Peter Steinberger
0d607942d5
fix(cron): restore owner-only tools for isolated runs
2026-03-09 10:58:03 -07:00
Peter Steinberger
cc919d3856
fix(browser): enforce redirect-hop SSRF checks
2026-03-09 10:58:03 -07:00
DevMac
648213653d
test(secrets): skip ACL-dependent runtime snapshot tests on windows
2026-03-09 10:58:03 -07:00
Daniel dos Santos Reis
cec7006abb
fix(gateway): exit non-zero on restart shutdown timeout
...
When a config-change restart hits the force-exit timeout, exit with
code 1 instead of 0 so launchd/systemd treats it as a failure and
triggers a clean process restart. Stop-timeout stays at exit(0)
since graceful stops should not cause supervisor recovery.
Closes #36822
2026-03-09 10:58:03 -07:00
scoootscooob
2d8c8e7f26
fix(daemon): also enable LaunchAgent in repairLaunchAgentBootstrap
...
The repair/recovery path had the same missing `enable` guard as
`restartLaunchAgent`. If launchd persists a "disabled" state after a
previous `bootout`, the `bootstrap` call in `repairLaunchAgentBootstrap`
fails silently, leaving the gateway unloaded in the recovery flow.
Add the same `enable` guard before `bootstrap` that was already applied
to `installLaunchAgent` and (in this PR) `restartLaunchAgent`.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-09 10:58:03 -07:00
scoootscooob
e2c8c27c8c
fix(daemon): enable LaunchAgent before bootstrap on restart
...
restartLaunchAgent was missing the launchctl enable call that
installLaunchAgent already performs. launchd can persist a "disabled"
state after bootout, causing bootstrap to silently fail and leaving the
gateway unloaded until a manual reinstall.
Fixes #39211
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-09 10:58:03 -07:00
Peter Steinberger
dad107630e
test: fix windows secrets runtime ci
2026-03-09 10:58:03 -07:00
GazeKingNuWu
0d597ab800
fix: clear plugin discovery cache after plugin installation (openclaw#39752)
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: GazeKingNuWu <264914544+GazeKingNuWu@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-09 10:58:03 -07:00
Ayaan Zaidi
03bc43a503
Fix cron text announce delivery for Telegram targets ( #40575 )
...
Merged via squash.
Prepared head SHA: 54b1513c78613bddd8cae16ab2d617788a0dacb6
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Reviewed-by: @obviyus
2026-03-09 10:58:03 -07:00
Ayaan Zaidi
27d2ac8460
fix: dedupe inbound Telegram DM replies per agent ( #40519 )
...
Merged via squash.
Prepared head SHA: 6e235e7d1f7a00ef43455a9240b62e24dbc4ef94
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Reviewed-by: @obviyus
2026-03-09 10:58:03 -07:00
Peter Steinberger
a7e5c7c18b
fix(media): accept reader read result type
2026-03-09 10:58:03 -07:00
Peter Steinberger
def4b221d9
fix(agents): re-expose configured tools under restrictive profiles
2026-03-09 10:58:03 -07:00
Kyle
84064d08d3
fix(plugin-sdk): remove remaining bundled plugin src imports (openclaw#39638)
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: Kyle <3477429+kyledh@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-09 10:58:03 -07:00
Kesku
022923be15
alphabetize web search providers ( #40259 )
...
Merged via squash.
Prepared head SHA: be6350e5ae1c0610f813483dca0a5c98813a7f8e
Co-authored-by: kesku <62210496+kesku@users.noreply.github.com>
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Reviewed-by: @obviyus
2026-03-09 10:58:03 -07:00
Mariano
a95cce9f2f
ACP: add optional ingress provenance receipts ( #40473 )
...
Merged via squash.
Prepared head SHA: b63e46dd94479de611dab68868340aa18bdaff2f
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com>
Reviewed-by: @mbelinky
2026-03-09 10:58:03 -07:00
Tyson Cung
81bd382e6c
fix(telegram): add download timeout to prevent polling loop hang ( #40098 )
...
Merged via squash.
Prepared head SHA: abdfa1a35f41615aaa52e06b5ba9581eeb8f8a6a
Co-authored-by: tysoncung <45380903+tysoncung@users.noreply.github.com>
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Reviewed-by: @obviyus
2026-03-09 10:58:03 -07:00
yuweuii
5b28093b01
fix(models): use 1M context for openai-codex gpt-5.4 ( #37876 )
...
Merged via squash.
Prepared head SHA: c41020779ee4f5a77cab932b5fcfb973d3e6a53d
Co-authored-by: yuweuii <82372187+yuweuii@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-03-09 10:58:03 -07:00
Vincent Koc
3fe81fdb96
fix(tests): correct security check failure
2026-03-09 10:58:03 -07:00
Vincent Koc
ccd6043240
Docker: improve build cache reuse ( #40351 )
...
* Docker: improve build cache reuse
* Tests: cover Docker build cache layout
* Docker: fix sandbox cache mount continuations
* Docker: document qr-import manifest scope
* Docker: narrow e2e install inputs
* CI: cache Docker builds in workflows
* CI: route sandbox smoke through setup script
* CI: keep sandbox smoke on script path
2026-03-09 10:58:03 -07:00
Radek Sienkiewicz
f3d6a3018a
gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots ( #40385 )
...
Merged via squash.
Prepared head SHA: 567b3ed68434220bb319a940fa1b834a2f520ff5
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Co-authored-by: velvet-shark <126378+velvet-shark@users.noreply.github.com>
Reviewed-by: @velvet-shark
2026-03-09 10:58:02 -07:00
Peter Steinberger
65623e1559
refactor(models): split provider discovery helpers
2026-03-09 10:58:02 -07:00
Peter Steinberger
b0973880b4
refactor(models): split models.json planning from writes
2026-03-09 10:58:02 -07:00
Peter Steinberger
98aa2a8cf0
refactor(agents): extract provider model normalization
2026-03-09 10:58:02 -07:00
Peter Steinberger
f7eccaee4a
refactor(models): extract list row builders
2026-03-09 10:58:02 -07:00
Peter Steinberger
4b694d565d
refactor: harden browser runtime profile handling
2026-03-09 10:58:02 -07:00
bbblending
7875fb6c27
fix(config): refresh runtime snapshot from disk after write. Fixes #37175 ( #37313 )
...
Merged via squash.
Prepared head SHA: 69e1861abf97d20c787a790d37e68c9e3ae2cb1d
Co-authored-by: bbblending <122739024+bbblending@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-03-09 10:58:02 -07:00
Peter Steinberger
43451ebab7
refactor: harden browser relay CDP flows
2026-03-09 10:58:02 -07:00
Vincent Koc
017b389549
telegram: align sent hooks with command session
2026-03-09 09:36:00 -07:00
Vincent Koc
0504fb35fe
Merge branch 'main' into vincentkoc-code/telegram-message-sent-parity
2026-03-08 16:40:02 -07:00
Peter Steinberger
661af2acd3
fix(agents): bootstrap runtime plugins before context-engine resolution
2026-03-08 23:38:38 +00:00
Peter Steinberger
936ac22ec2
refactor: share channel config adapter base
2026-03-08 23:38:24 +00:00
Peter Steinberger
bf601db3fc
test: dedupe brave llm-context rejection cases
2026-03-08 23:38:24 +00:00
Peter Steinberger
5845b5bfba
refactor: share multi-account config schema fragments
2026-03-08 23:38:24 +00:00
Peter Steinberger
52a253f18c
refactor: reuse broadcast route key construction
2026-03-08 23:38:24 +00:00
Peter Steinberger
3f2f007c9a
refactor: extract gateway port diagnostics helper
2026-03-08 23:38:24 +00:00
Peter Steinberger
32a6eae576
refactor: share gateway argv parsing
2026-03-08 23:38:24 +00:00
Peter Steinberger
8d7778d1d6
refactor: dedupe plugin runtime stores
2026-03-08 23:38:24 +00:00
0xsline
024857050a
fix: normalize openai-codex gpt-5.4 transport overrides
2026-03-08 23:35:21 +00:00
Doruk Ardahan
3da8882a02
test(models): refresh list assertions after main sync
2026-03-08 23:30:58 +00:00
Doruk Ardahan
b2b99f0325
fix(models): keep --all aligned with synthetic catalog rows
2026-03-08 23:30:58 +00:00
Vincent Koc
a3dc4b5a57
fix(tui): improve color contrast for light-background terminals ( #40345 )
...
* fix(tui): improve colour contrast for light-background terminals (#38636 )
Detect light terminal backgrounds via COLORFGBG and apply a WCAG
AA-compliant light palette. Adds OPENCLAW_THEME=light|dark env var
override for terminals without auto-detection.
Uses proper sRGB linearisation and WCAG 2.1 contrast ratios to pick
whichever text palette (dark or light) has higher contrast against
the detected background colour.
Co-authored-by: ademczuk <ademczuk@users.noreply.github.com>
* Update CHANGELOG.md
---------
Co-authored-by: ademczuk <andrew.demczuk@gmail.com>
Co-authored-by: ademczuk <ademczuk@users.noreply.github.com>
2026-03-08 16:17:28 -07:00
Vincent Koc
3f3f66a5f7
Docker: trim runtime image payload ( #40307 )
...
* Docker: shrink runtime image payload
* Docker: add runtime pnpm opt-in
* Docker: collapse helper entrypoint chmod layers
* Docker: restore bundled pnpm runtime
* Update CHANGELOG.md
2026-03-08 16:07:04 -07:00
Mariano
e806c479f5
Gateway/iOS: replay queued foreground actions safely after resume ( #40281 )
...
Merged via squash.
- Local validation: `pnpm exec vitest run --config vitest.gateway.config.ts src/gateway/server-methods/nodes.invoke-wake.test.ts`
- Local validation: `pnpm build`
- mb-server validation: `pnpm exec vitest run --config vitest.gateway.config.ts src/gateway/server-methods/nodes.invoke-wake.test.ts`
- mb-server validation: `pnpm build`
- mb-server validation: `pnpm protocol:check`
2026-03-08 22:46:54 +01:00
Tyler Yust
38543d8196
fix(cron): consolidate announce delivery, fire-and-forget trigger, and minimal prompt mode ( #40204 )
...
* fix(cron): consolidate announce delivery and detach manual runs
* fix: queue detached cron runs (#40204 )
2026-03-08 14:46:33 -07:00
Gustavo Madeira Santana
5889a2e98e
fix(plugin-sdk): lazily load legacy root alias
2026-03-08 17:13:46 -04:00
Gustavo Madeira Santana
09acbe6528
fix: harden backup verify path validation
2026-03-08 16:53:44 -04:00
Nimrod Gutman
dadd7f99cd
fix(ci): scope secrets scan to branch changes
2026-03-08 22:21:49 +02:00
shichangs
0ecfd37b44
feat: add local backup CLI ( #40163 )
...
Merged via squash.
Prepared head SHA: ed46625ae20c71e5f46d51aa801cefe4ef1c92e3
Co-authored-by: shichangs <46870204+shichangs@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-03-08 16:21:20 -04:00
Peter Steinberger
a075baba84
refactor(browser): scope CDP sessions and harden stale target recovery
2026-03-08 19:52:33 +00:00
Peter Steinberger
d3111fbbcb
fix: make browser relay bind address configurable ( #39364 ) (thanks @mvanhorn)
2026-03-08 19:15:21 +00:00