04c9924c45
fix(macos): keep elevation host CUA-free ( #125408 )
...
* fix(macos): isolate elevation host from CUA
* fix(macos): fail closed on unsafe elevation rollback
* fix(macos): quarantine unsafe elevation state before recovery
* fix(macos): bind elevation recovery ownership
2026-08-17 17:03:04 -07:00
b77671ced2
feat(mac): harden Peekaboo elevation cutovers ( #124564 )
...
* feat(mac): harden elevation cutovers
* fix(mac): make elevation recovery transactional
* fix(mac): revalidate elevation owner shutdown
* fix(mac): quiesce elevation recovery owners
* fix(mac): close elevation artifact and recovery races
* fix(mac): use signed exclusive app renames
* fix(mac): defer elevation hangup signals
* fix(mac): restore receipts during elevation rollback
* fix(mac): bind elevation receipts to both architectures
* fix(mac): close elevation attestation races
* fix(mac): bind elevation proof to final objects
* fix(mac): keep elevation rollback independently trusted
* fix(mac): validate every rollback generation
* fix(mac): authenticate legacy elevation recovery
* fix(mac): attest recursive Peekaboo sources
* fix(mac): recover when elevation app is unavailable
* fix(mac): preserve raced recovery custody
* test(mac): preserve missing-tool coverage
* test(mac): register recursive gitlink fixture
* fix(mac): authenticate all elevation custody
* fix(mac): bind elevation build and recovery inputs
* fix(mac): persist elevation recovery transactions
* fix(mac): durably publish elevation custody
* fix(mac): complete elevation transaction durability
2026-08-17 02:20:55 -07:00
a32a7ae9af
feat(cua-computer): verify the managed driver artifact on Windows and Linux node hosts ( #123986 )
2026-08-14 21:08:13 -07:00
b9cf0bb96f
fix(macos): package apps from paths with glob characters ( #123751 )
...
* fix(macos): handle metacharacters in framework paths
* fix(ci): round boundary artifact refresh mtimes
2026-08-14 11:08:35 -07:00
19ace6830b
feat(macos): add embedded CUA computer provider ( #123635 )
...
* feat(macos): embed CUA computer provider
* fix(macos): clarify embedded CUA trust posture
* fix(macos): contain embedded CUA daemon lifecycle
* fix(macos): reap orphaned CUA daemons
* fix(macos): record the spawned CUA daemon pid so reaping can terminate orphans
* chore(macos): refresh native i18n baseline for the computer control provider picker
* style(macos): satisfy swiftlint on the embedded CUA host and connect params
* refactor(gateway): move optional connect params to GatewayConnectOptions
2026-08-14 10:24:08 -07:00
f87580ceb8
build(macos): add OPENCLAW_SKIP_MLX_TTS to unblock beta-toolchain builds ( #123698 )
...
The openclaw-mlx-tts voice helper pulls in the full mlx-swift Metal shader
stack, which some beta Xcode toolchains (e.g. Xcode 27 / macOS 27 SDK) cannot
compile: the metal compiler dies non-deterministically (a different .metal file
each run, 'Could not read serialized diagnostics file'). The main app builds
fine, so an unrelated dev/proof build should not be blocked by the helper.
Add OPENCLAW_SKIP_MLX_TTS=1 (matching the sibling SKIP_TSC/SKIP_UI_BUILD
toggles) to package the app without the voice helper, gating both the per-arch
build and the bundle copy. Refuse the flag for release builds, which must ship
the helper (notarization verifies it), so a skipped build can never become a
silently incomplete release.
2026-08-14 08:28:43 -07:00
737982d5fe
fix(macos): adopt Peekaboo 4.1 bridge contracts ( #123420 )
...
* feat(macos): adopt checked Peekaboo bridge runtime
* fix(macos): preserve bridge snapshot retention
* docs(macos): clarify bridge client identity
* fix(macos): retry transient timestamp signing
* build(macos): pin embedded Peekaboo runtime
* fix(macos): expose embedded bridge source identity
* test(macos): isolate gateway launch agent hooks
(cherry picked from commit 7da18c5fee43fed7e8dfa42c4851f99d035b2a36)
* test(macos): pin gateway command mode
* fix(macos): preserve Peekaboo bridge provenance
2026-08-13 22:03:47 -07:00
cc2ed816be
fix(mac): preserve Xcode preflight failure diagnostics ( #121170 )
2026-08-13 14:17:32 +08:00
b61bc5cd8d
fix: sync Cloud Worker workspaces from macOS gateways ( #121027 )
...
* fix(cloud-workers): support Apple openrsync receivers
* build: register worker receiver entry
* fix(cloud-workers): narrow receiver invocation types
* test(cloud-workers): resolve real rsync before wrapping
2026-08-09 03:51:24 -07:00
dba99b355b
fix(mac): fail fast without full Xcode ( #120909 )
2026-08-08 23:42:36 -07:00
1f5049a417
fix(build): restore SDK packages and signed macOS app builds ( #118833 )
...
* fix(build): unblock SDK declarations and macOS packaging
* fix(test): satisfy strict SDK declaration group indexing
2026-08-03 11:33:16 -07:00
8d2e111053
fix(mac): stop Settings crashing on packaged SwiftPM resources ( #114648 )
...
* fix(mac): repair packaged SwiftPM resources
* chore(mac): keep release note in PR body
2026-07-27 13:42:01 -04:00
b3bb40551b
fix(mac): opening General Settings crashes in packaged app ( #111300 )
...
* fix(macos): package KeyboardShortcuts resources
* fix(macos): keep dependency patch whitespace-safe
* fix(macos): preserve locked Swift resolution
* fix(macos): guard Swift lock across builds
* fix(macos): simplify KeyboardShortcuts packaging
2026-07-19 02:30:49 -07:00
7bf80dc2c6
chore(tooling): enforce formatting and refresh TypeScript checks ( #104239 )
...
* chore(tooling): enforce current formatter and refresh checks
* chore(tooling): keep release changelog formatter-owned
* chore(tooling): retain compatible Node type surface
* ci: enforce formatting for docs-only changes
* ci: isolate docs formatter check
* chore(tooling): apply updated lint and format rules
* chore(tooling): satisfy updated switch lint
* style(ui): apply Linux formatter layout
* test(doctor): match quiet local audio contribution
* test(doctor): assert quiet output only
* test(doctor): follow restored information contract
2026-07-11 01:09:51 -07:00
96b1be10f5
feat(macos): keep MLX TTS model resident ( #104200 )
...
* test(macos): cover MLX helper packaging
* feat(macos): define framed MLX TTS protocol
* feat(macos): keep MLX TTS model resident
* feat(macos): reuse MLX TTS helper transport
* fix(macos): preserve MLX TTS fallback lifecycle
* chore(swift): lint MLX TTS protocol sources
* fix(macos): keep MLX helper input nonblocking
* test(macos): cover forced MLX helper shutdown
* fix(macos): fall back after MLX memory eviction
* fix(macos): discard canceled MLX audio
2026-07-11 13:45:27 +08:00
a0354e5243
fix(onboarding): make fresh AI setup reliable and transparent ( #103962 )
...
* fix(onboarding): harden inference setup
* fix(mac): preserve setup request cancellation
* test(crestodian): align setup audit expectation
* test(crestodian): cover approval persistence warning
* fix(crestodian): preserve setup credentials and success
* chore(pr): leave changelog to release flow
* fix(onboarding): repair native CI gates
2026-07-10 23:44:53 +01:00
7fe004d852
feat: show build identity in About screens ( #103595 )
...
* feat: show build identity in About screens
* chore: leave root changelog to release automation
* fix: translate Control UI About build details
2026-07-10 10:42:36 +01:00
d71a24f3a4
fix(mac): share Swift packaging preflight
2026-07-04 08:00:15 +02:00
d0b84a955c
fix(mac): preflight Swift toolchain before packaging
2026-07-04 07:20:43 +02:00
6a7b62889e
feat(macos): install and run the local Gateway automatically ( #99767 )
...
* feat(macos): automate local gateway setup
* fix(macos): auto-approve the local Mac node
* chore(macos): refresh generated setup metadata
* chore(macos): refresh generated setup metadata
* chore(macos): refresh generated setup metadata
* chore(macos): refresh generated setup metadata
* chore(macos): refresh generated setup metadata
2026-07-03 22:09:56 -07:00
d3e6d1fd6c
fix(macos): compile packaged localizations
2026-07-01 05:19:12 -07:00
be381c27a1
fix(macos): package localized app resources
2026-07-01 05:19:12 -07:00
cd7e3df1ea
fix(macos): drop Textual from chat packaging
...
* fix(macos): drop Textual from chat packaging
* fix(macos): declare concurrency extras dependency
2026-06-24 08:31:05 +08:00
77a859f4ae
fix(ci): route mac packaging scripts to macos checks
2026-06-21 16:32:57 +02:00
088cab5ee4
fix(macos): prefer repo pnpm for packaging
2026-06-21 15:39:17 +02:00
8086c44043
fix(mac): fail release packaging without Swift compat lib
2026-06-06 21:06:32 +02:00
44fbe63bcf
fix(mac): derive app build metadata from repo root
2026-06-06 19:57:52 +02:00
c13cf91787
fix(mac): fail closed when packaging app shutdown stalls
2026-06-06 19:39:37 +02:00
58c663920d
docs: document script tests
2026-06-04 20:49:50 -04:00
bb46b79d3c
refactor: internalize OpenClaw agent runtime ( #85341 )
...
* refactor: extract agent core package
Introduce packages/agent-core as the OpenClaw-owned home for reusable agent loop, harness, session, prompt, and runtime dependency contracts.
* refactor: extract shared llm runtime
Move provider model registries, stream wrappers, OAuth helpers, and LLM utilities into src/llm with plugin-sdk barrels instead of depending on the old embedded runtime layout.
* refactor: remove pi runtime internals
Rename remaining Pi-shaped agent surfaces to OpenClaw agent runtime names, delete obsolete Pi docs and package graph checks, and add the third-party notice for incorporated code.
* refactor: tighten agent session runtime
Make agent-core/runtime dependencies explicit, consolidate compaction and session transcript helpers, and move model/session helpers behind OpenClaw-owned contracts.
* refactor: remove static model and pi auth paths
Drop static model catalogs and Pi auth bridges, move model/provider facts to manifest-owned runtime contracts, and harden internal embedded-agent utilities.
* refactor: remove legacy provider compat paths
* docs: remove agent parity notes
* fix: skip provider wildcard metadata parsing
* refactor: share session extension sdk loading
* refactor: inline acpx proxy error formatter
* refactor: fold edit recovery into edit tool
* fix: accept extension batch separator
* test: align startup provider plugin expectations
* fix: restore provider-scoped release discovery
* test: align static asset packaging expectations
* fix: run static provider catalogs during scoped discovery
* fix: add provider entry catalogs for scoped live discovery
* fix: load lightweight provider catalog entries
* fix: refresh provider-scoped plugin metadata
* fix: keep provider catalog entries on release live path
* fix: keep static manifest models in release live checks
* fix: harden release model discovery
* fix: reduce OpenAI live cache probe reasoning
* fix: disable OpenAI cache probe reasoning
* ci: extend OpenAI gateway live timeout
* fix: extend live gateway model budget
* fix: stabilize release validation regressions
* fix: honor provider aliases in model rows
* fix: stabilize release validation lanes
* fix: stabilize release memory qa
* ci: stabilize release validation lanes
* ci: prefer ipv4 for live docker node calls
* fix: restore shared tool-call stream wrapper
* ci: remove legacy pi test shard alias
* fix: clean up embedded agent test drift
* fix: stabilize runtime alias status
* fix: clean up embedded agent ci drift
* fix: restore release ci invariants
* fix: clean up post-rebase runtime drift
* fix: restore release ci checks
* fix: restore release ci after rebase
* fix: remove stale pi runtime path
* test: align compaction runtime expectations
* test: update plugin prerelease expectations
* fix: handle claude live tool approvals
* fix: stabilize release validation gates
* fix: finish agent runtime import
* test: finish post-rebase agent runtime mocks
* fix: keep codex compaction native
* fix: stabilize codex app-server hook tests
* test: isolate codex diagnostic active run
* test: remove codex diagnostic completion race
# Conflicts:
# extensions/codex/src/app-server/run-attempt.test.ts
* ci: fix full release manifest performance run id
* refactor: narrow llm plugin sdk boundary
* chore: drop generated google boundary stamps
* fix: repair rebase fallout
* fix: clean up rebased runtime references
* fix: decode codex jwt payloads as base64url
* fix: preserve shipped pi runtime alias
* fix: add scoped sdk virtual modules
* fix: decode llm codex oauth jwt as base64url
* fix: avoid stale vertex adc negative cache
* fix: harden tool arg decoding and codeql path
* fix: keep vertex adc negative checks live
* refactor: consolidate codex jwt and edit helpers
* fix: await codex oauth node runtime imports
* fix: preserve sdk tool and notice contracts
* fix: preserve shipped compat config boundaries
* fix: align codex oauth callback host
* fix: terminate agent-core loop streams on failure
* fix: keep codex oauth callback alive during fallback
* ci: include session tools in critical codeql scans
* fix: keep Cloudflare Anthropic provider auth header
* docs: redirect legacy pi runtime pages
* fix: honor bundled web provider compat discovery
* fix: protect session output spill files
* fix: keep legacy agent dir env blocked
* fix: contain auto-discovered skill symlinks
* fix: harden agent core sdk proxy surfaces
* fix: restore approval reaction sdk compat
* fix: keep live docker runs bounded
* fix: keep codex oauth redirect host aligned
* fix: resolve post-rebase agent runtime drift
* fix: redact anthropic oauth parse failures
* fix: preserve responses strict tool shaping
* fix: repair agent runtime rebase cleanup
* docs: redirect retired parity pages
* fix: bound auto-discovered resources to roots
* fix: repair post-rebase agent test drift
* fix: preserve bundled provider allowlist migration
* fix: preserve manifest-owned provider aliases
* fix: declare photon image dependency
* fix: keep provider headers out of proxy body
* fix: preserve shipped env aliases
* fix: refresh control ui i18n generated state
* fix: quote read fallback paths
* fix: preview edits through configured backend
* test: satisfy core test typecheck
* fix: preserve ZAI usage auth fallback
* test: repair codex diagnostic test
* fix: repair agent runtime rebase drift
* test: finish embedded runner import rename
* fix: repair agent runtime rebase integrations
* test: align compaction oauth fallback expectations
* fix: allow sdk-auth session models
* fix: update doctor tool schema import
* fix: preserve bedrock plugin region
* fix: stream harmony-like prose immediately
* ci: include session runtime in codeql shards
* fix: repair latest rebase integrations
* fix: honor explicit codex websocket transport
* fix: keep openai-compatible credentials provider-scoped
* fix: refresh sdk api baseline after rebase
* fix: route cli runtime aliases through openclaw harness
* test: rename stale harness mock expectation
* test: rename embedded agent overflow calls
* test: clean embedded auth test wording
* test: use openclaw stream types in deepinfra cache test
* fix: refresh sdk api baseline on latest main
* fix: honor bundled discovery compat allowlists
* fix: refresh sdk api baseline after latest rebase
* fix: remove stale rebase imports
* test: rename stale model catalog mock
* test: mock renamed doctor runtime modules
* fix: map canonical kimi env auth
* fix: use internal model registry in bench script
* fix: migrate deepinfra provider catalog entry
* fix: enforce builtin tool suppression
* fix: route compaction auth and proxy payloads safely
* refactor: prune unused llm registry leftovers
* test: update codex hooks session import
* test: fix model picker ci coverage
* test: align model picker auth mock types
2026-05-27 19:24:04 +01:00
728b61a0a4
fix(mac): use corepack pnpm for app packaging
2026-05-27 00:53:09 +02:00
564e0bb5c1
fix(mac): harden package script safety
2026-05-26 19:40:16 +02:00
198d0a56d3
fix(mac): require packaged app resources
2026-05-26 12:27:47 +02:00
91080fde68
fix(mac): fail closed on plist stamp errors
2026-05-26 11:28:51 +02:00
Peter Steinberger