68 commits

Author	SHA1	Message	Date
Vincent Koc	9f8744b140	docs(changelog): note beta upgrade fixes	2026-05-02 14:45:28 -07:00
Peter Steinberger	ed8f50f240	refactor: simplify plugin dependency handling ... Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths. Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.	2026-05-01 21:32:22 +01:00
Peter Steinberger	250376f885	fix: simplify bundled runtime dependency repair (#75183) ... Summary: - Merged fix: simplify bundled runtime dependency repair after ClawSweeper review. ClawSweeper fixups: - Included follow-up commit: fix: verify cached bundled runtime roots - Included follow-up commit: refactor: simplify plugin runtime startup paths - Included follow-up commit: refactor: trim plugin startup policy helpers - Included follow-up commit: refactor: trust package manager runtime deps materialization - Included follow-up commit: fix: narrow channel runtime deps skip policy - Included follow-up commit: refactor: defer startup plugin runtime deps - Ran the ClawSweeper repair loop before final review. Validation: - ClawSweeper review passed for head 04dc566534. - Required merge gates passed before the squash merge. Prepared head SHA: 04dc566534 Review: https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786 Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Shakker <shakkerdroid@gmail.com> Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-05-01 07:49:02 +00:00
Shakker	e69da9d578	fix: honor config timeline diagnostics	2026-04-29 19:53:55 +01:00
Shakker	d001c3436b	fix: gate diagnostics timeline by flag	2026-04-29 19:53:55 +01:00
Shakker	097eed8cd8	feat: emit diagnostics timeline	2026-04-29 19:53:55 +01:00
Peter Steinberger	193c7432e3	fix(gateway): reuse paired auth for probes	2026-04-28 21:52:50 +01:00
Vincent Koc	75ba8398f9	fix(gateway): expose event loop health in readiness	2026-04-28 03:56:58 -07:00
Peter Steinberger	78a12706ec	fix(docs): make docs formatter mintlify-safe	2026-04-28 08:13:21 +01:00
Shakker	45b0d5ccc2	chore: add plugin lookup startup trace metrics	2026-04-27 08:48:18 +01:00
Vincent Koc	5a88d8502f	docs(gateway): split lifecycle notes accordion	2026-04-26 21:22:57 -07:00
Peter Steinberger	ef31a333f7	docs: add gateway wrapper install examples	2026-04-27 03:40:32 +01:00
Peter Steinberger	9f9bd41f40	fix: persist gateway service wrappers	2026-04-27 03:40:32 +01:00
Vincent Koc	e400295969	docs(cli-gateway): rewrite with CardGroup, ParamField for run/probe/install flags, AccordionGroup for status semantics and probe interpretation	2026-04-26 01:59:27 -07:00
Peter Steinberger	9ed11d6c49	fix: steer agents to safe gateway config flow	2026-04-26 05:00:17 +01:00
Peter Steinberger	8d08e86f42	fix(gateway): keep diagnostic probes non-mutating	2026-04-25 23:02:39 +01:00
Vincent Koc	627c19c5cb	docs: add Related sections to remaining CLI, gateway API, and help pages	2026-04-23 20:41:35 -07:00
Vincent Koc	2777b089b5	docs: normalize frontmatter titles to sentence case	2026-04-23 13:15:17 -07:00
Peter Steinberger	4064c9b75c	docs: add gateway diagnostics guide	2026-04-23 16:21:23 +01:00
Vincent Koc	daaedf37b7	docs: prune recent additions for readability	2026-04-23 00:23:18 -07:00
Vincent Koc	ea3970f138	docs: CLI + gateway + plugin harness coverage for 48h changes	2026-04-22 23:49:06 -07:00
Gustavo Madeira Santana	28818f9140	Improve gateway diagnostics export for support reports (#70324) ... Merged via squash. Prepared head SHA: 3d6ee85993 Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com> Reviewed-by: @gumadeiras	2026-04-22 20:47:14 -04:00
Peter Steinberger	d8cf947f6b	perf(gateway): streamline startup sidecars	2026-04-20 20:52:42 +01:00
Ayaan Zaidi	a80874a4c1	docs(gateway): clarify probe capability wording	2026-04-20 11:59:27 +05:30
Peter Steinberger	c39f061003	Revert "refactor(cli): remove bundled cli text providers" ... This reverts commit 05d351c430.	2026-04-06 13:40:41 +01:00
Peter Steinberger	05d351c430	refactor(cli): remove bundled cli text providers	2026-04-05 18:46:36 +01:00
Peter Steinberger	fe93f29486	docs(anthropic): clarify api key and doctor recovery	2026-04-05 18:05:12 +01:00
Peter Steinberger	852d3a742c	docs: refresh gateway probe warning mirrors	2026-04-04 19:10:31 +01:00
Peter Steinberger	0cf9c6ec95	docs: refresh discovery TXT mode refs	2026-04-04 19:01:18 +01:00
Peter Steinberger	e6f054ac76	docs: refresh gateway probe and discovery refs	2026-04-04 19:00:09 +01:00
Peter Steinberger	da50b492c8	docs: refresh gateway status diagnostics refs	2026-04-04 09:05:08 +01:00
Peter Steinberger	470898b5e1	docs: refresh gateway update and memory refs	2026-04-04 08:52:43 +01:00
Peter Steinberger	1809da659e	docs: refresh cli and node pairing references	2026-04-04 07:23:11 +01:00
Peter Steinberger	e2e1197fa9	refactor(gateway): clarify local mode guardrails	2026-04-03 20:02:32 +09:00
Peter Steinberger	2c7eea8f10	fix(gateway): fail closed on missing mode	2026-04-03 19:50:45 +09:00
Josh Avant	788f56f30f	Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141) ... * Secrets: enforce C2 SecretRef policy and drift resolution * Tests: add gateway auth startup/reload SecretRef runtime coverage * Docs: sync C2 SecretRef policy and coverage matrix * Config: hard-fail parent SecretRef policy writes * Secrets: centralize unsupported SecretRef policy metadata * Daemon: test service-env precedence for token drift refs * Config: keep per-ref dry-run resolvability errors * Docs: clarify config-set parent-object policy checks * Gateway: fix drift fallback and schema-key filtering * Gateway: align drift fallback with credential planner * changelog Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com> --------- Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>	2026-03-31 02:37:31 -05:00
Peter Steinberger	a4a00aa1da	feat: pluginize cli inference backends	2026-03-26 15:11:15 +00:00
Peter Steinberger	6b9915a106	refactor!: drop legacy CLAWDBOT env compatibility	2026-03-22 22:13:39 -07:00
Josh Avant	a2cb81199e	secrets: harden read-only SecretRef command paths and diagnostics (#47794) ... * secrets: harden read-only SecretRef resolution for status and audit * CLI: add SecretRef degrade-safe regression coverage * Docs: align SecretRef status and daemon probe semantics * Security audit: close SecretRef review gaps * Security audit: preserve source auth SecretRef configuredness * changelog Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com> --------- Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>	2026-03-15 21:55:24 -05:00
Vincent Koc	c30cabcca4	Docs: sweep recent user-facing updates (#46424) ... * Docs: document Telegram force-document sends * Docs: note Telegram document send behavior * Docs: clarify memory file precedence * Docs: align default AGENTS memory guidance * Docs: update workspace FAQ memory note * Docs: document gateway status require-rpc * Docs: add require-rpc to gateway CLI index	2026-03-14 10:20:44 -07:00
Josh Avant	f4fef64fc1	Gateway: treat scope-limited probe RPC as degraded reachability (#45622) ... * Gateway: treat scope-limited probe RPC as degraded * Docs: clarify gateway probe degraded scope output * test: fix CI type regressions in gateway and outbound suites * Tests: fix Node24 diffs theme loading and Windows assertions * Tests: fix extension typing after main rebase * Tests: fix Windows CI regressions after rebase * Tests: normalize executable path assertions on Windows * Tests: remove duplicate gateway daemon result alias * Tests: stabilize Windows approval path assertions * Tests: fix Discord rate-limit startup fixture typing * Tests: use Windows-friendly relative exec fixtures --------- Co-authored-by: Mainframe <mainframe@MainfraacStudio.localdomain>	2026-03-13 23:13:33 -05:00
Vincent Koc	4062aa5e5d	Gateway: add safer password-file input for gateway run (#39067) ... * CLI: add gateway password-file option * Docs: document safer gateway password input * Update src/cli/gateway-cli/run.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * Tests: clean up gateway password temp dirs * CLI: restore gateway password warning flow * Security: harden secret file reads --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>	2026-03-07 18:20:17 -08:00
Josh Avant	25252ab5ab	gateway: harden shared auth resolution across systemd, discord, and node host	2026-03-07 18:28:32 -06:00
Josh Avant	72cf9253fc	Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)	2026-03-05 12:53:56 -06:00
Peter Steinberger	b4dbe03298	refactor: unify restart gating and update availability sync	2026-02-19 10:00:41 +01:00
Gustavo Madeira Santana	a13ff55bd9	Security: Prevent gateway credential exfiltration via URL override (#9179) ... * Gateway: require explicit auth for url overrides * Gateway: scope credential blocking to non-local URLs only Address review feedback: the previous fix blocked credential fallback for ALL URL overrides, which was overly strict and could break workflows that use --url to switch between loopback/tailnet without passing credentials. Now credential fallback is only blocked for non-local URLs (public IPs, external hostnames). Local addresses (127.0.0.1, localhost, private IPs like 192.168.x.x, 10.x.x.x, tailnet 100.x.x.x) still get credential fallback as before. This maintains the security fix (preventing credential exfiltration to attacker-controlled URLs) while preserving backward compatibility for legitimate local URL overrides. * Security: require explicit credentials for gateway url overrides (#8113) (thanks @victormier) * Gateway: reuse explicit auth helper for url overrides (#8113) (thanks @victormier) * Tests: format gateway chat test (#8113) (thanks @victormier) * Tests: require explicit auth for gateway url overrides (#8113) (thanks @victormier) --------- Co-authored-by: Victor Mier <victormier@gmail.com>	2026-02-04 18:59:44 -05:00
Seb Slight	abcaa8c7a9	Docs: add nav titles across docs (#5689)	2026-01-31 15:04:03 -06:00
cpojer	8cab78abbc	chore: Run pnpm format:fix.	2026-01-31 21:13:13 +09:00
Peter Steinberger	9a7160786a	refactor: rename to openclaw	2026-01-30 03:16:21 +01:00
Peter Steinberger	6d16a658e5	refactor: rename clawdbot to moltbot with legacy compat	2026-01-27 12:21:02 +00:00