Commit Graph

38553 Commits

Author SHA1 Message Date
Shakker
dd5b96c11d feat: expose provider auth evidence lookup 2026-04-30 00:13:12 +01:00
Shakker
1d1edca92f feat: add setup auth evidence metadata 2026-04-30 00:13:12 +01:00
Marcus Castro
4cba08df01 fix(whatsapp): remove exposeErrorText config (#74642)
* fix(whatsapp): remove exposeErrorText config

* fix(whatsapp): mark internal system events trusted
2026-04-29 20:03:58 -03:00
Peter Steinberger
426107d2f8 fix(telegram): retry invalid native quotes 2026-04-30 00:02:13 +01:00
Vincent Koc
d115faa367 chore: update security codeowners team 2026-04-29 15:57:17 -07:00
Vincent Koc
847d8fa0e1 chore(ci): add Plugin SDK reply CodeQL quality shard
Adds a focused non-security CodeQL quality shard for Plugin SDK reply/session delivery runtime contracts.
2026-04-29 15:56:41 -07:00
Peter Steinberger
6acd588bdd test(ci): update changed gate expectations 2026-04-29 23:49:48 +01:00
Vincent Koc
8f50920c45 chore(ci): add session diagnostics CodeQL quality shard
Adds a focused non-security CodeQL quality shard for session diagnostics, delivery queues, and related diagnostic contracts.
2026-04-29 15:29:03 -07:00
Peter Steinberger
c7e2aceb05 ci(dup): guard duplicate scan coverage 2026-04-29 23:24:57 +01:00
Peter Steinberger
4c712d3372 fix: add bundled plugin deps repair command 2026-04-29 23:23:14 +01:00
Peter Steinberger
9a3a341d93 refactor(channels): route remaining turns through kernel 2026-04-29 23:16:16 +01:00
Peter Steinberger
9a9cd0c0ab refactor(channels): add shared turn kernel 2026-04-29 23:16:16 +01:00
Peter Steinberger
4396361f35 fix(config): regenerate base schema help 2026-04-29 23:09:39 +01:00
Peter Steinberger
fa467c20e3 test: allow browser indirect zod runtime dependency 2026-04-29 23:03:06 +01:00
Vincent Koc
6717f8b334 chore(ci): add plugin trust CodeQL shard
Adds the plugin trust-boundary CodeQL security shard on Blacksmith and documents the rollout scope.
2026-04-29 15:02:06 -07:00
Peter Steinberger
a31b55a8d8 fix(config): document queue help options 2026-04-29 23:01:39 +01:00
Peter Steinberger
18faf22e15 fix(plugins): mirror global-agent runtime dependency (#74593)
* fix(plugins): mirror global-agent runtime dependency

* fix(plugins): update bundled dependency drift guard
2026-04-29 21:55:46 +00:00
Peter Steinberger
36ff8d78e4 fix: explain stuck session diagnostics 2026-04-29 22:55:27 +01:00
Peter Steinberger
4a6e10ece8 feat: default queueing to steer 2026-04-29 22:48:10 +01:00
Peter Steinberger
83267e99b0 chore: update dependencies 2026-04-29 22:42:45 +01:00
Vignesh Natarajan
05627f797e Docs: skip unsupported Mintlify locale nav 2026-04-29 14:38:56 -07:00
Michael Marr
aaf4cc6862 docs(slack): warn that groupPolicy allowlist requires channel IDs not names (#53112) 2026-04-29 14:36:38 -07:00
Gabriel A. Mays
f0f1635f9f Docs: add VPS admin hardening note (#54685) 2026-04-29 14:36:33 -07:00
Vincent Koc
71ab341f46 chore(ci): rename CodeQL auth security shard
Renames the default auth/secrets CodeQL security category from the generic javascript-typescript label to core-auth-secrets.

Proof:
- Branch CodeQL security run https://github.com/openclaw/openclaw/actions/runs/25134871512 passed on 1d9f727bfd.
- Core auth/secrets analysis 1200412263 returned 0 results.
- Branch open CodeQL alerts: none.
- Workflow Sanity, Blacksmith Testbox, Blacksmith Build Artifacts Testbox, and OpenGrep PR Diff passed.

Scope is label/config only: same paths, query pack, filters, timeout, and runner.
2026-04-29 14:32:34 -07:00
Peter Steinberger
b552e31563 test: update install smoke workflow contract 2026-04-29 22:31:17 +01:00
Peter Steinberger
ebff12e84f fix(agents): finalize embedded lifecycle backstop 2026-04-29 22:29:07 +01:00
Vignesh Natarajan
d51af16fab Docs: document inferred commitments 2026-04-29 14:28:22 -07:00
Peter Steinberger
21e2168b8f ci: shard install smoke release checks 2026-04-29 22:25:55 +01:00
Vincent Koc
bdbce3b1c2 fix(ci): align postpublish mirror fixtures 2026-04-29 14:25:26 -07:00
Peter Steinberger
fd8fae7af2 ci(dup): scan docs and security scripts 2026-04-29 22:23:52 +01:00
Vincent Koc
9b536ed3a9 fix(ci): declare bundled root mirrors 2026-04-29 14:20:06 -07:00
Peter Steinberger
6e351f2f05 docs: prefer clawsweeper mentions in skill 2026-04-29 22:18:44 +01:00
Vignesh Natarajan
aecde2b3ac Agents: simplify inferred commitment config (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
11771ec172 Agents: annotate post-compaction system event trust (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
7451415f36 Agents: fix heartbeat rebase conflict (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
f569ed0803 Agents: use runtime config for commitments command (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
95bf450dc9 Agents: address inferred commitments review (#74189) 2026-04-29 14:14:53 -07:00
Vignesh Natarajan
8e4035d09a Agents: add inferred commitments 2026-04-29 14:14:53 -07:00
clawsweeper[bot]
95a1356278 fix: Found one reliability bug: the new Docker-daemon-unavailable bran (#74520)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:10:38 -07:00
clawsweeper[bot]
cdb424a642 fix: Found one regression in the runtime dependency staging cache. The (#74517)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:09:31 -07:00
clawsweeper[bot]
12a82aa788 fix: Found two heartbeat regressions in the changed behavior: default (#74523)
* fix: Found two heartbeat regressions in the changed behavior: default

* fix: repair heartbeat task-block stripping

---------

Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-04-29 14:09:11 -07:00
clawsweeper[bot]
0b48a69ff2 fix: Found two actionable issues in the bundled runtime-deps staging c (#74526)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:08:57 -07:00
clawsweeper[bot]
27fafa4754 fix: Found two release-validation regressions in the new focused live- (#74562)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:08:45 -07:00
clawsweeper[bot]
7b97af4899 fix: Found one narrow regression risk in the new Ollama tool-call name (#74563)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:08:33 -07:00
clawsweeper[bot]
6378de91e7 fix: Found one low-severity route-question recall regression in the co (#74582)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:08:21 -07:00
clawsweeper[bot]
fbe41fbdfc fix(ci): Found one low-severity diagnostic bug in the new Full Release Val (#74513)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:08:07 -07:00
clawsweeper[bot]
296d07c22f fix(ci): Found one low-severity formatting bug in the new loose-list parag (#74518)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:07:55 -07:00
Peter Steinberger
0e46240543 docs: document clawsweeper autofix mode 2026-04-29 22:07:47 +01:00
clawsweeper[bot]
e4edefd0fc fix: Found one regression in model-list availability heuristics for pr (#74524)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:07:42 -07:00
clawsweeper[bot]
22ea08997e fix: The one-line picker change hides unauthenticated catalog rows in (#74530)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 14:07:29 -07:00