Vincent Koc
1f41b8b44b
fix(gateway): bound default restart deferral
2026-04-28 18:42:49 -07:00
Peter Steinberger
d3683a61c5
fix(bonjour): recover from ciao cancellation
...
(cherry picked from commit c34ba97262 )
2026-04-29 00:49:41 +01:00
Peter Steinberger
bcc6a2400d
fix(gateway): make handshake timeout configurable
2026-04-28 23:50:24 +01:00
pashpashpash
6ce1058296
Wire diagnostics through the core chat command ( #72936 )
...
* feat: wire codex diagnostics feedback
* fix: harden codex diagnostics hints
* fix: neutralize codex diagnostics output
* fix: tighten codex diagnostics safeguards
* fix: bound codex diagnostics feedback output
* fix: tighten codex diagnostics throttling
* fix: confirm codex diagnostics uploads
* docs: clarify codex diagnostics add-on
* fix: route diagnostics through core command
* fix: tighten diagnostics authorization
* fix: pin diagnostics to bundled codex command
* fix: limit owner status in plugin commands
* fix: scope diagnostics confirmations
* fix: scope codex diagnostics cooldowns
* fix: harden codex diagnostics ownership scopes
* fix: harden diagnostics command trust and display
* fix: keep diagnostics command trust internal
* fix: clarify diagnostics exec boundary
* fix: consume codex diagnostics confirmations atomically
* test: include codex diagnostics binding metadata
* test: use string codex binding timestamps
* fix: keep reserved command trust host-only
* fix: harden diagnostics trust and resume hints
* wire diagnostics through exec approval
* fix: keep diagnostics tests aligned with bundled root trust
* fix telegram diagnostics owner auth
* route trajectory exports through exec approval
* fix trajectory exec command encoding
* fix telegram group owner auth
* fix export trajectory approval hardening
* fix pairing command owner bootstrap
* fix telegram owner exec approvals
* fix: make diagnostics approval flow pasteable
* fix: route native sensitive command followups
* fix: invoke diagnostics exports with current cli
* fix: refresh exec approval protocol models
* fix: list codex diagnostics from thread bindings
* fix: fold codex diagnostics into exec approval
* fix: preserve diagnostics approval line breaks
* docs: clarify diagnostics codex workflow
2026-04-29 07:40:37 +09:00
Peter Steinberger
193c7432e3
fix(gateway): reuse paired auth for probes
2026-04-28 21:52:50 +01:00
Peter Steinberger
0a2d635e68
fix(gateway): harden local reachability checks
...
Co-authored-by: arthurianresolve <arthurianresolve@users.noreply.github.com >
Co-authored-by: codexGW <9350182+codexGW@users.noreply.github.com >
2026-04-28 20:57:14 +01:00
Vincent Koc
98f5fd12df
docs(gateway/security): list system-reminder and previous_response in outbound stripping
...
For c2d31a5e59 : docs/gateway/security/index.md "External content
special-token sanitization" section already mentions the outbound
sanitizer with `<tool_call>` and `<function_calls>` examples, but it
predates the new internal-runtime-scaffolding stripping that targets
`<system-reminder>` and `<previous_response>` tags. Adds those two tags
as explicit examples and notes the final channel delivery boundary so
operators reading the security page see the same coverage exposed by
the c2d31a5e59 sanitizer.
2026-04-28 12:39:15 -07:00
Radek Sienkiewicz
dd643c82b5
fix(whatsapp): expose Baileys socket timing ( #73580 )
...
Merged via squash.
Prepared head SHA: d34755262f
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com >
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com >
Reviewed-by: @velvet-shark
2026-04-28 15:46:47 +02:00
Peter Steinberger
5a1ff1347d
fix(slack): bound inbound media downloads
2026-04-28 11:35:26 +01:00
Vincent Koc
d70191f8af
feat(sandbox): add Docker GPU passthrough
...
Add opt-in `sandbox.docker.gpus` config plumbing for Docker sandbox containers.
- thread the optional GPU passthrough field through config types, schema, resolution, and Docker create args
- reject empty config values and emit `--gpus` as a separate Docker argv pair
- document the Docker-only behavior and credit the original contributor in the changelog
Fixes #57976 .
Carries forward #58124 from @cyan-ember.
Co-authored-by: cyan-ember <5855097+cyan-ember@users.noreply.github.com >
2026-04-28 03:33:28 -07:00
Vincent Koc
cfbf4d1fa4
docs: note default sandbox image fail-fast behavior
...
For 47dc9f7fc0 : docs/gateway/sandboxing.md now warns under "Build the default
image" that OpenClaw no longer silently retags plain debian:bookworm-slim as
openclaw-sandbox:bookworm-slim when the default image is missing. Sandbox runs
fail with a build instruction so the python3 tooling required by sandbox
write/edit helpers is preserved instead of being silently dropped.
2026-04-28 02:40:26 -07:00
Peter Steinberger
fac116cfa4
fix: resolve providerless image model refs
2026-04-28 10:18:07 +01:00
Scott Hanselman
8f277e4b7f
fix: allow safe Windows companion node commands ( #71884 )
...
Merged via squash.
Prepared head SHA: 24e2b79fe4
Co-authored-by: shanselman <2892+shanselman@users.noreply.github.com >
Co-authored-by: shanselman <2892+shanselman@users.noreply.github.com >
Reviewed-by: @shanselman
2026-04-28 02:01:20 -07:00
Peter Steinberger
2790825ae5
test(auto-reply): assert bare reset acknowledgement
2026-04-28 09:56:41 +01:00
Vincent Koc
fe7865aad6
docs: cover Anthropic beta header suppression and claude-cli fallback prelude
...
- docs/concepts/model-providers.md: add proxy-route shaping rule for the
09ec5d2c4d fix that suppresses implicit Anthropic beta headers
(`claude-code-20250219`, `interleaved-thinking-2025-05-14`, OAuth markers)
on non-direct endpoints, parallel to the existing OpenAI
`compat.supportsDeveloperRole` rule.
- docs/gateway/cli-backends.md: add a "Fallback prelude from claude-cli
sessions" section for a96f1fa5ef so users know that non-CLI fallback
candidates after a claude-cli failure are now seeded with a context prelude
harvested from Claude Code's `~/.claude/projects/` JSONL (preferring the
latest `/compact` summary, coalescing tool blocks, skipping same-provider
`--resume` fallbacks).
2026-04-28 01:42:25 -07:00
Peter Steinberger
fb3ea9efb1
fix: keep gateway model probes raw
2026-04-28 09:11:47 +01:00
Peter Steinberger
f95f720b25
docs: separate mintlify list closings
2026-04-28 08:43:20 +01:00
Peter Steinberger
1dd011984a
fix: add pricing bootstrap opt-out and sdk compat exports
2026-04-28 08:35:11 +01:00
Peter Steinberger
78a12706ec
fix(docs): make docs formatter mintlify-safe
2026-04-28 08:13:21 +01:00
Peter Steinberger
bdba90a20b
feat: add authenticated iOS background presence beacon ( #73330 )
...
* feat: add iOS background presence beacon
Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com >
* fix: keep iOS background reconnects ahead of beacon throttle
* build: refresh gateway protocol swift models
* fix: emit swift protocol string enums
---------
Co-authored-by: ngutman <1540134+ngutman@users.noreply.github.com >
2026-04-28 08:10:35 +01:00
Peter Steinberger
12962dd883
fix(models): keep agent primaries strict
2026-04-28 08:01:42 +01:00
Peter Steinberger
cd1343c244
docs: fix heartbeat paramfield lists
2026-04-28 08:00:27 +01:00
Peter Steinberger
3256cf4fc7
docs: clarify group visible replies
2026-04-28 07:55:40 +01:00
Peter Steinberger
424560c6c2
docs: normalize mintlify component closings
2026-04-28 07:54:15 +01:00
Peter Steinberger
fb40ed99a7
fix(sessions): remove session store rotation
2026-04-28 07:46:24 +01:00
Peter Steinberger
b5371bfd63
fix(auth): migrate flat auth profiles in doctor
2026-04-28 06:53:48 +01:00
Peter Steinberger
59a4d7fb06
fix(telegram): normalize bot endpoint api roots
2026-04-28 06:36:38 +01:00
Peter Steinberger
5916237962
fix(onboard): infer custom model image input
2026-04-28 06:34:16 +01:00
Peter Steinberger
a644e30245
fix(memory-core): retry unavailable dreaming model
2026-04-28 06:15:28 +01:00
Vincent Koc
7b18bd03bb
fix(gateway): allow explicit loopback trusted proxy auth
...
Fixes #59167 .
Supersedes #63379 .
2026-04-27 22:01:06 -07:00
Peter Steinberger
540cbe24be
fix: allow memory flush model override
2026-04-28 05:50:55 +01:00
Peter Steinberger
870d993eb8
fix(ui): request configured model list
2026-04-28 05:21:08 +01:00
Peter Steinberger
738f5f7508
fix: prevent channel login exec wedges
2026-04-28 05:16:43 +01:00
Peter Steinberger
5a2e5446a4
fix: explain heartbeat model bleed overflows
2026-04-28 04:32:55 +01:00
Peter Steinberger
2fbbc6e2fa
docs: clarify plugin disable doctor behavior
2026-04-28 00:07:02 +01:00
Peter Steinberger
ccc9dd5eef
fix: keep session history redaction forced
2026-04-27 23:59:47 +01:00
Peter Steinberger
dd0f5937d2
fix(doctor): avoid companion gateway service false positives
2026-04-27 23:30:29 +01:00
Peter Steinberger
abf5dea7dd
fix(daemon): filter missing service path fallbacks
2026-04-27 23:16:04 +01:00
Peter Steinberger
1a98938479
fix: allow trusted-proxy local password fallback
2026-04-27 23:10:22 +01:00
Peter Steinberger
42dddbbe78
fix(cli): streamline local model probes
2026-04-27 23:02:26 +01:00
Peter Steinberger
24b45a038c
fix(gateway): bound supervised lock recovery
2026-04-27 22:44:37 +01:00
Peter Steinberger
d519dc6976
docs(channels): add channel docking concept
2026-04-27 22:37:58 +01:00
Peter Steinberger
582debbec8
docs(channels): explain dock commands
2026-04-27 22:32:44 +01:00
Peter Steinberger
016a0b4de9
fix(gateway): avoid echoing rotated device tokens
2026-04-27 15:10:05 +01:00
Peter Steinberger
2e99c1d227
fix(subagents): enforce explicit spawn allowlists
2026-04-27 14:53:17 +01:00
Peter Steinberger
877b5a14f1
fix(sessions): batch store cap maintenance
2026-04-27 14:51:53 +01:00
Peter Steinberger
ad0f600450
fix(gateway): avoid systemd service split-brain
2026-04-27 14:32:49 +01:00
Peter Steinberger
df65a75f92
fix(memory): avoid live embedding probes in status
2026-04-27 13:55:51 +01:00
Peter Steinberger
750c180a6c
fix(ollama): warn on WSL2 CUDA crash loop risk
2026-04-27 13:24:04 +01:00
Peter Steinberger
7fb2a356e8
fix(nodes): allow removing stale paired nodes
2026-04-27 13:20:52 +01:00