99 commits

Author	SHA1	Message	Date
Peter Steinberger	1f4f51e8e2	feat: add plugin install overrides	2026-05-09 06:06:08 -04:00
Patrick Erichsen	10f9a758b6	docs: add dedicated ClawHub docs tab (#79159) ... * docs: add clawhub docs tab * fix: satisfy docs sync lint * docs: prune internal clawhub nav pages * docs: include ClawHub publishing page in nav * docs: use clawhub how-it-works route	2026-05-07 18:55:08 -07:00
Peter Steinberger	330ba1fa31	refactor: move canvas to plugin surfaces	2026-05-07 09:07:18 +01:00
Peter Steinberger	a8801350d8	docs: clarify planned monthly support lines	2026-05-07 01:42:20 +01:00
the sun gif man	d4b4660026	config: stop automatic writes and guard Nix mutators (#78047) ... Keep startup-derived plugin enablement, gateway auth tokens, control UI origins, and owner-display secrets runtime-only instead of persisting them into openclaw.json. Refuse config writers, mutating update/plugin lifecycle commands, and doctor repair/token generation in Nix mode with agent-first nix-openclaw guidance. Verification: - pnpm check - pnpm build - pnpm test -- src/config/io.write-config.test.ts src/config/mutate.test.ts src/config/io.owner-display-secret.test.ts src/gateway/server-startup-config.recovery.test.ts src/gateway/startup-auth.test.ts src/gateway/startup-control-ui-origins.test.ts src/cli/plugins-cli.install.test.ts src/cli/plugins-cli.policy.test.ts src/cli/plugins-cli.uninstall.test.ts src/cli/plugins-cli.update.test.ts src/cli/update-cli.test.ts src/auto-reply/reply/commands-plugins.install.test.ts src/auto-reply/reply/commands-plugins.test.ts src/commands/onboarding-plugin-install.test.ts src/commands/doctor.runs-legacy-state-migrations-yes-mode-without.e2e.test.ts src/commands/doctor/shared/codex-route-warnings.test.ts src/commands/doctor/repair-sequencing.test.ts src/agents/auth-profile-runtime-contract.test.ts src/auto-reply/reply/agent-runner-execution.test.ts - GitHub CI green on 05a2c71b90 Co-authored-by: Codex <noreply@openai.com>	2026-05-06 14:43:32 +02:00
Jesse Merhi	1c42c77433	feat: add user input blocking lifecycle gates (#75035) ... Summary: - The PR adds a `before_agent_run` plugin hook with pass/block decisions, redacted blocked-turn persistence, diagnostics/docs/changelog updates, and focused runner, gateway, session, and plugin tests. - Reproducibility: not applicable. as a feature PR rather than a current-main bug report. Current main lacks ` ... un`, while the PR head adds source coverage and copied live Gateway/WebChat log proof for the new behavior. Automerge notes: - PR branch already contained follow-up commit before automerge: fix: trim before agent hook PR scope - PR branch already contained follow-up commit before automerge: fix: keep before-agent blocks redacted - PR branch already contained follow-up commit before automerge: fix: keep runtime context out of model prompt - PR branch already contained follow-up commit before automerge: docs: refresh config baseline after rebase - PR branch already contained follow-up commit before automerge: fix: align blocked turn clients with redacted content - PR branch already contained follow-up commit before automerge: fix: remove out-of-scope client block UI changes Validation: - ClawSweeper review passed for head 767e46fde8. - Required merge gates passed before the squash merge. Prepared head SHA: 767e46fde8 Review: https://github.com/openclaw/openclaw/pull/75035#issuecomment-4351843275 Co-authored-by: Jesse Merhi <jessejmerhi@gmail.com> Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>	2026-05-06 11:41:04 +00:00
Vincent Koc	5d557171b3	fix(plugins): apply npm overrides to managed roots (#78386)	2026-05-06 02:47:25 -07:00
Peter Steinberger	2eaf8ad712	feat(plugins): support npm pack installs	2026-05-06 09:16:49 +01:00
Vincent Koc	0131343db8	docs(doctor): clarify configured plugin repair (#77613)	2026-05-04 18:16:29 -07:00
Peter Steinberger	b7ce9439e7	fix: repair bundled plugin shadow cleanup	2026-05-04 10:17:50 +01:00
Peter Steinberger	281b5bd511	fix: repair stale managed plugin shadows	2026-05-04 09:17:04 +01:00
Vincent Koc	5ca0aa1d15	fix(plugins): accept stable correction releases	2026-05-03 20:53:23 -07:00
Peter Steinberger	f74e901794	fix: clarify blocked plugin validation	2026-05-03 19:39:30 +01:00
Peter Steinberger	0ee52e9405	fix: keep config recovery in doctor	2026-05-03 18:04:50 +01:00
Vincent Koc	00ad13b599	fix(plugins): use default tags for official plugin installs	2026-05-02 14:47:53 -07:00
Peter Steinberger	fd83c49cff	docs: update plugin npm distribution guidance	2026-05-02 22:00:37 +01:00
Peter Steinberger	f969ae45a3	fix(plugins): follow beta channel for plugin updates	2026-05-02 20:19:03 +01:00
Peter Steinberger	f8a5979469	docs(plugins): add management quickstart	2026-05-02 20:04:03 +01:00
Vincent Koc	cf21bcf9bf	fix(plugins): keep bare installs on npm for launch	2026-05-02 12:00:06 -07:00
Peter Steinberger	4a3ad3963b	feat(plugins): report dependency install state	2026-05-02 19:58:19 +01:00
Vincent Koc	7fae11b3b1	fix(plugins): persist clawhub artifact metadata	2026-05-02 10:17:19 -07:00
Vincent Koc	03be4bfac5	fix(plugins): align clawhub clawpack downloads	2026-05-02 09:58:09 -07:00
Peter Steinberger	eee3aeae00	[codex] add Crestodian plugin management (#75869) ... Summary: - The branch adds ClawHub plugin search and Crestodian plugin list/search/install/uninstall flows, with docs, changelog, tests, runtime injection, and regenerated config baseline hashes. - Reproducibility: not applicable. as a bug reproduction request. The high-confidence verification path is cur ... surface search plus exact-head diff/source inspection against the PR's targeted tests and queued CI checks. ClawSweeper fixups: - Included follow-up commit: Repair Crestodian plugin management config schema drift Validation: - ClawSweeper review passed for head c29cda6005. - Required merge gates passed before the squash merge. Prepared head SHA: c29cda6005 Review: https://github.com/openclaw/openclaw/pull/75869#issuecomment-4362360704 Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>	2026-05-02 03:12:38 +00:00
Vincent Koc	5c447f53d7	docs(plugins): document clawhub clawpack installs	2026-05-01 17:35:03 -07:00
Peter Steinberger	ed8f50f240	refactor: simplify plugin dependency handling ... Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths. Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.	2026-05-01 21:32:22 +01:00
Peter Steinberger	7ddf28c0d4	feat: support git plugin installs	2026-05-01 10:59:10 +01:00
Peter Steinberger	250376f885	fix: simplify bundled runtime dependency repair (#75183) ... Summary: - Merged fix: simplify bundled runtime dependency repair after ClawSweeper review. ClawSweeper fixups: - Included follow-up commit: fix: verify cached bundled runtime roots - Included follow-up commit: refactor: simplify plugin runtime startup paths - Included follow-up commit: refactor: trim plugin startup policy helpers - Included follow-up commit: refactor: trust package manager runtime deps materialization - Included follow-up commit: fix: narrow channel runtime deps skip policy - Included follow-up commit: refactor: defer startup plugin runtime deps - Ran the ClawSweeper repair loop before final review. Validation: - ClawSweeper review passed for head 04dc566534. - Required merge gates passed before the squash merge. Prepared head SHA: 04dc566534 Review: https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786 Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Shakker <shakkerdroid@gmail.com> Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-05-01 07:49:02 +00:00
Peter Steinberger	09310931cf	fix(plugins): repair configured runtime deps	2026-04-30 04:13:39 +01:00
Peter Steinberger	4c712d3372	fix: add bundled plugin deps repair command	2026-04-29 23:23:14 +01:00
Peter Steinberger	2b0b614417	docs(plugins): clarify clawhub npm migration	2026-04-29 06:09:34 +01:00
Patrick Erichsen	a235a487d0	docs: add clawhub rescan recovery guidance (#73414) ... * docs: add clawhub rescan recovery guidance * docs: clarify clawhub rescan wording	2026-04-28 16:34:00 -07:00
Shakker	a48ffda7f7	chore: trace plugin lifecycle phases	2026-04-28 18:03:01 +01:00
Peter Steinberger	78a12706ec	fix(docs): make docs formatter mintlify-safe	2026-04-28 08:13:21 +01:00
Peter Steinberger	4260bb0418	fix: quarantine invalid plugin configs	2026-04-27 13:14:59 +01:00
Peter Steinberger	3af34316f2	fix: preserve clawhub install selectors	2026-04-27 10:25:21 +01:00
Peter Steinberger	cb9955dd5c	fix: support npm-only plugin installs	2026-04-27 10:16:59 +01:00
Peter Steinberger	74a4ff1adc	fix: prefer mounted bundled plugin sources	2026-04-26 11:28:41 +01:00
Peter Steinberger	6bc5fe6952	fix: harden plugin install and uninstall transactions	2026-04-26 10:27:23 +01:00
Vincent Koc	91666fe194	docs(cli-plugins): rewrite with CardGroup, AccordionGroup for install/update behavior, ParamField for list flags, Tabs for marketplace sources	2026-04-26 01:53:57 -07:00
Shakker	862b39976d	fix: remove managed plugin files on uninstall	2026-04-26 04:16:33 +01:00
Shakker	48ba3a4198	fix: clean migrated plugin install config	2026-04-26 04:16:33 +01:00
Shakker	f5f4477bae	fix: reject manifestless plugin archives	2026-04-26 04:16:33 +01:00
Vincent Koc	f3accc753c	feat(plugins): add before agent finalize hook (#71765)	2026-04-25 17:21:17 -07:00
Shakker	babbad81a9	fix: preserve plugin install records without manifests	2026-04-26 01:03:13 +01:00
Shakker	37ce39b5c5	docs: describe plugin install index store	2026-04-26 01:03:12 +01:00
Peter Steinberger	cbe5515b70	fix(plugins): force dependency installs local	2026-04-25 22:46:50 +01:00
Vincent Koc	888448facc	feat(plugins): move install records to managed ledger	2026-04-25 11:37:10 -07:00
Vincent Koc	3ec92dfac0	fix(plugins): deprecate registry disable break glass	2026-04-25 10:35:36 -07:00
Vincent Koc	4324855a9d	docs(plugins): document persisted registry repair	2026-04-25 10:35:35 -07:00
Peter Steinberger	d3d9b5738f	docs: clarify live plugin runtime reloads	2026-04-24 15:38:56 +01:00