vrr/openclaw
2
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-21 21:55:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 21
openclaw/docs/tools
History
Zee Zheng 8be581cbf8
fix(browser): allow inbound media uploads 
Allow the browser upload tool to resolve OpenClaw-managed inbound media refs such as `media://inbound/<id>` and sandbox-relative `media/inbound/<id>` while preserving the existing upload-root path contract.

Keep upload-root files ahead of sandbox-relative inbound fallback, reject nested absolute inbound media files, and validate raw `media://` paths before URL normalization so traversal-shaped refs cannot resolve to direct media ids.

Verification:
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=verbose`
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=dot`
- `OPENCLAW_HEAVY_CHECK_LOCK_SCOPE=worktree node scripts/run-tsgo.mjs -p test/tsconfig/tsconfig.extensions.test.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/extensions-test.tsbuildinfo`
- `pnpm lint --threads=8`
- `.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main`
- `git diff --check`
- GitHub PR checks on be08e6c8a8: dependency-guard, check-lint, check-test-types, check-additional-extension-bundled, checks-fast-contracts-plugins-a, checks-fast-contracts-plugins-b all passed.

Fixes #83544.

Co-authored-by: Zee Zheng <zheng.zuo0@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-30 23:49:07 +01:00
..
acp-agents-setup.md refactor: internalize OpenClaw agent runtime (#85341) 2026-05-27 19:24:04 +01:00
acp-agents.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
agent-send.md fix(agent): support explicit CLI session keys (#85121) 2026-05-22 03:08:25 +00:00
apply-patch.md docs: typography hygiene + Related CardGroups across 4 pages 2026-05-05 18:36:06 -07:00
brave-search.md docs(tools/brave-search): remove duplicate H1 2026-05-06 00:03:33 -07:00
browser-control.md fix(browser): allow inbound media uploads 2026-05-30 23:49:07 +01:00
browser-linux-troubleshooting.md docs: sentence-case sweep across 10 more pages 2026-04-27 00:03:18 -07:00
browser-login.md docs(tools): tighten minimax-search params and remove fictitious browser --target flag 2026-05-11 07:57:28 +08:00
browser-wsl2-windows-remote-cdp-troubleshooting.md docs: batch fix filler openings across providers, platforms, install, tools, and pi 2026-04-26 22:07:47 -07:00
browser.md docs(browser): add Notte cloud browser to direct WebSocket CDP providers 2026-05-29 22:17:32 +02:00
btw.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
capability-cookbook.md docs: consolidate moved docs pages 2026-05-05 17:38:21 +01:00
clawhub.md docs: add dedicated ClawHub docs tab (#79159) 2026-05-07 18:55:08 -07:00
code-execution.md docs: align xai code execution auth docs (#84416) 2026-05-19 20:39:04 -07:00
creating-skills.md refactor: rename skill workshop agent tool 2026-05-30 20:04:52 +01:00
diffs.md docs(plugins): clarify external plugin installs 2026-05-29 20:43:51 +01:00
duckduckgo-search.md docs: drop in-body H1s and typography hygiene across 4 pages 2026-05-05 18:46:03 -07:00
elevated.md docs(tools): rewrite loop detection, code execution, and tighten elevated/skills 2026-05-05 16:49:29 -07:00
exa-search.md fix(web-search): support Exa baseUrl 2026-05-02 06:06:40 +01:00
exec-approvals-advanced.md fix: route denied exec approval followups to sessions 2026-05-30 21:45:16 +01:00
exec-approvals.md fix: route denied exec approval followups to sessions 2026-05-30 21:45:16 +01:00
exec.md fix(exec): bind node auto-review to prepared plans 2026-05-29 22:01:27 +02:00
firecrawl.md fix(firecrawl): block unsafe scrape targets 2026-05-02 07:24:40 +01:00
gemini-search.md fix(gemini): reuse google provider config for web search 2026-05-02 05:15:02 +01:00
goal.md feat: add core session goals (#87469) 2026-05-29 22:36:29 +02:00
grok-search.md feat: add xai oauth web search and provider timeouts 2026-05-22 08:49:53 +01:00
image-generation.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
index.md refactor: remove skill workshop plugin package 2026-05-30 20:04:52 +01:00
kimi-search.md fix(kimi): reject ungrounded web search answers 2026-05-02 07:03:29 +01:00
llm-task.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
lobster.md docs: reorganize tools automation nav (#80116) 2026-05-11 15:59:27 -07:00
loop-detection.md fix: abort generic no-progress tool loops 2026-05-12 00:29:10 +08:00
media-overview.md fix: route media completions through requester agent (#88141) 2026-05-30 00:24:28 +02:00
minimax-search.md docs(tools): tighten minimax-search params and remove fictitious browser --target flag 2026-05-11 07:57:28 +08:00
multi-agent-sandbox-tools.md Revert "refactor: move runtime state to SQLite" 2026-05-13 13:33:38 +01:00
music-generation.md fix: route media completions through requester agent (#88141) 2026-05-30 00:24:28 +02:00
ollama-search.md fix(ollama): honor baseURL provider aliases 2026-04-27 03:28:23 +01:00
pdf.md feat: support encrypted PDF extraction (#87751) 2026-05-28 20:19:49 +01:00
perplexity-search.md docs: typography hygiene + Related CardGroups across 4 pages 2026-05-05 18:36:06 -07:00
plugin.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
reactions.md fix(nextcloud-talk): dispatch react action so agents can send reactions (#70110) (#72348) 2026-05-18 18:54:44 +00:00
searxng-search.md fix(searxng): retry empty category searches 2026-05-02 08:15:30 +01:00
skills-config.md fix: keep autonomous skill capture opt-in 2026-05-30 20:04:52 +01:00
skills.md fix: bound skill workshop descriptions 2026-05-30 20:04:52 +01:00
slash-commands.md feat: add core session goals (#87469) 2026-05-29 22:36:29 +02:00
steer.md fix(agents): simplify subagent completion handoff 2026-05-23 13:50:08 +01:00
subagents.md refactor(agents): bind subagent threads in core (#88416) 2026-05-30 21:19:09 +01:00
tavily.md docs: rewrite 3 pages with code-verified options and Mintlify funnel 2026-05-10 22:31:10 +08:00
thinking.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00
tokenjuice.md build(plugins): externalize tokenjuice 2026-05-29 21:00:29 +01:00
tool-search.md refactor: internalize OpenClaw agent runtime (#85341) 2026-05-27 19:24:04 +01:00
trajectory.md refactor: internalize OpenClaw agent runtime (#85341) 2026-05-27 19:24:04 +01:00
tts.md refactor(voice): catalog voice models through providers (#87794) 2026-05-29 04:46:45 +01:00
video-generation.md fix: route media completions through requester agent (#88141) 2026-05-30 00:24:28 +02:00
web-fetch.md fix(agents): add typed tool progress updates 2026-05-29 11:06:13 +01:00
web.md refactor: unify OpenAI provider identity 2026-05-30 11:48:41 +02:00