018b01e500
refactor(firecrawl): reuse canonical provider runtime helpers ( #128717 )
2026-08-24 06:01:49 -07:00
234df15a6d
chore: refresh dependencies after seven-day cooldown ( #128414 )
...
* build(deps): refresh dependencies after cooldown
Apply dependency, toolchain, action, image, and exact tool updates released by the inclusive 2026-08-16 seven-day cutoff. Adapt owner boundaries for the resulting CUA, logging, Teams, Markdown, native, and test-harness contract changes while retaining versions blocked by upstream compatibility constraints.
* fix(ui): align markdown renderer env typing
* fix(deps): align postcss and mistral peer contracts
* fix(deps): repair refreshed dependency contracts
* fix(deps): retain tslog startup budget
* fix(ci): verify Android tools with SHA-256
* fix(ci): fence Android SDK cache version
2026-08-24 03:01:54 -07:00
6c9aae7cee
fix(firecrawl): prevent canceled requests from caching late results ( #126857 )
2026-08-20 15:09:38 -07:00
06101b1037
refactor(validation): consolidate boundary guards into schemas ( #124820 )
...
* refactor(validation): consolidate boundary guards into schemas — pilot lane B
* fix(meetings): reject non-object browser status
2026-08-16 14:41:14 -07:00
33f3b72a19
refactor(plugin-sdk): extract stream and SecretRef primitives ( #124835 )
2026-08-16 14:30:11 -07:00
ffa0929c7f
fix(agents): stop advertising unavailable tools ( #124716 )
...
* fix(agents): gate tool description cross-references
* test(gateway): include metadata copier in invoke mock
2026-08-16 11:20:45 -07:00
255f941065
fix(web-fetch): reject failed provider target statuses ( #123741 )
...
* fix(firecrawl): reject failed target statuses
* refactor(firecrawl): remove duplicate scrape cache
2026-08-15 22:35:00 -07:00
5d601233df
refactor(types): remove chained type assertions in extensions ( #124079 )
...
* refactor(types): remove chained assertions in extensions
* fix(codex): preserve canonical binding identity
2026-08-15 01:39:26 -07:00
18e5b0e3e3
test(web): trim duplicate provider test surfaces ( #121727 )
2026-08-10 15:44:54 -07:00
48639663b0
chore(release): prepare 2026.8.1 ( #120375 )
2026-08-07 18:44:12 -07:00
c83dcc2bc0
fix(security): harden network tool output at canonical owner boundaries ( #118984 )
...
* fix(security): bound external tool content at its canonical owner boundary
* fix(plugin-sdk): document supported security boundary and restore facade parity
2026-08-03 15:34:33 -07:00
568ea29d2e
refactor(plugins): inherit shared package boundary settings ( #117474 )
2026-08-01 09:11:09 -07:00
e52354ea13
fix(build): pin typebox to a published release ( #116333 )
2026-07-30 09:58:51 +00:00
4232126bba
chore: update dependencies across workspace ( #115677 )
...
* chore(deps): update dependencies
* fix(deps): restore CI compatibility
2026-07-29 05:16:42 -04:00
3f37731175
docs(agents): surface hidden tool capabilities in model-facing descriptions ( #114516 )
2026-07-27 07:20:25 -04:00
f6131a4fbf
build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks ( #114006 )
...
* build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks
npm 12 removed shrinkwrap (command + tarball/root loading). Delete all 82
committed npm-shrinkwrap.json files and stop publishing lockfiles; keep
pnpm-lock.yaml as the single reviewed dependency boundary. The generator
becomes scripts/generate-npm-package-lock.mjs and feeds plugin bundling via
a transient package-lock.json + npm ci (works on npm 11 and 12). Tarball
validation treats the published 2026.7.2 beta train as a shrinkwrap
transition; self-update npm detection now uses install topology instead of
the shipped shrinkwrap.
* fix(deps): repair lint, deadcode, and test-type lanes for the npm 12 migration
- sort integrity comparisons with an explicit comparator (oxlint)
- keep resolveBunGlobalNodeModules module-local (knip unused-export gate)
- model npm pack --json as npm<=11 array / npm 12 name-keyed object
- default calver destructuring in the tarball test fixture
2026-07-26 01:29:55 -04:00
acd92f6a3d
chore(deps): refresh repository dependencies ( #112453 )
...
* build(deps): update QA broker dependency
* build(deps): refresh repository dependencies
* build(deps): reconcile rebased shrinkwraps
* test(plugins): remove stale loader test state
* test(deps): stabilize updated dependency coverage
* fix(swift): use caller-isolated TaskLocal overload
* build(deps): regenerate rebased shrinkwraps
* test(msteams): preserve DNS validation in fetch helper
* fix(deps): avoid vulnerable optional image stack
* test(deps): validate generated LRU override
* refactor(ui): extract chat resizable divider
* test(ui): update divider ownership path
* fix(matrix): retain restart-compatible SDK
* style(cron): format update test
2026-07-23 16:17:13 +00:00
990916c6ac
fix(firecrawl): reject malformed 2xx response envelopes ( #111210 )
...
* fix(firecrawl): reject malformed JSON envelopes
* test(firecrawl): use canonical plugin config fixture
Co-authored-by: Alix-007 <li.long15@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-19 20:41:48 -07:00
c7e7ac2728
refactor: remove expired plugin compatibility surfaces ( #111451 )
...
* docs(secrets): remove retired web credential paths
* refactor(web): remove retired provider compatibility paths
* refactor(providers): delete retired compatibility routes
* refactor(secrets): remove retired credential aliases
* refactor(plugin-sdk): delete retired compatibility surfaces
* docs(plugin-sdk): remove retired migration guidance
* chore(plugin-sdk): refresh rebased surface budgets
* chore(plugin-sdk): refresh API removal baseline
* refactor(compat): migrate retired internal callers
* chore(plugin-sdk): refresh current-main baselines
* test(config): migrate plugin-owned secret assertions
* test(gateway): narrow plugin secret refs
* fix(plugin-sdk): preserve private boundary type identity
* chore(compat): remove stale sweep references
* chore(lint): lower max-lines budget
* refactor(secrets): remove unused web helper
* build(plugin-sdk): drop removed compat entries
* chore(plugin-sdk): refresh rebased API baseline
* chore(plugin-sdk): use Linux API baseline hash
* fix(plugin-sdk): preserve private bundled build entries
* fix(plugin-sdk): package private runtime facades
* fix(plugins): preserve external credential contracts
2026-07-19 11:04:48 -07:00
53b53f1977
improve(agents): exact web_fetch output contract with cleaned result shape ( #110223 )
...
* feat: add web fetch output contract
* fix(agents): keep web_fetch contract schema module-local
* docs: refresh docs map for the web_fetch result section
2026-07-18 03:28:29 +01:00
f81f9d8570
chore: enforce max-lines suppression ratchet ( #107315 )
...
* ci: enforce max-lines suppression ratchet
* chore: prune stale max-lines suppression
* fix: close max-lines ratchet enforcement gaps
* fix: harden max-lines ratchet checks
* fix(ci): satisfy max-lines ratchet checks
* style: format max-lines declarations
* fix(ci): match oxlint suppression grammar
* test: isolate max-lines git fixtures
* chore: prune resolved max-lines debt
* test: skip newline path fixture on Windows
* fix: harden max-lines suppression ratchet
* chore: refresh max-lines baseline
* fix: close max-lines ratchet bypasses
* fix: derive ratchet base from PR merge tree
* fix: support older Git in staged ratchet
* fix: align max-lines declarations and baseline
* chore: refresh max-lines baseline for current main
* fix: exclude generated wizard locales from max-lines
* chore: prune resolved max-lines debt
2026-07-14 09:27:02 -07:00
c8e94b202e
refactor(firecrawl): remove internal export seams ( #107485 )
2026-07-14 06:08:53 -07:00
8809848b19
feat(firecrawl): add keyless Firecrawl Search (Free) provider + richer firecrawl_search options ( #97078 )
...
* feat(firecrawl): add keyless Firecrawl Search (Free) provider + richer firecrawl_search options
Add an opt-in, keyless 'firecrawl-free' web_search provider (Firecrawl
Search (Free)) mirroring the Parallel plugin's parallel-free pattern:
requiresCredential false, no autoDetectOrder, never auto-selected. The
free path is credential-isolated — it never resolves or sends any
Firecrawl API key (no Authorization header), so opting out of credentials
cannot leak a configured/paid key — and its results and cache key carry a
distinct 'firecrawl-free' provider identity. The keyed 'firecrawl'
provider and core search auto-select behavior are unchanged, honoring the
maintainers' opt-in policy for keyless search.
Registered in index.ts, the web-search-provider barrel, the
web-search-contract-api metadata artifact (the onboarding/setup source),
manifest contracts, the official external plugin catalog snapshot, and
the doctor/contract registries.
Also extend the firecrawl_search tool to /v2/search parity:
includeDomains/excludeDomains (mutually exclusive), tbs, location,
country, and raise the result cap to 100.
* docs: regenerate docs_map for firecrawl heading rename
---------
Co-authored-by: developersdigest <jonathan@sideguide.dev >
2026-07-12 21:04:43 -07:00
81941f2d68
test: enable noUncheckedIndexedAccess for extension tests ( #105343 )
2026-07-12 12:48:22 +01:00
dba64d574f
chore(release): set version to 2026.7.2
2026-07-11 04:00:49 +01:00
8034454568
fix(firecrawl): preserve Unicode in API errors ( #103487 )
...
* fix(firecrawl): preserve error detail Unicode
* test(firecrawl): cover Unicode error boundaries
* test(firecrawl): satisfy bundled lint
* test(firecrawl): streamline Unicode boundary coverage
* docs(changelog): credit Firecrawl Unicode fix
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 15:21:04 +01:00
9cf5079e56
refactor(plugins): localize provider internals ( #101425 )
2026-07-06 23:50:12 -07:00
2f6459093a
improve(web-fetch): speed up provider fallback loading ( #98559 )
...
* perf(web-fetch): add web fetch benchmark
* perf(web-fetch): cache provider fallback resolution
* perf(firecrawl): avoid duplicate scrape payload wrapping
* perf(web-readability): reuse void tag lookup
* fix(web-fetch): keep provider cache live
* fix(web-fetch): invalidate provider cache on registry swap
* perf(web-fetch): reduce html extraction overhead
* fix(web-fetch): bound provider discovery cache
* perf(web-fetch): avoid full plugin load on fallback
2026-07-04 12:47:10 -07:00
614e87cce1
chore: update dependencies ( #100027 )
2026-07-04 14:56:50 -04:00
8c5f45fc36
refactor(shared): consolidate provider and utility lazy loaders ( #98749 )
...
* refactor(shared): consolidate provider lazy loaders
* refactor(shared): leave enforcement to follow-up
2026-07-02 21:16:26 -07:00
66e676d29b
chore(release): close out 2026.6.11 on main
2026-06-30 11:31:08 -07:00
86b9b88f40
test(firecrawl): add unit tests for firecrawl client functions ( #97714 )
2026-06-29 07:58:40 -07:00
0a14444924
Bound successful provider response reads
2026-06-24 19:08:22 -05:00
0671c08900
chore(release): close out 2026.6.10 on main ( #96271 )
...
* chore(release): close out 2026.6.10 on main
* chore(release): align native app metadata for 2026.6.10
* chore(release): sync Android 2026.6.10 notes
* docs(changelog): preserve 2026.6.9 history
* docs(changelog): preserve 2026.6.9 history
2026-06-24 11:51:14 +08:00
b039e949b6
chore(release): close out 2026.6.9
2026-06-21 12:24:15 +08:00
21728777df
feat(plugins): externalize official provider batch
2026-06-19 01:05:52 +08:00
beea31a6b5
feat(firecrawl): add keyless scrape support ( #94551 )
...
Merged under maintainer approval while exact-head CI was queue-bound.
Co-authored-by: Developers Digest <124798203+developersdigest@users.noreply.github.com >
Co-authored-by: Vincent Koc <vincentkoc@users.noreply.github.com >
2026-06-19 00:23:41 +08:00
6774e7f259
chore(release): sync main to 2026.6.8
2026-06-17 07:25:30 +08:00
920e6a8eec
chore: set version 2026.6.9
2026-06-16 19:54:07 +01:00
4fa5092cdc
docs: document small extension sources
2026-06-04 21:02:07 -04:00
1878ca0820
chore(release): prepare 2026.6.2 beta
2026-06-04 00:06:52 +01:00
e254346bc2
chore(release): prepare 2026.6.3 beta
2026-06-03 23:42:34 +01:00
a14eacf372
chore(release): set version 2026.6.2
2026-06-01 23:06:55 +01:00
8e28c773fe
chore(release): prepare 2026.6.1
2026-06-01 10:30:15 +01:00
304e2c83c0
chore(lint): enable stricter oxlint rules
2026-05-31 18:59:02 +01:00
0d17623f00
chore: bump OpenClaw version to 2026.5.31
...
Bumps OpenClaw release metadata to 2026.5.31 across package manifests, app version files, plugin metadata, changelog headings, and generated shrinkwraps.
Verification:
- pnpm plugins:sync:check
- pnpm ios:version:check
- pnpm deps:shrinkwrap:check
- git diff --check
- stale 2026.5.30/build-code scan across changed files
- autoreview clean: no accepted/actionable findings
- PR CI green for real gates: Checks, security scans, dependency guard, app lanes, real behavior proof
Known non-code workflow issue:
- label workflow failed because this PR hits GitHub's 100-label issue cap before the size-label step.
2026-05-31 14:46:17 +01:00
48ccc50282
chore: update dependencies
2026-05-31 09:07:53 +01:00
deb7bc6539
chore(lint): enable readability lint rules
2026-05-31 07:17:57 +01:00
cd07d013ba
chore(release): bump version to 2026.5.30
2026-05-30 06:49:13 +01:00
f5e1fe9755
refactor: share firecrawl web search metadata
2026-05-29 07:41:27 +02:00
Peter Steinberger