23531 commits

Author	SHA1	Message	Date
Peter Steinberger	5d1ba08e3c	fix(doctor): warn on plugin tool allowlist mismatch	2026-05-01 05:33:03 +01:00
Peter Steinberger	07bc320a8a	fix: scope voicecall CLI activation	2026-05-01 05:32:18 +01:00
Dallin Romney	778902103d	fix(agents): release embedded-run scope on hung provider abort + heap-leak harness (#75008) ... * fix(agents): extract abortable from runEmbeddedAttempt to release captured run scope on hung provider abort (#74182) * test(agents): drop synthetic WeakRef retention test for abortable * feat(scripts): add embedded-run-abort-leak harness for runtime closure-leak validation * feat(scripts): add production mode to leak harness importing real abortable * docs(changelog): add #74182 fix entry for embedded-run abort closure release	2026-05-01 12:24:13 +08:00
Sally O'Malley	e8258fd4a6	fix(docker): restore python3 in runtime image (#75417) ... Signed-off-by: sallyom <somalley@redhat.com>	2026-05-01 00:11:38 -04:00
gavyngong	0260903f7f	fix(logging): add redaction patterns for Tencent Cloud, Alibaba Cloud, HuggingFace and Replicate API keys (#58162) ... Merged via squash. Prepared head SHA: 5227c30713 Co-authored-by: gavyngong <267269824+gavyngong@users.noreply.github.com> Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com> Reviewed-by: @hxy91819	2026-05-01 11:13:54 +08:00
Ayaan Zaidi	60bdb96f2c	fix(tools): defer media generation provider discovery	2026-05-01 08:33:02 +05:30
Ayaan Zaidi	e0fe02fb09	fix(tools): preserve tool availability contracts	2026-05-01 08:33:02 +05:30
Ayaan Zaidi	22d6e9564a	test(tools): mirror auth profile discovery in image tests	2026-05-01 08:33:02 +05:30
Ayaan Zaidi	45b8645079	fix(channels): keep typing indicators off reply critical path	2026-05-01 08:33:02 +05:30
Ayaan Zaidi	40b0b1bfe0	fix(tools): avoid web search provider loading at registration	2026-05-01 08:33:02 +05:30
Ayaan Zaidi	3144e7a729	fix(tools): defer media model resolution	2026-05-01 08:33:02 +05:30
Ayaan Zaidi	354084b1b3	fix(providers): cache targeted runtime hook resolution	2026-05-01 08:33:02 +05:30
Peter Steinberger	8989ceee50	fix(auto-reply): move visible reply warnings to doctor (#75367) ... Summary: - The PR removes the auto-reply runtime warning for visible-reply defaults, adds doctor preview warnings and tests for message-tool visibility policy mismatches, and updates the group/channel docs and changelog wording. ClawSweeper fixups: - No separate fixup commits were needed after automerge opt-in. Validation: - ClawSweeper review passed for head 1f96b3b568. - Required merge gates passed before the squash merge. Prepared head SHA: 1f96b3b568 Review: https://github.com/openclaw/openclaw/pull/75367#issuecomment-4357475980 Co-authored-by: Peter Steinberger <steipete@gmail.com>	2026-05-01 02:52:23 +00:00
Peter Steinberger	6603a174bc	fix: keep async music delivery agent-mediated (#75335) ... Keep async music generation completions on the requester-session wake path even when direct-send completion is enabled. Also aligns config help, generated schema text, public docs, and the changelog so tools.media.asyncCompletion.directSend no longer claims to direct-send music completions. Verification: - pnpm test src/agents/tools/music-generate-background.test.ts src/agents/tools/video-generate-background.test.ts - pnpm exec oxfmt --check --threads=1 src/agents/tools/media-generate-background-shared.ts src/agents/tools/music-generate-background.ts src/agents/tools/music-generate-background.test.ts src/config/schema.help.ts src/config/types.tools.ts docs/automation/tasks.md docs/gateway/config-tools.md CHANGELOG.md - pnpm config:schema:check - pnpm config:docs:check - pnpm check:changelog-attributions - git diff --check - OPENCLAW_TESTBOX=1 pnpm check:changed	2026-04-30 21:48:27 -05:00
Yossi Eliaz	619064b6d7	fix(docker): require single primary key before Docker apt GPG pin (#74254) ... Merged via squash. Fixes #74234. Prepared head SHA: c09ca96153 Reviewed-by: @sallyom	2026-04-30 22:47:43 -04:00
Val Alexander	df0ee092f0	fix: harden gateway recovery diagnostics and media delivery ... Harden gateway recovery diagnostics and media delivery.\n\n- Accept gateway send asVoice and map it to outbound audioAsVoice.\n- Preserve generated Swift protocol models for the gateway send schema.\n- Keep the broader recovery hardening for install/update/status/vector/TTS paths in one reviewed PR.\n\nProof:\n- Focused local gateway/outbound/update/status/doctor/sqlite-vec tests passed.\n- oxfmt --check and git diff --check passed.\n- Testbox OPENCLAW_TESTBOX=1 pnpm check:changed passed at 2f5ef650e97763a61ff43c28e61707db84c50060.\n- GitHub required checks are green at the merge SHA; the qa-lab parity gate is optional/surface-only and was still pending.	2026-04-30 21:46:22 -05:00
Peter Steinberger	6cc7432cd1	perf(test): split gateway server control-plane shard	2026-05-01 03:37:25 +01:00
Peter Steinberger	4987482e4c	perf: keep models list responsive during catalog discovery (#75326) ... * perf: keep models list responsive during catalog discovery * docs: record models list responsiveness fix * fix: preserve models catalog load failures	2026-05-01 02:31:53 +00:00
Peter Steinberger	6bc3458222	perf(test): keep commitment runtime tests focused	2026-05-01 03:12:55 +01:00
Hani Koshaji	a853c5e8c2	fix(config-audit): redact CLI argv secrets before persisting to log (#75095) ... Merged via squash. Prepared head SHA: 3dc54de1a8 Co-authored-by: koshaji <koshaji@users.noreply.github.com> Co-authored-by: sallyom <11166065+sallyom@users.noreply.github.com> Reviewed-by: @sallyom	2026-04-30 22:08:14 -04:00
Vignesh	38da2ac6f8	fix commitments extractor model selection (#75347)	2026-05-01 01:57:21 +00:00
Chunyue Wang	4b98f09529	fix(plugins): canonicalize packageRoot before hashing runtime-deps stage key (#75048) ... Merged via squash. Prepared head SHA: 324859fc69 Co-authored-by: openperf <80630709+openperf@users.noreply.github.com> Co-authored-by: openperf <80630709+openperf@users.noreply.github.com> Reviewed-by: @openperf	2026-05-01 09:56:13 +08:00
Peter Steinberger	3c4851037b	perf: skip runtime-deps manifest scans when materialized (#75325) ... * perf: skip runtime-deps manifest scans when materialized * fix: include manifest deps in runtime fast path * fix: type runtime deps normalizer helper * docs: credit runtime deps event-loop fix	2026-05-01 01:25:46 +00:00
Vignesh	b277ae3f4c	[codex] Fix commitments safety and coverage (#75302) ... * fix commitments safety and coverage * Repair commitments safety PR review blockers * fix(clawsweeper): address review for automerge-openclaw-openclaw-75302 (1) * Repair commitments safety PR review blocker --------- Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-05-01 01:14:07 +00:00
Val Alexander	a102f4dede	fix(gateway): harden artifact RPCs ... Add Gateway artifact RPCs and SDK helpers for list/get/download, with transcript provenance checks, safer download source handling, task/run/session coverage, generated protocol models, docs, and the refreshed generated config schema baseline. Closes #74706. Refs #74898, #74769, #74804, #74786.	2026-04-30 19:35:48 -05:00
Peter Steinberger	1ad50a36ac	chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30	2026-05-01 01:06:13 +01:00
Vincent Koc	e311ffdcb9	fix(plugins): stop runtime deps reinstall loops	2026-04-30 15:28:52 -07:00
Vincent Koc	1d74ecd71f	fix(plugins): restore disabled TTS provider fallback	2026-04-30 14:35:00 -07:00
Alex Knight	aa9db998f7	fix(gateway): show config recovery validation details (#75081) ... * fix(gateway): show config recovery validation details * fix(cli): let gateway recovery run before proxy bootstrap	2026-05-01 07:14:33 +10:00
Peter Steinberger	90419df663	[codex] Make external CLI credential discovery explicit (#75209) ... * refactor(auth): make external CLI discovery explicit * test(auth): update external cli discovery mocks * test(auth): cover scoped external cli auth mocks * [codex] Make external CLI credential discovery explicit --------- Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-04-30 20:32:55 +00:00
pashpashpash	027ea5f08b	Isolate Codex app-server state per agent (#74556) ... * fix(codex): isolate app-server home per agent * fix(codex): isolate native Codex assets per agent * fix(channels): mark inbound system events untrusted * fix(doctor): warn on personal Codex agent skills * test(doctor): cover personal Codex agent skills warning * fix(codex): forward auth profiles to harness runs * fix(codex): preserve auto auth for harness runs * fix(codex): auto-select harness auth profiles * test(codex): type harness auth mock * feat(codex): select migrated skills * fix(codex): satisfy migration selection lint * docs: add codex isolation changelog	2026-05-01 04:49:02 +09:00
Peter Steinberger	7d77680d9f	fix(gateway): keep native approvals off stale pairing baselines (#74472) ... * fix(gateway): keep native approvals off stale pairing baselines * fix(gateway): keep native approvals off stale pairing baselines * docs: defer maintainer-only changelog credit * docs: keep gateway approval changelog entry --------- Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-04-30 19:45:51 +00:00
Peter Steinberger	581fbea1d6	fix(auth): scope external CLI credential discovery	2026-04-30 19:38:18 +01:00
Peter Steinberger	7beebc9afc	test: add upgrade survivor package lane	2026-04-30 19:06:33 +01:00
keshavbotagent	388019f5b6	fix: preserve OpenAI Codex OAuth transport (#75111) ... Preserve the existing wrapped OpenAI Codex stream so PI OAuth bearer injection reaches ChatGPT/Codex Responses, and scope native Codex payload sanitization to the ChatGPT backend.\n\nThanks @keshavbotagent.	2026-04-30 18:00:12 +01:00
Logan Ye	adc20fed0d	fix: guard blank prompt submissions (#74168) ... Fixes #74137.\n\nThanks @yelog.	2026-04-30 16:48:46 +01:00
Peter Steinberger	46888f5afb	test(gateway): align lock conflict success expectation	2026-04-30 16:39:12 +01:00
Peter Steinberger	1a2228d291	fix: align tool-result guard budget	2026-04-30 16:36:55 +01:00
konanok	0eb8f34000	refactor(usage): add precise token buckets for Usage Mosaic (#74337) ... Merged via squash. Prepared head SHA: 15185354c4 Co-authored-by: konanok <30515586+konanok@users.noreply.github.com> Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com> Reviewed-by: @hxy91819	2026-04-30 23:32:34 +08:00
Peter Steinberger	9289a502bb	fix(gateway): stop systemd EADDRINUSE restart loops	2026-04-30 16:30:56 +01:00
marchpure	b85147ff76	feat(agents): add mid-turn compaction precheck (#73499) ... Co-authored-by: haoxingjun <haoxingjun@bytedance.com>	2026-04-30 23:05:31 +08:00
Peter Steinberger	b743506549	fix: reduce runtime mirror and signal group regressions	2026-04-30 15:59:03 +01:00
Peter Steinberger	eb8e892df9	fix(plugins): harden runtime mirrors	2026-04-30 15:56:08 +01:00
Peter Steinberger	65c94df872	test(infra): cover fallback tmp chmod race	2026-04-30 15:45:58 +01:00
Peter Steinberger	165d62b15f	fix(infra): tolerate concurrent tmp dir repair	2026-04-30 15:45:57 +01:00
Peter Steinberger	c5bc4b6892	fix: repair telegram transcript echo routing	2026-04-30 15:39:33 +01:00
Peter Steinberger	8291537710	fix(auto-reply): preserve visible fallback for requested modes	2026-04-30 15:26:55 +01:00
Peter Steinberger	ac599c9e53	fix: retain local memory runtime deps	2026-04-30 15:22:26 +01:00
Peter Steinberger	4e168de6d9	fix: avoid provider policy runtime deps	2026-04-30 15:13:35 +01:00
Peter Steinberger	98b96182f8	test(gateway): cover web fetch startup bind	2026-04-30 14:59:30 +01:00