44beb7be1f
fix(daemon): also enable LaunchAgent in repairLaunchAgentBootstrap
...
The repair/recovery path had the same missing `enable` guard as
`restartLaunchAgent`. If launchd persists a "disabled" state after a
previous `bootout`, the `bootstrap` call in `repairLaunchAgentBootstrap`
fails silently, leaving the gateway unloaded in the recovery flow.
Add the same `enable` guard before `bootstrap` that was already applied
to `installLaunchAgent` and (in this PR) `restartLaunchAgent`.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-09 05:36:27 +00:00
69cd376e3b
fix(daemon): enable LaunchAgent before bootstrap on restart
...
restartLaunchAgent was missing the launchctl enable call that
installLaunchAgent already performs. launchd can persist a "disabled"
state after bootout, causing bootstrap to silently fail and leaving the
gateway unloaded until a manual reinstall.
Fixes #39211
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-09 05:36:27 +00:00
41eef15cdc
test: fix windows secrets runtime ci
2026-03-09 05:24:09 +00:00
41450187dd
fix: clear plugin discovery cache after plugin installation (openclaw#39752)
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: GazeKingNuWu <264914544+GazeKingNuWu@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-09 00:16:25 -05:00
a40c29b11a
Fix cron text announce delivery for Telegram targets ( #40575 )
...
Merged via squash.
Prepared head SHA: 54b1513c78
2026-03-09 10:26:17 +05:30
26e76f9a61
fix: dedupe inbound Telegram DM replies per agent ( #40519 )
...
Merged via squash.
Prepared head SHA: 6e235e7d1f
2026-03-09 09:31:05 +05:30
99cbda83a2
fix(media): accept reader read result type
2026-03-09 03:49:50 +00:00
e8775cda93
fix(agents): re-expose configured tools under restrictive profiles
2026-03-09 03:49:50 +00:00
a438ff4397
fix(plugin-sdk): remove remaining bundled plugin src imports (openclaw#39638)
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: Kyle <3477429+kyledh@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-08 22:32:45 -05:00
adec8b28bb
alphabetize web search providers ( #40259 )
...
Merged via squash.
Prepared head SHA: be6350e5ae
2026-03-09 08:54:54 +05:30
e3df94365b
ACP: add optional ingress provenance receipts ( #40473 )
...
Merged via squash.
Prepared head SHA: b63e46dd94
2026-03-09 04:19:03 +01:00
4d501e4ccf
fix(telegram): add download timeout to prevent polling loop hang ( #40098 )
...
Merged via squash.
Prepared head SHA: abdfa1a35f
2026-03-09 08:29:21 +05:30
f6243916b5
fix(models): use 1M context for openai-codex gpt-5.4 ( #37876 )
...
Merged via squash.
Prepared head SHA: c41020779e
2026-03-08 18:23:49 -07:00
eabda6e3a4
fix(tests): correct security check failure
2026-03-08 18:13:35 -07:00
6d5e142b93
Docker: improve build cache reuse ( #40351 )
...
* Docker: improve build cache reuse
* Tests: cover Docker build cache layout
* Docker: fix sandbox cache mount continuations
* Docker: document qr-import manifest scope
* Docker: narrow e2e install inputs
* CI: cache Docker builds in workflows
* CI: route sandbox smoke through setup script
* CI: keep sandbox smoke on script path
2026-03-08 17:57:46 -07:00
4f42c03a49
gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots ( #40385 )
...
Merged via squash.
Prepared head SHA: 567b3ed684
2026-03-09 01:50:42 +01:00
ff4745fc3f
refactor(models): split provider discovery helpers
2026-03-09 00:26:20 +00:00
c29b098744
refactor(models): split models.json planning from writes
2026-03-09 00:26:20 +00:00
24b53fcf47
refactor(agents): extract provider model normalization
2026-03-09 00:26:20 +00:00
dfc18b7a2b
refactor(models): extract list row builders
2026-03-09 00:26:20 +00:00
141738f717
refactor: harden browser runtime profile handling
2026-03-09 00:25:43 +00:00
4ff4ed7ec9
fix(config): refresh runtime snapshot from disk after write. Fixes #37175 ( #37313 )
...
Merged via squash.
Prepared head SHA: 69e1861abf
2026-03-08 19:49:15 -04:00
362248e559
refactor: harden browser relay CDP flows
2026-03-08 23:46:10 +00:00
661af2acd3
fix(agents): bootstrap runtime plugins before context-engine resolution
2026-03-08 23:38:38 +00:00
936ac22ec2
refactor: share channel config adapter base
2026-03-08 23:38:24 +00:00
bf601db3fc
test: dedupe brave llm-context rejection cases
2026-03-08 23:38:24 +00:00
5845b5bfba
refactor: share multi-account config schema fragments
2026-03-08 23:38:24 +00:00
52a253f18c
refactor: reuse broadcast route key construction
2026-03-08 23:38:24 +00:00
3f2f007c9a
refactor: extract gateway port diagnostics helper
2026-03-08 23:38:24 +00:00
32a6eae576
refactor: share gateway argv parsing
2026-03-08 23:38:24 +00:00
8d7778d1d6
refactor: dedupe plugin runtime stores
2026-03-08 23:38:24 +00:00
024857050a
fix: normalize openai-codex gpt-5.4 transport overrides
2026-03-08 23:35:21 +00:00
3da8882a02
test(models): refresh list assertions after main sync
2026-03-08 23:30:58 +00:00
b2b99f0325
fix(models): keep --all aligned with synthetic catalog rows
2026-03-08 23:30:58 +00:00
a3dc4b5a57
fix(tui): improve color contrast for light-background terminals ( #40345 )
...
* fix(tui): improve colour contrast for light-background terminals (#38636 )
Detect light terminal backgrounds via COLORFGBG and apply a WCAG
AA-compliant light palette. Adds OPENCLAW_THEME=light|dark env var
override for terminals without auto-detection.
Uses proper sRGB linearisation and WCAG 2.1 contrast ratios to pick
whichever text palette (dark or light) has higher contrast against
the detected background colour.
Co-authored-by: ademczuk <ademczuk@users.noreply.github.com>
* Update CHANGELOG.md
---------
Co-authored-by: ademczuk <andrew.demczuk@gmail.com>
Co-authored-by: ademczuk <ademczuk@users.noreply.github.com>
2026-03-08 16:17:28 -07:00
3f3f66a5f7
Docker: trim runtime image payload ( #40307 )
...
* Docker: shrink runtime image payload
* Docker: add runtime pnpm opt-in
* Docker: collapse helper entrypoint chmod layers
* Docker: restore bundled pnpm runtime
* Update CHANGELOG.md
2026-03-08 16:07:04 -07:00
e806c479f5
Gateway/iOS: replay queued foreground actions safely after resume ( #40281 )
...
Merged via squash.
- Local validation: `pnpm exec vitest run --config vitest.gateway.config.ts src/gateway/server-methods/nodes.invoke-wake.test.ts`
- Local validation: `pnpm build`
- mb-server validation: `pnpm exec vitest run --config vitest.gateway.config.ts src/gateway/server-methods/nodes.invoke-wake.test.ts`
- mb-server validation: `pnpm build`
- mb-server validation: `pnpm protocol:check`
2026-03-08 22:46:54 +01:00
38543d8196
fix(cron): consolidate announce delivery, fire-and-forget trigger, and minimal prompt mode ( #40204 )
...
* fix(cron): consolidate announce delivery and detach manual runs
* fix: queue detached cron runs (#40204 )
2026-03-08 14:46:33 -07:00
5889a2e98e
fix(plugin-sdk): lazily load legacy root alias
2026-03-08 17:13:46 -04:00
09acbe6528
fix: harden backup verify path validation
2026-03-08 16:53:44 -04:00
dadd7f99cd
fix(ci): scope secrets scan to branch changes
2026-03-08 22:21:49 +02:00
0ecfd37b44
feat: add local backup CLI ( #40163 )
...
Merged via squash.
Prepared head SHA: ed46625ae2
2026-03-08 16:21:20 -04:00
a075baba84
refactor(browser): scope CDP sessions and harden stale target recovery
2026-03-08 19:52:33 +00:00
d3111fbbcb
fix: make browser relay bind address configurable ( #39364 ) (thanks @mvanhorn)
2026-03-08 19:15:21 +00:00
e883d0b556
fix(browser): add IP validation, fix upgrade handler for non-loopback bind
...
- Zod schema: validate relayBindHost with ipv4/ipv6 instead of bare string
- Upgrade handler: allow non-loopback connections when bindHost is explicitly
non-loopback (e.g. 0.0.0.0 for WSL2), keeping loopback-only default
- Test: verify actual bind address via relay.bindHost instead of just checking
reachability on 127.0.0.1 which passes regardless
- Expose bindHost on ChromeExtensionRelayServer type for inspection
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 19:15:21 +00:00
436ae8a07c
fix(infra): make browser relay bind address configurable
...
Add browser.relayBindHost config option so the Chrome extension relay
server can bind to a non-loopback address (e.g. 0.0.0.0 for WSL2).
Defaults to 127.0.0.1 when unset, preserving current behavior.
Closes #39214
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 19:15:21 +00:00
0692f71c6f
fix: wait for extension relay tab reconnects ( #32461 ) (thanks @AaronWander)
2026-03-08 19:11:58 +00:00
bcb0d1b8b4
fix(browser): wait for extension tabs after relay drop ( #32331 )
2026-03-08 19:11:58 +00:00
dfa3605bee
fix(browser): rewrite 0.0.0.0 and [::] wildcard addresses in CDP WebSocket URLs
...
Containerized browsers (e.g. browserless in Docker) report
`ws://0.0.0.0:<internal-port>` in their `/json/version` response.
`normalizeCdpWsUrl` rewrites loopback WS hosts to the external
CDP host:port, but `0.0.0.0` and `[::]` were not treated as
addresses needing rewriting, causing OpenClaw to try connecting
to `ws://0.0.0.0:3000` literally — which always fails.
Fixes #17752
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 19:07:23 +00:00
4bfa800cc7
fix: share context engine registry across bundled chunks ( #40115 )
...
Merged via squash.
Prepared head SHA: 6af4820b7d
2026-03-08 11:56:01 -07:00
scoootscooob
Peter Steinberger
GazeKingNuWu
Ayaan Zaidi
Kyle
Kesku
Mariano
Tyson Cung
yuweuii
Vincent Koc
Radek Sienkiewicz
bbblending
0xsline
Doruk Ardahan
Mariano
Tyler Yust
Gustavo Madeira Santana
Nimrod Gutman
shichangs
Matt Van Horn
AaronWander
Joe Harouni
Josh Lehman