Peter Steinberger 3ccf2a0739 feat: render inline web chat widgets via capability-gated show_widget tool (#101840) ... Adds client-capability-gated tool availability: gateway clients declare capabilities at connect (new inline-widgets cap), chat.send stamps them into the run context, and every tool assembly path (embedded runner, queued followups, Codex app-server harness, plugin-only construction plans) drops tools whose requiredClientCaps the originating client did not declare. The Canvas plugin ships the first such tool, show_widget: agents pass SVG or an HTML fragment plus a title; the plugin hosts it as a bounded, retention-scoped Canvas document and returns the existing canvas preview handle, which web chat renders as a sandboxed iframe fitted to the widget's reported content height. Widget frames never get allow-same-origin (per-preview sandbox ceiling, including the sidebar path) and the Canvas host serves widget documents with a CSP sandbox header so direct navigation runs in an opaque origin. Verified live end-to-end on a Testbox with gpt-5.5 (screenshots on the PR). CLI-backed model backends do not carry client caps yet and stay fail-closed (#102577). Closes #101790		2026-07-09 12:29:50 +01:00
..
.generated	Add Vault SecretRef plugin (#89255)	2026-07-09 05:30:12 -05:00
.i18n	feat: correlate native search outcomes in audit history (#98704)	2026-07-06 12:30:12 +01:00
announcements	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
assets	docs: update mobile app release messaging (#98843)	2026-07-01 21:11:56 -05:00
automation	feat(cron): event triggers — polled condition-watcher scripts via code mode (#101195)	2026-07-07 19:12:38 +01:00
channels	feat(slack): support Enterprise Grid org installs (#102372)	2026-07-08 23:53:19 -07:00
clawhub	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
cli	Add Vault SecretRef plugin (#89255)	2026-07-09 05:30:12 -05:00
concepts	fix(context): show transcript conversation in /context map	2026-07-09 16:56:13 +05:30
debug	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
diagnostics	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
gateway	feat: render inline web chat widgets via capability-gated show_widget tool (#101840)	2026-07-09 12:29:50 +01:00
help	feat(cohere): add current Command models (#102563)	2026-07-09 11:07:50 +01:00
images	chore: remove unused tracked assets	2026-05-26 02:21:58 +01:00
install	Fix container image upgrade migrations before gateway readiness (#101881)	2026-07-08 14:19:05 -04:00
maturity	docs: update mobile app release messaging (#98843)	2026-07-01 21:11:56 -05:00
nodes	feat: show Codex sessions across Gateway and paired nodes (#102586)	2026-07-09 03:42:03 -07:00
plan	Policy: add sandbox posture conformance checks (#85572)	2026-05-28 21:00:24 -07:00
platforms	fix(macos): open dashboard for existing gateways (#102677)	2026-07-09 12:17:41 +01:00
plugins	feat: show Codex sessions across Gateway and paired nodes (#102586)	2026-07-09 03:42:03 -07:00
providers	feat(cohere): add current Command models (#102563)	2026-07-09 11:07:50 +01:00
refactor	fix: migrate QQBot credential backups to SQLite KV (#89597)	2026-07-01 20:03:59 +01:00
reference	feat(android): publish signed APKs with stable releases (#101212)	2026-07-07 00:39:59 +01:00
releases	docs: publish release notes for v2026.6.11 (#98319)	2026-06-30 19:42:12 -06:00
security	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
snippets/plugin-publish	docs: restore source-backed contract details (#100182)	2026-07-05 01:26:25 -04:00
specs	feat: show Codex sessions across Gateway and paired nodes (#102586)	2026-07-09 03:42:03 -07:00
start	fix(onboard): keep the wizard alive through provider auth failures and polish standalone install UX (#100632)	2026-07-07 04:11:23 +01:00
tools	feat: render inline web chat widgets via capability-gated show_widget tool (#101840)	2026-07-09 12:29:50 +01:00
web	feat: render inline web chat widgets via capability-gated show_widget tool (#101840)	2026-07-09 12:29:50 +01:00
agent-runtime-architecture.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
AGENTS.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
auth-credential-semantics.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
brave-search.md
ci.md	perf(ci): raise Node shard parallelism to 28 (#101174)	2026-07-06 21:59:22 -07:00
CLAUDE.md
date-time.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
docs.json	feat: render inline web chat widgets via capability-gated show_widget tool (#101840)	2026-07-09 12:29:50 +01:00
docs_map.md	feat: render inline web chat widgets via capability-gated show_widget tool (#101840)	2026-07-09 12:29:50 +01:00
index.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
logging.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
nav-tabs-underline.js	docs: document repo support scripts	2026-06-04 08:01:15 -04:00
network.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
openclaw-agent-runtime.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
perplexity.md
prose.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
style.css	docs: clarify maturity scorecard scoring (#96594)	2026-06-24 17:32:08 -07:00
tts.md
vps.md	docs: rewrite published docs grounded in current source (#100142)	2026-07-05 00:32:47 -04:00
whatsapp-openclaw.jpg