3b289c7942
fix(subagents): retry archived session deletes after sweep failures ( #61801 )
...
Merged via squash.
Prepared head SHA: 1152c26a7801e0541c07b35b513fd54b7f37bed4
Co-authored-by: 100yenadmin <239388517+100yenadmin@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-10 16:34:27 -07:00
71bd9e0df0
fix(agents): preserve malformed function-call arguments instead of silent {} replacement ( #61956 )
...
Merged via squash.
Prepared head SHA: 41859132763cc2a719d5311de0c805ae32c97b1f
Co-authored-by: 100yenadmin <239388517+100yenadmin@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-10 16:20:26 -07:00
47c0ce5f85
refactor: narrow codex harness selection
2026-04-11 00:13:08 +01:00
cfae8fd1e9
fix: preserve sender identity in compaction tools
2026-04-10 18:12:46 -05:00
81fbe129c9
perf: optimize test import surfaces
2026-04-10 23:48:03 +01:00
ac13b09b74
fix(agents,gateway): keep subagent announces in the original thread ( #63143 )
...
Merged via squash.
Prepared head SHA: 9aa5303b480d08e46a1c5ea4ab5553db39784998
Co-authored-by: mariosousa-finn <244526439+mariosousa-finn@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-10 15:46:01 -07:00
9082fc37f3
refactor: simplify legacy auth provider normalization
2026-04-10 23:36:08 +01:00
3d4e524014
refactor: simplify model catalog normalization
2026-04-10 23:34:49 +01:00
8473099c70
fix: honor inactive runtime web providers
2026-04-10 23:32:37 +01:00
3ead2d1090
refactor: simplify openai response part extraction
2026-04-10 23:32:22 +01:00
c643e3c72d
fix: dispose codex app-server harnesses
2026-04-10 23:29:58 +01:00
0d1360ed7c
fix: preserve plugin group policy resolution
2026-04-10 23:27:18 +01:00
6a8da3dc49
fix: resolve group tool policy from canonical session ids
2026-04-10 17:26:02 -05:00
62adec38b8
refactor: remove redundant memory config conversions
2026-04-10 23:11:00 +01:00
f7a10d6759
refactor: isolate strict-agentic execution policy
2026-04-10 23:09:55 +01:00
a73dc477d7
style: apply oxfmt cleanup
2026-04-10 23:09:37 +01:00
6281dd7379
perf: reduce test import overhead
2026-04-10 23:09:37 +01:00
88bb6b0bce
refactor: normalize google prompt cache keys
2026-04-10 23:09:01 +01:00
979ae0bb53
refactor: remove redundant openai stream conversions
2026-04-10 23:07:15 +01:00
de8f3fdf92
test: split unit-fast shard
2026-04-10 23:02:22 +01:00
09b1117271
agents: add strict-agentic execution contract
2026-04-10 22:56:37 +01:00
dcc3392a1a
refactor: remove redundant model fallback conversions
2026-04-10 22:24:45 +01:00
a736b6eede
test: remove redundant subagent allowlist conversions
2026-04-10 22:04:06 +01:00
241c63c7e0
refactor: remove redundant tool handler conversions
2026-04-10 22:01:48 +01:00
a8bb0ab255
refactor: remove redundant model selection conversions
2026-04-10 22:00:02 +01:00
fbf11ebdb7
fix(sandbox): enforce CDP source-range restriction by default ( #61404 )
...
* fix(sandbox): enforce CDP source-range restriction by default
Auto-derive CDP_SOURCE_RANGE from Docker network gateway IP when not
explicitly configured. The entrypoint script refuses to start the socat
CDP relay without a source range (fail-closed).
- readDockerNetworkGateway: use Go template println, filter <no value>
sentinel, prefer IPv4 gateway on dual-stack networks
- Reject IPv6-only gateways for auto-derivation (relay binds IPv4)
- Remove stale browser_cdp_bridge_unrestricted audit check (runtime
auto-derives range for all bridge-like networks)
- Bump SANDBOX_BROWSER_SECURITY_HASH_EPOCH to force container recreation
* chore(changelog): add sandbox CDP source-range entry
* fix(sandbox): gate CDP source-range derivation to bridge-style networks
Only auto-derive OPENCLAW_BROWSER_CDP_SOURCE_RANGE from the Docker
gateway IP for bridge networks (or when driver is unknown). Non-bridge
drivers (macvlan, ipvlan, overlay) may route traffic from different
source IPs, so they require explicit cdpSourceRange config.
Adds readDockerNetworkDriver helper and a regression test for macvlan.
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-10 14:59:25 -06:00
d236cb4680
chore: enable redundant type constituent checks
2026-04-10 21:23:40 +01:00
3198c10fba
fix: stabilize Codex harness landing checks
2026-04-10 21:22:16 +01:00
2d80bbc43d
feat(agents): allow disabling PI harness fallback
2026-04-10 21:22:16 +01:00
44ec4d05de
feat: add pluggable agent harness registry
2026-04-10 21:22:16 +01:00
fa97004ee1
test: remove duplicate gateway server coverage
2026-04-10 21:15:57 +01:00
733137615f
test: trim agents shard waits
2026-04-10 21:07:12 +01:00
abb4736267
fix(skills): add missing opening --- to taskflow and taskflow-inbox-triage SKILL.md frontmatter (openclaw#64469)
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test src/agents/skills.bundled-frontmatter.test.ts
Co-authored-by: extrasmall0 <"258180677"+extrasmall0@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-04-10 14:59:55 -05:00
0ebeee8b0d
chore: enable consistent-return
2026-04-10 20:56:43 +01:00
04c8026d03
chore: enable no-unnecessary-type-arguments
2026-04-10 20:14:49 +01:00
8640b89158
test: trim provider contract slow paths
2026-04-10 20:00:48 +01:00
e7db987ce6
test: trim heavy imports and harden ci checks
2026-04-10 19:23:10 +01:00
15c6748c01
test: stabilize vitest full-suite runner
2026-04-10 19:17:39 +01:00
d522dc637e
test: trim embedded agents slow paths
2026-04-10 18:33:03 +01:00
527601d7a5
fix: align channel owner context test types
2026-04-10 18:14:14 +01:00
e1a2a26ec9
test: isolate agent runtime mocks
2026-04-10 18:06:49 +01:00
8dfbf3268b
fix(browser): gate sandbox noVNC helper auth
...
Require bridge auth before /sandbox/novnc token redemption and keep the noVNC observer URL out of model-visible prompt context.
Local verification:
- pnpm test extensions/browser/src/browser/bridge-server.auth.test.ts src/agents/sanitize-for-prompt.test.ts src/agents/pi-embedded-runner.buildembeddedsandboxinfo.test.ts
Note: pnpm check currently fails on latest main in unrelated files (src/agents/tools/message-tool.ts and src/gateway/mcp-http.test.ts), outside this PR diff.
Thanks @eleqtrizit.
Co-authored-by: eleqtrizit <31522568+eleqtrizit@users.noreply.github.com >
2026-04-10 18:01:26 +01:00
710a19dd86
fix: repair latest main type drift
2026-04-10 18:00:45 +01:00
fe0f686c92
Gate Matrix profile updates for non-owner message tool runs ( #62662 )
...
Merged via squash.
Prepared head SHA: 602b16a676d1fd7ad8bd2a5ab3126b1a35f1ae9f
Co-authored-by: eleqtrizit <31522568+eleqtrizit@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-10 12:56:17 -04:00
dffad08529
fix: a sandboxed agent can request host node in an ex ( #384 ) ( #63880 )
2026-04-10 10:40:27 -06:00
777c6f7580
refactor: split manifest command alias helpers
2026-04-10 17:37:31 +01:00
47c0a5135a
fix: dedupe delivered subagent completion announces ( #61525 ) (thanks @100yenadmin)
...
* fix(subagents): dedupe delivered completion announces
* refactor(subagents): distill cleanup delivery status writes
* fix: dedupe delivered subagent completion announces (#61525 ) (thanks @100yenadmin)
---------
Co-authored-by: Eva <eva@100yen.org >
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-10 22:06:46 +05:30
5d2225212d
fix(matrix): preserve ACP thread binding targets ( #64343 )
...
Merged via squash.
Prepared head SHA: def7dcda967f158b07a32137d3c4902a19779e48
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-10 12:30:08 -04:00
2f84e73c18
fix(agents): always emit terminal lifecycle events
2026-04-10 21:58:20 +05:30
2ccd1839f2
fix: return real usage for OpenAI-compatible chat completions ( #62986 ) (thanks @Lellansin)
...
* Gateway: fix chat completions usage compatibility
* Gateway: clarify usage-gated stream wait
* Gateway: preserve aggregate usage totals
* Agents: clamp usage components before total
* fix(gateway): bound usage stream finalization
* fix: add OpenAI compat usage changelog (#62986 ) (thanks @Lellansin)
* fix(agents): emit lifecycle terminal events after flush
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-10 21:46:24 +05:30
EVA