74cb08bede
fix(plugins): accept media-understanding id hints
2026-03-23 02:08:49 +00:00
9aafff7378
fix: restore main gate after type updates
2026-03-22 19:08:08 -07:00
96d61aa50c
refactor: harden generated-file guards and provider ids
2026-03-22 19:08:08 -07:00
2fcd6507ec
perf(reply): narrow queue imports
2026-03-22 19:05:12 -07:00
3392558b42
perf(reply): split usage line helpers
2026-03-22 19:00:35 -07:00
562e4a1791
refactor(outbound): split delivery queue storage and recovery
2026-03-23 01:57:56 +00:00
5051a37de4
test: fix googlechat security typing drift
2026-03-22 18:57:44 -07:00
e5be5c1b99
style: format plugin sdk helper updates
2026-03-23 01:56:01 +00:00
5c8ea0a175
refactor: share channel setup status helpers
2026-03-23 01:56:01 +00:00
583bea001c
refactor: share parsed channel allowlist prompts
2026-03-23 01:56:01 +00:00
7d032ed38c
refactor: add provider onboarding preset appliers
2026-03-23 01:56:00 +00:00
956fe72b39
refactor: extract single-provider plugin entry helper
2026-03-23 01:56:00 +00:00
54213b587f
refactor: reuse shared cli runtime test mocks
2026-03-23 01:53:28 +00:00
2e6f2b0f07
test: centralize cli runtime capture helpers
2026-03-23 01:53:28 +00:00
a960cba2db
perf(reply): lazy-load context token lookup
2026-03-22 18:52:53 -07:00
7d8daa7173
perf(reply): lazy-load usage cost resolution
2026-03-22 18:48:42 -07:00
ee1001d0ae
test: slim outbound test import graphs
2026-03-22 18:47:35 -07:00
263d5ea687
perf(reply): lazy-load runner execution and memory
2026-03-22 18:44:17 -07:00
29f3b7f6eb
fix: harden image auth env lookups ( #52552 ) (thanks @vincentkoc)
2026-03-22 18:42:18 -07:00
654089320b
fix(image): deprecate legacy skill and clarify auth
2026-03-22 18:42:18 -07:00
b07312c55b
fix(delivery-queue): increment retryCount on deadline-deferred entries
...
Codex P1: entries deferred by the recovery time budget kept retryCount=0
forever, so they could loop across restarts without ever reaching MAX_RETRIES.
After breaking on deadline, call failDelivery() for all remaining entries
so retryCount is incremented. Entries stay in queue until MAX_RETRIES is
reached and they are pruned normally.
Also updates the maxRecoveryMs test to assert retryCount=1 on deferred entries.
2026-03-22 18:39:24 -07:00
329e539796
test(delivery-queue): align test assertion with 'next startup' log message
2026-03-22 18:39:24 -07:00
ca778b3f3c
fix(browser): add ChildProcessWithoutNullStreams cast for @types/node compat
...
The stdio tuple overload resolves differently across @types/node versions
(v20 vs v24/v25). Cast the spawn() result to ChildProcessWithoutNullStreams
to ensure proc.stderr?.on/off type-checks regardless of installed @types/node.
2026-03-22 18:39:24 -07:00
a05a251be0
fix(delivery-queue): align test assertion and JSDoc with 'next startup' log message
2026-03-22 18:39:24 -07:00
20f758d4cb
fix(delivery-queue): break immediately on deadline instead of failing all remaining entries
...
P1-C: After now >= deadline, the old code would iterate all remaining queue
entries and call failDelivery() on each — O(n) work that nullified the
maxRecoveryMs wall-clock cap on large queues.
Fix: break out of the recovery loop immediately when the deadline is exceeded.
Remaining entries are picked up on next startup unchanged (retryCount not
incremented). The deadline means 'stop here', not 'fail everything remaining'.
2026-03-22 18:39:24 -07:00
4e92807f10
fix(delivery-queue): increment retryCount on deferred entries when time budget exceeded
...
When delivery recovery ran out of the 60s time budget, remaining pending
entries were silently deferred to the next restart with no retryCount
increment. This caused them to loop forever across restarts, never hitting
MAX_RETRIES and never moving to failed/.
Fix: call failDelivery() on each remaining entry before breaking out of
the recovery loop (both the deadline check and the backoff-exceeds-deadline
check). This increments retryCount so that entries eventually exhaust
MAX_RETRIES and are permanently skipped.
Fixes #24353
2026-03-22 18:39:24 -07:00
5e64265537
fix(browser): prevent stdio buffer blocking in Docker environments
2026-03-22 18:39:24 -07:00
69217164f7
fix: add null guards to usage sort comparators
...
Prevents crash when totals is undefined in byModel/byProvider/byAgent
sort comparators. Fixes 'Cannot read properties of undefined (reading
totalTokens)' crash that causes context overflow in active sessions.
2026-03-22 18:39:24 -07:00
75835fc664
test: restore runtime-aware cli mocks
2026-03-22 18:35:37 -07:00
c43bfcbbec
refactor: split best-effort network display discovery
2026-03-22 18:35:37 -07:00
39752e7921
test: slim outbound context fixtures
2026-03-22 18:35:19 -07:00
2db10fb1d4
perf(reply): lazy-load embedded queue steering
2026-03-22 18:32:31 -07:00
d1404014d9
perf(reply): split runner auth profile seam
2026-03-22 18:29:09 -07:00
ecdf5d457a
test: fix latest main test regressions
2026-03-22 18:28:13 -07:00
645c9210b3
style(format): fix provider test formatting drift
2026-03-22 18:25:55 -07:00
0a329b2c9f
Revert "style(format): fix check drift in provider tests"
...
This reverts commit 2619f5fe55
2026-03-22 18:25:07 -07:00
2619f5fe55
style(format): fix check drift in provider tests
2026-03-22 18:24:40 -07:00
125e778fe6
perf(reply): split payload dedupe helpers
2026-03-22 18:22:56 -07:00
6fde263046
fix(ci): refresh bundled plugin metadata
2026-03-22 18:19:49 -07:00
a753ee064d
fix(agents): centralize moonshot compat and xai fast remaps
2026-03-22 18:17:02 -07:00
cbf9cd0acb
fix(ci): repair main checks
2026-03-22 18:13:14 -07:00
b5b193d5ca
fix(moonshot): refresh kimi k2 catalog
2026-03-22 18:00:51 -07:00
3dcc802fe5
refactor(media): move deepgram and groq providers into plugins
2026-03-22 17:57:31 -07:00
0f54ca20aa
refactor(image-generation): move provider builders into plugins
2026-03-22 17:57:31 -07:00
3fe96c7b9e
device-pair: align internal command checks
2026-03-22 17:56:33 -07:00
a61e5d17f0
deps: update fast-xml-parser and markdown-it ( #52541 )
...
* style: format test files
* deps: bump fast-xml-parser override
2026-03-22 17:55:47 -07:00
dc2013aae5
perf(reply): lazy-load followup context lookup
2026-03-22 17:55:14 -07:00
e3c7a05cb5
fix(cli): remove duplicate test runtime keys
2026-03-22 17:52:05 -07:00
de6bf58e79
refactor(tts): move speech providers into plugins
2026-03-22 17:48:59 -07:00
1d08ad4bac
refactor(tts): remove legacy core speech builders
2026-03-22 17:48:09 -07:00
100d9a7a23
refactor: share boundary open and gateway test helpers
2026-03-23 00:37:05 +00:00
976eefe373
test: align cli runtime mocks with output runtime
2026-03-22 17:32:20 -07:00
7bd12f4b37
test: fix rebased directory runtime mock ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
aaa6068c08
test: stabilize json runtime captures ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
a2999c6cfb
test: normalize rebase fallout ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
a5ace56a19
test: align rebased expectations and typecheck ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
38ee17145b
fix: restore rebase regression coverage ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
b00306a75b
test: fix post-rebase test drift ( #52428 )
2026-03-22 16:56:19 -07:00
797f3cc377
fix: stabilize stale buffer sweep landing ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
f76e653776
fix: guard stale chat buffer sweep ( #52428 ) (thanks @karanuppal)
2026-03-22 16:56:19 -07:00
550deb8c18
fix: sweep stale chatRunState buffers for stuck runs
...
emitChatFinal frees buffers on clean run completion, and the
maintenance timer sweeps abortedRuns after ABORTED_RUN_TTL_MS. But
runs that get stuck (e.g. LLM timeout without triggering clean
lifecycle end) are never aborted and their string buffers persist
indefinitely. This is the direct trigger for the StringAdd_CheckNone
OOM crash reported in the issue.
Add a stale buffer sweep in the maintenance timer that cleans up
buffers, deltaSentAt, and deltaLastBroadcastLen for any run not
updated within ABORTED_RUN_TTL_MS, regardless of abort status.
Closes #51821
2026-03-22 16:56:19 -07:00
165aeccd24
test: align memory cli json assertions
2026-03-22 23:46:54 +00:00
4e531d382b
fix(ci): restore cli runtime mocks and timeout exits
2026-03-22 23:43:58 +00:00
85f8437399
test: fix remaining tsgo issues after payload output refactor
2026-03-22 23:39:07 +00:00
ac8e81a5cd
refactor: compose account security warning helpers
2026-03-22 23:37:12 +00:00
39faf4725d
refactor: share warning collector projections
2026-03-22 23:37:12 +00:00
f0ab31366c
refactor: share async computed channel status adapters
2026-03-22 23:37:12 +00:00
72bfaf6ee2
refactor: share computed channel status adapters
2026-03-22 23:37:12 +00:00
023394bc0b
fix(plugin-sdk): keep testing barrel narrow
2026-03-22 23:30:59 +00:00
bca7787f92
style: fix rebased format drift
2026-03-22 23:26:21 +00:00
63130118ba
test: fix rebased gateway and binding baselines ( #52491 )
2026-03-22 23:22:48 +00:00
d73852ff21
fix: land plugin discovery missing-entry handling ( #52491 ) (thanks @hclsys)
2026-03-22 23:22:48 +00:00
4ee41cc6f3
refactor(cli): separate json payload output from logging
2026-03-22 23:19:17 +00:00
274af0486a
perf: trim more vitest thread pins
2026-03-22 16:18:26 -07:00
6245b4f3d8
test: import vi in gateway chat server test
2026-03-22 23:17:05 +00:00
4f11982ae6
fix: emit warn diagnostic for I/O errors, keep silent only for ENOENT
...
Address Codex P1 + Greptile P2: the previous commit collapsed both
"path" (ENOENT) and "io" (EACCES/EMFILE) into silent null returns.
Now:
- reason="path" (missing file): return null silently — not a security issue
- reason="io" (permission/disk): push warn diagnostic — surface anomaly
without aborting gateway
- reason="validation" (path escape): push error diagnostic — security violation
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: HCL <chenglunhu@gmail.com>
2026-03-22 16:13:54 -07:00
8701a224f8
fix(plugins): distinguish missing entry file from security violation
...
resolvePackageEntrySource() treats all openBoundaryFileSync failures
as path-escape security violations. When an extension entry file is
simply missing (ENOENT, reason="path"), the gateway emits "extension
entry escapes package directory" and aborts — crashing in a loop.
Root cause: src/plugins/discovery.ts:478 checks !opened.ok but never
inspects opened.reason. SafeOpenSyncResult already distinguishes
"path" (ENOENT) from "validation" (actual path escape).
Fix: only push the security diagnostic when opened.reason is
"validation". For "path" or "io" failures, return null to skip the
entry silently — a missing file is not a security violation.
Closes #52445
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: HCL <chenglunhu@gmail.com>
2026-03-22 16:13:54 -07:00
8c7d603f25
fix(gateway): keep status helpers resilient to netif failures
2026-03-22 16:09:43 -07:00
c0cbc7403b
test(env): normalize path expectations on windows
2026-03-22 16:08:49 -07:00
ec51ee1af5
test: harden gateway no-isolate coverage
2026-03-22 16:08:22 -07:00
1eba6f830c
test: remove stale plugin registry helper
2026-03-22 23:07:32 +00:00
d84b3f5d5d
test: fix conversation binding registry stub
2026-03-22 16:02:13 -07:00
f8ff2a4f38
test: fix gate after main drift
2026-03-22 23:00:02 +00:00
5c8e1275a0
feat(minimax): add missing pi catalog models
2026-03-22 15:55:20 -07:00
1ad47b8fa1
test: harden path resolution test helpers
2026-03-22 22:47:58 +00:00
5a8f77aa6a
refactor: adopt chat plugin builder in zalouser
2026-03-22 22:45:06 +00:00
81b498b2b6
fix(cli): keep JSON payloads on stdout when logs route to stderr
2026-03-22 15:43:48 -07:00
5bba1b45bc
fix(cli): bypass patched console.log for JSON payloads in --json mode
2026-03-22 15:43:48 -07:00
ebb4cc0128
fix(cli): route logs to stderr in --json mode to keep stdout clean
2026-03-22 15:43:48 -07:00
b93a045a96
docs(agents): update steering semantics
2026-03-22 15:40:56 -07:00
6e7855fdf5
feat(xai): support fast mode
2026-03-22 15:40:56 -07:00
9c0983618e
feat(models): sync pi provider catalogs
2026-03-22 15:40:56 -07:00
77cbbae81b
test: fix ci drift after main rebase
2026-03-22 22:38:27 +00:00
c3f1d43a10
test: align chrome launch args fixture with current browser profile type
2026-03-22 15:37:19 -07:00
72d775e069
fix: stop forcing an extra blank tab on browser launch
2026-03-22 15:37:19 -07:00
58c3f8673a
test: fix full gate after runtime lazy-load
2026-03-22 22:33:07 +00:00
6df6a691fc
perf: lazy-load plugin runtime heavy surfaces
2026-03-22 22:33:07 +00:00
d9de38e0f8
Reply: tighten media dedupe and OpenAI ratio claims
2026-03-22 15:26:45 -07:00
24b9baebab
fix: preserve runtime path env in secrets snapshots
2026-03-22 15:25:58 -07:00
47e8ffc2e9
test: repair current main gate regressions
2026-03-22 22:22:46 +00:00
24032dcc0e
Reply: fix generated image delivery to Discord ( #52489 )
2026-03-22 15:18:16 -07:00
6d34d62795
test: harden no-isolate gateway auth and pairing
2026-03-22 15:15:50 -07:00
91cd38f4d4
fix(test): repair main CI drift
2026-03-22 22:12:43 +00:00
030e950e5f
test: simplify ACP spawn scenarios
2026-03-22 15:11:22 -07:00
a81e671509
refactor: extract ACP spawn flow helpers
2026-03-22 15:11:22 -07:00
eca0809a6d
refactor: convert session manager cache to factory
2026-03-22 22:10:48 +00:00
8eadc2f43b
refactor: extract shared expiring cache
2026-03-22 22:10:48 +00:00
e06b8d3e62
fix: harden update channel switching
2026-03-22 15:09:38 -07:00
66743b84fa
refactor(whatsapp): centralize web monitor state
2026-03-22 22:07:41 +00:00
cfd9242e5d
perf: lazy-load memory runtime surfaces
2026-03-22 22:06:45 +00:00
e15f156f85
fix(test): reduce node hotspot startup cost
...
Scope: conversation-binding/targets startup trimming + schema help isolation guardrail
2026-03-22 15:05:00 -07:00
ee077804b0
refactor(gateway): separate ciao classification from logging
2026-03-22 15:02:43 -07:00
31ee442d3f
refactor(gateway): share interface discovery helpers
2026-03-22 15:02:43 -07:00
c0d4abc59e
fix(gateway): suppress ciao interface assertions
...
Closes #38628 .
Refs #47159 , #52431 .
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-03-22 15:02:43 -07:00
3faaf8984f
fix(gateway): guard interface discovery failures
...
Closes #44180 .
Refs #47590 .
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-03-22 15:02:43 -07:00
f7bc9818b5
feat(minimax): support fast mode and sync pi defaults
2026-03-22 14:54:30 -07:00
57267b23d5
fix(acp): restore inline delivery for run-mode spawns from main sessions ( #52426 )
...
* fix(acp): restore inline delivery for run-mode spawns from main sessions
* test: restore matrix ACP spawn coverage (#52426 ) (thanks @distractedCoding)
---------
Co-authored-by: Felix <distractedCoding@users.noreply.github.com>
Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-03-22 14:54:09 -07:00
ef3f64952a
fix: bound session manager cache growth ( #52427 ) (thanks @karanuppal)
2026-03-22 14:54:04 -07:00
30090e4895
fix: evict expired SESSION_MANAGER_CACHE entries on TTL miss
...
isSessionManagerCached() checks TTL before returning stale hits but
never deletes expired entries from the Map. They accumulate
indefinitely over the lifetime of a long-running gateway.
Delete the expired entry when the TTL check fails so the Map stays
bounded to active sessions.
Closes #51820
2026-03-22 14:54:04 -07:00
1e1372027e
perf: avoid cron startup store reload churn
2026-03-22 21:52:42 +00:00
f075e2eebd
perf: lazy-load hook install runtime helpers
2026-03-22 21:52:42 +00:00
5d379f92a3
perf: lazy-load plugin install runtime helpers
2026-03-22 21:52:42 +00:00
4235fb16d6
perf: split provider metadata from runtime loading
2026-03-22 21:52:42 +00:00
ae6f42484f
fix: restore cron and bundled plugin test metadata
2026-03-22 14:49:40 -07:00
11ca41f457
fix(test): repair cron and loader regressions
2026-03-22 14:39:17 -07:00
dcd5473283
refactor: adopt shared chat plugin builder
2026-03-22 21:37:32 +00:00
99462776d1
refactor: compose shared channel security adapters
2026-03-22 21:37:31 +00:00
87b2672126
refactor: centralize computed channel status adapters
2026-03-22 21:37:31 +00:00
2773f33084
test: stabilize vitest no-isolate suites
2026-03-22 14:28:43 -07:00
9267e694f7
perf: reduce cron persistence churn
2026-03-22 21:28:16 +00:00
46876edd86
perf: add lightweight memory status manager
2026-03-22 21:28:16 +00:00
ca99163b98
perf: precompute base config schema
2026-03-22 21:28:16 +00:00
593e333c10
perf: avoid plugin loader on provider fast paths
2026-03-22 21:28:16 +00:00
171b24c5c5
perf: generate bundled plugin metadata for cold startup
2026-03-22 21:28:16 +00:00
3ca7922dfe
refactor: split plugin command registration startup path
2026-03-22 21:28:16 +00:00
8745132f9c
fix(plugin-sdk): restore extension guardrails
2026-03-22 14:24:56 -07:00
2c05e07f68
test: reset leaked cron fake timers
2026-03-22 14:22:21 -07:00
2e246b47b9
docs: fix hook load order, command event payload, and session-memory confirmation
2026-03-22 21:09:36 +00:00
ff6e0bed5f
refactor: finish remaining status helper dedupe
2026-03-22 21:07:19 +00:00
26db578edc
perf(inbound): trim reply startup imports ( #52470 )
...
* perf(inbound): trim dispatch and command startup imports
* fix(reply): restore command alias canonicalization
* style(reply): format command context
* fix(reply): restore runtime shim exports
* test(reply): mock ACP route seam
* fix(reply): repair dispatch type seams
* perf(inbound): defer followup reply helpers
* refactor(tts): share auto mode normalization
* fix(reply): catch followup compaction notice failures
2026-03-22 14:04:00 -07:00
1efda3d041
test: improve live test progress feedback
2026-03-22 20:57:04 +00:00
2a1acec6a7
refactor: reuse account status helpers in bundled channels
2026-03-22 20:55:16 +00:00
87722d6327
refactor: extend shared account status snapshot helpers
2026-03-22 20:55:16 +00:00
00b2f10dec
refactor: share account snapshot descriptions
2026-03-22 20:55:16 +00:00
7a3346871e
test: fix no-isolate integration regressions
2026-03-22 20:41:03 +00:00
822c68a2d0
test: remove remaining account helper boilerplate
2026-03-22 20:34:09 +00:00
8eb881ef18
test: harden no-isolate mock and timer cleanup
2026-03-22 13:32:59 -07:00
fa13c2960e
refactor: share scoped account accessor adapters
2026-03-22 20:30:21 +00:00
8aca2fdc73
refactor: reuse shared core account lookups
2026-03-22 20:30:20 +00:00
5369ea53be
perf(inbound): trim dispatch and command startup imports ( #52374 )
...
* perf(inbound): trim dispatch and command startup imports
* fix(reply): restore command alias canonicalization
* style(reply): format command context
* fix(reply): restore runtime shim exports
* test(reply): mock ACP route seam
* fix(reply): repair dispatch type seams
2026-03-22 13:19:57 -07:00
e04d203bff
test: remove heartbeat runner jiti mock pollution
2026-03-22 13:10:55 -07:00
cf8891a824
fix: stabilize docker live test lanes
2026-03-22 20:07:27 +00:00
4bd90f24d1
perf(ci): gate install smoke on changed-smoke ( #52458 )
2026-03-22 12:58:08 -07:00
b369397b43
ACP: revert acpx-plugin package naming ( #52456 )
...
* ACP: revert acpx-plugin package naming
* Test: format acp install hints expectations
2026-03-22 20:55:48 +01:00
ff941b0193
refactor: share nested account config merges
2026-03-22 19:53:51 +00:00
0404c16217
test: harden media local roots path assertions
2026-03-22 19:47:11 +00:00
3c071a397f
refactor: share account id selection helpers
2026-03-22 19:45:59 +00:00
bddb6fca7b
refactor: share remaining account config helpers
2026-03-22 19:45:59 +00:00
59837b25bd
fix(doctor): scope discord off hint to legacy migration
2026-03-22 12:42:47 -07:00
5f723ecd7f
fix(doctor): explain discord streaming opt-in ( #52450 )
2026-03-22 12:37:03 -07:00
c26655d397
fix: stabilize plugin sdk api baselines
2026-03-22 19:32:29 +00:00
4240c64491
test: harden no-isolate oauth contract coverage
2026-03-22 12:31:36 -07:00
52b9d2091e
fix: ignore poisoned home env values
2026-03-22 12:31:36 -07:00
dbd26e49f1
fix(test): reduce startup-heavy hotspot retention ( #52381 )
2026-03-22 12:28:55 -07:00
e64dbb00b3
fix: prefer source plugin-sdk root alias in tests
2026-03-22 12:25:51 -07:00
f85cfc8b6c
fix(gateway): harden first-turn startup readiness ( #52387 )
...
* fix(gateway): harden first-turn startup readiness
* fix(gateway): scope startup model retry
2026-03-22 12:12:08 -07:00
aef2c60aa5
test: fix no-isolate canvas and timer regressions
2026-03-22 12:10:08 -07:00
1822db9227
test: harden no-isolate timer and undici seams
2026-03-22 12:04:11 -07:00
1b1167012f
test(cli): split plugin cli test coverage by surface
2026-03-22 12:02:53 -07:00
e3151af6bc
refactor(cli): extract hook pack update flow
2026-03-22 12:02:52 -07:00
5696e24c3f
refactor(cli): use typed clawhub fallback decisions
2026-03-22 12:02:52 -07:00
145e514bb5
refactor(cli): share plugin install persistence
2026-03-22 12:02:52 -07:00
5920ea838d
refactor(cli): extract plugin install and update commands
2026-03-22 12:02:52 -07:00
c74a50e4f1
refactor: share merged account config helper
2026-03-22 19:01:52 +00:00
d06413e335
refactor: share normalized account lookups
2026-03-22 19:01:52 +00:00
ff759f991e
refactor: share account config merge helper
2026-03-22 19:01:52 +00:00
8e09568bc7
perf: expand base vitest thread lanes
2026-03-22 11:59:38 -07:00
412a3eb1ac
build: bump version to 2026.3.22
2026-03-22 11:58:33 -07:00
c40488453e
test: remove thread-unsafe cwd mutations
2026-03-22 11:47:28 -07:00
7d1ab5baca
fix: restore CI type and baseline checks
2026-03-22 18:46:50 +00:00
b79560c7f0
ACP: fully rename acpx plugin ( #52404 )
...
* ACP: rename acpx plugin package
* ACP: fully rename acpx plugin
* ACP: remove old acpx paths
* Docs: add bundled plugin naming guardrails
* Docs: keep plugin naming guardrails internal
* ACP: keep acpx plugin id stable
* ACP: drop old acpx-plugin tree
2026-03-22 19:33:31 +01:00
59b5583e0a
test: merge registry-backed channel contract suites
2026-03-22 18:31:52 +00:00
04b283ffc2
fix: restore clawhub archive installs and gateway params
2026-03-22 18:31:52 +00:00
aa80b1eb7c
feat(cli): unify hook pack installs under plugins
2026-03-22 11:20:50 -07:00
8d9686bd0f
feat!: prefer clawhub plugin installs before npm
2026-03-22 18:17:45 +00:00
13c239039a
refactor: consolidate qmd mcporter state
2026-03-22 18:09:45 +00:00
23a6e0ccd3
refactor: share remaining runtime listener state
2026-03-22 18:09:45 +00:00
17739910e9
refactor: centralize channel plugin registry lookups
2026-03-22 18:09:45 +00:00
2c919078e1
refactor: share memory and discord singleton state
2026-03-22 18:09:45 +00:00
88d39b1542
refactor: simplify remaining runtime singletons
2026-03-22 18:09:45 +00:00
89d65521fe
refactor: dedupe extension runtime caches
2026-03-22 18:09:45 +00:00
f095bbd7b0
refactor: simplify plugin runtime singletons
2026-03-22 18:09:45 +00:00
9428b38452
refactor: consolidate core runtime state helpers
2026-03-22 18:09:45 +00:00
ca986d05aa
test: trim repeated archive install work
2026-03-22 18:05:44 +00:00
1ceaad18a6
test: harden vitest no-isolate coverage
2026-03-22 10:48:21 -07:00
405d808409
fix: restore repo-wide gate after exec safe-bin refactor
2026-03-22 17:28:04 +00:00
5863ce1f78
fix(media): narrow default local attachment roots
2026-03-22 10:24:47 -07:00
14074d3337
fix: restore repo-wide gate after upstream sync
2026-03-22 17:16:43 +00:00
0ac939059e
refactor(exec): split safe-bin semantics
2026-03-22 10:14:46 -07:00
6c2a3b74e3
fix(exec): harden jq safe-bin policy
2026-03-22 10:04:40 -07:00
91b2800241
feat: add native clawhub install flows
2026-03-22 17:03:49 +00:00
5cb2f45585
refactor(hooks): unify hook policy resolution
2026-03-22 09:59:51 -07:00
c96c319db3
refactor(plugin-sdk): share direct dm ingress helpers
2026-03-22 09:57:51 -07:00
42f23619e3
fix(hooks): harden workspace hook loading
2026-03-22 09:38:09 -07:00
1ee9611079
fix(nostr): enforce inbound dm policy before decrypt
2026-03-22 09:37:40 -07:00
a94ec3b79b
fix(security): harden exec approval boundaries
2026-03-22 09:35:25 -07:00
1d2dff0c4e
test: trim import-heavy startup paths
2026-03-22 16:34:09 +00:00
3fa2300ba1
perf: reduce plugin runtime startup overhead
2026-03-22 16:34:09 +00:00
4f1e12a2b1
Docs: prototype generated plugin SDK reference ( #51877 )
...
* Chore: unblock synced main checks
* Docs: add plugin SDK docs implementation plan
* Docs: scaffold plugin SDK reference phase 1
* Docs: mark plugin SDK reference surfaces unstable
* Docs: prototype generated plugin SDK reference
* docs(plugin-sdk): replace generated reference with api baseline
* docs(plugin-sdk): drop generated reference plan
* docs(plugin-sdk): align api baseline flow with config docs
---------
Co-authored-by: Onur <2453968+osolmaz@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-03-22 09:19:00 -07:00
3ce5a8366a
fix(plugins): enforce minimum host versions for installable plugins ( #52094 )
...
* fix(plugins): enforce min host versions
* fix(plugins): tighten min host version validation
* chore(plugins): trim dead min host version code
* fix(plugins): handle malformed min host metadata
* fix(plugins): key manifest cache by host version
2026-03-22 09:12:08 -07:00
6b7206ed35
perf(inbound): trim reply-run startup imports ( #52332 )
...
* perf(inbound): trim reply-run startup imports
* style(reply): format body runtime import
* test(reply): restore runtime seam mocks
2026-03-22 09:05:14 -07:00
05279539a8
docs(plugin-sdk): document public SDK surface
2026-03-22 08:50:48 -07:00
e1ff24903f
fix(gateway): follow up startup import reviews ( #52337 )
2026-03-22 08:48:53 -07:00
b9e71240ed
refactor(doctor): centralize channel capability metadata ( #52325 )
...
* refactor(doctor): centralize channel capabilities
* fix(doctor): preserve msteams sender warnings
2026-03-22 08:47:16 -07:00
d3a0a623a3
fix(gateway): trim startup plugin imports ( #52326 )
...
* fix(gateway): trim startup plugin imports
* fix(gateway): follow up startup import reviews
2026-03-22 08:43:54 -07:00
49091ebcbd
chore: update dependencies except carbon
2026-03-22 08:37:03 -07:00
4685fc7e77
fix(doctor): align matrix and zalouser allowlist semantics ( #52096 )
...
* fix(doctor): align extension allowlist semantics
* fix(doctor): skip generic zalouser group warning
2026-03-22 08:19:24 -07:00
a07dcfde84
fix: pass clientTools to runEmbeddedAttempt in /v1/responses agent path ( #52171 )
...
Merged via squash.
Prepared head SHA: 74519e7da6
2026-03-22 22:05:00 +08:00
ad24fccff5
test(gateway): stabilize suite session-store config ( #52193 )
...
* test(gateway): stabilize suite session-store config
* test(gateway): preserve seeded config semantics
* test(gateway): update seeded session store overrides
2026-03-22 19:18:44 +08:00
c70ae1c96e
fix(poll-params): treat zero-valued numeric poll params as unset ( #52150 )
...
Merged via squash.
Prepared head SHA: 189e695b7c
2026-03-22 18:39:31 +08:00
b70b7b0d94
test: trim more local test startup overhead
2026-03-22 09:35:36 +00:00
3382ef2724
perf: reduce plugin runtime startup overhead
2026-03-22 09:35:36 +00:00
aa6b962a3a
Discord/ACP: forward abort signals into ACP turns ( #52148 )
...
* Discord/ACP: forward abort signals into ACP turns
* ACP: abort queued turns before actor start
2026-03-22 10:04:32 +01:00
574cc9de64
test: trim more unit test startup overhead
2026-03-22 07:52:58 +00:00
3cd4978fc2
refactor(agents): unify tool media reply delivery
2026-03-22 00:49:56 -07:00
4becbc8b25
test: remove duplicate outbound plugin tests
2026-03-22 07:38:01 +00:00
b4656f193a
test: strengthen regression coverage and trim low-value checks
2026-03-22 07:38:01 +00:00
94ec0d6aeb
test: trim plugin-sdk import-heavy startup
2026-03-22 07:22:42 +00:00
b2f9ab9a1f
test: trim import-heavy startup paths
2026-03-22 05:59:46 +00:00
041f0b87ec
perf(inbound): trim cold startup import graph ( #52082 )
...
* perf(inbound): trim cold startup import graph
* chore(reply): drop redundant inline action type import
* fix(inbound): restore warning and maintenance seams
* fix(reply): restore type seam and secure forked transcripts
2026-03-21 22:32:21 -07:00
c96a12aeb9
Agents: add per-agent defaults and safe model fallback ( #51974 )
...
* Agents: add per-agent defaults and safe model fallback
* Docs: add per-agent thinking/reasoning/fast defaults to config reference and thinking docs
* Format get-reply directives
* Auto-reply: guard agent reasoning defaults
* Docs: update config baseline
2026-03-21 22:27:24 -07:00
f783101735
fix: accept session_status sessionKey=current alias ( #39574 )
...
* fix: normalize sessionKey=current in shared session resolution
Move the "current" alias handling from a narrow session_status-only
mapping into the shared session resolution layer so every session tool
(session_status, sessions_history, sessions_send) resolves it
consistently.
Changes:
- Register "current" as a canonical session key in looksLikeSessionKey
so it is never misclassified as a sessionId
- Normalize "current" to the requester's own session key inside
resolveSessionReference and resolveInternalSessionKey
- Add "current" normalization in session_status before local store
lookup via the existing "main" alias scoping
- Add regression tests covering both main-session and cross-agent
resolution paths
Fixes #39570
* fix: keep session_status current bound to requester
* fix: preserve literal current session targets
* fix: preserve literal current in session_status
* fix: defer current alias in session_status
* fix: scope session_status current to active store (#39574 ) (thanks @BryanTegomoh)
* fix: preserve literal current session previews (#39574 ) (thanks @BryanTegomoh)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-22 10:55:05 +05:30
e1854dfbf6
test: trim import-heavy startup paths
2026-03-22 05:03:10 +00:00
8727338372
perf: extract lightweight runtime seams
2026-03-22 05:03:10 +00:00
2b210703a3
fix(models): cache models.json readiness for embedded runs ( #52077 )
...
* fix(models): cache models.json readiness for embedded runs
* fix(models): harden readiness cache inputs
2026-03-21 21:58:10 -07:00
7a0dacbfba
refactor(doctor): extract note emission ( #52076 )
...
* refactor(doctor): extract note emission
* test(doctor): cover optional note emission paths
2026-03-21 21:52:14 -07:00
0f6dbb4390
Fix configure cache ownership for plugin resolvers ( #52018 )
...
* fix configure cache ownership
* address web-search cache review
* rekey provider wizard cache
* honor plugin cache opt-outs
* fix cache invalidation gaps
* align plugin snapshot ttl
* refresh snapshot cache keys
2026-03-21 23:41:45 -05:00
ec59974a46
refactor(doctor): extract flow finalization ( #52067 )
...
* refactor(doctor): extract flow finalization
* test(doctor): pin repair finalization to cfg
2026-03-21 21:27:51 -07:00
60f559e217
refactor(doctor): extract matrix sequencing ( #52056 )
2026-03-21 21:10:48 -07:00
7ac312b8fe
fix(agents): migrate remaining media artifacts
2026-03-21 21:05:33 -07:00
177136c964
perf(inbound): trim reply startup imports ( #51988 )
...
* perf(inbound): narrow reply startup imports
* perf(inbound): trim reply startup imports
* fix(perf): dedupe archive helpers
2026-03-21 20:49:41 -07:00
b2380b3ab1
refactor(doctor): extract repair sequencing ( #51980 )
...
* refactor(doctor): extract repair sequencing
* fix(doctor): sanitize repair runner notes
2026-03-21 20:43:16 -07:00
8e6a4c2d82
perf: narrow discord timeout import seam
2026-03-22 02:42:57 +00:00
d81772dbc7
test: trim import-heavy startup paths
2026-03-22 02:11:43 +00:00
2cc777539a
perf: reduce plugin and memory startup overhead
2026-03-22 02:11:43 +00:00
ab38f6471c
perf(inbound): narrow reply startup imports ( #51943 )
...
* perf(inbound): narrow reply startup imports
* fix(reply): restore activation parsing semantics
Cherry-picked review fixes for activation parsing semantics and native command surface cache invalidation.
* fix(reply): preserve case-insensitive command matching
Cherry-picked review fix to lowercase only the slash-command token in commands-context while preserving argument casing.
2026-03-21 18:18:41 -07:00
3775651480
refactor(doctor): extract preview warning collection ( #51942 )
...
* refactor(doctor): extract preview warning collection
* fix(doctor): sanitize preview empty allowlist warnings
* test(doctor): cover sanitized preview warnings
2026-03-21 18:11:28 -07:00
2b4c3c2057
fix(plugin-sdk): remove relative extension boundary escapes ( #51939 )
...
* fix(plugin-sdk): remove relative extension boundary escapes
* Gate new plugin-sdk subpaths on host version
* Add changelog entry for #51939
* Fix local staging for plugin-sdk host version gate
* Raise host floor for line and googlechat plugins
---------
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-21 20:03:18 -05:00
d0d82ea67b
test: trim import-heavy startup paths
2026-03-22 00:53:12 +00:00
8b7f40580d
perf: split telegram audit runtime seams
2026-03-22 00:53:12 +00:00
30ad059da8
refactor(test): dedupe setup wizard helpers
2026-03-22 00:16:31 +00:00
85722d4cf2
refactor(doctor): extract legacy and unknown-key steps ( #51938 )
2026-03-21 16:59:22 -07:00
865a90ccab
refactor(doctor): extract config mutation state helper ( #51935 )
2026-03-21 16:45:33 -07:00
91f404dc7e
refactor(doctor): continue doctor flow extraction ( #51920 )
...
* refactor(doctor): extract shared warning formatters
* refactor(doctor): extract provider warning previews
* style(doctor): sort telegram imports
2026-03-21 16:32:11 -07:00
37d5cbe43a
test: trim test startup overhead
2026-03-21 23:30:51 +00:00
cf4d301a69
perf: reduce memory startup overhead
2026-03-21 23:30:15 +00:00
80441baa15
perf(core): trim provider and inbound startup imports ( #51927 )
...
* fix(telegram): fail fast on stuck getUpdates
* perf(core): trim provider and inbound startup imports
2026-03-21 16:20:42 -07:00
9dea537bae
fix(cli): clean daemon install imports
2026-03-21 23:14:40 +00:00
29b165e456
refactor: centralize node startup tls planning
2026-03-21 15:58:42 -07:00
5b31b3400e
refactor(doctor): continue provider and shared extractions ( #51905 )
...
* refactor(doctor): extract empty allowlist scanning
* refactor(doctor): extract matrix provider helpers
* refactor(doctor): extract matrix repair orchestration
2026-03-21 15:57:08 -07:00
5024967e57
fix(core): trim inbound startup churn ( #51899 )
...
* perf(core): narrow sandbox status imports for error helpers
* fix(core): trim inbound startup churn
* fix(auth): expire cached external cli sync state
* test(auth): avoid mtime sleep race in cache test
2026-03-21 15:55:19 -07:00
d88c68fec1
perf(core): narrow sandbox status imports for error helpers ( #51897 )
...
* perf(core): narrow sandbox status imports for error helpers
* fix(build): add runtime boundaries for reply understanding
Add missing lazy-load runtime shim files required by get-reply.ts.
* fix(debug): remove duplicate spacing in ingress logs
Use logIngressStage suffix spacing consistently for media and link understanding debug lines.
2026-03-21 15:40:45 -07:00
d3731be2f0
fix(config): use discord runtime api defaults
2026-03-21 15:21:42 -07:00
5b3fce4c85
Outbound: preserve routed audioAsVoice delivery
2026-03-21 15:14:37 -07:00
21544f9e53
fix(doctor): harden follow-up repair paths ( #51888 )
...
* fix(doctor): harden follow-up repair paths
* fix(doctor): sanitize remaining warning paths
2026-03-21 15:11:01 -07:00
825d82b5c9
test(guardrails): use telegram public api in outbound targets
2026-03-21 15:08:43 -07:00
99641f01a5
perf(auth): reduce plugin auth cold-start heap ( #51891 )
...
* fix(test): recycle unit-fast ci batches
* refactor(config): narrow discord timeout import
* test(outbound): lighten target plugin stubs
* refactor(auth): narrow env api key resolution
* docs(auth): restore anthropic vertex sentinel comment
* refactor(auth): isolate console sanitizer
2026-03-21 15:07:08 -07:00
805aaa4ee8
fix(agents): avoid model catalog startup tax on telegram replies
2026-03-21 15:03:55 -07:00
5069c771e7
fix(test): recycle unit-fast CI batches ( #51884 )
...
* fix(test): recycle unit-fast ci batches
* refactor(config): narrow discord timeout import
* test(outbound): lighten target plugin stubs
* refactor(auth): narrow env api key resolution
* docs(auth): restore anthropic vertex sentinel comment
2026-03-21 14:56:29 -07:00
039ea5998e
refactor(doctor): continue extracting shared doctor helpers ( #51876 )
...
* refactor(doctor): extract exec safe-bin helpers
* refactor(doctor): extract legacy tools-by-sender helpers
* refactor(doctor): extract default account warnings
* refactor(doctor): reuse canonical config path helpers
2026-03-21 14:28:14 -07:00
c2634b5e40
Agents: raise default timeout to 48h ( #51874 )
2026-03-21 21:54:46 +01:00
4229ffe2b9
perf: reduce runtime and test startup overhead
2026-03-21 20:18:16 +00:00
80959219ce
fix(update): make up-to-date package status explicit ( #51409 )
...
Merged via squash.
Prepared head SHA: 75aba35882
2026-03-21 17:17:14 -03:00
bfcfc17a8b
refactor: tighten plugin sdk entry surface
2026-03-21 20:08:01 +00:00
c29ba9d21a
fix(docs): handle anchors in docs link audit
2026-03-21 19:58:36 +00:00
8cac327c19
ACP: recover hung bound turns ( #51816 )
...
* ACP: add hung-turn starvation repro
* ACP: recover hung bound turns
* ACP: preserve timed-out session handles
---------
Co-authored-by: Onur <2453968+osolmaz@users.noreply.github.com>
2026-03-21 20:54:30 +01:00
5c05347d11
fix(compaction): make compaction guard content-aware to prevent false cancellations in heartbeat sessions ( #42119 )
...
Merged via squash.
Prepared head SHA: 3429643315
2026-03-21 12:27:35 -07:00
ef7a5c3546
fix: use content hash for memory flush dedup instead of compactionCount ( #30115 ) ( #34222 )
...
Merged via squash.
Prepared head SHA: bce6f0bda0
2026-03-21 12:06:25 -07:00
fb50c98d67
fix(tts): add matrix to VOICE_BUBBLE_CHANNELS ( #37080 )
...
Merged via squash.
Prepared head SHA: 89ca0355d4
2026-03-21 11:29:53 -07:00
fd2b3ed6af
feat(memory): pluggable system prompt section for memory plugins ( #40126 )
...
Merged via squash.
Prepared head SHA: 5228d1937f
2026-03-21 11:20:45 -07:00
ebfc5f8240
fix: detect nvm services from installed command ( #51146 )
2026-03-21 11:06:31 -07:00
40f5305cd2
fix: handle Linux nvm CA env before startup ( #51146 ) (thanks @GodsBoy)
2026-03-21 11:06:31 -07:00
d6367c2c55
refactor: route Telegram runtime through plugin sdk ( #51772 )
2026-03-21 10:24:56 -07:00
c0e482f4bd
refactor: route iMessage runtime through plugin sdk ( #51770 )
2026-03-21 10:21:20 -07:00
6516cfa566
refactor: route Slack runtime through plugin sdk ( #51766 )
2026-03-21 10:11:17 -07:00
4e979ea6ca
refactor(doctor): extract provider and shared config helpers ( #51753 )
...
* refactor(doctor): add shared doctor types
* refactor(doctor): add shared allowlist helpers
* refactor(doctor): extract empty allowlist warnings
* refactor(doctor): extract telegram allowfrom scanning
* refactor(doctor): extract telegram allowfrom repair
* refactor(doctor): extract discord id repair
* refactor(doctor): add shared object helpers
* refactor(doctor): extract mutable allowlist scanning
* refactor(doctor): extract open-policy allowfrom repair
* refactor(doctor): extract allowlist policy repair
* fix(doctor): unblock discord provider refactor checks
* refactor(doctor): fix provider layering in shared warnings
2026-03-21 10:09:38 -07:00
e24bf22f98
Fix Discord `/codex_resume` picker expiration ( #51260 )
...
Merged via squash.
Prepared head SHA: 76eb184dbe
2026-03-21 12:59:21 -04:00
f4227e2787
fix(ci): remove duplicate embedding default export
2026-03-21 09:39:37 -07:00
e61835ec5e
fix(ci): restore embedding defaults and plugin boundaries
2026-03-21 09:32:14 -07:00
2fe0efc9e1
fix: compaction safeguard summary budget ( #27727 )
...
Merged via squash.
Prepared head SHA: a7ab64e394
2026-03-21 09:27:51 -07:00
15fd11032d
fix(status): skip cold-start status probes
2026-03-21 08:59:19 -07:00
a267c5d9ae
refactor(doctor): extract telegram provider warnings ( #51704 )
...
* refactor(doctor): extract telegram provider warnings
* docs(changelog): note doctor provider refactor
2026-03-21 08:57:06 -07:00
2ead75ea0e
fix(doctor): add telegram first-run guidance
2026-03-21 08:46:28 -07:00
7918308b1a
fix(doctor): suppress telegram fresh-install group warning
2026-03-21 08:46:28 -07:00
06b4efb1e7
fix(configure): drop duplicate wizard header
2026-03-21 08:41:57 -07:00
2e8c8a7ae6
refactor(openai): centralize provider defaults
2026-03-21 08:40:03 -07:00
4c4eea97e9
fix(configure): tighten fresh setup provider UX
2026-03-21 08:34:44 -07:00
ffce904a10
fix(check): format onboard search test
2026-03-21 08:33:15 -07:00
265386cd6b
feat(plugins): register claude bundle commands natively
2026-03-21 08:14:48 -07:00
2b68d20ab3
feat: notify user when context compaction starts and completes ( #38805 )
...
Merged via squash.
Prepared head SHA: 0f48c1bbf6
2026-03-21 08:14:29 -07:00
1169d51aee
fix(onboarding): clarify web search key copy
2026-03-21 08:13:39 -07:00
5eb99a9b50
Infra: unify plugin split runtime state ( #50725 )
...
Merged via squash.
Prepared head SHA: 570b7b9459
2026-03-21 11:00:21 -04:00
a3a5cad7d7
fix(onboarding): hide image-only auth providers
2026-03-21 07:42:42 -07:00
f10d054745
refactor: route discord runtime through plugin sdk ( #51444 )
2026-03-21 07:40:51 -07:00
11aff6ed72
fix(auth): support remote Codex OAuth manual input ( #51631 )
...
* fix(auth): support remote codex oauth manual input
* fix: support remote Codex OAuth manual input (#51631 ) (thanks @cash-echo-bot)
---------
Co-authored-by: Cash Williams <cashwilliams@gmail.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 19:40:54 +05:30
c9449d77b4
feat(gateway): persist webchat inbound images to disk ( #51324 )
...
* feat(gateway): persist webchat inbound images to disk
Images sent via the webchat control UI (chat.send RPC) were parsed into
content blocks but never written to disk, unlike WhatsApp and Telegram
handlers which call saveMediaBuffer(). This caused:
- Images lost after conversation compaction (only existed as ephemeral base64)
- Image editing/generation workflows failing for webchat-origin images
- Incomplete ~/.openclaw/media/inbound/ directory
After parseMessageWithAttachments extracts parsedImages, iterate and
persist each via saveMediaBuffer(buffer, mimeType, 'inbound'). Uses
fire-and-forget (.catch + warn log) so disk I/O never blocks the
chat.send response path.
Fixes #47930
* fix(gateway): address PR review comments on webchat image persistence
- Move saveMediaBuffer calls after sendPolicy/stop/dedupe checks so
rejected or retried requests don't write files to disk (Codex P1)
- Await all saves and collect SavedMedia results into persistedImages
so the persisted paths are available in scope (Greptile P1)
- Preserve Error stack trace in warn log instead of coercing to
toString() (Greptile P2)
- Switch to Promise.all for concurrent writes
* fix(gateway): address remaining review comments on webchat image persistence
- Revert to fire-and-forget pattern (no await) to eliminate race window
where retried requests miss the in-flight guard during image saves
- Remove unused SavedMedia import and persistedImages collection
- Use formatForLog for consistent error logging with stack traces
- Add NOTE comment about path propagation being a follow-up task
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
* fix(gateway): gate image persistence to webchat callers and defer base64 decode
* fix: drop unrelated format churn in lifecycle.test.ts
* gateway: clarify image persistence scope covers all chat.send callers
* fix(gateway): use generic chat.send log prefix for image persistence warnings
* fix(gateway): persist chat.send image refs in transcript
* fix(gateway): keep chat.send image refs off visible text
* fix(gateway): persist chat send media refs on dispatch
* fix(gateway): serialize chat send image persistence
* fix(gateway): persist chat send media after dispatch
* fix: persist chat.send inbound images across follow-ups (#51324 ) (thanks @fuller-stack-dev)
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 19:05:11 +05:30
7bf437402d
fix: trim config validation startup imports ( #51574 )
...
Merged via squash.
Prepared head SHA: 23b235e465
2026-03-21 09:31:39 -04:00
5137a51307
feat(github-copilot): resolve any model ID dynamically ( #51325 )
...
* feat(github-copilot): resolve any model ID dynamically instead of only known ones
* refactor(github-copilot): extract model resolution, add reasoning heuristic and tests
* fix(github-copilot): default synthetic models to text-only input
* ci: retrigger checks
* copilot: mark synthetic catch-all models as vision-capable
* fix(github-copilot): anchor reasoning regex, unexport internal constants, add mid-string test
* fix(github-copilot): default synthetic models to text-only input
* fix(github-copilot): restore image input for synthetic models with explanatory comment
* fix(github-copilot): normalize registry lookup casing, add bare o3 test case
* fix: preserve configured overrides for dynamic models
* fix: allow dynamic GitHub Copilot models (#51325 ) (thanks @fuller-stack-dev)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 17:37:50 +05:30
42e708d005
fix(agents): register simple completion transports
2026-03-21 17:22:31 +05:30
466debb75c
feat(telegram): auto-rename DM topics on first message ( #51502 )
...
* feat(telegram): auto-rename DM topics on first message
fix(telegram): use bot.api for topic rename to avoid SecretRef resolution
* fix(telegram): address security + test review feedback
- Fix test assertion: DEFAULT_PROMPT_SUBSTRING matches 'very short'
- Use RawBody instead of Body (no envelope metadata to LLM)
- Truncate user message to 500 chars for LLM prompt
- Remove user-derived content from verbose logs
- Remove redundant threadSpec.id null check
- Fix AutoTopicLabelParams type to match generateTopicLabel
* fix(telegram): use effective dm auto-topic config
* fix(telegram): detect direct auto-topic overrides
* fix: auto-rename Telegram DM topics on first message (#51502 ) (thanks @Lukavyi)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 16:53:30 +05:30
2fd372836e
iOS: improve QR pairing flow ( #51359 )
...
- improve QR pairing UX and bootstrap token handling
- preserve repeated optimistic user messages during refresh
- add regression coverage for refresh reconciliation
Thanks @ImLukeF
2026-03-21 01:10:29 -05:00
5bb5d7dab4
CLI: respect full timeout for loopback gateway probes ( #47533 )
...
* CLI: respect loopback gateway probe timeout
* CLI: name gateway probe budgets
* CLI: keep inactive loopback probes fast
* CLI: inline simple gateway probe caps
* Update helpers.ts
* Gateway: clamp probe timeout to timer-safe max
* fix: note loopback gateway probe timeout fix (#47533 ) (thanks @MonkeyLeeT)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 10:57:50 +05:30
d78e13f545
fix(agent): clarify embedded transport errors ( #51419 )
...
Merged via squash.
Prepared head SHA: cea32a4bda
2026-03-20 21:47:47 -07:00
6b4c24c2e5
feat(telegram): support custom apiRoot for alternative API endpoints ( #48842 )
...
* feat(telegram): support custom apiRoot for alternative API endpoints
Add `apiRoot` config option to allow users to specify custom Telegram Bot
API endpoints (e.g., self-hosted Bot API servers). Threads the configured
base URL through all Telegram API call sites: bot creation, send, probe,
audit, media download, and api-fetch. Extends SSRF policy to dynamically
trust custom apiRoot hostname for media downloads.
Closes #28535
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix(telegram): thread apiRoot through allowFrom lookups
* fix(telegram): honor lookup transport and local file paths
* refactor(telegram): unify username lookup plumbing
* fix(telegram): restore doctor lookup imports
* fix: document Telegram apiRoot support (#48842 ) (thanks @Cypherm)
---------
Co-authored-by: Cypherm <28184436+Cypherm@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 10:10:38 +05:30
598f1826d8
fix(subagent): include partial progress when subagent times out ( #40700 )
...
* fix(subagent): preserve timeout partial progress reporting
* refactor: unify subagent output selection
* test: cover distilled subagent timeout output
* fix: remove timeout-only subagent path
---------
Co-authored-by: Wesley <imwyvern@users.noreply.github.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-21 08:44:38 +05:30
5e417b44e1
Outbound: skip broadcast channel scan when channel is explicit
2026-03-20 18:21:01 -07:00
b71686ab44
Enhance web search provider config validation and compatibility handling
...
- Added a test to ensure no warnings for legacy Brave config when bundled web search allowlist compatibility is applied.
- Updated validation logic to incorporate compatibility configuration for bundled web search plugins.
- Refactored the ensureRegistry function to utilize the new compatibility handling.
2026-03-20 18:20:50 -07:00
e78129a4d9
feat(context-engine): pass incoming prompt to assemble ( #50848 )
...
Merged via squash.
Prepared head SHA: 282dc9264d
2026-03-20 17:03:21 -07:00
751d5b7849
feat: add context engine transcript maintenance ( #51191 )
...
Merged via squash.
Prepared head SHA: b42a3c28b4
2026-03-20 16:28:27 -07:00
6526074c85
test: trim singleton cold-start reloads
2026-03-20 23:14:28 +00:00
2364e45fe4
test: align extension runtime mocks with plugin-sdk ( #51289 )
...
* test: align extension runtime mocks with plugin-sdk
Update stale extension tests to mock the plugin-sdk runtime barrels that production code now imports, and harden the Signal tool-result harness around system-event assertions so the channels lane matches current extension boundaries.
Regeneration-Prompt: |
Verify the failing channels-lane tests against current origin/main in an isolated worktree before changing anything. If the failures reproduce on main, keep the fix test-only unless production behavior is clearly wrong. Recent extension refactors moved Telegram, WhatsApp, and Signal code onto plugin-sdk runtime barrels, so update stale tests that still mock old core module paths to intercept the seams production code now uses. For Signal reaction notifications, avoid brittle assertions that depend on shared queued system-event state when a direct harness spy on enqueue behavior is sufficient. Preserve scope: only touch the failing tests and their local harness, then rerun the reproduced targeted tests plus the full channels lane and repo check gate.
* test: fix extension test drift on main
* fix: lazy-load bundled web search plugin registry
* test: make matrix sweeper failure injection portable
* fix: split heavy matrix runtime-api seams
* fix: simplify bundled web search id lookup
* test: tolerate windows env key casing
2026-03-20 15:59:53 -07:00
e635cedb85
test(openai): cover bundle media surfaces
2026-03-20 15:53:12 -07:00
6e20c4baa0
feat: add anthropic-vertex provider for Claude via GCP Vertex AI ( #43356 )
...
Reuse pi-ai's Anthropic client injection seam for streaming, and add
the OpenClaw-side provider discovery, auth, model catalog, and tests
needed to expose anthropic-vertex cleanly.
Signed-off-by: sallyom <somalley@redhat.com>
2026-03-20 18:48:42 -04:00
c3972982b5
fix: sanitize malformed replay tool calls ( #50005 )
...
Merged via squash.
Prepared head SHA: 64ad5563f7
2026-03-20 15:03:30 -07:00
994b42a5a5
test: parallelize safe audit case tables
2026-03-20 21:16:01 +00:00
7abfff756d
Exec: harden host env override handling across gateway and node ( #51207 )
...
* Exec: harden host env override enforcement and fail closed
* Node host: enforce env override diagnostics before shell filtering
* Env overrides: align Windows key handling and mac node rejection
2026-03-20 15:44:15 -05:00
c7134e629c
LINE: harden Express webhook parsing to verified raw body ( #51202 )
...
* LINE: enforce signed-raw webhook parsing
* LINE: narrow scope and add buffer regression
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-20 15:32:55 -05:00
11d71ca352
pairing: keep setup codes bootstrap-token only ( #51259 )
2026-03-20 13:27:39 -07:00
5a5e84ca1d
test: drop duplicate web search helper
2026-03-20 20:25:24 +00:00
fa71ad7c5d
test: repair latest-main web search regressions
2026-03-20 20:17:11 +00:00
23fef04c4e
test: fix setup finalize web search mocks ( #51253 )
2026-03-20 13:07:22 -07:00
a20ba74978
test: add SSRF guard coverage for URL credential bypass vectors ( #50523 )
...
* security: add SSRF guard tests for URL credential bypass vectors
* test(security): strengthen SSRF redirect guard coverage
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
2026-03-20 12:45:06 -07:00
3da66718f4
Web: derive search provider metadata from plugin contracts ( #50935 )
...
Merged via squash.
Prepared head SHA: e1c7d72833
2026-03-20 12:41:04 -07:00
acf32287b4
test: trim more extension startup from unit tests
2026-03-20 19:28:32 +00:00
916f496b51
Add Grok 4.20 reasoning and non-reasoning to xAI model catalog ( #50772 )
...
Merged via squash.
Prepared head SHA: 095e645ea5
2026-03-20 15:28:30 -04:00
f6b3245a7b
fix: pass full sdk gate
2026-03-20 19:24:10 +00:00
62ddc9d9e0
refactor: consolidate plugin sdk surface
2026-03-20 19:24:10 +00:00
46854a84a4
test(plugin-sdk): cover legacy root diagnostic listeners
2026-03-20 12:23:02 -07:00
7b00a0620a
test: stabilize gateway alias coverage
2026-03-20 19:17:44 +00:00
39053bddd7
test: decouple zalo outbound payload contract from channel runtime
2026-03-20 19:02:07 +00:00
a7401366ef
test: trim more channel-heavy startup in unit tests
2026-03-20 18:50:52 +00:00
b26edfe1ff
test: trim plugin-heavy unit test imports
2026-03-20 18:35:39 +00:00
16e055c083
restore extension-api backward compatibility with migration warning
2026-03-20 13:27:30 -05:00
c64893a9c2
fix(config): use static channel metadata in docs baseline ( #51161 )
2026-03-20 10:52:40 -07:00
a2e1991ed3
refactor(plugin-sdk): route bundled runtime barrels through public subpaths
2026-03-20 10:38:55 -07:00
fb3550ef5e
test(sessions): stabilize pruning integration setup
2026-03-20 10:38:55 -07:00
a39c440d39
fix(config): share json compatibility parsing
2026-03-20 10:17:53 -07:00
93fbe26adb
fix(config): tighten json and json5 parsing paths ( #51153 )
2026-03-20 10:10:57 -07:00
87eeab7034
docs: add plugin SDK migration guide, link deprecation warning to docs
2026-03-20 10:05:06 -07:00
fcabecc9a4
fix: remove duplicate plugin sdk exports
2026-03-20 16:52:10 +00:00
18fa2992f9
fix: restore plugin sdk runtime barrels
2026-03-20 16:46:34 +00:00
cb89325cd8
fix: restore latest main gate
2026-03-20 16:46:34 +00:00
aa78a0c00e
refactor(plugin-sdk): formalize runtime contract barrels
2026-03-20 09:30:34 -07:00
9b6f286ac2
refactor(channels): share route format and binding helpers
2026-03-20 09:30:34 -07:00
faa9faa767
refactor(web-search): share provider clients and config helpers
2026-03-20 09:30:34 -07:00
d3ffa1e4e7
refactor(errors): share api error payload parsing
2026-03-20 09:30:33 -07:00
dbc9d3dd70
fix(plugin-sdk): restore root diagnostic compat
2026-03-20 09:27:37 -07:00
50ce9ac1c6
refactor: privatize bundled sdk facades
2026-03-20 15:56:14 +00:00
f6948ce405
refactor: shrink sdk helper surfaces
2026-03-20 15:43:14 +00:00
ba1bb8505f
refactor: install optional channels for directory
2026-03-20 15:37:56 +00:00
5607da90d5
feat: pass modelId to context engine assemble() ( #47437 )
...
Merged via squash.
Prepared head SHA: d708ddb222
2026-03-20 08:05:02 -07:00
c6968c39d6
feat(compaction): truncate session JSONL after compaction to prevent unbounded growth ( #41021 )
...
Merged via squash.
Prepared head SHA: fa50b63580
2026-03-20 07:15:09 -07:00
57f1cf66ad
fix(gateway): skip seq-gap broadcast for stale post-lifecycle events ( #43751 )
...
* fix: stop stale gateway seq-gap errors (#43751 ) (thanks @caesargattuso)
* fix: keep agent.request run ids session-scoped
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-03-20 14:56:54 +05:30
0fae764f10
test(plugins): use sync jiti regression path
2026-03-20 01:12:05 -07:00
95f890a8b2
test(plugins): relax jiti error string assertions
2026-03-20 01:07:29 -07:00
f0a0a6a5b4
test(plugins): isolate git path alias regression
2026-03-20 00:57:25 -07:00
68a274c7b3
fix(ci): isolate loader git-path regression env roots
2026-03-20 00:43:03 -07:00
d25f6f1833
fix(ci): restore full loader regression coverage
2026-03-20 00:38:11 -07:00
f1e012e0fc
fix(telegram): serialize thread binding persists
2026-03-20 00:30:11 -07:00
9f8af3604d
fix(ci): split slow plugin loader regression test
2026-03-20 00:28:04 -07:00
faa8e27291
fix(ci): share compat matrix and restore skill python gating
2026-03-20 00:27:50 -07:00
dfc157e1a2
test(plugins): trim loader regression harness churn
2026-03-20 00:06:12 -07:00
3a72d2d6de
fix(config): split config doc baseline coverage
2026-03-20 00:06:12 -07:00
e56dde815e
fix(web-search): split runtime provider resolution
2026-03-20 00:06:12 -07:00
397b0d85f5
fix(tui): split assistant error formatting seam
2026-03-20 00:06:12 -07:00
a562fb5550
refactor(web-search): share scoped provider config plumbing
2026-03-19 23:52:53 -07:00
96f21c37b4
fix(tools): persist remaining doctor compatibility aliases
2026-03-19 23:42:53 -07:00
6c7526f8a0
fix(web-search): share unsupported filter handling
2026-03-19 23:41:02 -07:00
9af42c6590
fix(config): persist doctor compatibility migrations
2026-03-19 23:28:11 -07:00
5036ed2699
fix(secrets): cover tavily in runtime coverage tests
2026-03-20 06:13:27 +00:00
2afd65741c
fix: preserve talk provider and speaking state
2026-03-20 11:08:21 +05:30
47e412bd0b
fix(review): preserve talk directive overrides
2026-03-20 11:01:24 +05:30
4a0341ed03
fix(review): address talk cleanup feedback
2026-03-20 11:01:24 +05:30
4ac355babb
feat(gateway): add talk speak rpc
2026-03-20 11:01:24 +05:30
84ee6fbb76
feat(tts): add in-memory speech synthesis
2026-03-20 11:01:24 +05:30
b36e456b09
feat: add Tavily as a bundled web search plugin with search and extract tools ( #49200 )
...
Merged via squash.
Prepared head SHA: ece9226e88
2026-03-20 01:06:26 -04:00
03c86b3dee
fix(secrets): mock bundled web search providers in runtime tests
2026-03-20 03:48:13 +00:00
218f8d74b6
fix(secrets): use bundled web search fast path during reload
2026-03-20 03:28:08 +00:00
2d24f35016
fix(plugins): add bundled web search provider metadata
2026-03-20 03:28:08 +00:00
f62be0ddcf
Matrix: guard private-network homeserver access
2026-03-19 23:24:50 -04:00
ab97cc3f11
Matrix: add allowBots bot-to-bot policy
2026-03-19 23:24:50 -04:00
de9f2dc227
Gateway: harden OpenResponses file-context escaping ( #50782 )
2026-03-19 22:02:13 -05:00
4f00b3b534
feat(xiaomi): add MiMo V2 Pro and MiMo V2 Omni models, switch to OpenAI completions API ( #49214 )
...
Merged via squash.
Prepared head SHA: 6b672f36cf
2026-03-19 19:26:47 -07:00
65594f972c
Gateway: unify plugin interactive callback state ( #50722 )
...
Merged via squash.
Prepared head SHA: 7a2740b18a
2026-03-19 22:09:38 -04:00
a19f058145
fix(test): mock zalouser runtime in outbound payload contract
2026-03-20 01:45:20 +00:00
55e12bd236
fix(plugins): stabilize bundle MCP path assertions
2026-03-20 01:11:58 +00:00
c95d1c101b
fix(cron): avoid async context token warmup in isolated runs
2026-03-20 01:11:58 +00:00
6309b1da6c
Gateway: preserve interactive pairing visibility on supersede
2026-03-19 19:57:45 -05:00
d518260bb8
fix(status): slim json startup path
2026-03-19 16:55:13 -07:00
41628770f5
Tests: trim command secret gateway imports ( #50663 )
...
Merged via squash.
Prepared head SHA: 7f64fd3ee1
2026-03-19 19:53:02 -04:00
Peter Steinberger
Vincent Koc
Stephen Schoettler
Josh Lehman
Karan Uppal
HCL
Codex
Charles Dusek
Roger Deng
scoootscooob
scoootscooob
Felix
Jacob Tomlinson
Onur Solmaz
Bob
CharZhou
Luke
Bartok9
Bryan Tegomoh, MD, MPH
Tak Hoffman
Gustavo Madeira Santana
Zhenye Dong
samzong
Menglin Li
Matthew19990919
Jari Mustonen
Harold Hunt
Pandadadadazxf
zidongdesign
Echo
fuller-stack-dev
RichardCao
Ayaan Zaidi
Taras Lukavyi
Val Alexander
Ted Li
Cypherm
wesley
Tyler Yust
Danh Doan
Sally O'Malley
Josh Avant
Teddy Tennant
Jaaneek
John Scianna
Thirumalesh
caesargattuso
Shakker
Lakshya Agarwal
Jinhao Dong