openclaw/docs/cli
Zee Zheng 8be581cbf8
fix(browser): allow inbound media uploads
Allow the browser upload tool to resolve OpenClaw-managed inbound media refs such as `media://inbound/<id>` and sandbox-relative `media/inbound/<id>` while preserving the existing upload-root path contract.

Keep upload-root files ahead of sandbox-relative inbound fallback, reject nested absolute inbound media files, and validate raw `media://` paths before URL normalization so traversal-shaped refs cannot resolve to direct media ids.

Verification:
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=verbose`
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=dot`
- `OPENCLAW_HEAVY_CHECK_LOCK_SCOPE=worktree node scripts/run-tsgo.mjs -p test/tsconfig/tsconfig.extensions.test.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/extensions-test.tsbuildinfo`
- `pnpm lint --threads=8`
- `.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main`
- `git diff --check`
- GitHub PR checks on be08e6c8a8: dependency-guard, check-lint, check-test-types, check-additional-extension-bundled, checks-fast-contracts-plugins-a, checks-fast-contracts-plugins-b all passed.

Fixes #83544.

Co-authored-by: Zee Zheng <zheng.zuo0@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-30 23:49:07 +01:00
..
acp.md feat(acp): expose session lineage metadata 2026-05-11 18:32:46 +01:00
agent.md fix(agent): abort accepted gateway runs on signal 2026-05-22 09:16:36 +01:00
agents.md fix: apply docs sweep updates 2026-05-22 18:40:20 +01:00
approvals.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
backup.md docs: absorb documentation PR sweep 2026-05-23 10:23:34 +01:00
browser.md fix(browser): allow inbound media uploads 2026-05-30 23:49:07 +01:00
channels.md fix: add channel status filtering (#80706) 2026-05-11 18:44:54 +01:00
clawbot.md docs: add Related sections to remaining CLI, gateway API, and help pages 2026-04-23 20:41:35 -07:00
commitments.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
completion.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
config.md docs(config): quote bracket config paths (#83058) 2026-05-22 20:20:10 +01:00
configure.md feat: add xai oauth web search and provider timeouts 2026-05-22 08:49:53 +01:00
crestodian.md feat: add Claude Opus 4.8 support (#87890) 2026-05-29 06:10:42 +01:00
cron.md Move cron persistence to SQLite (#88285) 2026-05-30 21:03:41 +01:00
daemon.md docs(cli): document plugin-aware deep status warnings on gateway/daemon 2026-05-11 07:44:13 +08:00
dashboard.md fix(dashboard): guide manual token auth fallback 2026-05-04 18:39:25 -05:00
devices.md fix(gateway): require admin for device role approvals (#87146) 2026-05-27 08:08:51 -07:00
directory.md docs: typography hygiene across 9 pages (cli/channels) 2026-05-06 08:55:00 -07:00
dns.md docs(cli): fix smart apostrophes in dns and health 2026-05-06 00:23:48 -07:00
docs.md fix(docs): use Cloudflare docs search API 2026-05-27 00:58:09 +01:00
doctor.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
flows.md docs(cli): expand docs and tasks-flow CLI references with verified options 2026-05-10 22:17:42 +08:00
gateway.md docs: absorb docs sweep 2026-05-22 21:52:01 +01:00
health.md docs(cli): rewrite voicecall and tighten setup/health with code-verified options 2026-05-10 22:41:38 +08:00
hooks.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
index.md refactor: move transcripts into core 2026-05-26 14:51:11 +01:00
infer.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
logs.md fix(cli): default logs to local timestamps (#85387) 2026-05-26 21:14:47 +01:00
mcp.md feat: improve MCP operability 2026-05-30 19:48:52 +01:00
memory.md fix(memory): compact short-term promotion entries 2026-05-29 00:05:54 +01:00
message.md fix(nextcloud-talk): dispatch react action so agents can send reactions (#70110) (#72348) 2026-05-18 18:54:44 +00:00
migrate.md refactor: internalize OpenClaw agent runtime (#85341) 2026-05-27 19:24:04 +01:00
models.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
node.md feat: add native mac dashboard window 2026-05-16 23:49:18 +01:00
nodes.md refactor: move canvas to plugin surfaces 2026-05-07 09:07:18 +01:00
onboard.md feat: start onboarding for fresh CLI installs (#85519) 2026-05-22 22:00:21 +00:00
pairing.md docs: typography hygiene across 9 pages (cli/channels) 2026-05-06 08:55:00 -07:00
path.md fix(oc-path): support deep config edits (#86060) 2026-05-24 18:10:02 -07:00
plugins.md fix(plugins): ignore helper files in extension roots 2026-05-30 17:31:53 +01:00
policy.md Policy: add policy file comparison command (#86768) 2026-05-28 23:10:27 -07:00
proxy.md Support HTTPS managed proxy CA trust (#79171) 2026-05-17 06:23:30 +01:00
qr.md fix(gateway): gate talk secret bootstrap handoff (#85690) 2026-05-25 11:34:12 +03:00
reset.md docs: add Related sections to remaining CLI, gateway API, and help pages 2026-04-23 20:41:35 -07:00
sandbox.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
secrets.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
security.md fix: Hook ingress token unlocks password-mode gateway auth (#86453) 2026-05-25 13:39:56 +00:00
sessions.md feat(cli): add sessions tail progress view 2026-05-30 21:29:39 +01:00
setup.md docs(cli): fix setup.md options table mangled by formatter on pipe char 2026-05-10 22:41:39 +08:00
skills.md fix: keep autonomous skill capture opt-in 2026-05-30 20:04:52 +01:00
status.md refactor: internalize OpenClaw agent runtime (#85341) 2026-05-27 19:24:04 +01:00
system.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
tasks.md fix(tasks): report cron session preserves from locked store 2026-05-09 20:05:07 -04:00
transcripts.md refactor: move transcripts into core 2026-05-26 14:51:11 +01:00
tui.md feat: add core session goals (#87469) 2026-05-29 22:36:29 +02:00
uninstall.md docs: add Related sections to remaining CLI, gateway API, and help pages 2026-04-23 20:41:35 -07:00
update.md fix: honor OPENCLAW_HOME defaults (#85802) 2026-05-23 20:39:59 -07:00
voicecall.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
webhooks.md docs: rewrite 3 pages with code-verified options and Mintlify funnel 2026-05-10 22:31:10 +08:00
wiki.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00