Sally O'Malley

fix: startup migrations block on recoverable legacy state · fix(voice-call): use sliceUtf16Safe for bounded child output tail cap · fix(file-transfer): keep bounded stderr tail UTF-16 safe · fix(agents): keep scp stderr tail UTF-16 safe

Podman build cannot read selected-plugin Dockerfile source bind mounts on amd64

Add Vault SecretRef plugin (#89255)

Add 1Password SecretRef plugin · fix(skills): correct invalid install kinds in xurl and github [AI] · Fix container image upgrade migrations before gateway readiness · Fix container image upgrade migrations before gateway readiness (#101881)

Fix container image upgrade migrations before gateway readiness · fix(claude-cli): surface re-auth hint when subprocess OAuth token expires · fix(claude-cli): surface re-auth hint when subprocess OAuth token expires (#97669) · fix(auth): classify claude-cli 401 output as oauth refresh failure

fix(qa-channel): bound QA bus JSON response reads · fix(google): bound OAuth project and token JSON response reads · fix(plugin-sdk): bound Copilot token exchange JSON response reads · fix(plugin-sdk): bound Copilot token exchange JSON response reads (#97579)

test(discord): clarify and guardrail gateway proxy selection (#99126)

test(discord): clarify and guardrail gateway proxy selection · Discord Gateway WebSocket should honor HTTP_PROXY/HTTPS_PROXY env proxy fallback

feat(agents): add iteration budget for agent loop safety

fix(agents): enable bundled static catalog fallback for cron Attempt 2 · fix(session-memory): skip transcript-only assistant messages in getRecentSessionContent · fix(agents): enable bundled static catalog fallback for cron Attempt 2 (#96070) · fix(session-memory): skip transcript-only assistant messages in getRecentSessionContent (#94401)

Bound proxy error response JSON parsing to avoid loading huge bodies · fix(plugin-sdk): follow paginated live model catalogs · fix(minimax): bound video control response reads · fix(speech): bound TTS response reads

fix(image-gen): bound image generation provider JSON response reads · fix(image-gen): bound image generation provider JSON response reads (#96495) · fix(image): bound image-generation provider response reads

fix(codex): prefer desktop app-server for Computer Use on macOS · fix(voyage): bound embedding-batch status, error, and non-OK responses · fix(github-copilot): bound usage response reads · fix(byteplus): bound video-generation success response reads

fix(plugins): stop ClawHub version install from inheriting latest compatibility · fix(agent): replace self-wait with deferred release in retained-lock abort cleanup · fix(lmstudio): bound model load success response body to prevent OOM · fix(exa): bound untrusted search JSON response reads

fix #95489: [Bug]: claude-cli out-of-credits error bypasses model fallback chain — error text delivered as final response · fix(agents): bound OpenRouter model catalog response reads · fix(agents): bound OpenRouter model-scan catalog success body · fix(agents): bound Google prompt cache response reads

fix: compact Codex OAuth OpenAI sessions without API keys · fix(agents): bound OpenRouter model catalog response reads · fix(agents): classify generic external runner failure text as fallback-worthy

fix: default cron runMode to "due" instead of "force" (#94270) · feat(cli): add `openclaw sessions compact` and fail loudly on CLI `/compact` (fixes #90640) · fix(agents): forward turn-source routing fields to plugin.approval.request · feat(cli): add `openclaw sessions compact` and fail loudly on CLI `/compact` (fixes #90640) (#91378)

Mantis proof helper for #94574 · fix(slack): stop leaking bot token into /api/auth.test request body · fix(agents): preserve pending subagent completion announces · fix(exec): resume agent turn for native chat exec approvals

fix(doctor): import default-agent auth profiles into sqlite · fix(doctor): import default-agent auth profiles into sqlite (#93156)

Add OpenRouter Fusion guidance and prompt context · Docs: add OpenRouter Fusion model guidance · fix(skills): keep managed prompt paths readable · feat(openrouter): surface Fusion panel config (#93005)

clarify before_install hook scope · Make workspace files panel collapsible · docs: clarify before_install hook scope (#92766) · feat: make workspace files panel collapsible

fix(sandbox): render CLI skill prompts from materialized paths · fix(outbound): honor top-level image param as send media source (#92407) · fix(codex): preserve memory prompt registration · fix(outbound): honor top-level image param as send media source (#92407) (#92416)

fix: handle explicit silent assistant replies · fix(sessions): preserve user /model override across daily/idle session rollover (#90119) · fix(discord): scope command-deploy cache by application id · fix: handle explicit silent assistant replies (#92073)

fix(webchat): finalize provider failure lifecycle · Support existing-session browser CDP endpoints · fix(browser): honor cdpUrl for user default profile · fix(telegram): block unauthorized DM text from cache and prompt context (#91478)

Fix Docker store seed target packages · fix docker store seed target packages (#91547) · before_install hook not triggered by CLI `openclaw plugins install` · [codex] Fix CLI plugin install hook bootstrap

block unauthorized Telegram DM text from prompt context

feat: add Podman compatibility for local containers

fix(uninstall): refuse to remove current working directory during cleanup · Fix OpenAI audio auth to use API keys

fix service env placeholder collection · fix(agents): re-probe single-provider primary during cooldown · fix(google): preserve Vertex ADC catalog auth · docs: prefer web_fetch in weather skill

fix(agents): strip stale compaction thinking signatures before Anthropic replay · fix(docker): qualify base image refs for podman short-name mode

[WIP] Add Vault SecretRef plugin · Control UI chat composer keeps submitted text after send · fix(ui): clear chat composer after send · fix(ui): clear chat composer after send (#89106)

fix(ui): keep transient chat errors out of page headers · fix(gateway): guide dashboard auth after service repair · fix: transient banner showing lastError leak into page headers (#88463) · fix(gateway): guide dashboard auth after service repair (#88466)

fix(ui): keep transient chat errors out of page headers · fix(gateway): guide dashboard auth after service repair · Agent run stuck in 'in progress' after agent completes — state machine race condition

Add plugin manifest contract for SecretRef provider integrations · ci: auto-close new core plugin PRs · Add plugin manifest contract for SecretRef provider integrations (#82326)

fix: avoid exec approvals writes for default no-prompt policy

fix(agents): honor effective exec policy for Claude live Bash · fix(doctor): skip restart prompt when gateway is healthy after recent restart · fix(docker): create ~/.config with node ownership before leaf dir (#85968) · fix(security): audit Claude permission overrides under YOLO (#86557)

fix(web-ui): improve light theme visibility for select arrows and bubble hover · fix(control-ui): restore light select arrows

Fix OpenShell sandbox backend CLI resolution · fix(openshell): use NVIDIA CLI contract

fix(docker): keep default OpenAI harness plugin in release images

Add plugin manifest contract for SecretRef provider integrations

fix: preserve all-caps provider api keys · fix(providers): discover self-hosted wildcards from configured endpoints · [security] redact persisted tool result details · fix: avoid broad provider env marker inference

fix(docker): avoid external Dockerfile frontend pull · fix(config-audit): scrub pre-redactor argv values from historical config-audit.jsonl entries · fix(doctor): render legacy migration panel as preview when --fix is not passed · fix: surface explicit error on LLM idle timeout to prevent ghost turns

fix: speed up status json channel detection · fix: clarify gateway version mismatch warnings · fix: surface gateway version skew · fix(gateway): include auth mode "none" in backend self-pairing skip

fix: bound skills watcher traversal · docs: document Docker CLI DNS override · Fix Control UI node exec approvals · fix(gateway): fail closed trusted-proxy password fallback

fix(deps): bump basic-ftp · add docs, manifests for k8s · fix(deps): bump basic-ftp (#78637)

fix(agents): rebuild sandbox skill prompts from sandbox workspace · fix(doctor): warn when OPENCLAW_GATEWAY_TOKEN env overrides gateway.auth.token config · fix: rebuild sandbox skill prompts from sandbox workspace (#77661)

fix(openrouter): keep DeepSeek V4 reasoning effort valid · fix(openrouter): keep DeepSeek V4 reasoning effort valid (#77423)

fix(macos): mask sensitive wizard cli prompts · fix(macos): mask sensitive wizard cli prompts (#76746)

fix(docker): replace curl|bash Bun install with pinned multi-stage COPY

fix(config): log observe recovery write failures · fix(docker): restore python3 in runtime image · fix(config-audit): redact CLI argv secrets before persisting to log · fix(pairing): don't silently swallow unexpected stat errors

fix(sandbox): gracefully handle Docker daemon unavailability when sandbox mode is off · docs(install): fix gog/goplaces release URLs in docker-vm-runtime example · fix(docker): add config dir defaults to prevent broken volume mounts

fix(sandbox): add { once: true } to Docker abort signal listener · fix: add local build context to docker-compose · build: ignore generated docker-compose.sandbox.yml · feat(docker): add OPENCLAW_SKIP_ONBOARDING env to skip onboarding during Docker setup

diagnostics: defer OTEL run span finalization · fix(diagnostics): defer OTEL run span finalization (#72260)

otel instrumentation · maintainers: gate new core plugins behind exception approval

fix: handle reasoning-only image responses

UI: localize Overview and login gate labels · feat(plugins): pass attachment metadata to before_model_resolve hook

add option for MCP apps support

fix openrouter model picker refs

docs(inferrs): fix Gemma model id from gg-hf-gg to google

ci: auto-close new core plugin PRs · remove noisy podman output from launch script and update doc · chore(docs): sync generated baselines · chore(docs): sync config baseline

otel instrumentation

Sandbox: relabel managed workspace mounts for SELinux · fix(acpx): retain named sessions on queue owner unavailable · fix: add requireAgentId to block sessions_spawn without explicit agen…