Commit Graph

41122 Commits

Author SHA1 Message Date
Pavan Kumar Gondhi
ea75cd8971 Gate zalouser startup name matching [AI] (#77411)
* fix: gate zalouser startup name matching

* addressing codex review

* docs: add changelog entry for PR merge
2026-05-04 22:47:19 +05:30
Pavan Kumar Gondhi
37c0520a0b fix(device-pair): require pairing scope for pair command [AI] (#76377)
* fix: restrict device pairing command access

* addressing review-skill

* addressing review-skill

* addressing codex review

* address codex review feedback

* addressing codex review

* addressing codex review

* addressing codex review

* addressing codex review

* docs: add changelog entry for PR merge
2026-05-04 22:12:06 +05:30
Vincent Koc
30e259b9c5 test(qa-lab): accept native Windows paths 2026-05-04 09:20:03 -07:00
Vincent Koc
9008031e96 fix(qa-channel): settle aborted bus polls 2026-05-04 09:20:03 -07:00
Vincent Koc
6c2573e37a test(anthropic-vertex): accept native ADC home paths 2026-05-04 09:20:03 -07:00
Vincent Koc
2fe2dbdb7d test(openshell): accept native symlink targets 2026-05-04 09:20:02 -07:00
Vincent Koc
3d3b0dad77 test(whatsapp): accept native Windows auth paths 2026-05-04 09:20:02 -07:00
Vincent Koc
15b9966781 test(telegram): accept native Windows session file paths 2026-05-04 09:20:02 -07:00
Vincent Koc
0dd30c804c test(memory): cover native Windows paths and locks 2026-05-04 09:20:02 -07:00
Vincent Koc
fa1d826a41 test(matrix): cover native Windows file semantics 2026-05-04 09:20:02 -07:00
Vincent Koc
7c6bf331b8 test(feishu): accept native oversized body resets 2026-05-04 09:20:02 -07:00
Vincent Koc
4f2f5e0461 test(feishu): cover native Windows webhook and workspace paths 2026-05-04 09:20:02 -07:00
Vincent Koc
48a3a23d40 test(discord): accept native voice temp paths 2026-05-04 09:20:02 -07:00
Vincent Koc
40f92b8d78 test(diffs): use native viewer asset file URLs 2026-05-04 09:20:02 -07:00
Vincent Koc
981767516d test(bluebubbles): accept native contact database paths 2026-05-04 09:20:02 -07:00
Vincent Koc
03d04c243b test(acpx): cover Windows extension test paths 2026-05-04 09:20:02 -07:00
Michael Appel
c1da0ddd54 fix(security): block workspace env from overriding Windows system root paths [AI] (#74458)
* fix: address issue

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address codex review feedback

* fix: address codex review feedback

* changelog: PR #74458

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-05-04 10:13:50 -06:00
zhang-guiping
1df2ac442a fix #77296: [Bug]: Plugin manifest skills field not published to agent skill discovery paths (#77328)
Summary:
- The PR publishes enabled plugin-declared skill directories into a generated `~/.openclaw/plugin-skills` syml ... plugin-skill precedence, cleans stale generated links, adds regression coverage, and updates the changelog.
- Reproducibility: yes. source-based. Current main resolves plugin-declared skill directories for prompt loadi ... ble generated discovery path, and the linked issue provides a concrete ENOENT path for a plugin `SKILL.md`.

Automerge notes:
- Ran the ClawSweeper repair loop before final review.
- Included post-review commit in the final squash: fix: resolve issue #77296
- Included post-review commit in the final squash: fix: publish plugin manifest skills for agent discovery
- Included post-review commit in the final squash: fix(clawsweeper): address review for automerge-openclaw-openclaw-7732…

Validation:
- ClawSweeper review passed for head 0f52865ee3.
- Required merge gates passed before the squash merge.

Prepared head SHA: 0f52865ee3
Review: https://github.com/openclaw/openclaw/pull/77328#issuecomment-4371415857

Co-authored-by: zhang-guiping <zhang.guiping@xydigit.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-04 15:31:53 +00:00
Eva
cb38535875 [plugin sdk] Project session extension slots (#75609)
Merged via squash.

Prepared head SHA: d9b670a867
Co-authored-by: 100yenadmin <239388517+100yenadmin@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-05-04 08:04:27 -07:00
Pavan Kumar Gondhi
e3364ae3bd fix(qqbot): keep private commands off framework surface [AI] (#77212)
* fix: keep private qqbot commands off framework surface

* addressing codex review

* docs: add changelog entry for PR merge
2026-05-04 20:23:51 +05:30
hcl
d5edeae6ee fix(memory): prevent memory-hit starvation in corpus=all by capping per-corpus results (#77337) (#77356)
Summary:
- The PR adds balanced, backfilled all-corpus result merging for `memory_search` and `wiki_search`, regression tests, and a changelog entry for #77337.
- Reproducibility: yes. Current main is source-reproducible: both affected paths fetch both corpora for `corpus=all`, raw-sort wiki integer scores against memory similarity scores, and slice to `maxResults`.

Automerge notes:
- Ran the ClawSweeper repair loop before final review.
- Included post-review commit in the final squash: fix(memory): prevent all-corpus memory hit starvation

Validation:
- ClawSweeper review passed for head a5b4f6a932.
- Required merge gates passed before the squash merge.

Prepared head SHA: a5b4f6a932
Review: https://github.com/openclaw/openclaw/pull/77356#issuecomment-4371767658

Co-authored-by: HCL <chenglunhu@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-04 14:49:14 +00:00
Kevin Lin
89db1e5440 feat(cron): surface run diagnostics in status (#75928)
* feat(cron): surface run diagnostics in status

* docs: add cron diagnostics changelog

* fix(cron): preserve latest run diagnostics

* test(cron): update diagnostics regression deps
2026-05-04 07:05:28 -07:00
Eva
8afc9ef73c [plugin sdk] Harden finalize retry and run context cleanup (#75600)
Merged via squash.

Prepared head SHA: ec58a6212b
Co-authored-by: 100yenadmin <239388517+100yenadmin@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-05-04 07:04:22 -07:00
Val Alexander
042d7b8823 fix(telegram): clean up tool-only previews 2026-05-04 08:55:41 -05:00
Dallin Romney
fc1f1f4fdf fix(tui): preserve code spans, code blocks, and dotted/hyphenated identifiers from long-token sanitizer (#77335)
The display sanitizer's long-token chunker (`\S{33,}` -> 32-char chunks
joined by spaces) was injecting literal spaces inside inline code spans,
fenced code blocks, and bare identifiers it didn't recognize. Tokens like
`requireConfirmationForMutatingActions`, `ubuntu-budgie-desktop-environment`,
and `binary_sensor.sense_energy_monitor_power` rendered with mid-word
spaces, contaminating copy/paste of package names, entity IDs, and shell
line-continuations.

Fix:

- Make sanitizer code-aware: split text into fenced/inline-code segments
  and prose, and only run the chunker on prose segments. Code regions
  pass through verbatim.
- Widen `isCopySensitiveToken` to use the punctuation-stripped candidate
  for all classification, and accept any `FILE_LIKE_RE` token that
  contains `_`, `-`, or `.` (covers package names, dotted IDs, kebab
  flags). Picks up the goals of #69340 and #39565.
- Skip chunking for symbol-only runs (box-drawing rows, dashes, equals)
  so table borders aren't corrupted.
- Preserve the original goal of narrow-terminal protection: long
  unidentifiable prose tokens (e.g. accidental base64 dumps) are still
  chunked so they don't blow out terminal layout.

Security ordering preserved: ANSI strip / control-char strip / binary
redaction still run on the whole string before segmentation, so code
regions cannot smuggle escapes, control characters, or binary garbage
past the sanitizer.

16 new regression tests cover: camelCase config keys in inline code,
hyphenated package names (bare and in code), dotted entity IDs (bare
and in code), backtick and tilde fenced blocks, base64-like blobs in
code, prose-token chunking unchanged, prose-around-code mixed content,
box-drawing horizontal rules, multi-line shell `\\` continuations,
plus three explicit security-ordering tests asserting ANSI/control/
binary stripping still runs inside code segments.

Fixes #48432, #39505.
Supersedes #69340, #39565 (carries forward both ideas in a more
general fix). Carries forward the code-fence-aware approach from the
closed #48445.
2026-05-04 21:50:40 +08:00
Josh Lehman
0b3a86cab0 docs(changelog): restore 2026.5.3 release notes 2026-05-04 06:49:27 -07:00
Dallin Romney
5f373ae4d3 fix(tui): abort run during pre-event waiting gap (#77199)
* fix(tui): abort run during pre-event waiting gap

Track the runId returned from chat.send so pressing Esc while `activeChatRunId` is still null aborts the in-flight run instead of repeatedly printing "no active run". Identified in #1296.

* fix(tui): drop redundant comment on pendingChatRunId set
2026-05-04 21:36:52 +08:00
Vincent Koc
a90be474f4 test: repair current main checks 2026-05-04 05:09:21 -07:00
github-actions[bot]
c59c20e9fd chore(ui): refresh fa control ui locale 2026-05-04 12:05:27 +00:00
github-actions[bot]
1ce136ce16 chore(ui): refresh nl control ui locale 2026-05-04 12:04:59 +00:00
github-actions[bot]
909894c8c4 chore(ui): refresh th control ui locale 2026-05-04 12:04:35 +00:00
github-actions[bot]
df7d18f6d3 chore(ui): refresh vi control ui locale 2026-05-04 12:04:28 +00:00
github-actions[bot]
2db259503b chore(ui): refresh pl control ui locale 2026-05-04 12:04:20 +00:00
github-actions[bot]
4abba333fe chore(ui): refresh id control ui locale 2026-05-04 12:03:58 +00:00
github-actions[bot]
0909ff16d9 chore(ui): refresh uk control ui locale 2026-05-04 12:03:22 +00:00
github-actions[bot]
87e3f3779f chore(ui): refresh it control ui locale 2026-05-04 12:03:17 +00:00
github-actions[bot]
863e8d0c38 chore(ui): refresh tr control ui locale 2026-05-04 12:03:13 +00:00
github-actions[bot]
ea8d5b1877 chore(ui): refresh ar control ui locale 2026-05-04 12:02:50 +00:00
github-actions[bot]
e069675c1d chore(ui): refresh fr control ui locale 2026-05-04 12:02:01 +00:00
github-actions[bot]
47b7df3c5d chore(ui): refresh ko control ui locale 2026-05-04 12:01:57 +00:00
github-actions[bot]
7c696e0e73 chore(ui): refresh ja-JP control ui locale 2026-05-04 12:01:53 +00:00
github-actions[bot]
510a2dc80c chore(ui): refresh es control ui locale 2026-05-04 12:01:49 +00:00
github-actions[bot]
ad534fdb1b chore(ui): refresh pt-BR control ui locale 2026-05-04 12:01:00 +00:00
github-actions[bot]
bd183072e4 chore(ui): refresh zh-TW control ui locale 2026-05-04 12:00:48 +00:00
github-actions[bot]
1d16ce3f24 chore(ui): refresh de control ui locale 2026-05-04 12:00:43 +00:00
github-actions[bot]
a68c6e20e9 chore(ui): refresh zh-CN control ui locale 2026-05-04 12:00:39 +00:00
Val Alexander
8469a51326 Control UI explicit action feedback
Add explicit Control UI feedback for repeated actions: session switches now announce through the chat controls live-status path and flash the active session selector, config actions show inline busy state, and session list empty states distinguish filtered results with a Show all reset. Also refresh generated Control UI locale metadata and fallback markers.
2026-05-04 06:58:31 -05:00
Peter Steinberger
14f756c05b test(release): leave Windows updater timeout headroom 2026-05-04 12:58:28 +01:00
Val Alexander
626e078863 fix: refresh stale codex auth profile routing
Summary:
- Promotes fresh Codex OAuth relogin profiles ahead of stale per-agent auth order entries.
- Repairs invalidated per-agent Codex order and session overrides toward healthy relogin profiles.
- Adds focused regression coverage for auth order, invalidated profile repair, and session override re-resolution.

Verification:
- pnpm test src/agents/auth-profiles/profiles.test.ts src/agents/auth-profiles.ensureauthprofilestore.test.ts src/agents/auth-profiles/session-override.test.ts src/commands/models/auth.test.ts -- --reporter=verbose
- pnpm exec oxfmt --check --threads=1 CHANGELOG.md src/agents/auth-profiles.ensureauthprofilestore.test.ts src/agents/auth-profiles/persisted.ts src/agents/auth-profiles/profiles.test.ts src/agents/auth-profiles/profiles.ts src/agents/auth-profiles/session-override.test.ts src/agents/auth-profiles/session-override.ts src/commands/models/auth.test.ts src/commands/models/auth.ts
- git diff --check origin/main...HEAD
- pnpm check:changed via Blacksmith Testbox tbx_01kqscwvkywnt72qx1t8a07tp8
- GitHub CI on 1a6f93a372, with checks-node-core-runtime-infra-state rerun passing after an unrelated stale-lock timing failure
2026-05-04 06:56:02 -05:00
Vincent Koc
a7c5a04259 test: stabilize full crabbox sweep 2026-05-04 04:07:33 -07:00