8310c565e0
feat(onboarding): add provider sign-in ( #104502 )
...
* feat(onboarding): add provider sign-in flows
* fix(oauth): keep callback compatibility
* fix(onboarding): reconcile lost auth outcomes
* fix(onboarding): lock auth cancellation at commit
* fix(onboarding): close provider auth lifecycle gaps
* fix(onboarding): make terminal auth failures dismissable
* fix(onboarding): satisfy native app checks
* fix(onboarding): reconcile absent auth sessions
* fix(onboarding): bound provider auth sessions
* fix(onboarding): open provider auth links safely
* test(onboarding): use scanner-safe auth fixtures
* revert: keep established onboarding auth fixtures
* fix(onboarding): close provider auth cancellation gaps
* fix(gateway): retain uncollected wizard results
* fix(onboarding): bind provider reconciliation attempt
* fix(i18n): avoid guessing moved string identities
* style(onboarding): normalize remote auth choices efficiently
* fix(protocol): refresh optional provider auth choices
* test(gateway): cover provider auth dispatch order
* refactor(macos): split onboarding setup support
* fix(macos): refresh merged native checks
2026-07-11 13:00:17 -07:00
03558dc008
fix(openrouter): Fusion prompt corrupts boundary emoji in model IDs ( #104433 )
...
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-07-11 12:11:36 -07:00
b09f9b0482
fix(openrouter): apply request policy to video catalog requests ( #102062 )
...
* fix(openrouter): apply request policy to video catalog requests
* fix(openrouter): key video catalog cache by request policy
* test(openrouter): preserve auth literal types
* fix(openrouter): preserve catalog auth overrides
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 22:01:18 -07:00
dba64d574f
chore(release): set version to 2026.7.2
2026-07-11 04:00:49 +01:00
ce6cb3b250
fix(openrouter): bound music SSE buffering ( #101488 )
...
* fix(openrouter): bound music SSE buffering
Co-Authored-By: Claude <noreply@anthropic.com >
* fix(openrouter): align music stream bounds with media config
Co-authored-by: mikasa0818 <0668001030@xydigit.com >
---------
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-09 22:10:44 +01:00
3d206140f3
refactor: localize internal implementation constants ( #101758 )
2026-07-07 08:34:13 -07:00
1aeed5ec26
refactor(plugins): localize private config types ( #101452 )
2026-07-07 00:34:46 -07:00
53580e13a4
fix(usage): preserve provider-billed zero totals ( #101177 )
...
* fix(usage): preserve provider-billed zero totals
* fix(usage): harden provider-billed cost provenance
* fix(openrouter): retry delayed generation metadata
* fix(openrouter): satisfy retry lint
* refactor(openrouter): consume streamed billed cost
* chore: keep release notes out of contributor PR
---------
Co-authored-by: snowzlmbot <293528334+snowzlmbot@users.noreply.github.com >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-07 06:22:28 +01:00
80537c1ba4
feat(macos): load provider catalog during AI onboarding ( #101132 )
...
* feat(macos): load onboarding providers from gateway
* test(crestodian): widen setup config mock
* fix(crestodian): satisfy onboarding lint gate
* chore(macos): refresh onboarding localization inventory
* test(plugins): cover guided Copilot secret metadata
2026-07-06 20:57:56 +01:00
f1f8c1ed16
fix(providers): bound successful OAuth and webhook responses ( #98098 )
...
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-06 08:58:58 +01:00
07e2d633cc
feat: show auto-detected provider plans and billing ( #100520 )
...
* feat(providers): auto-discover usage billing
* feat(ui): show provider plans and billing
* fix(ui): translate provider billing labels
2026-07-06 04:53:09 +01:00
e6dec69403
refactor: consolidate image data URL formatting ( #99715 )
2026-07-03 17:09:30 -07:00
4d5d9dda92
fix: avoid DeepSeek-native thinking on OpenRouter V4
2026-07-02 22:50:58 -07:00
de34dfdbe8
refactor(plugins): consolidate record guards ( #99361 )
2026-07-02 22:12:53 -07:00
70cc909eea
fix(openrouter): send explicit auth headers ( #98187 )
...
* fix(openrouter): send explicit auth headers
* test(openrouter): type stream mock calls
2026-06-30 18:03:14 -07:00
66e676d29b
chore(release): close out 2026.6.11 on main
2026-06-30 11:31:08 -07:00
48f34b1d4d
fix(openrouter): bound video response reads
...
Route OpenRouter video submit and poll success JSON through the shared bounded provider JSON reader, preserving malformed-response mapping and SSRF request policy coverage.
2026-06-28 11:19:47 -07:00
c0883a531d
fix(openrouter): bound generation-cost JSON response reads ( #97490 )
2026-06-28 10:44:36 -07:00
527f8f0cbb
fix(image-gen): bound image generation provider JSON response reads ( #96495 )
...
* fix(image-gen): bound image generation provider JSON response reads
Route success JSON reads through readProviderJsonResponse (16 MiB cap)
in openrouter, google, fal, minimax, openai, and vydra image generation
providers to prevent OOM from oversized or hostile endpoint responses.
Mirrors the response-limit campaign already applied to other provider paths.
AI-assisted.
Co-authored-by: Cursor <cursoragent@cursor.com >
* fix(image-gen): size bounded JSON caps for inline image payloads
Signed-off-by: sallyom <somalley@redhat.com >
---------
Signed-off-by: sallyom <somalley@redhat.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
Co-authored-by: sallyom <somalley@redhat.com >
2026-06-26 07:08:30 -04:00
66e2fcc6f8
fix(speech): bound TTS/STT voice-list and transcription JSON response reads ( #96496 )
...
Route success JSON reads through readProviderJsonResponse (16 MiB cap) in
azure-speech, elevenlabs, microsoft, minimax/tts, xai/stt, and
openrouter/media-understanding to prevent OOM from oversized or hostile
endpoint responses. Mirrors the response-limit campaign already applied to
other provider paths.
AI-assisted.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-25 14:32:53 -04:00
5715b55000
fix(openrouter): bound video catalog JSON reads ( #96505 )
2026-06-25 14:17:01 -04:00
0671c08900
chore(release): close out 2026.6.10 on main ( #96271 )
...
* chore(release): close out 2026.6.10 on main
* chore(release): align native app metadata for 2026.6.10
* chore(release): sync Android 2026.6.10 notes
* docs(changelog): preserve 2026.6.9 history
* docs(changelog): preserve 2026.6.9 history
2026-06-24 11:51:14 +08:00
0feffda3fc
fix(plugins): remove simpleicons icon color paths ( #95987 )
2026-06-23 12:16:02 -07:00
0a97f73402
feat: add bundled plugin icon manifest URLs ( #95845 )
2026-06-22 22:14:18 -07:00
c4cac33af6
fix(openrouter): expand short canonical model IDs to upstream API slugs ( fixes #95198 ) ( #95268 )
...
- Add OPENROUTER_SHORT_TO_API_MODEL_ID map for short model refs like
openrouter/deepseek-v4-flash that OpenClaw surfaces but OpenRouter API
expects as deepseek/deepseek-v4-flash.
- In normalizeOpenRouterApiModelId, expand short refs before falling back
to the existing namespaced strip logic.
- Add unit tests covering short refs, long refs, native routes, and
pass-through cases.
- Add standalone reproduction script that verifies all normalization cases.
2026-06-22 19:15:25 +00:00
b039e949b6
chore(release): close out 2026.6.9
2026-06-21 12:24:15 +08:00
a42a1af942
fix(openrouter): bound oauth error bodies
2026-06-19 17:43:29 +02:00
f5419b5bb0
fix(openrouter): release music stream readers
2026-06-19 09:04:11 +02:00
b5f71c0971
refactor(extensions): remove unused dead helpers
2026-06-18 11:33:15 +08:00
6774e7f259
chore(release): sync main to 2026.6.8
2026-06-17 07:25:30 +08:00
920e6a8eec
chore: set version 2026.6.9
2026-06-16 19:54:07 +01:00
7e12a3326d
feat(openrouter): surface Fusion panel config ( #93005 )
...
Signed-off-by: sallyom <somalley@redhat.com >
2026-06-14 12:44:49 -04:00
6314c377bb
fix(openrouter): normalize provider-qualified model IDs ( #92627 )
...
Normalize provider-qualified OpenRouter model IDs before capability lookup and transport while preserving native OpenRouter namespace IDs.
Fixes #92611 .
Co-authored-by: liuhao1024 <sunsky.lau@gmail.com >
2026-06-13 12:05:28 +01:00
e9671ed603
feat: feature openrouter in onboarding provider picker
2026-06-09 21:59:56 -07:00
b9280d5863
feat: add OpenRouter OAuth login
...
(cherry picked from commit dccfb60656
2026-06-09 21:59:56 -07:00
3006b85db0
fix(openrouter): reconcile streamed generation cost
...
Fix OpenRouter streamed billing reconciliation by replacing the streamed estimated cost with the provider generation metadata total when the final streamed response includes a response id.
Verified with focused OpenRouter tests, full OpenRouter extension tests, formatting/diff checks, autoreview, official OpenRouter generation metadata docs, and a live OpenRouter API stream plus delayed generation lookup. Remaining CI failures were inspected and are unrelated existing failures outside the OpenRouter surface.
Fixes #68066
2026-06-06 20:06:57 -07:00
4fa5092cdc
docs: document small extension sources
2026-06-04 21:02:07 -04:00
1878ca0820
chore(release): prepare 2026.6.2 beta
2026-06-04 00:06:52 +01:00
e254346bc2
chore(release): prepare 2026.6.3 beta
2026-06-03 23:42:34 +01:00
6c7644268f
fix(test): stabilize ARM extension timer tests
2026-06-02 07:53:25 -07:00
a14eacf372
chore(release): set version 2026.6.2
2026-06-01 23:06:55 +01:00
3f54d150b3
test(openrouter): stabilize music timeout clamp assertion
2026-06-01 16:09:23 +01:00
8e28c773fe
chore(release): prepare 2026.6.1
2026-06-01 10:30:15 +01:00
344773ba09
fix(openrouter): cap music stream request timeouts
2026-06-01 00:20:09 +01:00
22cb7fb6b7
chore(lint): enable no-promise-executor-return
2026-05-31 23:06:13 +01:00
b653d94918
chore(lint): enable no-useless-assignment
2026-05-31 22:40:48 +01:00
304e2c83c0
chore(lint): enable stricter oxlint rules
2026-05-31 18:59:02 +01:00
0d17623f00
chore: bump OpenClaw version to 2026.5.31
...
Bumps OpenClaw release metadata to 2026.5.31 across package manifests, app version files, plugin metadata, changelog headings, and generated shrinkwraps.
Verification:
- pnpm plugins:sync:check
- pnpm ios:version:check
- pnpm deps:shrinkwrap:check
- git diff --check
- stale 2026.5.30/build-code scan across changed files
- autoreview clean: no accepted/actionable findings
- PR CI green for real gates: Checks, security scans, dependency guard, app lanes, real behavior proof
Known non-code workflow issue:
- label workflow failed because this PR hits GitHub's 100-label issue cap before the size-label step.
2026-05-31 14:46:17 +01:00
deb7bc6539
chore(lint): enable readability lint rules
2026-05-31 07:17:57 +01:00
16bae70af4
fix(release): align prerelease contracts after provider rename
2026-05-31 00:52:22 +01:00
Peter Steinberger