6a2ec62865
fix(daemon): keep unsupported service status readable
...
Fixes #25621.\n\nKeep gateway status readable on unsupported service-manager platforms by returning a conservative read-only service adapter, while lifecycle mutations still reject clearly. Includes regression coverage for resolver, status, summary, and lifecycle behavior.\n\nVerified with focused Vitest/oxlint/diff checks, autoreview, and Azure Crabbox check:changed on lanes core/coreTests.
2026-06-12 12:05:22 +09:00
72e40833ba
fix(doctor): report managed plugin version drift
...
Fixes #90891 .
Doctor now reports official managed plugin version drift from the daemon-local status path, using the probed running gateway version and suppressing the advisory when probe auth is skipped or unsafe. The status probe also avoids re-entering config-backed exec SecretRef credential resolution when exec refs are disabled.
Verification:
- `node scripts/run-vitest.mjs src/commands/agent-via-gateway.test.ts src/cli/daemon-cli/probe.test.ts src/cli/daemon-cli/status.gather.test.ts src/flows/doctor-health-contributions.test.ts src/commands/doctor-workspace-status.test.ts src/gateway/probe-auth.test.ts`
- `.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main`
- Crabbox delegated Blacksmith Testbox `tbx_01ktmwa5q0c2eb688dkbkw8v2b`: `OPENCLAW_CHECK_CHANGED_REMOTE_CHILD=1 OPENCLAW_CHANGED_LANES_RAW_SYNC=1 corepack pnpm check:changed`
2026-06-09 09:44:01 +09:00
b59b34f9d5
docs: document cli service tests
2026-06-04 19:39:51 -04:00
4a285d529a
feat(status): detect external plugin version drift
...
Surface active official external plugin version drift in gateway status diagnostics so users can see when a host/package update left npm or ClawHub plugins behind the running local gateway. The advisory uses the daemon service install records, compares against the running gateway version, gives detailed fix commands in deep status, and avoids local-state drift checks for remote gateway mode or explicit status probe URLs.
Co-authored-by: Hussein Nourelddine <hussein@gptc.com.kw >
2026-06-02 06:59:23 -04:00
49e5091f18
fix(update): recognize manual-update launchd jobs ( #88764 )
...
* Recognize manual update launchd jobs
* fix(update): avoid stale launchd false positives
* fix(update): filter stale doctor launchd checks
* fix(update): narrow manual launchd updater labels
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-31 22:39:37 +01:00
ddf9fbed34
fix(gateway): expose runtime version in gateway status
...
Closes #56222
2026-05-19 22:09:14 -07:00
38b3e73622
fix: improve gateway protocol mismatch diagnostics ( #82908 )
...
* fix: improve gateway protocol mismatch diagnostics
* test: cover daemon deep connection diagnostics
* fix: normalize mapped loopback gateway clients
2026-05-17 06:33:34 +01:00
64d4f99d26
refactor(auto-reply): centralize command turn context
...
* refactor(auto-reply): centralize command turn context
* fix(channels): narrow command turn context literals
* fix(auto-reply): preserve command auth on refinalize
* fix(auto-reply): keep command turn context sdk-compatible
* fix(auto-reply): route structured command turns before reply setup
* test(cli): type stale launchd job mock
2026-05-15 08:41:09 +01:00
7acbb2260c
fix(mac): surface stale updater launchd jobs
2026-05-15 08:20:55 +01:00
6b32f6f283
test: guard cli helper assertions
2026-05-11 20:11:18 +01:00
a67753cc25
fix(agents): clarify subagent spawn wait guidance ( #79051 )
...
Summary:
- Replace the subagent spawn accepted-note yield guidance with push-based completion-event guidance.
- Cover the prompt with regression assertions that keep sessions_yield out of the note.
- Keep current rebased lint/type test helpers green.
Verification:
- pnpm lint
- pnpm check:test-types
- env -u OPENCLAW_TESTBOX -u OPENCLAW_TESTBOX_ID pnpm check:changed
Co-authored-by: brokemac79 <martin_cleary@yahoo.co.uk >
2026-05-10 17:11:32 +01:00
04f799c9c8
test: clear daemon status broad matchers
2026-05-10 17:01:08 +01:00
fea1c8e71d
fix: show deep status config warnings
2026-05-10 16:14:13 +01:00
cbc69d9a96
fix: surface gateway version skew
...
Signed-off-by: sallyom <somalley@redhat.com >
2026-05-07 22:58:14 -04:00
9b0afd8141
feat: show restart handoffs in gateway status
2026-05-05 08:38:00 +01:00
7994833fac
fix(gateway): align handshake client timeouts
2026-04-29 05:53:50 +01:00
7f3f108521
refactor(config): migrate plugin config access
2026-04-27 12:35:58 +01:00
831f03b814
fix(cli): speed up gateway status config reads
2026-04-26 20:34:49 -07:00
df6c58cf30
fix(gateway): use secure dashboard links when TLS is enabled ( #71499 )
...
Fixes #71494 .
- Render Control UI links with https:// when gateway TLS is enabled.
- Render websocket links with wss:// through the shared link resolver.
- Add daemon status handoff coverage and TLS scheme docs.
Co-authored-by: deepkilord <wang_hgang@msn.com >
2026-04-25 11:45:15 +01:00
43beceaee7
perf(cli): trim gateway status startup work
2026-04-25 08:52:52 +05:30
c9e4b86c7e
fix: tighten container bind defaults for landing ( #61818 ) (thanks @openperf)
2026-04-06 14:02:20 +01:00
bc75968074
perf(cli): trim gateway status startup imports
2026-04-04 08:59:56 +01:00
3f1d6fe147
test: speed up cli and command suites
2026-03-31 02:25:02 +01:00
855878b4f0
fix: stabilize serial test suite
2026-03-30 04:46:04 +09:00
3cbd4de95c
fix(gateway): restore loopback detail probes and identity fallback ( #51087 )
...
Merged via squash.
Prepared head SHA: f8a66ffde270937055+heavenlost@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-03-27 08:09:41 +01:00
61d29efc04
test: eliminate remaining clone seams
2026-03-26 20:28:36 +00:00
5c9e4cd30a
refactor: clarify doctor repair flow
2026-03-23 22:12:56 -07:00
8c7d603f25
fix(gateway): keep status helpers resilient to netif failures
2026-03-22 16:09:43 -07:00
a2cb81199e
secrets: harden read-only SecretRef command paths and diagnostics ( #47794 )
...
* secrets: harden read-only SecretRef resolution for status and audit
* CLI: add SecretRef degrade-safe regression coverage
* Docs: align SecretRef status and daemon probe semantics
* Security audit: close SecretRef review gaps
* Security audit: preserve source auth SecretRef configuredness
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com >
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-03-15 21:55:24 -05:00
8db6fcca77
fix(gateway/cli): relax local backend self-pairing and harden launchd restarts ( #46290 )
...
Signed-off-by: sallyom <somalley@redhat.com >
2026-03-14 14:27:52 -04:00
a9fd34058f
test: fix daemon status env typing
2026-03-13 21:02:19 +00:00
9747da8682
fix: honor gateway command env in status reads
2026-03-13 20:50:48 +00:00
380eb1c072
refactor: reuse shared gateway probe auth
2026-03-08 03:02:25 +00:00
e4d80ed556
CI: restore main detect-secrets scan ( #38438 )
...
* Tests: stabilize detect-secrets fixtures
* Tests: fix rebased detect-secrets false positives
* Docs: keep snippets valid under detect-secrets
* Tests: finalize detect-secrets false-positive fixes
* Tests: reduce detect-secrets false positives
* Tests: keep detect-secrets pragmas inline
* Tests: remediate next detect-secrets batch
* Tests: tighten detect-secrets allowlists
* Tests: stabilize detect-secrets formatter drift
2026-03-07 10:06:35 -08:00
72cf9253fc
Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails ( #35094 )
2026-03-05 12:53:56 -06:00
806803b7ef
feat(secrets): expand SecretRef coverage across user-supplied credentials ( #29580 )
...
* feat(secrets): expand secret target coverage and gateway tooling
* docs(secrets): align gateway and CLI secret docs
* chore(protocol): regenerate swift gateway models for secrets methods
* fix(config): restore talk apiKey fallback and stabilize runner test
* ci(windows): reduce test worker count for shard stability
* ci(windows): raise node heap for test shard stability
* test(feishu): make proxy env precedence assertion windows-safe
* fix(gateway): resolve auth password SecretInput refs for clients
* fix(gateway): resolve remote SecretInput credentials for clients
* fix(secrets): skip inactive refs in command snapshot assignments
* fix(secrets): scope gateway.remote refs to effective auth surfaces
* fix(secrets): ignore memory defaults when enabled agents disable search
* fix(secrets): honor Google Chat serviceAccountRef inheritance
* fix(secrets): address tsgo errors in command and gateway collectors
* fix(secrets): avoid auth-store load in providers-only configure
* fix(gateway): defer local password ref resolution by precedence
* fix(secrets): gate telegram webhook secret refs by webhook mode
* fix(secrets): gate slack signing secret refs to http mode
* fix(secrets): skip telegram botToken refs when tokenFile is set
* fix(secrets): gate discord pluralkit refs by enabled flag
* fix(secrets): gate discord voice tts refs by voice enabled
* test(secrets): make runtime fixture modes explicit
* fix(cli): resolve local qr password secret refs
* fix(cli): fail when gateway leaves command refs unresolved
* fix(gateway): fail when local password SecretRef is unresolved
* fix(gateway): fail when required remote SecretRefs are unresolved
* fix(gateway): resolve local password refs only when password can win
* fix(cli): skip local password SecretRef resolution on qr token override
* test(gateway): cast SecretRef fixtures to OpenClawConfig
* test(secrets): activate mode-gated targets in runtime coverage fixture
* fix(cron): support SecretInput webhook tokens safely
* fix(bluebubbles): support SecretInput passwords across config paths
* fix(msteams): make appPassword SecretInput-safe in onboarding/token paths
* fix(bluebubbles): align SecretInput schema helper typing
* fix(cli): clarify secrets.resolve version-skew errors
* refactor(secrets): return structured inactive paths from secrets.resolve
* refactor(gateway): type onboarding secret writes as SecretInput
* chore(protocol): regenerate swift models for secrets.resolve
* feat(secrets): expand extension credential secretref support
* fix(secrets): gate web-search refs by active provider
* fix(onboarding): detect SecretRef credentials in extension status
* fix(onboarding): allow keeping existing ref in secret prompt
* fix(onboarding): resolve gateway password SecretRefs for probe and tui
* fix(onboarding): honor secret-input-mode for local gateway auth
* fix(acp): resolve gateway SecretInput credentials
* fix(secrets): gate gateway.remote refs to remote surfaces
* test(secrets): cover pattern matching and inactive array refs
* docs(secrets): clarify secrets.resolve and remote active surfaces
* fix(bluebubbles): keep existing SecretRef during onboarding
* fix(tests): resolve CI type errors in new SecretRef coverage
* fix(extensions): replace raw fetch with SSRF-guarded fetch
* test(secrets): mark gateway remote targets active in runtime coverage
* test(infra): normalize home-prefix expectation across platforms
* fix(cli): only resolve local qr password refs in password mode
* test(cli): cover local qr token mode with unresolved password ref
* docs(cli): clarify local qr password ref resolution behavior
* refactor(extensions): reuse sdk SecretInput helpers
* fix(wizard): resolve onboarding env-template secrets before plaintext
* fix(cli): surface secrets.resolve diagnostics in memory and qr
* test(secrets): repair post-rebase runtime and fixtures
* fix(gateway): skip remote password ref resolution when token wins
* fix(secrets): treat tailscale remote gateway refs as active
* fix(gateway): allow remote password fallback when token ref is unresolved
* fix(gateway): ignore stale local password refs for none and trusted-proxy
* fix(gateway): skip remote secret ref resolution on local call paths
* test(cli): cover qr remote tailscale secret ref resolution
* fix(secrets): align gateway password active-surface with auth inference
* fix(cli): resolve inferred local gateway password refs in qr
* fix(gateway): prefer resolvable remote password over token ref pre-resolution
* test(gateway): cover none and trusted-proxy stale password refs
* docs(secrets): sync qr and gateway active-surface behavior
* fix: restore stability blockers from pre-release audit
* Secrets: fix collector/runtime precedence contradictions
* docs: align secrets and web credential docs
* fix(rebase): resolve integration regressions after main rebase
* fix(node-host): resolve gateway secret refs for auth
* fix(secrets): harden secretinput runtime readers
* gateway: skip inactive auth secretref resolution
* cli: avoid gateway preflight for inactive secret refs
* extensions: allow unresolved refs in onboarding status
* tests: fix qr-cli module mock hoist ordering
* Security: align audit checks with SecretInput resolution
* Gateway: resolve local-mode remote fallback secret refs
* Node host: avoid resolving inactive password secret refs
* Secrets runtime: mark Slack appToken inactive for HTTP mode
* secrets: keep inactive gateway remote refs non-blocking
* cli: include agent memory secret targets in runtime resolution
* docs(secrets): sync docs with active-surface and web search behavior
* fix(secrets): keep telegram top-level token refs active for blank account tokens
* fix(daemon): resolve gateway password secret refs for probe auth
* fix(secrets): skip IRC NickServ ref resolution when NickServ is disabled
* fix(secrets): align token inheritance and exec timeout defaults
* docs(secrets): clarify active-surface notes in cli docs
* cli: require secrets.resolve gateway capability
* gateway: log auth secret surface diagnostics
* secrets: remove dead provider resolver module
* fix(secrets): restore gateway auth precedence and fallback resolution
* fix(tests): align plugin runtime mock typings
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-03-03 02:58:20 +00:00
c53b11dccd
test: fix pairing/daemon assertion drift
2026-02-26 21:24:50 +00:00
47f52cd233
test(cli): tighten daemon status TLS mock typings
2026-02-26 18:13:33 +00:00
bed69339c1
fix(cli): scope daemon status TLS fingerprint to local probes
2026-02-26 18:13:33 +00:00
b788616d9c
fix(cli): add TLS daemon-status probe regression coverage
2026-02-26 18:13:33 +00:00
mushuiyu_xydt