ea0ef18704
refactor: centralize exec approval timeout
2026-02-15 01:18:53 +01:00
c1d2f74bc5
refactor(test): dedupe gateway auth e2e lockout setup
2026-02-14 23:51:42 +00:00
aaf03c60c9
fix(test): complete gateway plugin registry mock
2026-02-14 23:51:41 +00:00
e0d7f97c55
refactor(test): share gateway server plugin mocks
2026-02-14 23:51:41 +00:00
dec6859702
agents: reduce prompt token bloat from exec and context ( #16539 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 8e1635fa3f
2026-02-14 18:32:45 -05:00
3efb752124
fix(gateway): abort active runs during sessions.reset ( #16576 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 43da87f2df
2026-02-14 17:42:33 -05:00
8217d77ece
fix(cli): run plugin gateway_stop hooks before message exit ( #16580 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 8542ac77ae
2026-02-14 17:33:08 -05:00
00b7ab7db7
fix(gateway): remove unused device auth import
2026-02-14 22:01:12 +01:00
d8a2c80cd7
fix(gateway): prefer explicit token over stored auth
2026-02-14 22:01:11 +01:00
c06a962bb6
test(e2e): stabilize suite
2026-02-14 22:01:11 +01:00
dff3f8c271
chore: fix lint after invoke result handler split
2026-02-14 20:11:57 +00:00
615c9c3c9c
perf(test): avoid gateway boot for late invoke results
2026-02-14 20:11:57 +00:00
b1dd23f61d
perf(test): mock config stack in tools invoke http tests
2026-02-14 18:46:24 +00:00
4d4296cae5
perf(test): speed up gateway tools invoke HTTP tests
2026-02-14 18:46:24 +00:00
cab0abf52a
fix(sessions): resolve transcript paths with explicit agent context ( #16288 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 7cbe9deca9
2026-02-14 13:44:51 -05:00
01b3226ecb
fix(gateway): block node.invoke exec approvals
2026-02-14 19:22:37 +01:00
4b9cb46c6e
refactor(outbound): dedupe poll threading + tighten duration semantics
2026-02-14 19:03:46 +01:00
cb3290fca3
fix(node-host): enforce system.run rawCommand/argv consistency
2026-02-14 18:53:23 +01:00
8e5689a84d
feat(telegram): add sendPoll support ( #16193 ) ( #16209 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: b58492cfed
2026-02-14 18:34:30 +01:00
baa3bf270b
fix(webchat): filter NO_REPLY token from streaming and final replies ( #16286 )
...
The webchat channel sent NO_REPLY as visible text to clients instead
of suppressing it. Other channels (Telegram, Discord) already filter
this token via the reply dispatcher, but the webchat streaming path
bypassed this check.
Fixes #16269
2026-02-14 18:26:19 +01:00
d3428053d9
fix: redact config values in skills status
2026-02-14 17:35:16 +01:00
268c14f021
refactor(tools): centralize default policy steps
2026-02-14 15:39:45 +00:00
f97ad8f288
refactor(tools): share tool policy pipeline
2026-02-14 15:39:45 +00:00
b769b65b48
refactor(browser): share proxy file helpers
2026-02-14 15:39:45 +00:00
7fc1026746
refactor(gateway): share agent prompt builder
2026-02-14 15:39:45 +00:00
31791233d6
fix(security): reject oversized base64 before decode
2026-02-14 15:45:41 +01:00
35c0e66ed0
fix(security): harden hooks module loading
2026-02-14 15:03:27 +01:00
3d0a41b584
test(gateway): isolate device identity in auth e2e
2026-02-14 14:57:19 +01:00
3bbd29bef9
perf(gateway): cache session list transcript fields
2026-02-14 12:52:51 +00:00
a0361b8ba9
fix(security): restrict hook transform module loading
2026-02-14 13:46:09 +01:00
a2b45e1c13
fix(gateway): relax http tool deny typing
2026-02-14 13:30:05 +01:00
0af76f5f0e
refactor(gateway): centralize node.invoke param sanitization
2026-02-14 13:27:45 +01:00
c15946274e
fix(gateway): allowlist system.run params
2026-02-14 13:27:45 +01:00
a7af646fdf
fix(gateway): bind approval ids to device identity
2026-02-14 13:27:45 +01:00
318379cdba
fix(gateway): bind system.run approvals to exec approvals
2026-02-14 13:27:45 +01:00
233483d2b9
refactor(security): centralize dangerous tool lists
2026-02-14 13:27:05 +01:00
586176730c
perf(gateway): optimize sessions/ws/routing
2026-02-14 12:21:44 +00:00
a7a08b6650
test(gateway): cover tools allow/deny precedence
2026-02-14 13:18:49 +01:00
eb4215d570
perf(test): speed up Vitest bootstrap
2026-02-14 12:13:27 +00:00
1fb52b4d7b
feat(gateway): add trusted-proxy auth mode ( #15940 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 279d4b304f
2026-02-14 12:32:17 +01:00
98bb4225fd
perf(test): minimize gateway startup in vitest
2026-02-14 05:25:40 +00:00
31d8546afd
fix(gateway): hide phantom main agent when agents.list is configured (openclaw#12364) thanks @arosstale
...
Verified:
- pnpm build
- pnpm check
- pnpm test
Co-authored-by: arosstale <117890364+arosstale@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-02-13 18:56:10 -06:00
a4f4b0636f
fix: preserve ${VAR} env var references when writing config back to disk ( #11560 )
...
* fix: preserve ${VAR} env var references when writing config back to disk
Fixes #11466
When config is loaded, ${VAR} references are resolved to their plaintext
values. Previously, writeConfigFile would serialize the resolved values,
silently replacing "${ANTHROPIC_API_KEY}" with "sk-ant-api03-..." in the
config file.
Now writeConfigFile reads the current file pre-substitution, and for each
value that matches what a ${VAR} reference would resolve to, restores the
original reference. Values the caller intentionally changed are kept as-is.
This fixes all 50+ writeConfigFile call sites (doctor, configure wizard,
gateway config.set/apply/patch, plugins, hooks, etc.) without requiring
any caller changes.
New files:
- src/config/env-preserve.ts — restoreEnvVarRefs() utility
- src/config/env-preserve.test.ts — 11 unit tests
* fix: remove global config env snapshot race
* docs(changelog): note config env snapshot race fix
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-02-14 01:53:17 +01:00
28431b84cc
fix(gateway): prune expired entries instead of clearing all hook auth failure state ( #15848 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 188a40e8a3
2026-02-14 01:46:12 +01:00
3a73e2508b
perf(gateway): skip idle channel shutdown work
2026-02-13 23:57:03 +00:00
79bd82a35b
perf(test): statically import gateway reload deps
2026-02-13 23:52:20 +00:00
4bef423d83
perf(test): reduce gateway reload waits and trim duplicate invoke coverage
2026-02-13 23:50:08 +00:00
d5e25e0ad8
refactor: centralize dispatcher lifecycle ownership
2026-02-14 00:41:37 +01:00
5caf829d28
perf(test): trim duplicate gateway and auto-reply test overhead
2026-02-13 23:40:38 +00:00
ad57e561c6
refactor: unify gateway restart deferral and dispatcher cleanup
2026-02-14 00:38:18 +01:00
Peter Steinberger
Charlie Greenman
Vishal Doshi
Gustavo Madeira Santana
Robby
Nick Taylor
Artale
AkosCz
AI-Reviewer-QS