31ca7fb277
test: consolidate directive behavior test scenarios
2026-02-23 21:13:11 +00:00
426f803b8a
test: speed up sessions_spawn tool harness
2026-02-23 21:13:05 +00:00
7e5f771d27
test: speed up skills test suites
2026-02-23 21:02:13 +00:00
75423a00d6
refactor: deduplicate shared helpers and test setup
2026-02-23 20:40:44 +00:00
1f5e6444ee
test: remove redundant pi embedded runner cases
2026-02-23 20:15:56 +00:00
3b5a276a48
test: speed up supervisor test timing
2026-02-23 20:15:56 +00:00
5a475259bb
fix(telegram): suppress reasoning-only leaks when reasoning is off
...
Co-authored-by: avirweb <avirweb@users.noreply.github.com>
2026-02-23 20:06:16 +00:00
63e4dfaa9c
test: consolidate pi-tools gating assertions
2026-02-23 20:00:11 +00:00
cba8037d90
test: prune redundant trigger handling integration coverage
2026-02-23 20:00:11 +00:00
32e6ccb7b6
test(cron): cover announce failure when best-effort is off
2026-02-23 19:48:37 +00:00
9af3ec92a5
fix(gateway): add HSTS header hardening and docs
2026-02-23 19:47:29 +00:00
c88915b721
test: consolidate trigger handling suites
2026-02-23 19:41:47 +00:00
87603b5c45
fix: sync built-in channel enablement across config paths
2026-02-23 19:40:42 +00:00
7a40d99b1d
refactor(cron): extract delivery dispatch + harden reset notices
2026-02-23 19:25:22 +00:00
fe62711342
test(gate): stabilize env- and timing-sensitive process/web-search checks
2026-02-23 19:19:58 +00:00
31e4c21b67
fix(auto-reply): move volatile inbound flags out of system metadata
...
Co-authored-by: aidiffuser <aidiffuser@users.noreply.github.com>
2026-02-23 19:19:45 +00:00
cf38339f25
fix(tools): improve session_status cache-aware usage reporting
...
Co-authored-by: Lucian Feraru <1ucian@users.noreply.github.com>
2026-02-23 19:19:45 +00:00
40db3fef49
fix(agents): cache bootstrap snapshots per session key
...
Co-authored-by: Isis Anisoptera <github@lotuswind.net>
2026-02-23 19:19:45 +00:00
47723b646d
refactor(test): de-duplicate msteams and bash test helpers
2026-02-23 19:12:27 +00:00
8d69251475
fix(doctor): use gateway health status for memory search key check ( #22327 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 2f02ec9403
2026-02-23 14:07:16 -05:00
bf373eeb43
refactor: harden reset notice + cron delivery target flow
2026-02-23 19:01:02 +00:00
d266d12be1
refactor(exec): simplify env-prefixed wrapper modifier check
2026-02-23 18:56:14 +00:00
bd8b9af9a7
fix(exec): bind env-prefixed shell wrappers to full approval text
...
(cherry picked from commit 1edf957988
2026-02-23 18:56:14 +00:00
216d99e585
fix(browser): derive relay auth token from gateway token in Chrome extension
...
The extension relay server authenticates using an HMAC-SHA256 derived
token (`openclaw-extension-relay-v1:<port>`), but the Chrome extension
was sending the raw gateway token. This caused both the WebSocket
connection and the options page validation to fail with 401 Unauthorized.
Additionally, the options page validation request triggered a CORS
preflight (due to the custom `x-openclaw-relay-token` header) which the
relay rejects because OPTIONS requests lack auth headers. The options
page now delegates the check to the background service worker which has
host_permissions and bypasses CORS preflight.
Fixes #23842
Co-authored-by: Cursor <cursoragent@cursor.com>
(cherry picked from commit bbc654b9f0
2026-02-23 18:56:14 +00:00
bb8f538cd4
Browser relay: accept raw gateway token in extension auth
...
(cherry picked from commit e682a768d0
2026-02-23 18:56:14 +00:00
d00d814ad1
fix(gateway): include platform and reason in node command rejection error
...
The generic "node command not allowed" error gives no indication of why the
command was rejected, making it hard to diagnose issues (e.g. running
`nodes notify` against a Linux node that does not declare `system.notify`).
Include the rejection reason and node platform in the error message so
callers can tell whether the command is not supported by the node, not in
the platform allowlist, or the node did not advertise its capabilities.
Fixes #24616
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
(cherry picked from commit e3d74619bc
2026-02-23 18:56:14 +00:00
5de1f540e7
CLI: fix gateway restart health ownership for child listener pids ( #24696 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: d6d4b43f7e
2026-02-23 13:53:10 -05:00
d637fd4801
fix(config): tighten bedrock cache-retention type narrowing
2026-02-23 18:46:40 +00:00
160bd61fff
feat(agents): add per-agent stream params overrides for cache tuning ( #17470 ) (thanks @rrenamed)
2026-02-23 18:46:40 +00:00
be6f0b8c84
fix(providers): support Bedrock Anthropic cacheRetention defaults/pass-through ( #22303 ) (thanks @snese)
2026-02-23 18:46:40 +00:00
ca5c0bc02b
fix(providers): disable Bedrock prompt caching for non-Anthropic models ( #20866 ) (thanks @pierreeurope)
2026-02-23 18:46:40 +00:00
b9b77cea4e
fix(reply): omit auth labels in /new and /reset
2026-02-23 18:30:30 +00:00
ff0c40d367
test(tools): fix kimi web_search mock typing
2026-02-23 18:27:37 +00:00
7837d23103
feat(media): add moonshot video provider and wiring
...
Co-authored-by: xiaoyaner0201 <xiaoyaner0201@users.noreply.github.com>
2026-02-23 18:27:37 +00:00
e02c470d5e
feat(tools): add kimi web_search provider
...
Co-authored-by: adshine <adshine@users.noreply.github.com>
2026-02-23 18:27:37 +00:00
f93ca93498
fix(agents): extend cache-ttl eligibility for moonshot and zai
...
Co-authored-by: lailoo <lailoo@users.noreply.github.com>
2026-02-23 18:27:36 +00:00
2fa6aa6ea6
test(agents): add comprehensive kimi regressions
2026-02-23 18:27:36 +00:00
daaad03593
fix(infra): treat nested network request errors as non-fatal
2026-02-23 18:27:23 +00:00
445c7a65e6
test: simplify session reset and rawbody coverage
2026-02-23 18:19:23 +00:00
783a9134d6
test: prune redundant trigger-handling scenarios
2026-02-23 18:19:23 +00:00
3cadc3eed1
fix(plugins): honor channels.<id>.enabled for bundled channels
2026-02-23 18:16:58 +00:00
cc7a498ace
refactor(tests): deduplicate repeated fixtures in msteams and bash tests
2026-02-23 17:59:56 +00:00
b81bce703c
test: streamline trigger and session coverage
2026-02-23 17:52:23 +00:00
ddc67aa4ef
test: collapse duplicate trigger command coverage
2026-02-23 17:37:13 +00:00
6a0fcf6518
Sessions: consolidate path hardening and fallback resilience ( #24657 )
...
* Changelog: credit session path fixes
* Sessions: harden path resolution for symlink and stale metadata
* Tests: cover fallback for invalid absolute sessionFile
* Tests: add symlink alias session path coverage
* Tests: guard symlink escape in sessionFile resolution
2026-02-23 12:36:01 -05:00
ce1f12ff33
fix(slack): prevent Zod default groupPolicy from breaking multi-account config ( #17579 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 7d2da57b50
2026-02-23 12:35:41 -05:00
f03ff39754
Providers: skip context1m beta for Anthropic OAuth tokens ( #24620 )
...
* Providers: skip context1m beta for Anthropic OAuth tokens
* Tests: cover OAuth context1m beta skip behavior
* Docs: note context1m OAuth incompatibility
* Agents: add context1m-aware context token resolver
* Agents: cover context1m context-token resolver
* Commands: apply context1m-aware context tokens in session store
* Commands: apply context1m-aware context tokens in status summary
* Status: resolve context tokens with context1m model params
* Status: test context1m status context display
2026-02-23 12:29:09 -05:00
fdd185cfaa
test: merge inline trigger command and elevated coverage
2026-02-23 17:19:39 +00:00
f7e45ce947
test: consolidate trigger-handling status and heartbeat scenarios
2026-02-23 17:19:39 +00:00
a8a4fa5b88
test: de-duplicate attachment and bash tool tests
2026-02-23 17:19:34 +00:00
Peter Steinberger
Ruslan Kharitonov
Brian Mendonca
oneaix
Mustafa Kemal
justinhuangcode
Gustavo Madeira Santana
Doruk Ardahan
chilu18
Vincent Koc
Matthew