a54dc7fe80
Cron: suppress fallback main summary for delivery-target errors (openclaw#24074) thanks @Takhoffman
...
Docker Release / build-amd64 (push) Has been cancelled
Docker Release / build-arm64 (push) Has been cancelled
Docker Release / create-manifest (push) Has been cancelled
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: Takhoffman <781889+Takhoffman@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-02-22 20:24:08 -06:00
457835b104
Compaction: count only completed auto-compactions ( #24056 )
...
* Compaction: count only completed auto-compactions
* Compaction: count only non-retry completions
* Changelog: note completed-only compaction counting
* Agents/Compaction: guard optional compaction increment
2026-02-22 20:16:45 -06:00
05691be511
Compaction: ignore tool result details in oversized checks ( #24057 )
...
* Compaction: ignore tool result details in oversized checks
* Tests/Compaction: type estimateTokens message callback
2026-02-22 20:13:59 -06:00
5c9f9722af
Agent runner: align compaction floor guidance ( #24059 )
2026-02-22 20:13:43 -06:00
50c5f75904
Compaction: sanitize token split accounting ( #24058 )
...
* Compaction: sanitize token split accounting
* Tests/Compaction: type sanitize token estimate callback
2026-02-22 20:13:21 -06:00
259d863353
Gateway: harden cron.runs jobId path handling (openclaw#24038) thanks @Takhoffman
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: Takhoffman <781889+Takhoffman@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-02-22 19:35:26 -06:00
45febecf2a
fix(exec): keep implicit sandbox default and restore no-alert baseline
2026-02-23 02:17:43 +01:00
f6c2e99f5d
Cron: preserve due jobs after manual runs ( #23994 )
2026-02-22 19:02:05 -06:00
bac26b4472
chore(release): bump version to 2026.2.22-1
2026-02-23 01:59:52 +01:00
a10ec2607f
Gateway/Chat UI: sanitize untrusted wrapper markup in final payloads
2026-02-22 16:53:54 -08:00
b482da8c9a
chore: update appcast for 2026.2.22 beta.1
2026-02-23 01:52:53 +01:00
80f430c2be
fix(daemon): extend restart health timeout and improve restart errors
2026-02-23 01:50:02 +01:00
278331c49c
fix(exec): restore sandbox as implicit host default
2026-02-23 01:48:24 +01:00
211ab9e4f6
Cron: persist manual run marker before unlock ( #23993 )
...
* Cron: persist manual run marker before unlock
* Cron tests: relax wakeMode now microtask wait after run lock persist
2026-02-22 18:39:37 -06:00
9c87b53c8e
security(cli): redact sensitive values in config get output ( #23654 )
...
* security(cli): redact sensitive values in config get output
`runConfigGet()` reads raw config values but never applies redaction
before printing. When a user runs `openclaw config get gateway.token`
the real credential is printed to the terminal, leaking it into shell
history, scrollback buffers, and screenshots.
Use the existing `redactConfigObject()` (from redact-snapshot.ts,
already used by the Web UI path) to scrub sensitive fields before
`getAtPath()` resolves the requested key.
Fixes #13683
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* CLI/Config: add redaction regression test and changelog
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 19:37:33 -05:00
f0542df9f0
Docker: precreate identity dir in docker setup
2026-02-22 16:33:53 -08:00
70dd6a30e7
chore(synology-chat): allow npm publish for plugin package
2026-02-23 01:30:36 +01:00
b19a6ee62d
docs(changelog): move mistral to top and add synology chat
2026-02-23 01:25:22 +01:00
cc8e6e9939
fix(synology-chat): align docs metadata and declare runtime deps
2026-02-23 01:24:51 +01:00
0371646a61
test: fix msteams shared attachment fetch mock typing
2026-02-23 00:19:40 +00:00
60c494c024
test: tighten mistral media and onboarding coverage
2026-02-23 00:19:05 +00:00
8a8faf066e
doctor: clean up legacy Linux gateway services ( #21188 )
...
* Doctor: clean up legacy Linux gateway services
* doctor: refactor legacy service cleanup flow
* doctor: fix legacy systemd cleanup map key typing
* doctor: add changelog entry for legacy Linux service cleanup
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 19:18:59 -05:00
1c2c7843a8
docs: add synology channel docs and fix unreleased changelog
2026-02-23 01:16:05 +01:00
320b62265d
fix(models): synthesize antigravity Gemini 3.1 pro high/low models ( #22899 )
...
* Models: add antigravity Gemini 3.1 forward-compat
* models: propagate availability to Gemini 3.1 dot IDs
* test(models): format Gemini 3.1 forward-compat test
* test(models): type Gemini 3.1 forward-compat fixtures
* models: add changelog note for antigravity gemini 3.1 forward-compat
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 19:11:39 -05:00
5c7c37a02a
Agents: infer auth-profile unavailable failover reason
2026-02-22 16:10:32 -08:00
331b728b8d
fix(tui): add OSC 8 hyperlinks for wrapped URLs ( #17814 )
...
* feat(tui): add OSC 8 hyperlinks to make wrapped URLs clickable
Long URLs that exceed terminal width get broken across lines by pi-tui's
word wrapping, making them unclickable. Post-process rendered markdown
output to add OSC 8 terminal hyperlink sequences around URL fragments,
so each line fragment links to the full URL. Gracefully degrades on
terminals without OSC 8 support.
* tui: harden OSC8 URL extraction and prefix resolution
* tui: add changelog entry for OSC 8 markdown hyperlinks
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 19:09:07 -05:00
d92ba4f8aa
feat: Provider/Mistral full support for Mistral on OpenClaw 🇫🇷 ( #23845 )
...
* Onboard: add Mistral auth choice and CLI flags
* Onboard/Auth: add Mistral provider config defaults
* Auth choice: wire Mistral API-key flow
* Onboard non-interactive: support --mistral-api-key
* Media understanding: add Mistral Voxtral audio provider
* Changelog: note Mistral onboarding and media support
* Docs: add Mistral provider and onboarding/media references
* Tests: cover Mistral media registry/defaults and auth mapping
* Memory: add Mistral embeddings provider support
* Onboarding: refresh Mistral model metadata
* Docs: document Mistral embeddings and endpoints
* Memory: persist Mistral embedding client state in managers
* Memory: add regressions for mistral provider wiring
* Gateway: add live tool probe retry helper
* Gateway: cover live tool probe retry helper
* Gateway: retry malformed live tool-read probe responses
* Memory: support plain-text batch error bodies
* Tests: add Mistral Voxtral live transcription smoke
* Docs: add Mistral live audio test command
* Revert: remove Mistral live voice test and docs entry
* Onboard: re-export Mistral default model ref from models
* Changelog: credit joeVenner for Mistral work
* fix: include Mistral in auto audio key fallback
* Update CHANGELOG.md
* Update CHANGELOG.md
---------
Co-authored-by: Shakker <shakkerdroid@gmail.com >
2026-02-23 00:03:56 +00:00
a66b98a9da
fix(plugins): hook systemPrompt gets collected then thrown away ( #14583 ) ( #14602 )
...
* fix(plugins): apply before_agent_start hook systemPrompt to session (#14583 )
* fix(plugins): apply legacy systemPrompt override and add changelog credit
---------
Co-authored-by: yinghaosang <yinghaosang@users.noreply.github.com >
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 18:58:21 -05:00
970062872f
chore: remove deprecated npm allow-build-scripts config
2026-02-23 00:51:00 +01:00
14c54e6501
fix(reasoning): persist off override for discord directives
2026-02-23 00:50:13 +01:00
f79e3d5f03
fix(agents): remove synthetic done fallback reply
2026-02-23 00:50:00 +01:00
1000ff04ea
fix(memory): hard-cap embedding inputs before batch
2026-02-22 15:40:18 -08:00
d306fc8ef1
fix(security): OC-07 redact session history credentials and enforce webhook secret ( #16928 )
...
* Security: refresh sessions history redaction patch
* tests: align sessions_history redaction-only truncation expectation
* Changelog: credit sessions history security hardening
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 18:29:40 -05:00
3efe63d1ad
Cron: respect aborts in main wake-now retries ( #23967 )
...
* Cron: respect aborts in main wake-now retries
* Changelog: add main-session cron abort retry fix note
* Cron tests: format post-rebase conflict resolution
2026-02-22 17:19:27 -06:00
9bc265f379
Cron: clean run-log write queue entries ( #23968 )
...
* Cron: clean run-log write queue entries
* Changelog: add cron run-log write-queue cleanup note
2026-02-22 17:16:42 -06:00
22c9018303
WhatsApp: enforce allowFrom for explicit outbound sends ( #20921 )
...
* whatsapp: enforce allowFrom in explicit outbound mode
* Update CHANGELOG.md
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 18:13:23 -05:00
d7747148d0
fix(memory): reindex when sources change
2026-02-22 15:12:07 -08:00
44727dc3a1
security(web_fetch): strip hidden content to prevent indirect prompt injection ( #21074 )
...
* security(web_fetch): strip hidden content to prevent indirect prompt injection
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
* security(web_fetch): address review feedback and credit author
* chore(changelog): credit reporter for web_fetch security fix
---------
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com >
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 18:10:26 -05:00
73e5bb7635
Cron: apply timeout to startup catch-up runs ( #23966 )
...
* Cron: apply timeout to startup catch-up runs
* Changelog: add cron startup timeout catch-up note
2026-02-22 17:04:30 -06:00
26644c4b89
fix(msteams): add SSRF protection to attachment downloads via redirect and DNS validation ( #23598 )
...
* fix(msteams): add SSRF protection to attachment downloads via redirect and DNS validation
The attachment download flow in fetchWithAuthFallback() followed
redirects automatically on the initial fetch without any allowlist
or IP validation. This allowed DNS rebinding attacks where an
allowlisted domain (e.g. evil.trafficmanager.net) could redirect
or resolve to a private IP like 169.254.169.254, bypassing the
hostname allowlist entirely (issue #11811 ).
This commit adds three layers of SSRF protection:
1. safeFetch() in shared.ts: a redirect-safe fetch wrapper that uses
redirect: "manual" and validates every redirect hop against the
hostname allowlist AND DNS-resolved IP before following it.
2. isPrivateOrReservedIP() + resolveAndValidateIP() in shared.ts:
rejects RFC 1918, loopback, link-local, and IPv6 private ranges
for both initial URLs and redirect targets.
3. graph.ts SharePoint redirect handling now also uses redirect:
"manual" and validates resolved IPs, not just hostnames.
The initial fetch in fetchWithAuthFallback now goes through safeFetch
instead of a bare fetch(), ensuring redirects are never followed
without validation.
Includes 38 new tests covering IP validation, DNS resolution checks,
redirect following, DNS rebinding attacks, redirect loops, and
protocol downgrade blocking.
* fix: address review feedback on SSRF protection
- Replace hand-rolled isPrivateOrReservedIP with SDK's isPrivateIpAddress
which handles IPv4-mapped IPv6, expanded notation, NAT64, 6to4, Teredo,
octal IPv4, and fails closed on parse errors
- Add redirect: "manual" to auth retry redirect fetch in download.ts to
prevent chained redirect attacks bypassing SSRF checks
- Add redirect: "manual" to SharePoint redirect fetch in graph.ts to
prevent the same chained redirect bypass
- Update test expectations for SDK's fail-closed behavior on malformed IPs
- Add expanded IPv6 loopback (0:0:0:0:0:0:0:1) test case
* fix: type fetchMock as typeof fetch to fix TS tuple index error
* msteams: harden attachment auth and graph redirect fetch flow
* changelog(msteams): credit redirect-safeFetch hardening contributors
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-02-22 18:00:54 -05:00
a58b40e153
chore(test): stabilize mcporter assertions on Windows
2026-02-22 14:47:50 -08:00
82d34b4b06
fix(memory): harden qmd collection recovery
2026-02-22 14:40:04 -08:00
5858de6078
docs: reorder 2026.2.22 changelog by user impact
2026-02-22 23:37:44 +01:00
84e5ab598a
fix: make windows CI path handling deterministic
2026-02-22 22:34:49 +00:00
3b0e62d5bf
fix(doctor): warn that approvals.exec.enabled only disables forwarding
...
Co-authored-by: nomadonwheels196 <nomadonwheels196@users.noreply.github.com >
2026-02-22 23:33:15 +01:00
a30f9c8673
fix(sandbox): fallback docker user to workspace owner uid/gid
...
Co-authored-by: LucasAIBuilder <LucasAIBuilder@users.noreply.github.com >
2026-02-22 23:33:15 +01:00
394a1af70f
fix(exec): apply per-agent exec defaults for opaque session keys
...
Co-authored-by: brin-tapcart <brin-tapcart@users.noreply.github.com >
2026-02-22 23:33:14 +01:00
427b4360b9
build: update deps and stabilize tests
2026-02-22 23:32:38 +01:00
a5917e4ad8
test(exec): resolve rebase artifact in bash-tools test
2026-02-22 22:25:47 +00:00
1d8968c8a8
fix(voice-call): harden media stream pre-start websocket handling
2026-02-22 23:25:32 +01:00
Tak Hoffman