c80da4e72f
refactor: validate provider plugin metadata
2026-03-13 01:19:35 +00:00
87ad1ce9b1
refactor: add non-interactive provider plugin setup
2026-03-13 01:19:35 +00:00
bcbf429d6b
Merge branch 'main' of https://github.com/openclaw/openclaw
...
* 'main' of https://github.com/openclaw/openclaw :
build: sync bundled plugin versions
2026-03-12 21:06:55 -04:00
fed24a1311
build: sync bundled plugin versions
2026-03-12 21:06:12 -04:00
f12cd92bb3
Merge branch 'main' of https://github.com/openclaw/openclaw
...
* 'main' of https://github.com/openclaw/openclaw :
build: update deps and fix vitest 4 regressions
2026-03-12 21:04:02 -04:00
4dd4e36450
build: update deps and fix vitest 4 regressions
2026-03-13 01:02:00 +00:00
8661c271e9
Gateway: preserve trusted-proxy browser scopes
2026-03-12 21:00:43 -04:00
b2e21e3792
fix(security): strip Mongolian selectors in exec obfuscation detector
2026-03-12 21:00:00 -04:00
9bbdb5ca94
test(live): add codex instructions to spark probe
2026-03-13 00:53:21 +00:00
d5b3f2ed71
fix(models): keep codex spark codex-only
2026-03-13 00:53:21 +00:00
d4f535b203
fix(hooks): fail closed on unreadable loader paths ( #44437 )
...
* Hooks: fail closed on unreadable loader paths
* Changelog: note hooks loader hardening
* Tests: cover sanitized hook loader logs
* Hooks: use realpath containment for legacy loaders
* Hooks: sanitize unreadable workspace log path
2026-03-12 20:47:30 -04:00
2649c03cdb
fix(hooks): dedupe repeated agent deliveries by idempotency key ( #44438 )
...
* Hooks: add hook idempotency key resolution
* Hooks: dedupe repeated agent deliveries by idempotency key
* Tests: cover hook idempotency dedupe
* Changelog: note hook idempotency dedupe
* Hooks: cap hook idempotency key length
* Gateway: hash hook replay cache keys
* Tests: cover hook replay key hardening
2026-03-12 20:43:38 -04:00
d96069f0df
feat: add windows update package spec override
2026-03-12 23:56:48 +00:00
91b701e183
fix: harden windows native updates
2026-03-12 23:42:14 +00:00
35aafd7ca8
feat: add Anthropic fast mode support
2026-03-12 23:39:03 +00:00
52e2a7747a
Revert "feat: add --no-test flag to prepare-gates"
...
This reverts commit ee6bdb3bab
2026-03-12 16:37:50 -07:00
d5bffcdeab
feat: add fast mode toggle for OpenAI models
2026-03-12 23:31:31 +00:00
ddcaec89e9
fix(node-host): fail closed on ruby approval preload flags
2026-03-12 23:23:54 +00:00
ee6bdb3bab
feat: add --no-test flag to prepare-gates
...
Allows skipping the full test suite during prepare phase.
Testing is deferred to the dedicated Test phase in the pipeline.
2026-03-12 16:22:37 -07:00
86a3149b2e
fix: harden windows npm runtime path
2026-03-12 23:03:19 +00:00
92191fcd68
deps: bump openclaw to 2026.3.11
...
Raise internal OpenClaw constraints to 2026.3.11 and regenerate pnpm lockfile to remove the vulnerable 2026.3.8 resolution.
2026-03-12 19:00:49 -04:00
212afb6950
refactor: clarify pairing setup auth labels
2026-03-12 22:46:28 +00:00
01e4845f6d
refactor: extract websocket handshake auth helpers
2026-03-12 22:46:28 +00:00
1c7ca391a8
refactor: trim bootstrap token metadata
2026-03-12 22:46:28 +00:00
589aca0e6d
refactor: unify gateway connect auth selection
2026-03-12 22:46:28 +00:00
2c8f31135b
test: cover provider plugin boundaries
2026-03-12 22:43:55 +00:00
300a093121
refactor: split simple api-key auth providers
2026-03-12 22:38:58 +00:00
fd2b06d463
refactor: split non-interactive auth choice providers
2026-03-12 22:38:58 +00:00
21d1032ca4
refactor: remove legacy provider apply shims
2026-03-12 22:38:58 +00:00
7fd4dea1af
refactor: share openai-compatible local discovery
2026-03-12 22:38:58 +00:00
9692dc7668
fix(security): harden nodes owner-only tool gating
2026-03-12 22:27:52 +00:00
2622d2453b
fix(ci): restore generated protocol swift outputs ( #44411 )
...
Regenerate the Swift protocol models so PushTestResult keeps the transport field required by the current gateway schema, and update protocol:check to diff both generated Swift destinations because the generator writes both files.
Regeneration-Prompt: |
Investigate the protocol CI failure on current origin/main rather than assuming the earlier fix still held. Confirm whether the generated Swift outputs drifted from the TypeScript gateway schema, identify whether the regression was reintroduced by a later commit, and keep the patch minimal: restore the generated Swift outputs from the existing schema and tighten the protocol check so it verifies every Swift file the generator writes.
2026-03-12 15:25:38 -07:00
319766639a
docs: explain plugin architecture
2026-03-12 22:24:35 +00:00
d83491e751
feat: modularize provider plugin architecture
2026-03-12 22:24:35 +00:00
bf89947a8e
fix: switch pairing setup codes to bootstrap tokens
2026-03-12 22:23:07 +00:00
9cd54ea882
fix: skip cache-ttl append after compaction to prevent double compaction ( #28548 )
...
Merged via squash.
Prepared head SHA: a4114a52bc
2026-03-12 15:17:18 -07:00
7332e6d609
fix(failover): classify HTTP 422 as format and OpenRouter credits as billing ( #43823 )
...
Merged via squash.
Prepared head SHA: 4f48e977fe
2026-03-13 00:50:28 +03:00
268e036172
refactor(test): share hook request handler fixtures
2026-03-12 21:44:58 +00:00
eece586747
refactor(security): reuse hook agent routing normalization
2026-03-12 21:44:06 +00:00
445ff0242e
refactor(gateway): cache hook proxy config in runtime state
2026-03-12 21:43:36 +00:00
1d986f1c01
refactor(gateway): move request client ip resolution to net
2026-03-12 21:41:51 +00:00
904db27019
fix(security): audit unrestricted hook agent routing
2026-03-12 21:36:19 +00:00
4da617e178
fix(gateway): honor trusted proxy hook auth rate limits
2026-03-12 21:35:57 +00:00
143e593ab8
Compaction Runner: wire post-compaction memory sync ( #25561 )
...
Merged via squash.
Prepared head SHA: 6d2bc02cc1
2026-03-12 14:24:29 -07:00
fd568c4f74
fix(failover): classify ZenMux quota-refresh 402 as rate_limit ( #43917 )
...
Merged via squash.
Prepared head SHA: 1d58a36a77
2026-03-13 00:06:43 +03:00
d93db0fc13
fix(failover): classify z.ai network_error stop reason as retryable timeout ( #43884 )
...
Merged via squash.
Prepared head SHA: 9660f6cd5b
2026-03-13 00:00:44 +03:00
3700279b14
docs: codify American English spelling convention ( #44159 )
2026-03-12 14:45:17 -05:00
50cc375c11
feat(context-engine): plumb sessionKey into all ContextEngine methods ( #44157 )
...
Merged via squash.
Prepared head SHA: 0b341f6f4c
2026-03-12 12:43:36 -07:00
e525957b4f
fix(sandbox): restore spawned workspace handoff ( #44307 )
2026-03-12 16:12:08 -03:00
4ca84acf24
fix(runtime): duplicate messages, share singleton state across bundled chunks ( #43683 )
...
* Tests: add fresh module import helper
* Process: share command queue runtime state
* Agents: share embedded run runtime state
* Reply: share followup queue runtime state
* Reply: share followup drain callback state
* Reply: share queued message dedupe state
* Reply: share inbound dedupe state
* Tests: cover shared command queue runtime state
* Tests: cover shared embedded run runtime state
* Tests: cover shared followup queue runtime state
* Tests: cover shared inbound dedupe state
* Tests: cover shared Slack thread participation state
* Slack: share sent thread participation state
* Tests: document fresh import helper
* Telegram: share draft stream runtime state
* Tests: cover shared Telegram draft stream state
* Telegram: share sent message cache state
* Tests: cover shared Telegram sent message cache
* Telegram: share thread binding runtime state
* Tests: cover shared Telegram thread binding state
* Tests: avoid duplicate shared queue reset
* refactor(runtime): centralize global singleton access
* refactor(runtime): preserve undefined global singleton values
* test(runtime): cover undefined global singleton values
---------
Co-authored-by: Nimrod Gutman <nimrod.gutman@gmail.com>
2026-03-12 14:59:27 -04:00
Peter Steinberger
Vincent Koc
Josh Lehman
ToToKr
jnMetaCode
Rodrigo Uroz
bwjoke
Wayne
Andrew Demczuk
Marcus Castro