Peter Steinberger
ec998d1e95
fix: clean current dependency checks
2026-05-13 15:00:07 +01:00
Peter Steinberger
27e5d49fe5
build(whatsapp): keep audio deps external
2026-05-13 11:21:17 +01:00
Peter Steinberger
85f9276624
build(whatsapp): externalize whatsapp plugin
2026-05-13 11:21:17 +01:00
pashpashpash
36b9da5c91
Keep Codex media tools backed by auth profiles ( #81059 )
...
* fix(codex): pass auth profiles to dynamic tools
* fix: bump protobufjs past advisory range
2026-05-13 01:46:21 +09:00
Peter Steinberger
f6d787cc5c
build: hard-pin dependency specs
2026-05-12 07:10:13 +01:00
Peter Steinberger
f55491b208
chore: update dependencies
2026-05-12 06:31:48 +01:00
Peter Steinberger
71c8d2405d
build: forward-port release packaging fixes
2026-05-12 06:21:10 +01:00
Peter Steinberger
f12f123f43
fix: keep workspace file status on Windows
2026-05-11 08:58:52 +01:00
Peter Steinberger
cad34c1aa3
build: declare unrun for tsdown
2026-05-11 03:59:32 +01:00
Peter Steinberger
15cf49222f
build: refresh deps and route testbox through crabbox
2026-05-11 03:41:00 +01:00
Altay
3855e7b0ac
build(pnpm): upgrade workspace to pnpm 11
2026-05-11 00:48:14 +01:00
Peter Steinberger
8f0f12ce53
fix: declare slack typebox runtime dependency
2026-05-10 15:21:43 +01:00
Peter Steinberger
fcc042559f
build(deps): refresh workspace dependencies
2026-05-10 14:00:08 +01:00
Peter Steinberger
9a7778d8aa
fix: declare extension runtime deps
2026-05-10 12:37:10 +01:00
Hua Yang
dff4a04c1f
feat(signal): support container REST API
...
Adds container REST/WebSocket support for bbernhard/signal-cli-rest-api Signal deployments.
Closes #10240 .
Thanks @Hua688.
Verification:
- pnpm exec oxfmt --check --threads=1 docs/channels/signal.md
- pnpm lint:extensions
- pnpm test extensions/signal
- pnpm tsgo:extensions && pnpm tsgo:test:extensions
- pnpm config:docs:check
- git diff --check
- CI checks on PR head 1d0a536ecd
- Crabbox/Testbox live Docker smoke tbx_01kr7h07shhcafxjc0ezfh946w / run 25614453516
2026-05-09 23:13:55 -04:00
Peter Steinberger
0496063264
build(deps): refresh workspace dependency pins
2026-05-10 02:14:40 +01:00
Shakker
9b629758fe
test: align clickclack package contracts
2026-05-09 15:38:50 +01:00
Peter Steinberger
e5e1b7b834
feat: add clickclack channel extension
2026-05-09 15:29:27 +01:00
Peter Steinberger
4883a0e6c4
chore: update workspace dependencies
2026-05-09 10:58:36 +01:00
Peter Steinberger
beaecbcad4
refactor: use PI Codex Responses transport ( #79726 )
...
Routes explicit OpenAI Codex Responses runs through PI's native WebSocket-capable transport and removes the custom OpenClaw WebSocket implementation.
2026-05-09 05:40:30 -04:00
Gio Della-Libera
ac9418d206
refactor(oc-path): drop YAGNI grammar features
...
Removes four path-syntax features that added complexity without
enough real-world use:
- **Quoted-segment escape sequences**: kept quoted segments themselves
(still needed for keys with `/` or `.`) but dropped `\"` and `\`
escapes. Quoted content is now byte-literal, refused if it contains
`"` or `\`. Simplifies scanBracketAware (drops the `escaped` state),
unquoteSeg (no decode loop), quoteSeg (no escape encoding).
- **CSS-style predicate operators**: removed `*=` (substring), `^=`
(prefix), `$=` (suffix). Predicate set is now `=`, `!=`, and the
numeric `<` / `<=` / `>` / `>=`. Lint rules needing substring
matching can use `findOcPaths(*)` + JS filter.
- **`$first` positional**: alias for index 0 (or first-declared key).
Use the literal `0` instead.
- **`-N` negative index**: rarely useful beyond `-1`, which is already
covered by `$last`. The "negative numeric key on object" case
(Telegram supergroup IDs) still works — non-indexable containers
fall through to literal-key lookup.
Behavior loss: zero in observed real workspace files. Tests for the
dropped features removed (15 tests).
Net: -22 LoC src + 15 fewer tests. Total package: 10,570 → 10,275 LoC.
2026-05-09 01:48:35 -04:00
Peter Steinberger
e3b33a26cd
refactor: move oc-path into plugin
2026-05-09 01:48:35 -04:00
Shakker
5d335dd603
fix: pin fast-uri audit dependency
2026-05-08 23:19:34 +01:00
pashpashpash
fb106fb9ae
fix codex harness service tiers ( #79152 )
2026-05-08 12:10:41 +09:00
pashpashpash
3f217964d1
Defer Codex dynamic tools behind search
...
Defer OpenClaw Codex dynamic tools behind Codex tool_search, keep required turn-control tools direct, pin the managed Codex harness to 0.129.0-alpha.15, and document the real behavior/token impact from the live dev-agent watch.
2026-05-07 16:40:37 -07:00
Peter Steinberger
6a4069dead
fix: share plugin runtime helpers
...
Consolidate shared plugin runtime MIME/schema helpers, preserve canonical runtime behavior, and guard QQBot STT fetches.
2026-05-08 00:28:43 +01:00
Vincent Koc
c97998ce21
chore(channels): remove bluebubbles bundled surface
2026-05-07 12:52:48 -07:00
Peter Steinberger
955b025697
feat: add native sqlite Kysely dialect
...
Add an owned Kysely dialect for native node:sqlite, raise the Node 22 floor to 22.16+ for StatementSync.columns(), and cover select/returning/stale insert id behavior.
2026-05-07 13:07:03 +01:00
Peter Steinberger
113761ab57
build: update fs-safe dependency
2026-05-07 12:15:51 +01:00
Vincent Koc
b165c0d10a
fix(ci): restore main validation
2026-05-07 03:39:26 -07:00
Peter Steinberger
330ba1fa31
refactor: move canvas to plugin surfaces
2026-05-07 09:07:18 +01:00
Peter Steinberger
4721ca8e45
chore: update Bedrock provider lockfile
2026-05-07 07:57:48 +01:00
Peter Steinberger
252a76d25c
refactor: stage external output writes through fs-safe
2026-05-07 06:05:24 +01:00
Sarah Fortune
7d5d01b4f9
chore(deps): bump @openclaw/fs-safe pin to 3412e03 ( #78670 )
...
Pulls in 26 commits since the previous pin (3c50873):
- fix(workspace): add packages field so pnpm prepare succeeds
(openclaw/fs-safe#10 ) — unblocks fresh installs that were failing
with ERR_PNPM_INVALID_WORKSPACE_CONFIGURATION during the prepare step
pnpm runs inside the github-hosted dep tarball.
- Filesystem boundary-guard hardening: centralized boundary primitives,
guarded fallback handles, prune/trash race fixes, durable queue id
validation, archive staged-merge fixes, public path mode preservation.
- json: avoid copy fallback symlink writes.
- temp: keep helpers in private dirs; preserve workspace leaf filename
contract.
Verification:
- corepack pnpm install — clean install, no prepare error.
- pnpm openclaw setup — wrote ~/.openclaw/openclaw.json, workspace, and
sessions dirs.
- pnpm test src/infra/{fs-safe,boundary-file-read,fs-safe-defaults,
fs-safe-import-boundary}.test.ts — 37/37 passed.
2026-05-06 19:47:14 -07:00
Vincent Koc
2ab74e9ef7
fix(deps): pin fs-safe with full git sha
2026-05-06 15:22:59 -07:00
Sally O'Malley
3be4251f21
fix(deps): bump basic-ftp ( #78637 )
...
* fix(deps): bump basic-ftp
Signed-off-by: sallyom <somalley@redhat.com >
* docs: note basic-ftp advisory fix
Signed-off-by: sallyom <somalley@redhat.com >
---------
Signed-off-by: sallyom <somalley@redhat.com >
2026-05-06 17:31:12 -04:00
Vincent Koc
f8bb00bb8b
fix(deps): override vulnerable ip-address
2026-05-05 23:59:43 -07:00
Peter Steinberger
8f3a34e2a1
refactor: share fs-safe JSON helpers
2026-05-06 07:40:10 +01:00
Peter Steinberger
20163313af
fix: resolve fs-safe post-land fallout
2026-05-06 02:41:36 +01:00
Peter Steinberger
538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
Kevin Lin
81349cdc2a
feat: improve Codex skill migration selection ( #77597 )
...
* feat: improve Codex skill migration selection
* docs: add Codex migration changelog entry
* fix codex skill migration bulk toggles
* fix codex migration skip selection
* fix codex migration skip option order
* fix: handle codex migration shortcut toggles
* fix codex migration shortcut reconciliation
* fix: unblock Codex migration CI
2026-05-05 16:41:26 -07:00
Patrick Erichsen
84e8e09725
Add WhatsApp live QA lane ( #77704 )
...
* feat(qa): add whatsapp live lane
* ci: add gated whatsapp and discord qa live lanes
* ci: honor qa live env gates in release selection
* test: update qa live workflow gate assertion
* ci: split live QA release gates
2026-05-05 12:09:28 -07:00
Peter Steinberger
47411f7c52
build: bump axios override
2026-05-05 01:51:23 +01:00
Vincent Koc
8285786c22
fix(plugins): include json5 in memory runtime deps
...
* fix(plugins): include json5 in memory runtime deps
* chore(ci): allow bundled runtime json5 dep
2026-05-04 16:31:49 -07:00
Peter Steinberger
8ee08b2b77
chore: update dependencies
2026-05-04 23:07:09 +01:00
Peter Steinberger
7915110259
fix(memory-lancedb): declare apache-arrow peer
2026-05-04 00:30:02 +01:00
Vincent Koc
31cafbb802
test(qa): add Slack live transport lane
2026-05-03 15:19:55 -07:00
Peter Steinberger
77a50db9ea
feat(qa): add Mantis Discord status reaction scenario ( #76747 )
...
* feat(qa): add Mantis Discord status reaction scenario
* fix(qa): retry Discord rate limits in Mantis runs
* refactor(qa): reuse Discord API retry helper
* fix(qa): import Discord API through package surface
* fix(ci): generate Discord boundary declarations
* fix(ci): keep xai boundary overrides stable
2026-05-03 17:00:06 +01:00
Vincent Koc
95001d6c41
fix(memory): keep sqlite-vec optional
2026-05-02 23:44:01 -07:00
Jesse Merhi
207aa18c40
Add shell command explainer ( #75004 )
...
Summary:
- The PR adds an internal Tree-sitter-backed shell command explainer under `src/infra`, parser runtime/tests, dependency/build-policy updates, an index export, and a changelog entry.
- Reproducibility: not applicable. this is a feature PR rather than a bug report. For the prior PR blocker, source inspection shows byte-to-string span conversion and focused Unicode span coverage on the exact head.
Automerge notes:
- Ran the ClawSweeper repair loop before final review.
- Included post-review commit in the final squash: Repair shell command explainer automerge blockers
- Included post-review commit in the final squash: fix(clawsweeper): address review for automerge-openclaw-openclaw-7500…
Validation:
- ClawSweeper review passed for head 47577579e9 .
- Required merge gates passed before the squash merge.
Prepared head SHA: 47577579e9
Review: https://github.com/openclaw/openclaw/pull/75004#issuecomment-4351322592
Co-authored-by: Jesse Merhi <jessejmerhi@gmail.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-03 06:05:29 +00:00