Ayuriel/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,096 Commits 756 Branches 79 Tags
Commit Graph

18096 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Marc J Saint-jour
3f97d71891 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:27 -04:00
Marc J Saint-jour
731a7d82d0 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:26 -04:00
Marc J Saint-jour
16546b2c79 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:25 -04:00
Marc J Saint-jour
c1347ca2ac feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:24 -04:00
Marc J Saint-jour
baa142fd51 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:23 -04:00
Marc J Saint-jour
7ac23cd186 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:22 -04:00
Marc J Saint-jour
3612141d03 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:21 -04:00
Marc J Saint-jour
2c4dfd61d4 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:21 -04:00
Marc J Saint-jour
70ec16cfce feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:20 -04:00
Marc J Saint-jour
8c63f3e0b7 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:19 -04:00
Marc J Saint-jour
985ed3a966 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:18 -04:00
Marc J Saint-jour
cbd861bc26 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:17 -04:00
Marc J Saint-jour
1bc443aaa1 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:16 -04:00
Marc J Saint-jour
c8fb1012de feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:15 -04:00
Marc J Saint-jour
c92158731e feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:14 -04:00
Marc J Saint-jour
5271cf5c05 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:13 -04:00
Marc J Saint-jour
ad2bfb498f feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:13 -04:00
Marc J Saint-jour
0058b44186 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:12 -04:00
Marc J Saint-jour
f59b864178 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:11 -04:00
Marc J Saint-jour
c63286f0e0 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:10 -04:00
Marc J Saint-jour
a0bd7d9375 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:09 -04:00
Marc J Saint-jour
0a8b5ba43c feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:08 -04:00
Marc J Saint-jour
c889cdfe5b feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:07 -04:00
Marc J Saint-jour
93f09f7d02 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:06 -04:00
Marc J Saint-jour
0a161b96fe feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:05 -04:00
Marc J Saint-jour
a55c5e7c7a feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:04 -04:00
Marc J Saint-jour
f57862831f feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:03 -04:00
Marc J Saint-jour
020947d29c feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:02 -04:00
Marc J Saint-jour
99bd165459 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:01 -04:00
Marc J Saint-jour
715e0e6fa8 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:41:00 -04:00
Marc J Saint-jour
0f03c4d256 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:40:59 -04:00
Marc J Saint-jour
a5e9461b26 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:40:58 -04:00
Marc J Saint-jour
497693419d feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:40:57 -04:00
Marc J Saint-jour
1f1c6fd029 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:40:57 -04:00
Marc J Saint-jour
1f52b3c543 feat: integrate Cortex local memory into OpenClaw 2026-03-12 18:40:56 -04:00
David Rudduck
f01c41b27a
fix(context-engine): guard compact() throw + fire hooks for ownsCompaction engines (#41361) 
Merged via squash.

Prepared head SHA: 0957b32dc63b16d710403565953b77bfbd2bd987
Co-authored-by: davidrudduck <47308254+davidrudduck@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
 2026-03-11 20:19:20 -07:00
Frank Yang
5231277163
fix(acp): rehydrate restarted main ACP sessions (#43285) 
Merged via squash.

Prepared head SHA: f06318e58fe3e3fedd70426ca7eeecf6d71bb604
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn
 2026-03-12 11:05:09 +08:00
Peter Steinberger
5ca780fa78
feat: expose runtime version in gateway status 2026-03-12 02:55:31 +00:00
Robin Waslander
e95f2dcd6e
fix(sandbox): anchor fs-bridge writeFile commit to canonical parent path 
Refs: GHSA-xvx8-77m6-gwg6
 2026-03-12 03:52:24 +01:00
Peter Steinberger
43a10677ed
fix: isolate plugin discovery env from global state 2026-03-12 02:46:29 +00:00
Peter Steinberger
17fd46ab66
test: fix websocket tool shape coverage 2026-03-12 02:16:56 +00:00
Robin Waslander
487a3ba8ce
fix(discord): enforce users/roles allowlist in reaction ingress 
References GHSA-9vvh-2768-c8vp.
 2026-03-12 03:13:46 +01:00
Peter Steinberger
980619b9be
fix: harden openai websocket replay 2026-03-12 02:13:06 +00:00
Peter Steinberger
607c158a75
test(cli): update daemon coverage restart contract 2026-03-12 01:43:27 +00:00
Peter Steinberger
b31836317a
fix(cli): handle scheduled gateway restarts consistently 2026-03-12 01:38:39 +00:00
Robin Waslander
841ee24340
fix(daemon): address clanker review findings for kickstart restart 
Bug 1 (high): replace fixed sleep 1 with caller-PID polling in both
kickstart and start-after-exit handoff modes. The helper now waits until
kill -0 $caller_pid fails before issuing launchctl kickstart -k.

Bug 2 (medium): gate enable+bootstrap fallback on isLaunchctlNotLoaded().
Only attempt re-registration when kickstart -k fails because the job is
absent; all other kickstart failures now re-throw the original error.

Follows up on 3c0fd3dffe.
Fixes #43311, #43406, #43035, #43049
 2026-03-12 02:16:24 +01:00
Robin Waslander
b7a37c2023
fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval 
tsx, jiti, ts-node, ts-node-esm, vite-node, and esno were not recognized
as interpreter-style script runners in invoke-system-run-plan.ts. These
runners produced mutableFileOperand: null, causing invoke-system-run.ts
to skip revalidation entirely. A mutated script payload would execute
without the approval binding check that node ./run.js already enforced.

Two-part fix:
- Add tsx, jiti, and related TypeScript/ESM loaders to the known script
  runner set so they produce a valid mutableFileOperand from the planner
- Add a fail-closed runtime guard in invoke-system-run.ts that denies
  execution when a script run should have a mutable-file binding but the
  approval plan is missing it, preventing unknown future runners from
  silently bypassing revalidation

Fixes GHSA-qc36-x95h-7j53
 2026-03-12 01:34:35 +01:00
Luke
a5ceb62d44
fix(whatsapp): trim leading whitespace in direct outbound sends (#43539) 
Trim leading whitespace from direct WhatsApp text and media caption sends.

Also guard empty text-only web sends after trimming.
 2026-03-12 11:32:04 +11:00
Peter Steinberger
7e3787517f fix: harden state dir permissions during onboard 2026-03-12 00:26:36 +00:00
Robin Waslander
ebed3bbde1
fix(gateway): enforce browser origin check regardless of proxy headers 
In trusted-proxy mode, enforceOriginCheckForAnyClient was set to false
whenever proxy headers were present. This allowed browser-originated
WebSocket connections from untrusted origins to bypass origin validation
entirely, as the check only ran for control-ui and webchat client types.

An attacker serving a page from an untrusted origin could connect through
a trusted reverse proxy, inherit proxy-injected identity, and obtain
operator.admin access via the sharedAuthOk / roleCanSkipDeviceIdentity
path without any origin restriction.

Remove the hasProxyHeaders exemption so origin validation runs for all
browser-originated connections regardless of how the request arrived.

Fixes GHSA-5wcw-8jjv-m286
 2026-03-12 01:16:52 +01:00