cab0abf52a
fix(sessions): resolve transcript paths with explicit agent context ( #16288 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 7cbe9deca9
2026-02-14 13:44:51 -05:00
77b89719d5
fix(security): block safeBins shell expansion
2026-02-14 19:44:14 +01:00
a73ccf2b53
fix: deliver cron output to explicit targets ( #16360 ) (thanks @rubyrunsstuff)
2026-02-14 12:43:11 -06:00
d14be8472e
fix(whatsapp): honor account-level dmPolicy override ( #10082 ) (thanks @mcaxtr)
...
Fixes openclaw#10082 (issue #8736 ): inbound WhatsApp DM policy now respects account-level dmPolicy overrides.
2026-02-14 19:41:42 +01:00
80407cbc6a
fix: recompute all cron next-run times after job update (openclaw#15905) thanks @echoVic
...
Verified:
- pnpm check
- pnpm vitest src/cron/service.issue-regressions.test.ts src/cron/service.issue-13992-regression.test.ts
Co-authored-by: echoVic <16428813+echoVic@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-02-14 12:37:22 -06:00
9409942de4
test(skills): run skills watcher test in unit suite
2026-02-14 19:26:20 +01:00
0e046f61ab
fix(skills): avoid skills watcher FD exhaustion
...
Watch SKILL.md only (and one-level SKILL.md in skill roots) to prevent chokidar from tracking huge unrelated trees.
Co-authored-by: household-bard <shakespeare@hessianinformatics.com>
2026-02-14 19:26:20 +01:00
01b3226ecb
fix(gateway): block node.invoke exec approvals
2026-02-14 19:22:37 +01:00
4133f4bd37
refactor(tui): clarify searchable select list width layout ( #16378 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: fecbade822
2026-02-14 19:15:38 +01:00
f19eabee54
fix(slack): gate DM slash command authorization
2026-02-14 19:10:29 +01:00
7d4078c704
CLI: fix lazy maintenance command registration ( #16374 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 29d7cca674
2026-02-14 13:10:10 -05:00
5ba72bd9bf
fix: add discord exec approval channel targeting ( #16051 ) (thanks @leonnardo)
2026-02-14 12:05:53 -06:00
4b9cb46c6e
refactor(outbound): dedupe poll threading + tighten duration semantics
2026-02-14 19:03:46 +01:00
8852250192
fix(cli): stop agents command from being unrecognized ( #16267 ) ( #16293 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: d7288f57fa
2026-02-14 13:01:47 -05:00
f5a4a202e5
perf(test): speed up discord proxy test
2026-02-14 17:56:39 +00:00
240cdd3749
perf(test): speed up cron read ops test
2026-02-14 17:56:39 +00:00
d3483590fb
perf(test): stub readability in cf-markdown tests
2026-02-14 17:56:39 +00:00
7582e93a8e
perf(test): speed up raw-body reply test
2026-02-14 17:56:39 +00:00
7cc6add9b8
test(web): add SSRF guard cases
2026-02-14 18:53:23 +01:00
cb3290fca3
fix(node-host): enforce system.run rawCommand/argv consistency
2026-02-14 18:53:23 +01:00
71f357d949
bluebubbles: harden local media path handling against LFI ( #16322 )
...
* bluebubbles: harden local media path handling
* bluebubbles: remove racy post-open symlink lstat
* fix: bluebubbles mediaLocalRoots docs + typing fix (#16322 ) (thanks @mbelinky)
2026-02-14 17:43:44 +00:00
bfa7d21e99
fix(security): harden tlon Urbit requests against SSRF
2026-02-14 18:42:10 +01:00
5a313c83b7
fix(tui): use available terminal width for session name display ( #16109 ) ( #16238 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 19c18977e0
2026-02-14 18:39:05 +01:00
8e5689a84d
feat(telegram): add sendPoll support ( #16193 ) ( #16209 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: b58492cfed
2026-02-14 18:34:30 +01:00
fc5d147d1b
fix(test-harness): annotate vitest mocks to avoid TS2742
2026-02-14 18:26:46 +01:00
baa3bf270b
fix(webchat): filter NO_REPLY token from streaming and final replies ( #16286 )
...
The webchat channel sent NO_REPLY as visible text to clients instead
of suppressing it. Other channels (Telegram, Discord) already filter
this token via the reply dispatcher, but the webchat streaming path
bypassed this check.
Fixes #16269
2026-02-14 18:26:19 +01:00
09e2160080
test(browser): add file-chooser traversal regression
2026-02-14 18:20:20 +01:00
571c195c54
fix: support moltbot legacy state dir
2026-02-14 17:14:21 +00:00
dee3abfcd5
refactor(test): share browser control server harness
2026-02-14 17:13:24 +00:00
60898821f7
refactor(test): share telegram create bot harness
2026-02-14 17:13:24 +00:00
ae97f8f798
refactor(test): share doctor e2e harness
2026-02-14 17:13:24 +00:00
69ba9a0562
fix: add memory search health check to openclaw doctor (openclaw#16294) thanks @superlowburn
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test (noted unrelated local flakes)
Co-authored-by: superlowburn <24779772+superlowburn@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-02-14 11:09:51 -06:00
c16bc71279
fix: add discord routing debug logging ( #16202 ) (thanks @jayleekr)
2026-02-14 11:03:30 -06:00
d714ac7797
refactor(agents): dedupe transient error copy ( #16324 )
2026-02-14 17:49:25 +01:00
478af81706
Return user-facing message if API reuturn 429 API rate limit reached #2202 ( #10415 )
...
* Return user-facing message if API reuturn 429 API rate limit reached
* clarify the error message
* fix(agents): improve 429 user messaging (#10415 ) (thanks @vincenthsin)
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-02-14 17:40:02 +01:00
ff32f43459
Discord: prefer gateway guild id in verbose log
2026-02-14 10:39:36 -06:00
078642b308
fix(discord): defer component interactions to prevent timeout ( #16287 )
...
* fix(discord): defer component interactions to prevent timeout
Discord requires interaction responses within 3 seconds. Button clicks
were routed through the LLM pipeline before responding, exceeding this
window and showing 'This interaction failed' to users.
Now immediately defers the interaction, then processes the agent
response asynchronously.
Fixes #16262
* fix: harden deferred interaction replies and silent chat finals (#16287 ) (thanks @robbyczgw-cla)
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-02-14 17:38:01 +01:00
9236a27456
perf(test): speed up web logout tests
2026-02-14 16:36:15 +00:00
fe2d883cf7
perf(test): remove fs skill scanning from skill-commands tests
2026-02-14 16:36:15 +00:00
5349a0f7c2
perf(test): mock reserved commands in skill-commands tests
2026-02-14 16:36:15 +00:00
8ff2787981
perf(test): speed up skill-commands tests
2026-02-14 16:36:15 +00:00
94ff44f112
test: make telegram network config hermetic
2026-02-14 16:36:15 +00:00
ebcc6480c2
perf(cli): split skills formatting
2026-02-14 16:36:15 +00:00
f2c56de955
perf(test): speed up memory suites
2026-02-14 16:36:15 +00:00
a7142c6218
perf(test): cache hook installer fixtures
2026-02-14 16:36:15 +00:00
ee82c173ae
perf(test): reduce web logout fs churn
2026-02-14 16:36:15 +00:00
2b5e0a6075
perf(test): speed up memory batch + web logout
2026-02-14 16:36:15 +00:00
76e4e9d176
perf(test): reduce skills + update + memory suite overhead
2026-02-14 16:36:15 +00:00
684c18458a
perf(test): speed up line, models list, and memory batch
2026-02-14 16:36:15 +00:00
9fb48f4dff
refactor(scripts): make run-node main testable
2026-02-14 16:36:15 +00:00
Robby
Peter Steinberger
Shadow
Marcus Castro
青雲
Peter Steinberger
Gustavo Madeira Santana
Shadow
yinghaosang
Mariano
Steve
Vincent