ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-27 12:56:01 -06:00
Code Issues Packages Projects Releases Wiki Activity
62,460 Commits 4,492 Branches 379 Tags
e40f3ee89a09d93fe2ca40569229ea74bd27dae8
Commit Graph

1658 Commits

Author SHA1 Message Date
Dallin Romney a04bc64ab7 fix: prevent CLI MCP children from widening sandbox tools (#103822) 
(cherry picked from commit 5c260940bd)
 2026-07-14 04:18:36 -07:00
Dallin Romney 96c85dfeb3 revert: remove malformed CLI MCP adaptation 2026-07-14 04:07:14 -07:00
Kevin Lin d6d09ea0d1 feat(update): notify extended-stable availability (#100438) 
* docs(update): clarify extended-stable notifications

* feat(update): notify extended-stable availability

* fix(update): isolate notification state

* fix(docs): align update channel table

* fix(update): refresh after channel switch

* fix(update): satisfy notification checks

* test(update): prove loopback notification path

* test(update): fix loopback server lifecycle

* fix(update): refresh extended stable without cache

* fix(update): retain extended stable throttle marker

(cherry picked from commit e3c40efeb0)
 2026-07-14 02:44:12 -07:00
Kevin Lin 93ca33704b feat(update): support extended-stable package updates (#99811) 
* feat(update): add extended-stable channel contract

* feat(update): implement extended-stable package flow

* docs(update): document extended-stable behavior

* fix(update): preserve extended-stable preflight guarantees

* fix(update): reject extended-stable Git repair

* fix(update): support loopback extended-stable canaries

* fix(update): preserve scoped package roots

(cherry picked from commit d214622320)
 2026-07-14 02:43:39 -07:00
Peter Steinberger 5921671d39 fix(secrets): harden exec provider diagnostics (#105082) 
(cherry picked from commit b6c171901e)
 2026-07-14 02:24:09 -07:00
Peter Steinberger f274f1bc95 fix: prevent CLI MCP children from widening sandbox tools (#103822) 
* fix(gateway): bind CLI MCP grants to context

* chore: leave release changelog ownership intact

(cherry picked from commit 5c260940bd)
 2026-07-14 02:18:05 -07:00
Dallin Romney 56ef98b492 docs(diagnostics): document blocked-tool recovery floor 
(cherry picked from commit 6cabced3c2)
 2026-07-14 01:48:48 -07:00
joshavant d4f666874f feat: harden ios app store push release mode 2026-06-23 00:01:20 -05:00
wangjieweb3-design a84d3b6853 docs: document local avatar file size limit (#78884) 
* docs: document local avatar file size limit

* docs: update docs/gateway/config-agents.md

* docs: document local avatar file size limit

---------

Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
 2026-06-23 02:17:04 +00:00
snowzlm 10113b2c9f fix(daemon): keep systemd gateway running after child OOM (#93585) 
Co-authored-by: snowzlm <snowzlm@noreply.codeberg.org>
 2026-06-22 18:54:21 +00:00
thomas.szbay 9bf681d663 feat(channels): add directUserId support for per-DM model override (#95120) 
Add optional directUserId field to ChannelModelOverrideParams so the
shared channels.modelByChannel resolver can match DM-specific config
entries. Callers pass sessionEntry.origin?.nativeDirectUserId.

Closes #53638

Co-authored-by: Thomas Zhengtao <thomas.zhengtao@gmail.com>
 2026-06-22 17:26:01 +00:00
Vincent Koc 2b75806197 feat: forward-port fast talks auto mode (#85104) 2026-06-22 09:37:09 +08:00
Omar Shahine a0714a3d68 fix(imessage): keep split-send coalescing opt-in (#93143) 
Merged via squash.

Prepared head SHA: 7fc3eca084
Co-authored-by: omarshahine <10343873+omarshahine@users.noreply.github.com>
Co-authored-by: omarshahine <10343873+omarshahine@users.noreply.github.com>
Reviewed-by: @omarshahine
 2026-06-21 17:12:21 -07:00
Vincent Koc c8ab37f6fe chore(deadcode): drop inert legacy workspace doctor check 2026-06-22 01:47:27 +08:00
Vincent Koc a60947fb3e fix(agents): keep live tool-result prompts cache-stable 2026-06-21 21:54:35 +08:00
Alix-007 6a27300a5b fix(gateway): remove device-backed node pairings (#90373) 
Merged via squash.

Prepared head SHA: 8bd0e964ec
Co-authored-by: Alix-007 <267018309+Alix-007@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
 2026-06-19 22:04:16 +01:00
Alix-007 3fa4fdaec1 docs: fix two broken cross-reference anchors (#93941) 
Merged via squash.

Prepared head SHA: 32c61da44d
Co-authored-by: Alix-007 <267018309+Alix-007@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
 2026-06-19 20:27:25 +01:00
pick-cat b677ea6726 fix(agent): resolve compaction model alias to canonical model ref (#90885) 
Merged via squash.

Prepared head SHA: 72d28dc385
Co-authored-by: Pick-cat <266665499+Pick-cat@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete
 2026-06-19 15:03:06 +01:00
Jesse Merhi 5db2f6c1fc Add stdout diagnostics OTEL log exporter 
Adds stdout and both-mode diagnostics OTEL log export, with focused QA Lab smoke coverage and docs/config updates.

Prepared head SHA: efa2ef07ab
Verification: CI 27808480969 passed for the prepared head.
Reviewed-by: @jesse-merhi
 2026-06-19 16:06:37 +10:00
Vincent Koc dd5febe2aa fix(config): preserve raw snapshots after materialization 2026-06-19 09:01:54 +08:00
Vincent Koc 943511674c fix(config): preserve raw snapshots after materialization 2026-06-19 09:01:03 +08:00
Vincent Koc c9605779ef fix(doctor): warn on volatile SQLite state (#94725) 
* fix(doctor): warn on volatile SQLite state

* fix(doctor): resolve symlinked state paths
 2026-06-19 08:56:37 +08:00
Vincent Koc 21728777df feat(plugins): externalize official provider batch 2026-06-19 01:05:52 +08:00
Vincent Koc beea31a6b5 feat(firecrawl): add keyless scrape support (#94551) 
Merged under maintainer approval while exact-head CI was queue-bound.

Co-authored-by: Developers Digest <124798203+developersdigest@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@users.noreply.github.com>
 2026-06-19 00:23:41 +08:00
Alix-007 4d6befe7cd fix(doctor): clear inert legacy cron notify markers (#89396) 
Stop repeated cron doctor warnings by removing inert top-level `notify` metadata when `cron.webhook` is unset. Existing delivery stays unchanged, while configured invalid webhook URLs keep the actionable warning.

Fixes #44460.

Co-authored-by: Alix-007 <li.long15@xydigit.com>
Reviewed-by: @steipete
 2026-06-17 16:21:22 +02:00
huangjianxiong 73df6d48af fix(secrets): explicitly pass BWS_SERVER_URL to resolver for self-hosted instances (#93929) 
Merged via squash after the required `scripts/pr merge-run` workflow falsely flagged a non-overlapping mainline refactor as an overlap.

Prepared head SHA: dc0bba965a
Co-authored-by: Pandah97 <80405497+Pandah97@users.noreply.github.com>
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
Reviewed-by: @vincentkoc
 2026-06-17 22:04:48 +08:00
Shakker c6b5ef9b20 docs: update Gemini CLI backend defaults 2026-06-17 03:31:14 +01:00
Shakker c6d7d85763 fix: parse Gemini CLI stream output 2026-06-17 03:31:14 +01:00
Stellar鱼 bbfea21a18 fix(security): audit open dm tool exposure (#92883) 
* fix(security): audit open dm tool exposure

* fix(security): align open DM audit precedence

---------

Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com>
 2026-06-16 14:38:39 +08:00
openclaw-clownfish[bot] 8694fe7e81 fix(gateway): block internal HTTP session overrides 
Reject HTTP session-key overrides that target reserved internal session namespaces while preserving normal explicit session keys.

Co-authored-by: RichardCao <4612401+RichardCao@users.noreply.github.com>
 2026-06-16 09:30:27 +08:00
litang9 0f71a665ed fix(logging): avoid stalled warnings for active model calls 
Classify owned silent model calls as long-running until the abort threshold while preserving stalled handling for ownerless stale activity, with diagnostics tests and docs.
 2026-06-16 06:27:40 +08:00
Vyctor H. Brzezowski f00de6b06a docs(cli): add agent selector to cli backend quick start (#74613) 2026-06-16 00:39:48 +08:00
Peter Steinberger 1fef20c96b fix(tasks): preserve requester agent attribution 2026-06-15 07:09:01 -07:00
Andy Ye 8549a203d4 Honor WhatsApp configured ACP bindings (#92513) 
Merged via squash.

Prepared head SHA: 665080f482
Co-authored-by: TurboTheTurtle <35905412+TurboTheTurtle@users.noreply.github.com>
Co-authored-by: mcaxtr <7562095+mcaxtr@users.noreply.github.com>
Reviewed-by: @mcaxtr
 2026-06-13 18:09:22 -03:00
clawsweeper[bot] 5854e0c8f6 fix: split image setup and request timeout semantics (#92673) 
Summary:
- The PR separates image media-understanding setup and provider request timeout handling, adds focused timeout regression tests, and updates gateway/Codex docs for the existing image timeout setting.
- PR surface: Source +39, Tests +67, Docs +8. Total +114 across 5 files.
- Reproducibility: yes. Source inspection shows current main subtracts setup elapsed time from the provider request timeout, and the PR adds a slow-setup regression test that exercises the failure path.

Automerge notes:
- PR branch already contained follow-up commit before automerge: docs: clarify image timeout phase semantics
- PR branch already contained follow-up commit before automerge: fix: bound image setup timeout separately
- PR branch already contained follow-up commit before automerge: Revert "fix: bound image setup timeout separately"
- PR branch already contained follow-up commit before automerge: fix: split image setup and request timeout semantics

Validation:
- ClawSweeper review passed for head 001dee3fb0.
- Required merge gates passed before the squash merge.

Prepared head SHA: 001dee3fb0
Review: https://github.com/openclaw/openclaw/pull/92673#issuecomment-4698582136

Co-authored-by: Mason Huang <masonxhuang@tencent.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
 2026-06-13 13:29:45 +00:00
Peter Steinberger 26b9736922 fix: require admin for HTTP model overrides 
Co-authored-by: Peter Steinberger <steipete@gmail.com>
 2026-06-13 02:08:20 -07:00
liuhao1024 c5d599c8c4 docs(gateway): add uptime monitoring guidance to health check docs (fixes #55768) (#92608) 2026-06-13 02:59:18 -05:00
Shakker 6b0525f237 fix: gate Skill Workshop symlink writes 2026-06-11 15:20:38 +01:00
Shakker 6b3bcc986f fix: require service identity for update handoffs 2026-06-11 02:18:47 +01:00
Shakker 3394a4ad2c fix: refresh update status sentinel 2026-06-11 02:18:47 +01:00
abnershang a98c158414 docs: align supervised git update handoff docs 2026-06-11 02:18:47 +01:00
Vincent Koc adad27d744 fix(exec): honor state dir approvals (#92056) 2026-06-11 09:30:56 +09:00
lifuyue ac21e89c13 Support existing-session browser CDP endpoints (#91736) 
* Support existing-session browser CDP endpoints

* Fix browser existing-session test fixture type

---------

Co-authored-by: OpenAI Codex <codex@openai.com>
 2026-06-10 10:44:35 -04:00
wangmiao0668000666 bb6e47729c fix(compaction): lower default timeout from 900s to 180s, preserve explicit config (#91361) 
Merged via squash.

Prepared head SHA: ac545967f9
Co-authored-by: wangmiao0668000666 <290215524+wangmiao0668000666@users.noreply.github.com>
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Reviewed-by: @velvet-shark
 2026-06-10 14:51:54 +02:00
Omar Shahine bfccbc3fee fix(imessage): harden outbound send transport (#91783) 
Merged via squash.

Prepared head SHA: 39ea25767b

Proof:
- Focused tests, docs/config generation, lint/type/doc checks passed before merge.
- ClawSweeper re-review marked proof and patch quality platinum after lobster live send proof.
- Maintainer accepted the `channels.imessage.sendTransport` config surface and compatibility-risk tradeoff.

Lobster proof id: openclaw-lobster-live-proof-c74895c2-b629-4bb0-abcb-e6521069b3d8

Reviewed-by: @omarshahine
 2026-06-09 19:09:15 -07:00
Alex Knight bf95883812 feat(diagnostics-otel): capture tool input/output content via trusted channel (#91256) 
diagnostics.otel.captureContent.{toolInputs,toolOutputs} were documented
and config-wired but never produced any span content. Emit tool args and
results over the trusted private-data diagnostic channel (mirroring the
model-content path), and have the OTel exporter bound/redact/truncate them
before span export. Raw tool content never rides the public event bus.

Scope: core embedded-runner tool path (canonical producer). Codex
(async-batched) and Claude CLI remain follow-ups tracked by the issue.

Refs #77391
 2026-06-10 05:52:52 +10:00
Niels Kaspers 96a49caffa docs: clarify trusted-proxy websocket scopes (#85950) 2026-06-09 12:40:12 -07:00
Vincent Koc 634bcf6667 docs: clarify external app integration path 2026-06-09 14:56:17 +09:00
Josh Avant 9f48254f09 Fix config.patch explicit array replacement (#91551) 
* fix config patch explicit array replacement

* fix generated config patch protocol model

* fix config patch test helper typing

* fix shared auth patch replacement tests

* update config patch prompt snapshots

* harden qa lab config patch replace paths
 2026-06-08 21:48:46 -05:00
Vincent Koc 5f6d4277b1 docs: clarify skill workshop tool policy 2026-06-09 03:39:54 +09:00