0a7201fa84
docs: add Windows installer debug equivalents
2026-02-13 02:07:03 +01:00
9230a2ae14
fix(browser): require auth on control HTTP and auto-bootstrap token
2026-02-13 02:02:28 +01:00
85409e401b
fix: preserve inter-session input provenance (thanks @anbecker)
2026-02-13 02:02:01 +01:00
7081dee1af
fix(media): strip audio attachments after successful transcription (openclaw#9076) thanks @nobrainer-tech
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test (fails in known unrelated telegram suite)
- pnpm vitest run src/auto-reply/media-note.test.ts src/auto-reply/reply.media-note.test.ts
Co-authored-by: nobrainer-tech <445466+nobrainer-tech@users.noreply.github.com>
2026-02-12 19:01:53 -06:00
a6003d6711
Changelog: add missing entries for #14882 and #15012
2026-02-12 18:56:34 -06:00
926bf84772
fix: update replyToMode notes ( #11062 ) (thanks @cordx56)
2026-02-12 18:50:36 -06:00
e25ae55879
fix(discord): replyToMode first behaviour
2026-02-12 18:50:36 -06:00
4b3c9c9c5a
fix(discord): respect replyToMode in thread channel
2026-02-12 18:50:36 -06:00
d34138dfee
fix: dispatch before_tool_call and after_tool_call hooks from both tool execution paths (openclaw#15012) thanks @Patrick-Barletta
...
Verified:
- pnpm check
Co-authored-by: Patrick-Barletta <67929313+Patrick-Barletta@users.noreply.github.com>
2026-02-12 18:48:11 -06:00
da2d09f57a
fix(memory-flush): instruct agents to append rather than overwrite memory files (openclaw#6878) thanks @EmberCF
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test (fails on unrelated existing telegram test file)
Co-authored-by: EmberCF <258471336+EmberCF@users.noreply.github.com>
2026-02-12 18:47:43 -06:00
7b34b46363
chore: Update deps.
2026-02-13 09:43:41 +09:00
99f28031e5
fix: harden OpenResponses URL input fetching
2026-02-13 01:38:49 +01:00
4199f9889f
fix: harden session transcript path resolution
2026-02-13 01:28:17 +01:00
3eb6a31b6f
fix: confine sandbox skill sync destinations
2026-02-13 01:24:51 +01:00
113ebfd6a2
fix(security): harden hook and device token auth
2026-02-13 01:23:53 +01:00
54513f4240
fix: align cron prompt content with filtered reminder events
2026-02-12 16:14:27 -08:00
7a8a57b573
changelog: dedupe signal entry restored by merge conflict fix
2026-02-12 16:14:27 -08:00
92334b95d2
changelog: keep signal entry while restoring removed rows
2026-02-12 16:14:27 -08:00
22593a2723
fix: refine cron heartbeat event detection
2026-02-12 16:14:27 -08:00
c12f693c59
feat: embed actual event text in cron prompt
...
Combines two complementary fixes for ghost reminder bug:
1. Filter HEARTBEAT_OK/exec messages (previous commit)
2. Embed actual event content in prompt (this commit)
Instead of static 'shown above' message, dynamically build prompt
with actual reminder text. Ensures model sees event content directly.
Credit: Approach inspired by @nyx-rymera's analysis in #13317
Fixes #13317
2026-02-12 16:14:27 -08:00
1c773fcb60
test: fix test isolation and assertion issues
...
- Add resetSystemEventsForTest() in beforeEach/afterEach
- Fix hardcoded status assertions (use toBeDefined + conditional checks)
- Prevents cross-test pollution of global system event queue
Addresses Greptile feedback on PR #15059
2026-02-12 16:14:27 -08:00
5beecad8ba
test: add test for ghost reminder bug ( #13317 )
2026-02-12 16:14:27 -08:00
4f687a7440
fix: prevent ghost reminder notifications ( #13317 )
...
The heartbeat runner was incorrectly triggering CRON_EVENT_PROMPT
whenever ANY system events existed during a cron heartbeat, even if
those events were unrelated (e.g., HEARTBEAT_OK acks, exec completions).
This caused phantom 'scheduled reminder' notifications with no actual
reminder content.
Fix: Only treat as cron event if pending events contain actual
cron-related messages, excluding standard heartbeat acks and
exec completion messages.
Fixes #13317
2026-02-12 16:14:27 -08:00
2655041f69
fix: wire 9 unwired plugin hooks to core code (openclaw#14882) thanks @shtse8
...
Verified:
- GitHub CI checks green (non-skipped)
Co-authored-by: shtse8 <8020099+shtse8@users.noreply.github.com>
2026-02-12 18:14:14 -06:00
957b883082
fix(agents): stabilize overflow compaction retries and session context accounting (openclaw#14102) thanks @vpesh
...
Verified:
- CI checks for commit 86a7ecb45e
2026-02-12 17:53:13 -06:00
da55d70fb0
fix(security): harden untrusted web tool transcripts
2026-02-13 00:46:56 +01:00
4543c401b4
Signal: harden E.164 validation
2026-02-12 15:28:31 -08:00
a363e2ca5e
Changelog: credit Signal account validation
2026-02-12 15:28:31 -08:00
056bda5cb7
Signal: validate account input
2026-02-12 15:23:11 -08:00
04a1ed5e53
chore: make changelog mandatory in PR skills
2026-02-12 18:08:02 -05:00
a10f228a5b
fix: update totalTokens after compaction using last-call usage ( #15018 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 9214291bf7
2026-02-12 18:02:30 -05:00
033d5b5c15
Changelog: note discord dm reaction fix
2026-02-12 16:47:39 -06:00
fb8e6156ec
fix: handle discord dm reaction allowlist
2026-02-12 16:47:39 -06:00
f8c7ae9b5e
fix: use canonical 'direct' instead of 'dm' for DM peer kind (fixes TS2322)
2026-02-12 16:47:39 -06:00
ea3fb9570c
fix: use proper LoadedConfig type in test mock
2026-02-12 16:47:39 -06:00
888f7dbbd8
fix: process Discord DM reactions instead of silently dropping them
2026-02-12 16:47:39 -06:00
d9f3d569a2
fix: add Discord channel-edit thread params ( #5542 ) (thanks @stumct)
2026-02-12 16:47:02 -06:00
91b96edfc4
fix: document Discord media-only messages ( #9507 ) (thanks @leszekszpunar)
2026-02-12 16:45:50 -06:00
61d57be4c2
Discord: preserve media caption whitespace
2026-02-12 16:40:08 -06:00
01e4e15364
fix: normalize Signal mentions ( #2013 ) (thanks @alexgleason)
2026-02-12 14:37:55 -08:00
d3e43de42b
Signal: satisfy lint
2026-02-12 14:37:55 -08:00
cfec19df53
Signal: normalize mention placeholders
2026-02-12 14:37:55 -08:00
051c574047
fix(signal): replace  with @uuid/@phone from mentions
...
Related #1926
Signal mentions were appearing as  (object replacement character)
instead of readable identifiers. This caused Clawdbot to misinterpret
messages and respond inappropriately.
Now parses dataMessage.mentions array and replaces the placeholder
character with @{uuid} or @{phone} from the mention metadata.
2026-02-12 14:37:55 -08:00
4d0443391c
fix: use iterator.done check for LRU eviction
...
Fixes edge case where empty string key would stop eviction early
2026-02-12 16:31:36 -06:00
5882cf2f5d
fix(discord): add TTL and LRU eviction to thread starter cache
...
Fixes #5260
The DISCORD_THREAD_STARTER_CACHE Map was growing unbounded during
long-running gateway sessions, causing memory exhaustion.
This fix adds:
- 5-minute TTL expiry (thread starters rarely change)
- Max 500 entries with LRU eviction
- Same caching pattern used by Slack's thread resolver
The implementation mirrors src/slack/monitor/thread-resolution.ts
which already handles this correctly.
2026-02-12 16:31:36 -06:00
149db5b2c2
Discord: handle thread edit params
2026-02-12 16:31:06 -06:00
abdceedaf6
fix: respect session model override in agent runtime ( #14783 ) ( #14983 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: ec47d1a7bf
2026-02-12 17:12:15 -05:00
c0c34c72bb
chore: fix windows CI tests
2026-02-12 16:59:55 -05:00
a158c46828
Tests: make download temp-path assertion cross-platform
2026-02-12 16:58:59 -05:00
b50640c600
fix(irc): type socket error param
2026-02-12 22:58:42 +01:00
Peter Steinberger
Arkadiusz Mastalerz
Tak Hoffman
Shadow
CHISEN Kaoru
Patrick Barletta
Ember 🔥
cpojer
Vignesh Natarajan
pvtclawn
Kyle Tse
Vladimir Peshekhonov
Gustavo Madeira Santana
Marcus Castro
Alex Gleason
Web Vijayi