vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-04-23 15:11:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
29,668 Commits 1,427 Branches 119 Tags
f8dbd7dd69912a5237e290d8dd37ef10b0ffd7e1
Commit Graph

2418 Commits

Author SHA1 Message Date
Peter Steinberger
6c82a91d3d refactor: tighten device pairing approval types 2026-04-10 10:22:00 +01:00
Peter Steinberger
feb3c7f823 fix(test): repair rebased gate failures 2026-04-10 10:12:07 +01:00
Peter Steinberger
c2e2b87f28 fix(acp): classify gateway chat error kinds 2026-04-10 10:12:07 +01:00
Peter Steinberger
ec5ef68b0c test: fix latest fast-lane boundaries 2026-04-10 09:53:17 +01:00
Peter Steinberger
b660493e54 fix: harden device pairing scope approval 2026-04-10 09:48:17 +01:00
Peter Steinberger
1d310e2ab0 fix: restore main verification gates 2026-04-10 09:34:50 +01:00
Tak Hoffman
4bf94aa0d6 feat: add local exec-policy CLI (#64050) 
* feat: add local exec-policy CLI

* fix: harden exec-policy CLI output

* fix: harden exec approvals writes

* fix: tighten local exec-policy sync

* docs: document exec-policy CLI

* fix: harden exec-policy rollback and approvals path checks

* fix: reject exec-policy sync when host remains node

* fix: validate approvals path before mkdir

* fix: guard exec-policy rollback against newer approvals writes

* fix: restore exec approvals via hardened rollback path

* fix: guard exec-policy config writes with base hash

* docs: add exec-policy changelog entry

* fix: clarify exec-policy show for node host

* fix: strip stale exec-policy decisions
 2026-04-10 01:16:03 -05:00
Pavan Kumar Gondhi
2d126fc623 fix(infra): expand host env security policy denylist [AI] (#63277) 
* fix: address issue

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: close host env inherited sanitization gap

* fix: enforce host env reported baseline coverage

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge
 2026-04-10 11:36:39 +05:30
Marcus Castro
95d467398e fix(whatsapp): drain eligible pending deliveries on reconnect (#63916) 
* fix(whatsapp): drain eligible pending deliveries on reconnect

* docs(changelog): note whatsapp reconnect pending drain
 2026-04-09 23:41:25 -03:00
Altay
8cf02e7c47 fix(ci): clear check-additional follow-up regressions (#63934) 
* fix(ci): route messaging temp files through openclaw tmp dir

* fix(ci): clear qa-lab follow-up guardrails

* fix(ci): own-check ACP fallback resolvers

* fix(ci): preserve memory-core write error causes

* fix(ci): narrow qa-channel boundary alias

* fix(test): type memory-core dreaming api stubs
 2026-04-09 23:47:59 +01:00
Josh Lehman
8e62df661e fix: read packed refs for git commit metadata (#63943) 
Regeneration-Prompt: |
  Investigate the unrelated failures in `src/infra/git-commit.test.ts` that started blocking other prep and gate flows. The real-checkout assertions were failing whenever the current branch ref lived only in `.git/packed-refs`, because `resolveCommitHash()` only followed loose ref files under `refs/heads/*` even though worktrees and packed refs are common in this repo. Keep the existing safety checks that reject traversal from crafted HEAD contents, but fall back to reading an exact ref match from `packed-refs` in the common git dir when the loose ref is missing. Add a deterministic regression test that simulates a worktree checkout with `commondir` and only a packed branch ref so the test no longer depends on the local repository state.
 2026-04-09 15:39:11 -07:00
Roger Deng
1e15bb2638 fix: prevent isolated heartbeat session key :heartbeat suffix accumulation (#59606) 
Merged via squash.

Prepared head SHA: c276211a8b
Co-authored-by: rogerdigital <13251150+rogerdigital@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
 2026-04-09 14:06:55 -07:00
XING
820dc38525 fix(gateway): add TTL cleanup for 3 Maps that grow unbounded causing OOM (#52731) 
Merged via squash.

Prepared head SHA: 4816a29de5
Co-authored-by: artwalker <44759507+artwalker@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
 2026-04-09 13:58:46 -07:00
Vincent Koc
3d60ed0544 fix(infra): split restart attempt types 2026-04-09 08:17:53 +01:00
manuel-claw
e30d0cffc4 fix(whatsapp): drain reconnect queue after WhatsApp reconnects (#30806) (#46299) 
Merged via squash.

Prepared head SHA: 5ce763406e
Co-authored-by: manuel-claw <268194568+manuel-claw@users.noreply.github.com>
Co-authored-by: mcaxtr <7562095+mcaxtr@users.noreply.github.com>
Reviewed-by: @mcaxtr
 2026-04-09 02:33:36 -03:00
Peter Steinberger
c9e969c1a6 test: stabilize exec preflight race coverage 2026-04-09 05:33:38 +01:00
Pavan Kumar Gondhi
b024fae9e5 fix(exec): replace TOCTOU check-then-read with atomic pinned-fd open in script preflight [AI] (#62333) 
* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* address review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge
 2026-04-09 09:46:44 +05:30
Vincent Koc
d9a3ecd109 fix(infra): extract exec approvals allowlist types 2026-04-09 02:08:02 +01:00
Peter Steinberger
a8c47db668 fix: repair Windows dev-channel updater 2026-04-09 01:26:28 +01:00
Peter Steinberger
2787b5bcae test: move cron heartbeat delivery coverage below full turns 2026-04-08 23:02:03 +01:00
Peter Steinberger
85e222717f fix(gateway): classify dream diary actions 2026-04-08 22:38:29 +01:00
Agustin Rivera
dafcaf9d69 fix(browser): harden browser control override loading (#62663) 
* fix(browser): harden browser control overrides

* fix(lint): prepare boundary artifacts for extension oxlint

* docs(changelog): add browser override hardening entry

* fix(lint): avoid duplicate boundary prep

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com>
 2026-04-08 13:24:47 -06:00
Agustin Rivera
dbfcef3196 fix(dotenv): block workspace runtime env vars (#62660) 
* fix(dotenv): block workspace runtime env vars

Co-authored-by: zsx <git@zsxsoft.com>

* docs(changelog): add workspace dotenv runtime-control entry

* fix(dotenv): block workspace gateway port override

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-08 13:04:00 -06:00
Peter Steinberger
b0c0df3484 refactor: dedupe approval runtime tests 2026-04-08 15:58:46 +01:00
Peter Steinberger
49f3ede504 refactor: dedupe shared helper branches 2026-04-08 15:58:45 +01:00
Nimrod Gutman
f3c304917a revert: undo background alive review findings fix 2026-04-08 14:02:49 +03:00
Nimrod Gutman
b328c66115 fix: resolve background alive beacon review findings 2026-04-08 13:46:39 +03:00
Peter Steinberger
95e397a266 refactor: dedupe repeated test helpers 2026-04-08 09:58:22 +01:00
Vincent Koc
be530f085d refactor(plugin-sdk): share tool payload extraction 2026-04-08 09:07:28 +01:00
Peter Steinberger
4f5c137f88 fix: unblock windows update build 2026-04-08 07:18:31 +01:00
Peter Steinberger
3b1c6d3266 test: keep Discord payload contracts off broad test api 2026-04-08 07:09:03 +01:00
Maxime Grenu
d7c3210cd6 fix(net): skip DNS pinning before trusted env proxy dispatch 2026-04-08 05:41:58 +01:00
Peter Steinberger
0cb7168bc4 fix: stabilize parallels upgrade preflight 2026-04-08 02:18:29 +01:00
Peter Steinberger
08cee3316d refactor: dedupe core trimmed readers 2026-04-08 01:36:39 +01:00
Peter Steinberger
ca8685d5f2 fix: harden parallels upgrade checks 2026-04-08 01:34:35 +01:00
Peter Steinberger
cda0c66258 Tests: type provider usage plugin mocks 2026-04-08 00:25:39 +01:00
Peter Steinberger
1c1eb542b6 perf(test): trim infra provider and approval suites 2026-04-08 00:10:20 +01:00
Peter Steinberger
5e2736089d fix: resolve ci type regressions 2026-04-08 00:09:42 +01:00
Peter Steinberger
c7ecc1ebf4 refactor: dedupe infra trimmed readers 2026-04-08 00:09:41 +01:00
Peter Steinberger
6affd09dbe Tests: repair latest main type drift 2026-04-07 23:52:55 +01:00
Peter Steinberger
d1019eaa9f Tests: keep route notice coverage in coordinator 2026-04-07 23:52:55 +01:00
Agustin Rivera
fa82193c72 fix(env): align inherited host exec env filtering (#59119) 
* fix(env): block inherited host exec config vars

* fix(env): preserve trusted inherited proxy env

* fix(env): preserve inherited host exec vars

* fix(env): refresh host env policy parity artifacts

* test(env): align blocked override ordering

* docs(changelog): add host env policy parity entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-07 15:50:32 -06:00
Agustin Rivera
423a14e2be fix(git): expand host env denylist coverage (#62002) 
* fix(git): expand host env denylist

* fix(git): block alternate object directories

* docs(changelog): add git env denylist entry

* docs(changelog): remove conflict markers

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
 2026-04-07 15:39:28 -06:00
Peter Steinberger
67dc6e82b9 refactor: dedupe misc lowercase helpers 2026-04-07 22:24:32 +01:00
Gustavo Madeira Santana
af4a2faa1d types: preserve approval runtime payload typing 2026-04-07 17:11:04 -04:00
Gustavo Madeira Santana
28fc5d9b5e Plugin SDK: split approval adapter seams 2026-04-07 16:06:02 -04:00
Gustavo Madeira Santana
9bcef781e7 Tests: restore approval runtime coverage 2026-04-07 16:06:02 -04:00
Peter Steinberger
493e1c246e refactor: dedupe remaining lowercase helpers 2026-04-07 20:57:03 +01:00
Peter Steinberger
e51a00ffc7 refactor: dedupe gateway infra lowercase helpers 2026-04-07 20:57:03 +01:00
Gustavo Madeira Santana
ad6bfc44d5 Tests: align approval runtime helpers 2026-04-07 15:37:28 -04:00