a042125170
fix(memory): preserve provenance across dreaming ( #126489 )
...
* fix(memory): preserve provenance across dreaming
* fix(build): preserve bundled hook metadata
* refactor(build): remove obsolete directory helper
* test(memory): align provenance fixtures
* test(memory): type consolidation run options
* test(memory): register write provenance siblings
* fix(memory): preserve legacy provenance registration
* fix(memory): make provenance provider-independent
* fix(memory): canonicalize provenance workspace keys
* fix(memory): keep provenance mutation host-private
* fix(build): track runtime postbuild implementations
* fix(build): verify bundled hook metadata outputs
2026-08-20 17:58:31 -07:00
b668a21f07
fix(models): classify catalog timeouts by identity ( #124288 )
...
Prevent provider-authored timeout-like errors from being silently downgraded as discovery deadlines. Keep prepared catalog reuse covered across Gateway/Telegram picker callbacks.
Co-authored-by: Jacqueline Henriksen <jjjhenriksen@gmail.com >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-20 15:08:45 +05:30
10e707435a
fix(mcp): repair channel lifecycle ownership ( #126592 )
...
Restore persisted channel media, cancellation cleanup, retryable permission delivery, bounded-event gap recovery, complete shutdown, and actionable Gateway startup diagnostics.
2026-08-20 01:14:43 -07:00
ab7fc490d6
fix(package): clean dist before root packaging ( #126577 )
2026-08-20 01:13:06 -07:00
980b07f4a2
refactor(agents): replace tool-failure warning heuristics with a two-rule policy ( #126542 )
...
* refactor(agents): reduce tool failure warnings to two rules
* test(agents): remove obsolete tool recovery receipt proof
* refactor(agents): drop unused meta param from buildToolMutationState
* test(agents): remove stale tool warning assertions
* test: export runtime source snapshot from closed runtime-snapshot mocks
Heal the main breakage introduced by 9441e3fe6e#126531 , which added a runtime source-snapshot read to provider model route resolution. Closed Vitest factories now return null for that source snapshot, preserving their pre-projection behavior.
* test(gateway): make compaction read-error faults order-immune
Generation-2 CI failure in run 32342180898, job 96343444772 showed that the mock factory initialized while shared gateway-server importers remained bound to the real transcript reader.
The dedicated isolated project fixes normal shards. Complete its ownership by adding it to the root project matrix and excluding the test from the non-isolated OPENCLAW_GATEWAY_PROJECT_SHARDS=0 fallback.
2026-08-20 01:11:05 -07:00
14c02a43ab
fix(mcp): stop revoked App actions after catalog waits ( #126415 )
...
* fix(mcp): revalidate app grants after catalog work
* test(mcp): track grant proof temp state
* test(browser): use canonical graceful stop budget
2026-08-19 13:35:01 -07:00
24a1139188
fix: move raw call transcripts from system to user prompt to protect provenance ( #123846 )
...
* Move raw transcript from system to user prompt to protect provenance.
* Type fix.
* fix(voice-call): harden transcript context handling
* fix(voice-call): initialize inbound Twilio control state
* test(voice-call): align runtime coordinator fixture
---------
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-08-19 13:07:59 -07:00
51599041bc
fix: explain preserved session worktrees accurately ( #126347 )
...
* fix(sessions): report worktree preservation reasons
* fix(sessions): align preservation checks with current main
* perf(ui): keep preservation copy within startup budget
* perf(ui): reuse localized preservation copy
* test(ui): match preserved worktree confirmation copy
* test(ui): await committed raw config state
2026-08-19 10:59:42 -07:00
ae55a4090c
refactor(canvas): make the panel a widget presenter ( #126030 )
...
* refactor(canvas): retire legacy host and commands
* refactor(apple): narrow shared Canvas contracts
* refactor(macos): keep Canvas as widget presenter
* refactor(ios): remove Canvas client
* refactor(android): remove Canvas client
* refactor(linux): remove Canvas client
* fix(ci): isolate native locale artifacts
* fix(linux): regenerate companion lockfile
* fix(canvas): refresh native tool display metadata
* test(canvas): align coverage with presenter surface
* test(canvas): remove obsolete asset root seam
* test(canvas): stabilize retirement CI coverage
* refactor(swift): remove orphaned resource wrapper
* test(ios): remove retired canvas layout assertion
* fix(macos): reserve retired canvas command namespace
* refactor(macos): isolate canvas command policy
* fix(canvas): select only eligible macOS panels
* fix(canvas): keep panel selection plugin-owned
2026-08-19 08:21:07 -07:00
97557ec3f5
fix(widgets): route show_widget through Discord Activities ( #126294 )
...
* refactor(widgets): unify Discord presentation
* fix(discord): keep incomplete Activity routes private
* fix(discord): require usable Activity accounts
* docs(discord): clarify hidden Activity routes
2026-08-19 05:41:37 -07:00
66cacbae5d
test: remove strict-subset assertions ( #126142 )
2026-08-18 20:15:50 -07:00
54ebb307cd
fix(mcp): retire terminal transports and process trees ( #126101 )
...
Close terminal SSE and stateful notification streams through the owning lifecycle, and reap stdio/QA process groups before exact authority is discarded.\n\nRefs #126098 , #126099 , #126100 .
2026-08-18 18:10:45 -07:00
fe816d69ef
fix(gateway): route detached announce by instance ( #125946 )
...
* test(qa): cover worker generation reload
* test(qa): anchor worker generation fixture
* test(qa): strengthen worker generation proof
* test(qa): stabilize terminal reply smoke waits
* test(qa): widen terminal reply CI budget
* test(qa): drop superseded timeout workaround
* fix(gateway): route detached announce by instance
2026-08-18 17:14:43 -07:00
50720c3b8e
fix(codex): preserve native approval scope ( #125995 )
2026-08-18 16:18:01 -07:00
f6dbcc1ba9
test(e2e): keep recovery proof alive ( #125804 )
2026-08-18 07:44:38 -07:00
902eb1f282
test(e2e): repair release validation harness drift ( #125681 )
...
* test(e2e): align usage and Canvas contracts
* test(e2e): restore registry and use built CLI
2026-08-18 07:14:01 -07:00
350ac1d050
test(gateway): await hosted plugin registry startup ( #125814 )
2026-08-18 07:12:34 -07:00
e1d4eac8f4
fix(qa): use full tool profile for node MCP live proof ( #125683 )
...
* fix(gateway): share node tool snapshots across chunks
* docs(gateway): explain node snapshot ownership
* fix(qa): expose node MCP tool in live proof
2026-08-18 07:08:25 -07:00
efaa867d93
feat(nodes): publish exact runner slots ( #125708 )
...
* feat(nodes): publish exact runner slots
* docs(runners): link slot inventory PR
* fix(ui): keep session menus clickable under previews
* perf(protocol): keep runner slot schema off broad barrel
* test(codex): tolerate elapsed media startup budget
* test(codex): type media client factory mocks
* fix(protocol): reject impossible runner slot counts
* test(ci): stabilize loaded lifecycle checks
* test(ui): allow loaded bulk-delete scheduling
* test(ui): stabilize loaded interaction checks
* test(ui): isolate loaded update notice checks
* test(ui): colocate bulk-delete lifecycle coverage
* test(gateway): publish session config before async setup
2026-08-18 07:08:06 -07:00
f72782d87b
refactor(test): restore auth persistence integrity ( #125699 )
...
* test: restore auth persistence integrity
Restore the SQLite-backed auth wizard assertions traced to 43ea501f38
2026-08-18 02:58:30 -07:00
916aca13f3
feat: record subagent execution lineage ( #122015 )
...
* feat(audit): record subagent execution lineage
* fix(audit): type-check spawn lineage validation
* docs: preserve spawned-run lineage invariants
* fix(audit): preserve lineage for worker spawns
* fix(audit): bind worker lineage to live authority
* fix(audit): keep lineage carrier private
* fix(sessions): preserve ACP participant recording
* fix(audit): keep lineage out of runtime bearer
* fix(audit): keep lineage type private
* test(audit): match current worker claim shape
* test(audit): preserve readonly lineage result
* fix(audit): redeem spawn lineage privately
* fix(audit): preserve lineage redemption on copy
* test(audit): prove nested worker spawn lineage
* fix(audit): restore execution identity CI gates
2026-08-17 21:41:30 -07:00
1cf8ea446d
fix(mcp): prevent stale catalogs and silent tool failures ( #125564 )
...
* fix(mcp): harden lifecycle and result integrity
* fix(mcp): bound catalog invalidation replay
* test(mcp): stabilize process cleanup proof
2026-08-17 21:37:12 -07:00
821f41e1cd
fix(workers): propagate session permission context to worker placements ( #125326 )
...
* fix(workers): propagate session permission context
* test(workers): expect launch descriptor v4
2026-08-17 09:34:56 -07:00
11ebdfc9c3
fix(gateway): normalize TLS certificate pins ( #125276 )
...
* fix(gateway): normalize TLS certificate pins
* test(gateway): use valid TLS pin fixtures
2026-08-17 06:02:56 -07:00
2b55b55b72
feat(workboard): run attached automations after linked sessions finish ( #125170 )
...
* feat(workboard): nudge attached automations on session events
* fix(workboard): share automation nudge lifecycle state
* fix(workboard): satisfy nudge type guards
* fix(cron): add enabled-only immediate runs
2026-08-17 02:29:26 -07:00
8c6976e1fc
fix(agents): report recovered tool retries ( #125078 )
...
Preserve attempt-local recovery state so successful mutation retries emit a redacted terminal receipt without stale failure warnings.
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-17 14:35:00 +05:30
ee86b24ac1
fix(node-host): recover MCP catalogs and sessions ( #125092 )
...
* fix(node-host): recover MCP catalogs and sessions
Share placement-neutral MCP lifecycle and result projection while keeping Gateway session ownership and node process ownership separate. Refresh node catalogs live, recover closed or expired transports without replay, and preserve MCP application errors across node.invoke.\n\nFixes #125044
* test: register node MCP CI inventory
* fix(node-host): stop MCP recovery after abort
2026-08-17 01:39:33 -07:00
f59e945013
feat(gateway): move sessions between Gateway and runners ( #125036 )
...
* chore: preserve session placement move work
* feat(gateway): move sessions between runners
* test(gateway): align recovery fixture with move barriers
* fix(protocol): format literal-only Swift initializers
* test(ui): prove session move terminal state
* refactor(gateway): narrow session move target fence
* fix(gateway): preserve pending result recovery ownership
* test(workers): migrate reclaim lifecycle fixtures
* refactor(gateway): keep move internals private
* test(gateway): align split bootstrap fixture with moves
* fix(gateway): recover session moves through exact intent
* refactor(gateway): derive move placement subtypes locally
2026-08-17 00:23:13 -07:00
c1d3b33aa7
fix: honor provider timeouts during stuck-session recovery ( #123877 )
...
* fix(diagnostics): respect active model request timeouts
* chore(diagnostics): keep recovery activity internal
* test(diagnostics): await stream wrapper results
* fix(diagnostics): harden provider timeout recovery
* fix(diagnostics): track compaction model calls
* test: prove provider timeout recovery boundary
2026-08-16 18:18:29 -07:00
2d3612da6b
fix(gateway): preserve prepared plugin metadata under load ( #124844 )
...
* fix(gateway): preserve prepared plugin metadata under load
* fix(gateway): project metadata before catalog preparation
* test(agents): assert projected startup metadata
* test(gateway): bind load probes to each finalization wave
2026-08-16 15:14:39 -07:00
91e537da15
fix(runners): preserve device sessions through lifecycle faults ( #124744 )
...
* test(runners): cover paired-node lifecycle wire
* fix(runners): preserve retryable device lifecycle
* test(runners): keep wire fixture internals local
* fix(runners): stop fallback on device capacity
2026-08-16 12:29:07 -07:00
dbad5e385d
refactor(workers): separate runner consent from capacity ( #124356 )
...
* refactor(workers): separate runner inventory state
* docs(runners): track inventory cleanup
* test(workers): use bundle-only launch wire
* test(workers): update optional inventory fixture
* test(workers): validate prewarm inventory capability
* fix(workers): version runner inventory cutover
2026-08-16 04:46:38 -07:00
f19f62cb77
perf(node-host): prewarm worker bundles ( #124427 )
...
* perf(node-host): prewarm worker bundles
* test(gateway): gate worker finalization responsiveness
* fix(node-host): negotiate bundle prewarming
* fix(protocol): refresh worker prewarm models
* fix(node-host): preserve prewarm upgrade compatibility
2026-08-16 00:41:42 -07:00
8cf85e3ced
fix: restore release-validation fixture coverage ( #124401 )
...
* test(release): refresh validation fixtures
* test(release): satisfy fixture lint gates
* test(release): preserve fixture owner contracts
2026-08-15 22:15:09 -07:00
5943cd0362
test(qa): make target-none heartbeat explicit ( #124380 )
2026-08-15 20:41:14 -07:00
1ab85edb0e
fix(workers): bundle workspace rsync receiver ( #124339 )
2026-08-15 19:23:05 -07:00
78502eda6d
feat(workers): run device sessions from Gateway bundles ( #124037 )
...
* feat(workers): run device sessions from Gateway bundles
Install the current Gateway bundle before a device environment becomes ready, verify it at attach and tunnel boundaries, launch only from the immutable namespaced bundle directory, and retire stale environments for idempotent reprovisioning. Remove the local execution mode and preserve the node-local build claim only as temporary inventory metadata for the final projection/cleanup slice.
* docs(runners): record Gateway bundle cutover
* test(ci): repair runner validation fixtures
# Conflicts:
# src/scripts/test-projects.test.ts
* fix(workers): surface outdated node recovery
Keep legacy runner inventory diagnostic-only while exposing the update-and-reconnect action through node, environment, provider, placement, and Control UI surfaces.
* fix(workers): reject legacy inventory with recovery
* fix(workers): bundle worker deploy closure
* test(workers): close bundle cutover gates
* fix(workers): compose browser runtime at build
* fix(workers): satisfy bundle cutover gates
* fix(workers): route temp runtime through infra
* docs(workers): align bundle host guidance
* fix(ui): fence outdated session destinations
2026-08-15 17:46:44 -07:00
de23bf1893
test: repair worker environment E2E fixtures ( #124202 )
2026-08-15 09:57:02 -07:00
3c06621e3b
improve(test): cut core tooling 3 runtime ( #123659 )
...
* perf(test): collapse core tooling runtime proofs
* fix(test): import OTEL span id guard
2026-08-14 06:35:48 -07:00
7cadfb0bd6
fix: speed up local node launches and isolate scratch state ( #123503 )
...
* perf(node-host): reuse advertised worker build identity
* fix(agents): keep default workspaces inside state dir
* fix(plugins): package llama.cpp private SSRF runtime
* fix(node-host): silence missing skills directory
2026-08-13 23:24:54 -07:00
860aeed8f6
feat(gateway): transfer node worker workspaces ( #123280 )
...
* feat(gateway): transfer node worker workspaces
* fix(gateway): harden node workspace transfer
* fix(gateway): isolate transfer HTTP contract
* fix(gateway): trim transfer HTTP exports
2026-08-13 21:00:44 -07:00
438d035885
feat(gateway): launch workers on paired nodes ( #123157 )
...
* feat(gateway): launch workers on paired nodes
* docs(plan): track node worker launch wire
* fix(runners): restore node workspace ownership
Rehydrate durable workspace bindings after Gateway restart, fence timed-out node tunnel starts, and refuse incomplete clone fallback for submodule and Git LFS workspaces.
* test(runners): isolate node launch fixtures
2026-08-13 18:02:18 -07:00
cb8e08f536
fix(logs): report line-limit truncation ( #123358 )
2026-08-13 16:57:26 -07:00
ac110917e1
fix(ci): stream npm pack receipt to disk ( #123019 )
2026-08-13 14:30:27 +08:00
3bc665f6ae
fix(ci): sanitize AI manifest during installer pack ( #122952 )
2026-08-13 13:02:43 +08:00
8733dcd05f
fix(ci): expose AI pack diagnostics ( #122786 )
2026-08-13 08:25:58 +08:00
dceb2c343c
refactor: retire due compat-ledger surfaces (context-engine host params, deactivate alias, logging internals) ( #121845 )
...
* refactor(plugins): retire deactivate hook alias
* refactor(plugin-sdk): prune retired facade exports
* test(logging): isolate logger test controls
* refactor(logging): internalize file transport controls
* test(plugin-sdk): preserve retired facade coverage
* test(auto-reply): remove stale diagnostic imports
* refactor(logging): delete dead config-read guard
shouldSkipMutatingLoggingConfigRead had no production caller even on main;
it survived the dead-export scan only via logger's testApi re-export. The
test-isolation commit removed that mask, exposing the fossil. Delete the
guard, its test-only re-export, its mock entry, and its dedicated test file.
* refactor(plugin-sdk): retire due compatibility subpaths
* test(plugin-sdk): type group policy predicates
* refactor(plugin-sdk): split removed subpath records
* refactor(secrets): remove retired collector barrel
* test(plugin-sdk): tighten wildcard surface pin
* refactor(plugin-sdk): retire matrix facade metadata
* style(plugin-sdk): format facade metadata
* fix(ci): load channel setup contracts from source
Repair the main-owned regression from 99d662473c
2026-08-12 12:41:27 -07:00
1b36f42653
fix(audit): preserve numeric decision cursors ( #122619 )
2026-08-12 13:08:25 -05:00
562391b9af
feat(audit): explain denied operator approvals ( #119815 )
...
* Audit: add durable decision receipts
* Audit: route generic decision facts through writer
* Audit: satisfy strict decision count typing
* Test: align decision writer type coverage
* Refactor: isolate decision receipt projection
* Fix: preserve ambiguous approval correlation
* Fix decision coverage across pages
* Fix approval coverage across corrupt pages
* Fix decision summaries across retention and paging
* Remove superseded decision fact count path
* Keep session-derived approval links conservative
* Test decision paging at owner boundary
* Audit: bind approval receipts to exact execution
* Test: keep decision receipt coverage focused
* docs(agents): preserve decision receipt ownership
* Docs: refresh Plugin SDK split baselines
* Docs: require opt-in for future decision facts
* Fix: bound decision receipt inspection
2026-08-12 05:23:29 -05:00
3b01ea7905
fix(audit): show authenticated users for Gateway runs ( #122484 )
...
* fix(audit): show authenticated users for Gateway runs
* fix(audit): keep profile labels out of sessions
* test(qa): verify session label retention at storage
* fix(sessions): preserve canonical profile ownership
* test(qa): require full identity inspection proof
* docs(agents): preserve execution identity ownership boundary
2026-08-12 08:50:37 +00:00
Josh Avant