b080dd1e76
refactor: consolidate coercion contracts ( #122458 )
...
* refactor: consolidate coercion contracts
Centralize exact string, record, numeric, date, Boolean, argument, and structured-error coercions while preserving call-site semantics.
Migrate canonical-name collisions and deprecated internal SDK bypasses, deleting 55 net production/tooling lines. Expand declaration ownership enforcement to 101 allowed helpers and add a narrow export-completeness audit.
* fix: preserve standalone script coercions
Keep copied Control UI tooling self-contained and retain the trusted release harness module-relative source seam when the harness runs against an old target cwd.
2026-08-11 23:26:37 -07:00
0c8c8d95c7
fix(ai): restore cached OpenAI continuation ( #122483 )
2026-08-11 23:24:57 -07:00
61ab6a8f9d
feat(gateway): make suspend/resume operator-usable end to end ( #122100 )
...
* feat(gateway): make suspend/resume operator-usable end to end
A prepared Gateway now accepts authenticated WebSocket connects while
keeping every method except gateway.suspend.* fenced, so a fresh CLI or
controller process can resume a suspension instead of dead-ending on a
rejected upgrade until the two-minute lease expires. Restart drain,
worker ingress, and desktop-observe streams stay fully closed.
The gateway client surfaces non-101 upgrade responses (bounded body
read) as typed retryable errors instead of an opaque 1006 close, and
new openclaw gateway suspend / resume commands drive the whole
handshake, including bounded --wait polling with blocker output.
Live-verified on an isolated dev gateway: prepare, SIGSTOP/SIGCONT
freeze, resume, over-TTL expiry self-heal, conflict and mismatch paths.
* refactor(gateway-client): move wire-client contract types to protocol-client-contract
The connectError addition pushed protocol-client.ts over the 700-line
max-lines gate; split the adapter-facing contract types into their own
module instead of suppressing.
* refactor(gateway-client): keep contract-internal option types unexported
Knip deadcode gates reject exported types with no importer; the connect
and close decision shapes are only referenced inside the contract module.
* chore(plugin-sdk): refresh gateway-runtime API baseline after rebase
* fix(gateway-client): preserve hello type after rebase
* test(gateway): support websocket upgrade rejection events
* test(gateway): expect connection errors in close info
* fix(gateway): keep prepared-suspension connects control-only
Address ClawSweeper review: node and worker connects stay refused while
suspension is prepared (only operator control connects pass), and the
CLI never issues another suspend prepare after its --wait deadline.
2026-08-11 22:12:53 -07:00
e30df72045
fix(worker): keep source bundles npm-installable ( #122430 )
2026-08-11 21:50:56 -07:00
0e78a64df5
fix: simplify session companion grounding
2026-08-12 03:26:33 +01:00
8876528f7c
feat: clone GitHub projects from session picker ( #121818 )
...
* feat(projects): add managed GitHub clones
* feat(ui): clone GitHub projects from session picker
* fix(projects): integrate current gateway owners
* fix(protocol): derive Swift error detail accessors
* fix(ui): gate project cloning by scope
* test(gateway): isolate session prewarm probes
* revert: drop duplicate session prewarm repair
2026-08-11 18:49:16 -07:00
964c8c84c1
refactor: consolidate coercion ownership ( #122299 )
...
* refactor: consolidate coercion ownership
Centralize four canonical coercion helpers, migrate exact core and plugin duplicates through narrow Plugin SDK facades, and enforce declaration and plugin-normalization ownership boundaries.
The sweep adds eight focused SDK exports while deleting more production and tooling code than it adds. User-visible behavior is unchanged except for safer equivalent object and UI parsing at existing boundaries.
* fix: guard integer option ownership
Register resolveIntegerOption with the canonical function owner and extend the declaration-guard fixture so future local duplicates fail validation.
* fix: keep integer helpers on numeric facade
Remove the unshipped duplicate string-coerce exports and route every affected plugin consumer through the existing number-runtime contract.
* fix: point numeric coercion to number runtime
Make boundary and declaration diagnostics recommend the canonical numeric facade, with failing-before coverage for both guidance paths.
2026-08-11 17:14:53 -07:00
cd0a1235a3
feat: sync new-session preferences and recents by identity ( #121816 )
...
* feat(gateway): add identity preferences and project recents
* feat(ui): sync new-session identity state
* docs: explain identity-scoped session state
* test: track preference temp directories
* fix(gateway): preserve identity preference boundaries
* chore(protocol): refresh identity preference bindings
* test: refresh historical schema hashes
* style(gateway): format method order assertion
* fix(protocol): emit project recent Swift models
* test(gateway): track preference RPC release train
* fix(gateway): harden identity preference state
* fix(state): keep preference errors internal
* chore: refresh split plugin SDK baseline
* fix(gateway): use core session store loader
* refactor(state): fold additive migration checks
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* test(ui): relocate identity recents e2e
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
* chore: regenerate plugin SDK baseline
2026-08-11 16:52:59 -07:00
087fb56f77
feat(moonshot): add native K3 video input ( #122337 )
2026-08-11 16:49:42 -07:00
281fe1e502
refactor: use canonical companion context owners
2026-08-12 01:17:17 +02:00
627e83d4f7
fix(ui): effort slider matches selected level after model switches ( #122125 )
...
* fix(ui): align effort picker after model switches
Publish ordered per-model effort profiles from the Gateway and reconcile new-session effort overrides so labels, slider positions, and create payloads stay consistent.
* fix(ci): align model profile contracts
2026-08-11 13:14:11 -07:00
7eed2c3f21
feat(google): add current-turn native video input ( #122074 )
...
* feat(agents): add current-turn Gemini video handoff
* test(google): add live native video regression
* build(ai): emit provider types entrypoint
* fix(google): preserve video shedding on retry
2026-08-11 12:58:32 -07:00
746a188c90
refactor(media): collapse attachment byte classification into media-core ( #122168 )
...
Attachment MIME gating and extraction dispatch used nine separate byte policies across five files; the allowlist could approve one MIME while dispatch observed another after a second sniff. @openclaw/media-core/attachment-classify now owns byte sniffing, text heuristics, extension mapping, and the seven attachment classes; the cache stores one classification that gates and dispatch share. Channel-declared MIME leads with the transport Content-Type as a byte-arbitrated hint, normalizeMimeType folds YAML/XML synonyms so existing configured allowlists keep matching, and input_file API callers keep declared-MIME precedence over cosmetic filenames. Net -135 production LOC.
Proof: 2,153 focused tests across media-core/media-understanding/media plus boundary-contract and deadcode-mirror suites; ClawSweeper local review clean (round 5, zero findings); live Telegram default-turn probe green.
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-11 19:10:49 +00:00
7fe75acb5f
fix(compaction): recover overflow from sparse assistant history ( #122159 )
...
Prevent overflow recovery from dereferencing missing assistant usage metadata while preserving explicit unavailable and legacy CLI barriers.
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-08-12 02:54:01 +08:00
a57e8c70f5
feat(meta): add Muse Spark 1.2 models ( #120373 )
...
* feat(meta): add Muse Spark 1.2 models
* fix(meta): verify Muse Spark 1.2 catalog metadata
* fix(meta): verify Muse Spark 1.2 contracts
* docs(meta): quote discounted services terms
* fix(meta): preserve replay fields for simple completions
* test(meta): align stream host adapter types
* fix(meta): apply catalog cap for zero max tokens
* fix(meta): preserve omitted output cap
* fix(meta): scope responses stream wrapper
* fix(ai): preserve source API for stream wrappers
* fix(ai): distinguish hook and dispatch APIs
* test(ai): adapt plugin streams synchronously
* chore(plugin-sdk): refresh API baseline
* chore(plugin-sdk): refresh sharded API baseline
---------
Co-authored-by: Patrick Erichsen <patrick.a.erichsen@gmail.com >
2026-08-11 11:26:58 -07:00
3d76246792
refactor: eliminate final export name collisions ( #122083 )
...
* refactor: resolve final export name collisions
* refactor: update remaining collision rename consumers
* style: format rebased auth helpers
* test: update remaining session entry mocks
* test: update remaining runtime mock exports
* test: update delivery info path mock
* refactor: reconcile combined collision sweeps
* chore: regenerate collision and sdk baselines
2026-08-11 11:18:24 -07:00
cad77fb39c
refactor: consolidate remaining coercion helpers ( #122020 )
2026-08-11 10:22:01 -07:00
7fb18bf2cf
test(ai): remove stale completions compat bridge ( #122154 )
2026-08-11 10:10:39 -07:00
3a55867ea1
fix(gateway): bound stalled session subscriptions ( #121164 )
2026-08-11 10:10:20 -07:00
fe4cff7a6b
refactor(ai): split completions transport into concept modules ( #122122 )
...
* refactor(ai): split completions transport into concept modules
* refactor(ai): delete duplicated transport helpers
* chore(lint): ratchet max-lines baseline after transport split
* test(scripts): update prefix expansion expectation
2026-08-11 09:47:52 -07:00
1dcac5b15f
fix: open terminals no longer delay gateway updates ( #121601 )
...
* fix(gateway): allow updates with open terminals
* fix(updater): support terminal policy upgrades
* chore(plugin-sdk): refresh API baseline
2026-08-11 09:37:58 -07:00
ad704f35c4
fix(control-ui): hide unusable models from picker ( #121852 )
...
* fix(ui): hide unusable models from picker
* refactor(ui): remove stale model availability helper
* refactor(ui): simplify catalog state guards
* style: format provider catalog imports
* chore: refresh plugin SDK API baseline
* refactor(core): break provider catalog type cycle
* chore(protocol): refresh models list Swift output
* chore: refresh plugin SDK API baseline after rebase
* fix(gateway): preserve full catalog preload semantics
* fix(ui): keep model status within startup budget
* fix(ui): preserve provider status within startup budget
* fix(models): scope live catalog outcomes
* test(ui): expect agent-scoped model refresh
* test(ui): align model refresh e2e fixtures
2026-08-11 09:13:44 -07:00
903af8bef5
fix(ai): couple Responses hooks to stream lifecycle ( #121163 )
2026-08-11 09:03:07 -07:00
89ff93dbc2
fix(agents): retire attachment-only steering messages after delivery ( #121158 )
...
* fix(agents): retire queued messages by identity
* chore(plugin-sdk): refresh API baseline
* test(agents): narrow queued message events
2026-08-11 07:33:21 -07:00
f12fe48075
refactor(gateway): finalize kernel composition ( #122014 )
2026-08-11 04:54:54 -07:00
12165769c7
refactor(agents): move OpenRouter failover ownership to its plugin and derive reason schemas from one tuple ( #121898 )
...
* refactor(agents): centralize failover ownership and reasons
* test(agents): move OpenRouter failover cases to plugin owner
* fix(agents): preserve prepared provider failover ownership
* test(agents): avoid failover mock shadowing
* fix(agents): preserve provider owner in error copy
* fix(agents): complete provider owner propagation
* chore(plugins): refresh failover type closure hashes
2026-08-11 04:30:18 -07:00
03f56cfbc3
fix(memory): accept Windows extra-file Markdown casing ( #121976 )
...
* fix(memory): accept Windows extra-file Markdown casing
* fix(memory): keep extra-file casing policy private
2026-08-11 04:21:15 -07:00
f1bb7cd919
test(sdk): consolidate packed consumer evidence ( #122001 )
...
* test(sdk): consolidate packed consumer evidence
* test(qa): refresh scenario owner references
* test(qa): narrow script execution assertion
2026-08-11 04:18:20 -07:00
226c699a23
feat(ai): add provider video input contract ( #121887 )
...
* feat(llm): add user video input contract
* fix(ai): preserve structured tool results
* refactor(ai): isolate provider video input types
* style(ai): format provider transform imports
* chore(ai): register provider type entrypoint
2026-08-11 03:08:27 -07:00
e71d56d557
feat(cloud): let cloud sessions spawn and message cloud children ( #121846 )
...
* feat(cloud): add nested worker session capabilities
Amp-Thread-ID: https://ampcode.com/threads/T-019feaaa-c7ed-769e-9f29-a3612bec72e7
* fix(cloud): harden nested worker sessions
Amp-Thread-ID: https://ampcode.com/threads/T-019feaaa-c7ed-769e-9f29-a3612bec72e7
* fix(cloud): repair exact-head integration
Amp-Thread-ID: https://ampcode.com/threads/T-019feaaa-c7ed-769e-9f29-a3612bec72e7
---------
Co-authored-by: Amp <amp@ampcode.com >
2026-08-11 02:07:49 -07:00
ba9e72c17f
fix(heartbeat): deliver to the last conversation by default ( #121892 )
...
Unset heartbeat.target silently collapsed into the explicit "none" opt-out: heartbeats ran every 30m by default, elected notifications were dropped with only an in-memory event, and health read fine. Unset now resolves to "last" (the most recent conversation); explicit target: "none" keeps its internal-only contract. Polls skip pre-model with reason no-route while no route exists yet, and status/doctor surface the waiting-for-route state. Deliberate maintainer-owned default cutover: existing installs without a configured target start receiving heartbeat alerts in their last conversation after upgrade.
Fixes #121880
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-08-11 08:45:30 +00:00
ea06d72e85
feat(secrets): manage team secrets in Control UI ( #121724 )
...
* feat(secrets): add gateway store settings
* perf(control-ui): trim secrets startup copy
* perf(control-ui): reduce secrets startup payload
* fix(secrets): harden store mutation refresh
* perf(control-ui): meet secrets startup budget
* test(control-ui): update secrets navigation copy
* fix(ui): pluralize secret-detection count and drop duplicated dialog hint
* chore(protocol): regenerate gateway clients and SDK baseline after rebase
* fix(gateway): merge secrets store methods after project RPCs in advertised order
* chore: leave changelog to release generation
* test(gateway): retain desktop launch train coverage
2026-08-11 07:20:38 +00:00
fa03d9b913
refactor: consolidate coercion helpers ( #121366 )
...
* refactor: consolidate coercion helpers
* fix: remove duplicate coercion imports
* fix: preserve serialized coercion guard
* chore: ratchet coercion helper carve-outs
* fix(test): keep gauntlet subprocess startup lean
* fix: preserve imported session timestamp semantics
* fix: preserve catalog timestamp string semantics
* chore: align plugin SDK surface ratchet
* fix: preserve trajectory and SDK string contracts
* fix(test): preserve QA record assertion semantics
* fix: complete standalone record guard rename
* refactor(cron): use canonical string coercion
* fix(acpx): preserve Pi timestamp parsing
* test(channels): adapt custody test harnesses
* test(telegram): classify media harness as test support
* test(acpx): split timestamp contract coverage
* test(channels): support generated custody contracts
* chore: ban the full coercion helper name set
Extends the declaration guard to all eleven consolidated helper names and
renames the cron schedule-identity readNumber wrapper to readScheduleInteger
so the banned generic name cannot regrow.
* fix(scripts): repair release-validation guard drift and lint cause
Restores the renamed isJsonRecord guard in assertTrustedWorkflowHarness after
main added isRecord call sites in parallel, and attaches the caught YAML error
as the thrown error cause (preserve-caught-error was red on main).
* fix: preserve Claude timestamp string semantics
* fix: preserve persisted timestamp string semantics
* fix: preserve date-first timestamp contracts
* fix(openai): harden delegation failure formatting
* chore: close coercion helper guard gaps
* test(openai): model non-error delegation rejection
* chore: refresh plugin SDK API contract
* fix(tasks): use canonical string field reader
* fix(ai): use canonical provider error field coercion
* fix(browser): migrate native bootstrap coercion
* docs(plugin-sdk): clarify text record export compatibility
* fix(gateway): normalize approval execution identity
* test(outbound): isolate message action poll harness
2026-08-11 00:02:18 -07:00
1220a7609a
refactor: consolidate promise-like guards ( #121861 )
...
* feat(normalization-core): add promise-like guard
* refactor: consolidate promise-like guards
* fix(normalization-core): keep isPromiseLike non-throwing on hostile then getters
ClawSweeper finding on #121861 : the diagnostics-path local guard caught throwing
then getters; the canonical guard must classify, never throw.
* test(normalization-core): annotate intentional hostile-thenable fixture
2026-08-10 22:50:48 -07:00
36fbd869ed
refactor(agents): eliminate export name collisions ( #121768 )
...
* refactor(auth): consolidate profile helper owners
* refactor(agents): consolidate subagent registry reads
* refactor(agents): disambiguate runtime placement helpers
* refactor(agents): disambiguate helper exports
* chore(scripts): burn export collision debt
* test(agents): follow moved subagent read owner
2026-08-10 22:24:33 -07:00
90ddeb4b40
refactor(agents): absorb overflow, retry, and matcher duplicates into the failover substrate ( #121817 )
...
* refactor(ai): centralize context overflow matching
* refactor(agents): add retry evidence and guarded status facets
* refactor(agents): absorb assistant retry and key matchers
* chore(plugin-sdk): refresh failover closure hashes
* fix(agents): consume retry evidence at altitude zero
* test(agents): narrow retry corpus provider fixtures
* test(agents): keep retry corpus sorting immutable
2026-08-10 22:07:21 -07:00
73a9eed95b
refactor(audit): add canonical admitted-run context ( #120534 )
...
* feat(audit): carry canonical admitted execution context
* fix(agents): preserve admitted context across retries
* fix(worker): fence legacy launch dialect
* test(gateway): track approval temp dirs
* fix(plugin-sdk): preserve harness attempt compatibility
* fix: close delegated run authority at owner boundaries
* fix: internalize delegated authority validators
* refactor: split delegated authority proof surfaces
* refactor: centralize command admission identity
* test: claim runtime tool authority
* fix(gateway): keep lifecycle cleanup within static budgets
* fix(agents): revalidate harness policy authority
* fix(agents): fence awaited approval capability results
* test(copilot): supply required harness capability fixtures
* fix(agent): preserve scoped embedded run admission
* fix(agent): preserve keyless and worker authority
* test(agent): bind incomplete-turn authority
* docs: preserve execution authority invariants
* chore(plugin-sdk): regenerate API baseline
* fix(gateway): notify pending claim closure
* fix(gateway): revalidate delegated tool authority
* fix(plugin-sdk): keep source guard internal
* fix: close delegated authority races
* fix: revalidate delegated side effects
* fix: close harness authority projection gaps
* fix: align authority integration types
* fix: isolate settled harness finalization
* fix: fence recovery identity finalization
* fix: preserve committed session worktrees
* fix: preserve worker placement agent identity
* fix: fence active harness tool work
* fix(plugins): restore embedded run admission owner
* chore(plugin-sdk): compose integrated surface budgets
* fix(copilot): keep finalization attempt type internal
* fix(plugins): complete admission owner type imports
* test(harness): use settled finalization attempt shape
* fix(security): retain exact side-run and approval authority
* fix(security): preserve protected authority through terminal sweep
* fix(agents): follow moved recovery store owner
* fix(ci): align integrated authority owners with gates
* fix(plugins): distinguish embedded agent adapter export
* chore(plugin-sdk): regenerate API baseline after rolling integration
* refactor(gateway): keep session authority within owner budgets
* fix(gateway): keep session helpers private
* docs(plugin-sdk): name the V2 parameter subpath
* chore(integration): reconcile worker and SDK surfaces
* docs(plugin-sdk): require the V2 host API floor
* chore(plugin-sdk): regenerate after proxy-auth integration
2026-08-10 23:15:20 -05:00
7dbc2916a3
fix: cloud workers work with trusted-proxy browser auth ( #121671 )
...
* fix(ui): make cloud recovery scope gateway-owned
Allow trusted-proxy and other authorized browser sessions to use cloud workers without deriving recovery ownership from client-visible credentials or Web Crypto. The Gateway now emits an opaque principal-bound recovery scope.
* test(gateway): type recovery scope fixture
* fix(ui): preserve cloud recovery across upgrades
Keep the shipped credential-derived scope for older v4 Gateways and migrate credential-proven pending recovery rows to the Gateway-owned namespace before publishing readiness.
* perf(ui): lazy-load recovery migration
* fix(ui): preserve canonical recovery promotion
* test(ui): use deterministic provider navigation
* fix(ui): authorize recovery scope migration
* build(plugin-sdk): refresh recovery compatibility baseline
* test(gateway): expect recovery migration authorization
2026-08-10 20:52:55 -07:00
b5d5ec340f
feat(cloud-workers): add desktop apps and browser autonomy ( #121475 )
...
* feat(cloud-workers): add desktop apps and browser autonomy
provider-attested Browser/Terminal launchers, shared visible loopback CDP Browser tool, no MCP/cookies/generic command.
* feat(ui): add cloud desktop app launcher
* docs(gateway): document cloud desktop apps and browser autonomy
* perf(ui): trim desktop launcher startup copy
* refactor(ui): simplify desktop launch feedback
* perf(ui): reuse desktop app labels
* fix(ui): keep desktop launch failures actionable
* fix(crabbox): allow browser bootstrap to finish
* fix(cloud-workers): honor provider provision budgets
* fix(cloud-workers): persist browser screenshot receipts
* fix(cloud-workers): bound browser screenshot lifecycle
* fix(cloud-workers): avoid replaying desktop launches
* test(cloud-workers): isolate browser runtime integration
* refactor(cloud-workers): tighten desktop runtime boundaries
* test(cloud-workers): keep browser runtime mock synchronous
* fix(cloud-workers): break gateway type import cycle
* fix(ci): settle admitted setup sessions in tests
* build(plugin-sdk): refresh desktop app contract
* ci: refresh merge-tree validation
* build(plugin-sdk): regenerate desktop app baseline
* style(gateway): format merged method order test
2026-08-10 20:31:07 -07:00
00fb85e48f
fix(openai): preserve hosted search in Code Mode ( #121812 )
...
Keep provider-hosted web_search alongside Code Mode's constrained function surface when OpenAI policy authorizes it. Enforce the same authorization at Responses transport egress.
Refs #121803 .
2026-08-10 19:59:51 -07:00
17854d4c0b
fix(runtime): restore main validation contracts ( #121716 )
...
* fix(runtime): repair main validation contracts
* test(runtime): enforce compact lifecycle payloads
* test(memory): preserve missing extra-path contract
* test(ci): drop repairs already on main
* style(test): align current-main fixture
* fix(memory): preserve missing-error type contract
* fix(memory): reject invalid extra-path parents
2026-08-10 19:35:29 -07:00
a381aa3e8b
fix(memory): restrict multimodal indexing to extra paths ( #121627 )
...
* fix(memory): restrict multimodal indexing to extra paths
* fix(state): add lazy secret store schema ensure
* fix(state): bound lazy secret store schema
* chore(plugin-sdk): refresh API baseline
2026-08-10 19:00:45 -07:00
8aa0376f27
refactor(agents): simplify turn latency runtime ownership ( #121779 )
...
Amp-Thread-ID: https://ampcode.com/threads/T-019fe95b-d75c-70fc-82b6-4825ca874826
Co-authored-by: Amp <amp@ampcode.com >
2026-08-10 18:58:36 -07:00
58a538767c
fix(security): centralize provider diagnostic redaction ( #121599 )
...
* fix(security): centralize provider diagnostic redaction
* fix(workers): redact finishing diagnostics
* fix(security): fail closed on malformed diagnostics
* fix(security): redact media wrapper diagnostics
* fix(security): normalize diagnostic field redaction
* fix(security): redact diagnostic media URIs
* fix(ai): preserve diagnostic compatibility in error projection
* refactor(ai): simplify diagnostic error handling
* fix(security): redact credential query diagnostics
* fix(security): redact diagnostic media arrays
* fix(security): redact diagnostic credential headers
* test: align shared expectations with current runtime contracts
* test(ui): align managed media and picker expectations
* fix(security): redact plural media diagnostics
* fix(ai): preserve bracketed provider errors
* fix(security): cover generic diagnostic credentials
* fix(security): redact prefixed diagnostic JSON
* fix(security): redact embedded diagnostic JSON
* test(agents): align cache trace media redaction
* fix(security): redact cookie diagnostics
* refactor(ai): isolate diagnostic host policy
* refactor(ai): narrow diagnostic helper exports
* fix(security): bound diagnostic descriptor reads
* fix(security): bound diagnostic graph traversal
2026-08-10 18:53:45 -07:00
ba58803997
fix(models): repair local model no-auth and overflow handling ( #121790 )
...
Preserve the internal null Authorization marker when resolving local no-auth provider headers, avoid classifying LM Studio prompt-template guidance as context overflow, and rebuild ai/llm-core package sources during pnpm dev/watch.
2026-08-10 18:52:00 -07:00
b985d5a1ed
feat: stream live subagent progress in task events ( #121549 )
...
* feat(tasks): stream live subagent activity
* fix(tasks): correlate edit activity from start events
* fix(gateway): sanitize live task activity
* test(reply): align custody harnesses with lifecycle
* fix(outbound): preserve post-send recovery evidence
* fix(types): align reply harnesses with current contracts
* fix(tasks): preserve activity liveness and SDK parity
* test(sdk): avoid unsafe task summary assertion
* chore(contracts): refresh Plugin SDK API baseline
2026-08-10 18:37:58 -07:00
32894a3ba5
feat: start sessions from registered projects ( #121465 )
...
* feat(gateway): add project registry sessions
* fix(gateway): authorize project branch discovery
* test(gateway): reuse worktree test imports
* fix(protocol): register projects schema owner
* fix(gateway): gate project paths by write scope
* feat(control-ui): register projects from folder browser
* refactor(gateway): extract session diff baseline preparation
* fix(gateway): honor admin scope in project listings
2026-08-10 17:56:12 -07:00
aa25f88fe3
test(ai): remove schema cache reset seam ( #121769 )
2026-08-10 17:20:10 -07:00
f09a33ce41
Optimize OpenAI turn latency and simplify reuse ( #121687 )
...
Amp-Thread-ID: https://ampcode.com/threads/T-019fe95b-d75c-70fc-82b6-4825ca874826
Co-authored-by: Amp <amp@ampcode.com >
2026-08-10 16:23:06 -07:00
d6317094a9
fix(memory): prune stale session index rows at startup ( #121665 )
...
* fix(memory): prune stale session index rows at startup
* fix(memory): reconcile stale sessions without re-embedding
* oc-9df: fail closed on session corpus scan errors
---------
Co-authored-by: Josh Lehman <550978+jalehman@users.noreply.github.com >
2026-08-10 16:11:35 -07:00
Peter Steinberger