Jesse Merhi
2633b14914
feat(security): support operator-managed network proxy routing ( #70044 )
...
* feat: support operator-managed proxy routing
* docs: add network proxy changelog entry
* fix(proxy): restrict gateway bypass to loopback IPs
* fix(cli): harden container proxy URL checks
* docs(proxy): clarify gateway bypass scope
* docs: remove proxy changelog entry
* fix(proxy): clear startup CI guard failures
* fix(proxy): harden gateway proxy policy parsing
* fix(proxy): honor update shorthand proxy policy
* fix(cli): redact proxy URL suffixes
* test(proxy): keep gateway help off proxy startup
* fix(proxy): keep overlapping lifecycle active
* docs: add proxy changelog entry
---------
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-04-28 00:20:47 -05:00
Peter Steinberger
52daf5fbd3
fix(acpx): stage Claude ACP adapter runtime dependency
2026-04-28 05:38:15 +01:00
Peter Steinberger
093dba3806
fix(acpx): bundle Codex ACP adapter
2026-04-28 04:39:41 +01:00
Peter Steinberger
632b0fd580
chore: update workspace dependencies
2026-04-28 03:09:44 +01:00
Peter Steinberger
0294aebe6f
feat(providers): add DeepInfra provider plugin ( #73038 )
...
* feat(providers): add DeepInfra provider plugin
* feat(deepinfra): add media provider surfaces
* fix(deepinfra): satisfy provider boundary checks
* docs: add gitcrawl maintainer skill
* test: include deepinfra in live media sweeps
* fix: remove stale tts contract import
2026-04-28 01:12:54 +01:00
Val Alexander
f7797ca62b
chore: remove coven extension
2026-04-27 13:22:32 -05:00
Val Alexander
ea92dc9202
chore(coven): enable ClawHub publishing
...
Mark the Coven ACP runtime bridge as a ClawHub-publishable code plugin and align its workspace lockfile metadata.
2026-04-27 12:35:34 -05:00
Val Alexander
fc8ccde542
feat(acp): add opt-in Coven runtime bridge
...
Add the opt-in Coven ACP runtime bridge as a bundled extension while keeping ACPX as the default path.
Security hardening included before merge:
- fail closed by default instead of silently falling back;
- bounded health/socket requests and daemon response sizes;
- fixed Coven socket trust anchor and symlink/path validation;
- reject untrusted harness/session/event ids before exposing them;
- sanitize daemon-controlled terminal/status/error strings;
- use incremental event polling with bounded dedupe state;
- clean up launched Coven sessions before fallback when daemon ids are invalid.
Validation:
- pnpm test extensions/coven/src/config.test.ts extensions/coven/src/client.test.ts extensions/coven/src/runtime.test.ts
- pnpm check:changed
- GitHub CI green on a64eac20b9
2026-04-27 12:22:29 -05:00
Peter Steinberger
e59e0393f5
fix(acpx): mark claude acp package test-only
2026-04-27 12:18:59 +01:00
Peter Steinberger
277cc640b1
fix(acp): wait for claude results before idle completion
2026-04-27 12:12:48 +01:00
Peter Steinberger
e98f976a70
refactor: centralize provider stream fallback ownership
2026-04-27 12:11:29 +01:00
Peter Steinberger
9dd01b5e49
fix: align plugin runtime dependency contracts
2026-04-27 11:58:28 +01:00
Peter Steinberger
f50fb73560
fix(whatsapp): honor env proxy during QR login
2026-04-27 11:30:29 +01:00
Val Alexander
14a27e11f7
feat(ui): show raw config pending changes
...
Adds a raw config pending-changes diff panel in Control UI raw mode, with JSON5 parsing, sensitive-value redaction until explicit reveal, bounded diff work, and tests for redaction/reveal and stale reveal-state reset.
Also aligns provider manifest contract coverage for google-vertex and Qwen aliases to unblock the rebased CI matrix.
Supersedes stale PRs #48621 and #46654 . PR #48621 had gone stale without maintainer follow-up, so this maintainer-authored PR carries the implementation forward transparently while preserving changelog credit for the original contributor and @BunsDev.
2026-04-27 04:42:10 -05:00
Vincent Koc
600df95c8c
feat(migrate): add Claude importer
...
Add a bundled Claude migration provider for Claude Code and Claude Desktop imports.\n\nIncludes source discovery, preview/apply behavior for instructions, MCP servers, skills and command prompts, archive/manual handling for unsafe Claude state, docs, labeler, and tests.
2026-04-27 02:35:44 -07:00
Peter Steinberger
4de235f908
feat(providers): add cerebras plugin
2026-04-27 10:22:20 +01:00
Vincent Koc
1fc5b2b703
feat(migrations): add plugin-owned Hermes import
...
* feat: add migration providers
* feat: offer Hermes migration during onboarding
* feat(hermes): map imported config surfaces
* feat(onboard): require fresh migration imports
* docs(cli): clarify Hermes import coverage
* chore(migrations): rename Hermes importer package
* chore(migrations): rewire Hermes importer id
* fix(migrations): redact migration JSON details
* fix(hermes): use provider runtime for config imports
* test(hermes): cover missing source planning
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-27 00:34:29 -07:00
Vincent Koc
b9c7a4306b
fix(ci): declare Lobster Ajv runtime dependency
2026-04-26 18:04:46 -07:00
Peter Steinberger
9694c0611c
ci: fix main gate
2026-04-26 11:15:45 +01:00
Peter Steinberger
9a529ca78b
chore: update dependencies
2026-04-26 10:54:58 +01:00
Vincent Koc
8c3b1366ce
chore(tokenjuice): bump bundled runtime to 0.6.3
2026-04-25 18:22:44 -07:00
Peter Steinberger
5b80d0c15e
feat(tts): add Azure Speech provider
...
Co-authored-by: Leon Chui <84605354+leonchui@users.noreply.github.com>
2026-04-26 01:42:51 +01:00
pash-openai
edb618c6c4
Manage the Codex app-server binary in OpenClaw ( #71808 )
...
* Manage Codex app-server binary
* Use plugin deps for Codex app-server binary
* Stabilize media model registry test
* Exclude checkpoint transcripts from memory ingestion
2026-04-25 16:51:14 -07:00
Peter Steinberger
3f90005e56
build: bump bundled acpx to 0.6.1
2026-04-26 00:11:05 +01:00
Peter Steinberger
f1b1c3dc99
chore: update workspace dependencies
2026-04-25 22:48:44 +01:00
Cale Shapera
0bcb4c95c1
feat(tts): add Inworld speech provider ( #55972 )
...
Adds the bundled Inworld speech provider with docs, config surface, SSRF-guarded fetches, directive overrides, native voice-note/telephony output coverage, and live `.profile` verification.
Co-authored-by: cshape <cshape@users.noreply.github.com>
2026-04-25 22:33:21 +01:00
Peter Steinberger
dd78b7f773
fix: harden OpenCode ACP bind dispatch
2026-04-25 13:38:58 +01:00
Vincent Koc
e174d96cc0
refactor(media): move sharp image ops into media runtime ( #71519 )
...
* refactor(media): move sharp image ops into plugin
* fix(media): pass image pixel budget to sharp plugin
* refactor(media): reuse media understanding sharp runtime
* test(build): allow staged runtime core graphs
2026-04-25 04:31:10 -07:00
Peter Steinberger
b511250e5c
feat(media): add voice conversion and speech plugins
2026-04-25 12:12:33 +01:00
Vincent Koc
814409a3b3
fix(test): keep local Vitest checks serialized
2026-04-25 03:07:27 -07:00
Eduardo Cruz
21b7ad5805
feat: add Control UI PWA web push support ( #44590 )
...
Adds browser PWA manifest and service worker support for the Control UI, plus gateway RPC methods and persisted Web Push subscription handling.
Maintainer verification:
- OPENCLAW_VITEST_MAX_WORKERS=1 pnpm test src/infra/push-web.test.ts src/gateway/server-methods/push.test.ts src/gateway/control-ui.test.ts src/gateway/protocol/push.test.ts
- pnpm check:changed passed before final GitHub update-branch merge commit
- pnpm build
Source head: 0720024368
2026-04-25 05:03:00 -05:00
Vincent Koc
01bf61fcfd
fix(media): remove express from media host ( #71436 )
...
* fix(media): remove express from media host
* fix(media): harden media host responses
* fix(msteams): stage express runtime dependency
* fix(browser): align profile facade exports
* fix(msteams): keep setup entry narrow
* fix(types): satisfy extension setup gates
* fix(msteams): use generic setup config type
2026-04-25 01:39:42 -07:00
Vincent Koc
9895ecead3
fix(memory): keep llama runtime optional ( #71425 )
...
* fix(memory): keep llama runtime optional
* fix(memory): harden optional llama runtime guard
2026-04-25 00:09:12 -07:00
Vincent Koc
e3cba98f39
refactor(pdf): move document extraction to plugin
...
* refactor(pdf): move document extraction to plugin
* fix(deps): sync document extract lockfile
* fix(pdf): harden document extraction plugin
2026-04-24 17:15:05 -07:00
Peter Steinberger
c12af80b5b
fix(github-copilot): move pi-ai to dev dependency
2026-04-25 00:44:29 +01:00
Vincent Koc
86099ec62a
refactor(web-fetch): move readability extraction to plugin
...
* refactor(web-fetch): move readability extraction to plugin
* fix(web-fetch): cache extractor resolution by config
* fix(test): remove redundant stat assertions
2026-04-24 13:34:37 -07:00
Vincent Koc
d795000377
refactor(anthropic-vertex): move SDK runtime to plugin ( #71174 )
...
* refactor(anthropic-vertex): move sdk runtime to plugin
* fix(anthropic-vertex): stage provider runtime deps
* fix(anthropic-vertex): reuse stream factory wrapper
2026-04-24 11:52:35 -07:00
Laurent Mazare
d7e2939791
feat: add Gradium text-to-speech provider ( #64958 )
...
Adds the Gradium bundled plugin with TTS and speech-provider registration, docs, label routing, and focused/live coverage.
Also carries the current main lint cleanup needed for the rebased CI lane.
Co-authored-by: laurent <laurent.mazare@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-24 18:43:53 +01:00
Vincent Koc
06d46869f8
refactor(tui): remove cli-highlight dependency
...
Remove direct cli-highlight usage from the TUI renderer and drop the now-unused root ownership record.
2026-04-24 09:25:25 -07:00
Peter Steinberger
27c61ed0d4
chore(deps): update workspace dependencies
2026-04-24 16:55:08 +01:00
lsdsjy
7d1891e6e6
feat(deepseek): support v4 models
...
Add DeepSeek V4 Flash/Pro support, update Pi packages to 0.70.2, and handle disabled thinking/None by stripping replayed reasoning content.
2026-04-24 16:09:36 +01:00
Vincent Koc
cb4fc58547
feat(plugins): move Bonjour discovery into bundled plugin
...
* fix(deps): detect constant dynamic imports in ownership audit
* feat(plugins): move bonjour discovery into bundled plugin
* test(plugins): remove moved bonjour core tests
* fix(plugins): harden bonjour disable and console restore
* fix(plugins): split gateway discovery ids from services
* fix(plugins): harden bonjour advertiser shutdown
* fix(plugins): clean up bonjour split lint
2026-04-23 23:29:51 -07:00
Peter Steinberger
59a8afe6fa
feat: add Google Meet participant plugin
2026-04-24 02:15:53 +01:00
Peter Steinberger
cec3482175
fix: support codex app-server image understanding
2026-04-24 01:43:30 +01:00
Peter Steinberger
f04a3dced0
build: update Pi model dependencies
2026-04-24 01:24:46 +01:00
Vincent Koc
ea25d7ed5b
fix(qr): replace qrcode-terminal with qrcode-tui
...
Replace legacy qrcode-terminal usage with shared qrcode-tui media helpers, bound QR PNG rendering options, and raise bundled plugin host floors for the new SDK runtime surface.
2026-04-23 13:06:14 -07:00
Peter Steinberger
7b6b7d53fc
build: update tsgo native preview
2026-04-23 15:59:49 +01:00
Peter Steinberger
3fa089de19
ci: validate docs mdx before publish
2026-04-23 15:41:47 +01:00
Peter Steinberger
b2472d6560
build: migrate schema deps to typebox
2026-04-23 04:59:42 +01:00
Peter Steinberger
06308e21f7
build: update dependencies
2026-04-23 04:00:17 +01:00
