48 commits

Author	SHA1	Message	Date
Peter Steinberger	edecdbd05e	refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527) ... * refactor(config): consolidate media model lists * refactor(config): unify memory configuration * refactor(config): consolidate TTS ownership * refactor(config): move typing policy to agents * refactor(config): retire product-level config surfaces * refactor(config): share scoped tool policy type * chore(config): refresh generated baselines * fix(config): honor agent typing overrides * fix(config): migrate sibling config consumers * refactor(infra): keep base64url decoder private * fix(config): strip invalid legacy TTS values * chore(config): refresh rebased baseline hash * fix(doctor): route legacy messages.tts.realtime voice to talk during tts move * refactor(config): polish final layout names * refactor(config): freeze retired tuning defaults * feat(config): add fast mode default symmetry * refactor(config): key agent entries by id * docs(config): update final layout reference * test(config): cover final layout migrations * chore(config): refresh final layout baselines * fix(config): align final layout runtime readers * fix(config): align remaining readers * fix(config): stabilize final layout migrations * fix(config): finalize config projection proof * fix(config): address final layout review * docs(release): preserve historical config names * fix(config): complete keyed agent migration * fix(config): close final migration gaps * fix(config): finish full-branch review * fix(config): complete runtime secret detection * fix(config): close final review findings * fix(config): finish canonical docs and heartbeat migration * fix(config): integrate latest main after rebase * refactor(env): isolate test-only controls * refactor(env): isolate build and development controls * refactor(env): collapse process identity indirection * refactor(env): remove duplicate config and temp aliases * docs(env): define the operator-facing allowlist * ci(env): ratchet production variable count * fix(env): remove stale provider helper import * fix(env): make ratchet sorting explicit * test(env): keep test seam in dead-code audit * test(env): cover ratchet growth and boundary; document surface budgets * docs(config): document tier-eval consolidations * docs(config): clarify speech preference ownership * test(memory): align retired tuning fixtures * refactor(memory): freeze engine heuristics * refactor(config): apply tier-eval tranche * refactor(tts): move persona shaping to providers * refactor(compaction): move prompt policy to providers * test(config): align hookified prompt fixtures * chore(deadcode): classify test-only exports * chore(github): remove unused spawn helper * chore(deadcode): classify queue diagnostics * chore(deadcode): remove unused lane snapshot export * chore(plugin-sdk): ratchet consolidated surface * fix(config): integrate latest main after rebase	2026-07-21 20:28:43 -07:00
Peter Steinberger	8bec61bab1	fix(cli): reject unknown models in config set (#111571) ... * fix(cli): validate configured model references * fix(cli): cover dependent model references * fix(cli): reject malformed model references * test(cli): satisfy model validation gates * fix(cli): harden model validation drafts * fix(cli): preserve model runtime ownership * fix(cli): validate expanded model references * fix(cli): close model validation gaps * fix(cli): preserve model alias ownership * fix(cli): secure model validation context * fix(cli): redact expanded model references * fix(cli): validate inherited agent catalogs * fix(cli): align canonical model resolution * fix(cli): scope inherited catalog validation * fix(cli): compare resolved model snapshots * fix(cli): cover model dependency transitions * fix(cli): isolate model env validation * fix(cli): redact dependent model checks * fix(cli): compare agent model identity * fix(cli): validate expanded model removal * fix(cli): defer unresolved fallback validation * fix(cli): preserve authored model changes	2026-07-20 03:31:03 -07:00
cxbAsDev	2295fae731	fix: bound miscellaneous unbounded file reads across 5 modules (#110516) ... * fix: bound misc unbounded fs.readFile calls; remove unused fs import * fix: decode buffer to string before passing to string consumers readRegularFile and readRegularFileSync return { buffer, stat }, not a string. All 4 new call sites passed the raw object to functions expecting a string (JSON.parse, RegExp.test, template literals, etc.), causing TS2345 type errors and runtime failures. Fix each call by extracting .buffer and calling .toString('utf8') before passing the result to string consumers. * style: fix oxfmt formatting in config-set-input.ts * fix: bound config and trajectory metadata reads Co-authored-by: 陈宪彪0668000387 <chen.xianbiao@xydigit.com> * refactor: isolate bounded read ownership Co-authored-by: 陈宪彪0668000387 <chen.xianbiao@xydigit.com> --------- Co-authored-by: Peter Steinberger <steipete@gmail.com>	2026-07-18 23:27:26 +01:00
Peter Lee	8539640abc	fix(config,secrets): emit JSON errors and cover dotenv roots (#104340) ... * fix(secrets): use resolveStateDir for .env path to cover legacy .clawdbot dir * fix(secrets): replace override-based legacy .env test with true automatic fallback, add apply-path coverage * fix(config-cli): emit JSON error on config get --json for missing paths When is used with a nonexistent path, the command emits no JSON on stdout, only a text error on stderr. This breaks automated consumers that expect machine-readable errors. Fix: output JSON to stdout before exit(1) when opts.json is set. This matches the existing JSON error output pattern already used by runConfigValidate and handleConfigMutationError. Also re-throw synthetic exit errors in the catch block so the --json branch's writeRuntimeJson+exit is not caught and re-emitted as a text error. * fix(config-cli): use typed ExitError signal instead of __exit__ string sentinel * fix(secrets): reuse resolved stateDir for .env path in audit * fix(secrets): pass resolved stateDir into apply .env scrubbing, add root-switch regression * test(config-cli): migrate remaining __exit__ sentinel to ExitError * fix(secrets): cover config and state dotenv roots * style(secrets): format dotenv path helper * test(secrets): track temporary directories * test(config): expect typed exit for missing patch files --------- Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Peter Steinberger <peter@steipete.me>	2026-07-17 23:14:05 -07:00
lee-xydt	6ce439da25	fix(config): warn before stripping JSON5 comments on config write (#107604) ... * fix(config): warn before stripping JSON5 comments on config write Add checkCommentLossWarning in json5-comments.ts to detect JSON5 comments before config writes. Warn via deps.logger.warn for main config writes and via options.warn for $include file writes. Both paths support skipOutputLogs to suppress warnings during automated operations. Fixes #105683 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(config): remove public warn callback, route through internal sink Fixes #105683 - Remove warn field from exported ConfigWriteOptions (P1 merge-risk) - Default checkCommentLossWarning to console.warn when no callback - Move include warning after hash-conflict/rejection checks - Update tests to spy on console.warn instead of custom callback * fix(config): warn before stripping JSON5 comments --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Peter Steinberger <peter@steipete.me>	2026-07-14 21:39:18 -07:00
Peter Steinberger	fa77fe10d5	chore: migrate active GPT-5.5 references to GPT-5.6 (#104452) ... * chore(models): migrate active GPT-5.5 references * test(workboard): expect GPT-5.6 Sol default * chore: keep release notes in PR body * test(models): align picker fixtures with Sol default * test: update PDF default model expectation * test(qa): migrate thinking smoke to Luna * test(gateway): align mock catalog with Sol default * ci: retrigger exact-head PR checks * test(gateway): document default catalog invariant	2026-07-11 06:30:57 -07:00
Peter Steinberger	f7d7148cf0	docs: rewrite published docs grounded in current source (#100142) ... Source-grounded rewrite of 529 published docs pages with per-unit information-loss verification: 1,713 factual corrections cited to src/**, generated surfaces regenerated, frontmatter titles preserved for i18n, release notes pages untouched. All docs gates green. Closes #100141	2026-07-05 00:32:47 -04:00
Arnav Panicker	8e69811560	docs(cli): clarify strict json parsing (#80981)	2026-06-28 14:19:19 -07:00
吴杨帆	88f50e8cd1	docs(config): quote bracket config paths (#83058)	2026-05-22 20:20:10 +01:00
Gio Della-Libera	489cab2738	fix(config): add --dry-run support to unset (#81895) ... * Add config unset dry-run Add --dry-run support to config unset, including JSON output and allow-exec validation parity with config set/patch dry-run handling. * Refresh checks after proof update * fix(config): address unset dry-run review Return structured JSON when config unset dry-run misses a path and validate broad secret provider/default unsets against affected SecretRefs.	2026-05-16 11:09:42 -07:00
the sun gif man	d4b4660026	config: stop automatic writes and guard Nix mutators (#78047) ... Keep startup-derived plugin enablement, gateway auth tokens, control UI origins, and owner-display secrets runtime-only instead of persisting them into openclaw.json. Refuse config writers, mutating update/plugin lifecycle commands, and doctor repair/token generation in Nix mode with agent-first nix-openclaw guidance. Verification: - pnpm check - pnpm build - pnpm test -- src/config/io.write-config.test.ts src/config/mutate.test.ts src/config/io.owner-display-secret.test.ts src/gateway/server-startup-config.recovery.test.ts src/gateway/startup-auth.test.ts src/gateway/startup-control-ui-origins.test.ts src/cli/plugins-cli.install.test.ts src/cli/plugins-cli.policy.test.ts src/cli/plugins-cli.uninstall.test.ts src/cli/plugins-cli.update.test.ts src/cli/update-cli.test.ts src/auto-reply/reply/commands-plugins.install.test.ts src/auto-reply/reply/commands-plugins.test.ts src/commands/onboarding-plugin-install.test.ts src/commands/doctor.runs-legacy-state-migrations-yes-mode-without.e2e.test.ts src/commands/doctor/shared/codex-route-warnings.test.ts src/commands/doctor/repair-sequencing.test.ts src/agents/auth-profile-runtime-contract.test.ts src/auto-reply/reply/agent-runner-execution.test.ts - GitHub CI green on 05a2c71b90 Co-authored-by: Codex <noreply@openai.com>	2026-05-06 14:43:32 +02:00
Peter Steinberger	0ee52e9405	fix: keep config recovery in doctor	2026-05-03 18:04:50 +01:00
Peter Steinberger	8b8bba9621	fix(config): tighten patch command semantics	2026-04-29 22:02:02 +01:00
Peter Steinberger	48a01798b0	feat: add config apply patch command	2026-04-29 22:02:02 +01:00
Peter Steinberger	78a12706ec	fix(docs): make docs formatter mintlify-safe	2026-04-28 08:13:21 +01:00
Vincent Koc	3e2e26549a	docs(cli-config): rewrite with Tabs for set modes, AccordionGroup for builder flags and dry-run details, Steps for the repair loop	2026-04-26 00:32:59 -07:00
Vincent Koc	c948c63bbd	docs: unify casing and replace path-as-text links across recent doc surfaces ... Sweep recent (last ~5h) doc edits for two readability/uniformity issues: - Replace 42 path-as-text links of the form '[/foo/bar](/foo/bar)' with descriptive labels derived from each target page's frontmatter title (e.g. '[Anthropic]', '[Token use and costs]', '[OpenAI-compatible endpoints]'). Affected files include gateway/troubleshooting, concepts/oauth, reference/session-management-compaction, and reference/transcript-hygiene. - Sentence-case Title-Cased headings and link text in Related sections across codex-harness, model-providers, tools/plugin, sdk-runtime, sdk-setup, prompt-caching, ci, cli/config, google-meet, browser, rich-output-protocol, subagents, web/control-ui, while preserving brand and proper-noun capitalization (OpenAI, Codex, Chrome, Parallels, Z.AI, etc.).	2026-04-24 22:18:22 -07:00
Peter Steinberger	b0e834b2d9	fix(browser): support per-profile executable paths ... Co-authored-by: nobrainer-tech <nobrainer-tech@users.noreply.github.com>	2026-04-25 05:50:20 +01:00
Peter Steinberger	cb9c927ca6	docs: document config recovery policy	2026-04-25 04:18:24 +01:00
Vincent Koc	8d1f98ef08	docs(gateway,platforms,cli): add Related sections to entry and reference pages	2026-04-23 20:08:26 -07:00
Peter Steinberger	14c4143723	docs: clarify OpenAI GPT-5.5 auth routes	2026-04-23 23:49:17 +01:00
Vincent Koc	2777b089b5	docs: normalize frontmatter titles to sentence case	2026-04-23 13:15:17 -07:00
Peter Steinberger	a8173276bf	docs(openai): canonicalize GPT model refs	2026-04-23 20:47:38 +01:00
Peter Steinberger	89051c6bf6	docs(openai): document GPT-5.5 defaults	2026-04-23 20:19:15 +01:00
zhang-guiping	c1f423f845	fix(secrets): harden Windows ACL fallback and strip BOM (#70662) ... Fail closed when Windows ACL checks cannot be verified for file and exec secret providers unless the provider explicitly opts into allowInsecurePath. Strip UTF-8 BOMs from file-backed secrets and document the trusted-path override.\n\nThanks @zhanggpcsu.	2026-04-23 19:32:15 +01:00
Peter Steinberger	46fba1d814	docs(config): clarify symlinked config support	2026-04-22 23:45:03 +01:00
Peter Steinberger	819ff0463a	fix(config): protect model config merges	2026-04-22 23:18:05 +01:00
fuller-stack-dev	561f2e52c7	docs(tui): document local config repair flow (#69995) (thanks @fuller-stack-dev) ... * docs(tui): document local config repair flow * docs(tui): clarify local TUI examples * docs(config): gate local TUI repair flow * docs(tui): fix local repair docs --------- Co-authored-by: Ayaan Zaidi <hi@obviy.us>	2026-04-22 11:42:59 +05:30
Peter Steinberger	ffb1628727	fix: recover invalid gateway configs	2026-04-20 13:18:07 +01:00
Peter Steinberger	4f9804ec24	docs: refresh config schema and gateway tool mirrors	2026-04-04 21:43:09 +01:00
Peter Steinberger	4324eac5e9	docs: refresh config schema metadata mirrors	2026-04-04 21:26:51 +01:00
Peter Steinberger	4b993ba6e4	docs: refresh config schema mirror refs	2026-04-04 20:45:46 +01:00
Peter Steinberger	ba8eb4af38	docs: refresh config schema output refs	2026-04-04 20:35:01 +01:00
Peter Steinberger	8eb1ea5b2e	docs: refresh config schema mirrors	2026-04-04 20:14:33 +01:00
Peter Steinberger	22dad753a5	docs: refresh setup and config refs	2026-04-04 08:48:15 +01:00
Josh Avant	788f56f30f	Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141) ... * Secrets: enforce C2 SecretRef policy and drift resolution * Tests: add gateway auth startup/reload SecretRef runtime coverage * Docs: sync C2 SecretRef policy and coverage matrix * Config: hard-fail parent SecretRef policy writes * Secrets: centralize unsupported SecretRef policy metadata * Daemon: test service-env precedence for token drift refs * Config: keep per-ref dry-run resolvability errors * Docs: clarify config-set parent-object policy checks * Gateway: fix drift fallback and schema-key filtering * Gateway: align drift fallback with credential planner * changelog Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com> --------- Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>	2026-03-31 02:37:31 -05:00
Mikhail Beliakov	fd934a566b	feat(cli): add json schema to cli tool (#54523) ... Merged via squash. Prepared head SHA: 39c15ee70d Co-authored-by: kvokka <15954013+kvokka@users.noreply.github.com> Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com> Reviewed-by: @altaywtf	2026-03-26 02:30:32 +03:00
Tak Hoffman	0354d49a82	docs update web search config guidance	2026-03-18 00:00:17 -05:00
Josh Avant	2d3bcbfe08	CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322) ... * CLI: gate exec SecretRef dry-run resolution behind opt-in * Docs: clarify config dry-run exec opt-in behavior * CLI: preserve static exec dry-run validation	2026-03-17 20:20:11 -05:00
Josh Avant	e99963100d	CLI: expand config set with SecretRef/provider builders and dry-run (#49296) ... * CLI: expand config set ref/provider builder and dry-run * Docs: revert README Discord token example	2026-03-17 18:15:49 -05:00
Sid	3002f13ca7	feat(config): add openclaw config validate and improve startup error messages (#31220) ... Merged via squash. Prepared head SHA: 4598f2a541 Co-authored-by: Sid-Qin <201593046+Sid-Qin@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras	2026-03-02 00:45:51 -05:00
cyb1278588254	96ffbb5aaf	CLI: add config path subcommand to print active config file path (#26256) ... Merged via squash. Prepared head SHA: b11c593a34 Co-authored-by: cyb1278588254 <48212932+cyb1278588254@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras	2026-03-01 23:33:20 -05:00
adhitShet	d871ee91d0	fix(config-cli): correct misleading --json flag description (#21332) ... Merged via /review-pr -> /prepare-pr -> /merge-pr. Prepared head SHA: b6c8d1edfa Co-authored-by: adhitShet <131381638+adhitShet@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras	2026-02-19 20:09:17 -05:00
Seb Slight	abcaa8c7a9	Docs: add nav titles across docs (#5689)	2026-01-31 15:04:03 -06:00
Peter Steinberger	9a7160786a	refactor: rename to openclaw	2026-01-30 03:16:21 +01:00
Peter Steinberger	6d16a658e5	refactor: rename clawdbot to moltbot with legacy compat	2026-01-27 12:21:02 +00:00
Peter Steinberger	ad4f4388f4	docs: explain per-agent exec node binding	2026-01-18 08:15:15 +00:00
Peter Steinberger	2b16a87f04	feat: add config get/set/unset helpers	2026-01-16 06:57:54 +00:00