config route hash between cases
  fix(talk): remove unsupported Codex OAuth realtime
 2026-07-29 00:15:00 +08:00
Peter Steinberger
924f91ce47 refactor(sessions): isolate legacy transcript fixtures (#115231) 
* test(sessions): isolate legacy file fixtures

* test(sessions): hide fixture-only manager type
 2026-07-28 11:56:16 -04:00
Peter Steinberger
9ae79eed2d perf(catalog): cadence-proof provider caches and parallelize the Claude scan (#115259) 2026-07-28 11:37:37 -04:00
Peter Steinberger
d23ce0530b test(codex): de-flake attempt turn-watch timing tests (#115258) 2026-07-28 11:33:37 -04:00
Peter Steinberger
2160b97cdc refactor(config): retire compaction truncateAfterCompaction gate (#115206) 2026-07-28 11:30:50 -04:00
Vincent Koc
b90f2d1db8 Merge remote-tracking branch 'origin/main' into pr-115211-prep 
* origin/main:
  fix: preserve skill proposals across apply crashes and workspace moves (#114535)
  fix(qa): run maturity Docker scenarios through the aggregate scheduler (#114447)
  refactor(cli): unify configured model rows onto the shared row pipeline (#115239)
  fix(ui): stop modal autofocus steal after the open animation (#115168)
  fix(process): preserve long supervisor timeout deadlines (#115230)
  fix(slack): preserve pasted inbound tables (#115163)
  fix(codex): restore trajectory capture for canonical session targets (#115220)
  refactor(qa): make scenario selection taxonomy-owned (#114055)
  feat(plugins): match shared models across vendor-namespaced catalog ids (#115210)
 2026-07-28 22:48:56 +08:00
Peter Steinberger
49c62f3505 fix(codex): restore trajectory capture for canonical session targets (#115220) 
Attempt dispatch stopped emitting legacy `sqlite:` session-file markers in
#113233, which replaced SessionTranscriptRuntimeTarget.sessionFile with
storePath and started passing the canonical session key instead. The Codex
plugin still re-derived its own SQLite gate from that string, so
parseSqliteSessionFileMarker never matched and every Codex run bailed out
with reason "non-sqlite-session-target".

The host already owns SQLite target resolution and identity validation: it
returns a recorder only when a committed session row resolves. Drop the
stale marker gate and the now-dead trajectorySessionFile plumbing, leaving
the host-provided recorder as the single gate.
 2026-07-28 10:29:19 -04:00
Vincent Koc
861b9ccce1 fix(talk): remove unsupported Codex OAuth realtime 2026-07-28 21:32:38 +08:00
Peter Steinberger
c0df3cf0b9 fix(codex): preserve startup diagnostics on initialize timeout (#115161) 
* fix(codex): preserve app-server startup diagnostics

* chore: leave release notes to release automation
 2026-07-28 08:08:12 -04:00
Peter Steinberger
92b4af2dc8 improve(codex): reuse live app-server threads safely (#115089) 2026-07-28 05:08:23 -04:00
Peter Steinberger
0d7fb8eb39 refactor(fs): adopt fs-safe 0.5 core primitives (#113705) 
* refactor(fs): unify exclusive file publication

* fix(fs): fence stale lock reclamation

* refactor(fs): bound wiki scans and secret reads

* chore(fs): finalize fs-safe 0.5 compatibility

* fix(fs): preserve publication ownership and legacy mode

* fix(fs): fail closed on unverifiable lock owners

* fix(fs): preserve concurrent backup publications

* refactor(fs): preserve ambiguous backup outputs

* fix(fs): preserve mixed-version lock coordination

* refactor(file-transfer): adopt fs-safe archive extraction

* refactor(fs): add bounded walk and secret seams

* refactor(auth): replace proper-lockfile with fs-safe

* fix(fs): honor Windows mode override casing

* refactor(snapshot): adopt fs-safe publication

* refactor(memory-wiki): adopt prunable root walks

* refactor(fleet): adopt bounded archive restore

* fix(fs): preserve post-publication ownership receipts

* refactor(fs): harvest final fs-safe primitives

* style(fs): clean harvest lint

* chore(plugin-sdk): refresh move helper API baseline

* refactor(snapshot): adopt native Windows ACL facts

* refactor(fs): adopt hardened atomic outputs

* fix(fs): scope lock reentrancy to logical owners

* chore(config): lower env var count budget

* fix(deps): adopt published fs-safe 0.5.0

* fix(ci): align SDK surface ratchets

* fix(ci): regenerate SDK API baseline after rebase

* fix(fs): preserve owner-scoped file lock nesting

* fix(ci): refresh SDK API baseline for file locks

* fix(fs): separate SQLite and file lock reentrancy

* fix(imessage): bound pinned attachment reads

* fix(agents): narrow session-key lock options

* fix(fs): preserve fs-safe 0.5 compatibility contracts

* fix(windows): retain private SQLite directory owner

* refactor(sqlite): centralize exclusive coordinator

* refactor(snapshot): isolate Windows ACL policy

* fix(windows): retain snapshot ACL inspector

* chore(config): realign env budget after rebase

* test(agents): accept canonical sandbox escape error

* docs(changelog): defer fs-safe release note
 2026-07-28 03:41:47 -04:00
Peter Steinberger
6dbe7ff1e2 perf(catalog): memoize probes and single-flight identical list requests (#114961) 2026-07-28 02:00:27 -04:00
Peter Steinberger
27f62f3e8e fix(codex): verify native patches and honor fast mode (#114907) 2026-07-28 00:00:49 -04:00
Peter Steinberger
f036ed43a2 fix(codex): prevent long conversations slowing on thread resume (#114882) 
* fix(codex): reduce native thread resume overhead

* test(codex): register native attempt connection shard

* fix(codex): keep oversized rollouts on bounded fast path
 2026-07-27 23:56:44 -04:00
Peter Steinberger
577a0642fa fix(plugin-sdk): classify loopback hosts consistently (#114832) 
* fix(plugin-sdk): expose loopback host classifier

* fix(ollama): remove stale host normalizer import

* chore: keep release notes in PR context
 2026-07-27 22:55:44 -04:00