Vincent Koc

fix(autoreview): isolate parallel closeout · fix(autoreview): harden rollout review isolation · fix(autoreview): close remaining bundle gaps · docs(autoreview): align isolation contract

fix(release): configure auth before gateway startup · fix(release): restore Kova matrix contracts · fix: ignore provider timeout metadata in log gates · fix: version product resource measurements

chore(codex): update managed app-server to 0.144.1 · fix(ci): restore live OpenAI performance evidence · fix(ci): verify live provider traffic in performance runs · fix(providers): publish Meta under canonical package name

refactor(zalo): localize internal declarations · refactor(voice-call): localize internal declarations · refactor(qqbot): localize internal declarations · refactor(slack): localize internal declarations

improve(queue): raise exact-review admission to 28 · chore(queue): refresh exact head for 98505 · fix(merge): accept indicated ready reviews · chore(queue): refresh exact head for 85238

improve(queue): raise exact-review admission to 28 · fix(preflight): pin and stabilize exact merge jobs · fix(preflight): accept current positive bot comments · chore(queue): add exact merge preflight jobs

feat(providers): add LongCat API support · fix(codex): ignore missing mirrored session history · fix(release): package legacy candidates without AI workspace · fix(ci): install release packaging dependencies

perf(scheduler): raise ClawSweeper worker budget · fix(vast): require reclaim for unclaimed instances · fix(gcp): revalidate release ownership before delete · ci: split Pages build and deploy jobs

feat(checkpoint): run commands across fork fanout · fix(azure): harden snapshot fork quarantine · feat(nomad): add delegated-run provider · docs(nomad): leave changelog to release flow

fix: backup skips volatile cache paths · fix(mattermost): include later team members in peer directory · fix(terminal): preserve sibling home-prefix paths · fix(memory-wiki): retry transient existing-page reads in wiki_apply and chatgpt import

fix(claude-cli): return updatedInput in can_use_tool allow response for Claude Code 2.1 · fix(inworld): guard voices JSON.parse against malformed API response bodies · fix(codex): classify get_goal read statuses as successful dynamic tool calls · fix: keep workspace rail file sections scrollable

fix(cli): bound docs search API response reads · fix(agents): classify Anthropic orphaned tool-use replay errors · fix(plugin-sdk): guard legacy dedupe JSON parse against malformed files · fix(signal): guard containerRestRequest JSON.parse against malformed responses

test: update security boundary quarantine expectation · fix(telegram): support fake media sends · docs(ci): update runner registration budget · fix(status): surface should-run plugin drift

fix(workers): harden background retries · fix: tolerate author review-request comments · fix: treat ready docs reviews as nonblocking · fix: ignore HTML entity literals as fake refs

fix(security): tolerate transient scan claim failures · fix(ci): right-size security dataset snapshots · ci: enable Pages during docs deploy · chore: finalize manual canary jobs

fix(ci): pin pnpm to public npm · fix(ci): give skill card worker Convex fallback · fix(ci): hard cap security dataset fanout · fix(ci): bound security dataset page exports

ci: pin Dependabot npm registry · fix(ci): cap security dataset snapshot fanout · fix(ci): bound security scan worker runtime · fix(ui): mark plugin SkillSpector as not applicable

ci: smooth conformance blacksmith runs · ci: cancel superseded blacksmith testboxes · ci: smooth blacksmith worker bursts · fix(ci): bundle ClawHub PR gates

chore(release): prepare acpx 0.11.2 · docs: describe prompt response usage persistence · chore(release): prepare acpx 0.11.1 · fix(runtime): expose model capability errors

fix(ci): serialize Clawbench test runners · fix(ci): reduce ClawHub worker fanout · fix(ci): bound ClawSweeper review fanout · fix(repair): settle stale branch pushes before dispatch

docs: align ClawSweeper comment prefilter · docs: clarify rate-limit-safe dispatcher setup · chore(queue): add bounded repair job for 89897 · chore(queue): adopt automerge PR 93504

fix(ci): reduce ClawSweeper GitHub API pressure · fix(worker): recover dispatch and executor timeouts · fix(ci): filter ClawSweeper comment dispatches before token minting · fix(scripts): preserve kitchen sink RPC request errors

fix(autoreview): restore local self-test shortcut · fix(automation): increase exact review throughput · fix(automerge): wait for replacement proof checks · fix(spam): include Codex spawn in sparse checkout

feat(providers): add keyless Firecrawl scrape support · fix(review): remove eager media tool bootstrap · fix(review): move exact admission to durable queue · fix(validator): honor explicit non-security preflight

fix(deps): remediate Dependabot alerts · feat(edge): publish client catalog transport contract · fix(executor): retry eslint validation failures · fix(executor): repair lint validation failures

fix(claude): isolate ACP sessions from user settings · fix(agents): sync autoreview scope guard · fix(autoreview): bound closeout scope · fix(deploy): stay within access destination limit

feat(control-plane): rebuild access and operations · feat(admin): improve console workbench workflows · fix(workspace): keep terminal shell alive · fix(terminal): preserve embedded PTY readiness

fix(admin): tighten ClawRouter access console · fix(smoke): use live provider model overrides · fix(api): guarantee room lifecycle cleanup · feat(api): add room-scoped crabbox supervision

fix(deploy): skip route management in CI deploy · fix: harden crawlkit audit findings · fix(sessions): derive channel from account-scoped DM session keys in send-policy · fix(tui): show resolved canonical model ref in /model confirmation

fix(cron): preserve tz and staggerMs when --cron replaces expression · fix(daemon): keep status readable on unsupported services · fix(release): use trusted publishing for plugin npm · fix(docs): remove stale ClawHub nav page

fix(release): gate beta publish on plugin verification · fix(cli): validate gateway RPC timeout inputs · fix(cron): report SQLite storage path in cron.status instead of legacy jobs.json · fix(feishu): reply inside P2P direct-message threads

fix(codex): validate maintained app-server types · fix(agents): prefer explicit sessions_send keys · fix(memory): keep ignored-name QMD roots watchable · fix(fal): parse raw completed queue results

fix(e2e): tighten installer and plugin QA assertions · fix(agents): trim dense text delta snapshots · perf(control-ui): avoid startup catalog wait · fix: block moderated skill version metadata

fix(plugins): stabilize plugin tool schemas · fix(codex): quarantine unreadable dynamic tool schemas · fix(agents): snapshot session tool definitions · fix(imessage): always-on inbound recovery and dedupe

fix(inbound-meta): apply head+tail body truncation to ReplyChain and ReplyToBody JSON paths (fixes #91042) · fix(e2e): bound release user journey JSON artifacts · fix(e2e): bound release scenario JSON artifacts · fix(e2e): bound browser snapshot diagnostics

fix(release): use monthly patch versions · fix(cron): require HTTP context for server_error retry classification · fix(build): copy export-html assets to dist/export-html matching runtime path (fixes #90843) · test(gateway): add small model live profile

feat: add initial ClawRouter gateway · fix(edge): add service index route · Merge pull request #1 from openclaw/feat/initial-clawrouter · chore(deploy): add clawrouter deploy doctor

fix(runtime): snapshot tool definitions · fix(google): skip unreadable tool schemas · fix(openai): skip unreadable responses tool schemas · fix(mcp): skip unreadable plugin tools

fix(agents): guard tool policy name reads · fix(gateway): guard discovery service metadata · fix(plugins): guard tool result middleware metadata · fix(plugins): guard web search credential metadata

refactor(gateway): share duplicated test helpers · fix(diagnostics): sanitize uncloneable model content · fix(agents): guard tool parameter schema inlining · fix(agents): guard system prompt schema stats

fix(talk): quarantine malformed realtime tool names · fix(plugins): guard runtime tool descriptors · fix(codex): guard dynamic tool descriptors · fix(llm): guard Anthropic provider tool descriptors

fix(agents): stream phased text deltas incrementally · fix(codex): quarantine unreadable dynamic tools · fix(state): harden sqlite path caching · fix(plugin-sdk): isolate provider catalog projection failures

fix(agents): quarantine invalid runtime tool schemas · fix(agents): avoid full stream replay on text deltas · fix(infra): bridge WSL clipboard through shell · fix(agents): preserve runtime tools in lean mode

fix(agents): count stream deltas incrementally · test(agents): include Ollama in small live model matrix · fix(cli): harden Windows node pairing and approvals · fix(plugins): scope plugin tool callbacks

fix(ci): stabilize agentic drift checks · fix(agents): stream assistant deltas incrementally · test(agents): add small model live profile · test(infra): use bonjour beacon type in discovery test

feat(pixverse): add external video provider · feat(agents): add harness runtime prewarm hook · fix(crabbox): prefer Azure for Windows targets · fix(pi-embedded): route openai+codex auth through openai-codex on compaction fallback (#86373)

fix(diagnostics): flush OTel trace batches · fix(config): repair profiled tool section grants in doctor · fix(cli): default logs to local timestamps · fix(exec): avoid default approval store writes

Agents/media: restore agent-scoped and iMessage attachment roots · chore: refresh kitchen sink OpenClaw surface · fix(scripts): bound guard inventory file reads · fix(test): isolate kitchen sink rpc home env

test(e2e): harden multi-node update smoke · fix(installer): support alpine cli installs · test(agents): keep runtime-plan provider mock current · fix(scripts): launch env package scripts on Windows

fix(diagnostics): drop snake case OTel ids · fix(codex): preserve native web search action metadata · feat(diagnostics): trace secret preparation timing · fix(ci): repair crabbox hydrate replay

test(diagnostics): widen observability smokes · fix(cli): default logs to local timestamps · fix(cli): keep logs follow on live gateway state · fix(codex): preserve native web search action metadata

fix(codex): recover final text after prompt timeout · fix(codex): make post-tool raw assistant timeout configurable · fix(docker): prune omitted plugin runtime deps · docs(changelog): note VAPID subject fix

feat(images): add developer image bakes · Merge pull request #130 from openclaw/feat/linux-windows-dev-images · crawlbar 0.2.0 · docs(release): prepare CrawlBar v0.2.0

fix(qa): reduce WhatsApp live RTT setup cost · fix(doctor): detect Codex bwrap namespace denials · fix(auth): clean refresh contention diagnostics · fix(browser): tighten bridge diagnostics

fix(update): preserve package service state during cutover · fix(channels): protect channel config repair paths · fix(codex): preserve nested tool-result middleware output · fix(feishu): refresh inbound session routes

fix(agents): skip malformed transcript state entries · fix(plugins): harden bundled runtime path resolution · fix(agents): harden auth refresh redaction · fix(update): preserve channel config across package repair

fix(plugins): preserve host package during peer repair · fix: route crabbox proof through brokered aws · fix(codex): hide empty rate-limit buckets · fix: sync delegated runners after allocation

fix(auth): drop stale Codex OAuth routing · fix(codex): hide empty rate-limit buckets · fix(web): resolve explicit global search providers · fix(auth): stop Codex OAuth refresh spam

test(e2e): cover root-managed VPS upgrades · revert(cli): remove global root refusal · fix(dashboard): use track pnpm for lifecycle installs · chore(deps): land upstream plugin updates

[Feature]: Interactive CLI output streaming + attach/recover (tmux-style) · docs: align crabbox rules with blacksmith default · docs(tools): tighten minimax-search params and remove fictitious browser --target flag · docs(cli): document plugin-aware deep status warnings on gateway/daemon

feat: add adaptive coordinator transport · fix(cli): explain port and gateway prompts · fix(cli): clarify channel setup paths · fix(cli): make onboarding prompts clearer

fix(plugins): avoid managed npm prefix on Windows · fix(runtime): preserve reviewed routing and transcript behavior · Extract embedding/vector primitives into crawlkit · changelog: split c6d4f1fab8 Discord/Gateway entry by area

perf(plugins): trim catalog and setup normalization · perf(agents): trim agent tool helper queues · fix(status): reduce deep status manifest scans · fix(plugins): avoid managed npm prefix on Windows

test(plugins): cover stale OpenClaw peer repair during install · fix(slack): preserve buffered thread stream replies · fix(cli): reduce plugin hook fallback noise · chore(ci): harden security ownership and workflow permissions

fix(webchat): unblock backend exec approvals · fix(tui): prevent orphaned terminal sessions · fix(cli): fast-path bare channels help · fix(gateway): start configured generation providers

fix(update): avoid lint-blocked dev installs · fix(gateway): delay post-ready maintenance · fix(plugins): include json5 in memory runtime deps · fix(doctor): repair allow-only official plugins

perf(core): trim channel RTT hot paths · fix(agents): preserve full subagent announce output · feat(openrouter): add opt-in response caching · fix(heartbeat): align response tool prompts

fix(agents): filter runtime context from context engines · test(e2e): fix kitchen sink crabbox coverage · fix(channels): clarify remote install hints · fix(agents): restore Grok tool calls by stripping xAI strict field

fix(cli): guard device fallback state · fix(plugins): redact git install failure urls · fix(plugins): avoid source rebuilds for policy toggles · fix(plugins): reuse cold inspect registry snapshots

fix(gateway): reuse subagent registry snapshot in session listing · fix(gateway): surface unreachable status diagnostics · fix(security): require pinned npm specs for trusted installs · chore(barnacle): add false positive close label

fix(security): block untrusted workspace providers in startup discovery · ci: fold parity into QA release validation · test(pairing): clear allowlist cache before read spy · chore(ci): rename CodeQL auth security shard

fix(exec): decode Windows command output with codepage-aware streaming · fix(cli): avoid false local gateway unreachable on probe timeout · fix(agent): route explicit channel targets per recipient · fix(tui): subscribe to live session transcript updates

feat(migrations): add Hermes import path · feat(onboard): offer detected migration imports · fix(qwen): allow explicit qwen3.6-plus on Coding Plan · fix(whatsapp): recover stale listener after auth conflict churn

fix(plugins): suppress false duplicate-id warnings across origins · fix(codex): isolate app-server OAuth homes · fix(cron): infer session agentId when omitted · fix(gateway): keep restart probe auth local

fix(skills): refresh persisted snapshots after restart · fix(memory-wiki): route bridge CLI through gateway · fix(plugins): hydrate bundled channel config metadata · fix(whatsapp): stop reconnecting quiet sockets

docs(codex): document native model lifecycle hooks · docs(codex): document native compaction hooks · refactor(web-fetch): move readability extraction to plugin · fix(whatsapp): emit message received hooks

feat(exec): add normalized auto mode · refactor(agents): share hook history windows · [Feature]: track remaining Codex harness parity and hook-policy follow-ups · [Feature]: Image generation input parity for URL and path sources

feat(codex): add prompt and compaction hooks · feat(codex): add llm lifecycle hooks · feat(codex): add tool hook parity · feat(amazon-bedrock-mantle): add Claude Opus 4.7 via per-model Anthropic Messages API override

fix(install): mirror node-domexception override for npm · fix(telegram): restore proxy media downloads · fix(install): mirror node-domexception override for npm (#69819) · docs(gateway): replace user-facing 'extension' references with 'plugin' per terminology rules

refactor(plugin-sdk): centralize private-network opt-in semantics

fix(openrouter): heal stale provider base urls · fix(models): resolve openrouter compat aliases · fix(openrouter): parse visible reasoning_details output · test(auto-reply): trim reply test module churn

fix(auth): serialize OAuth refresh across agents to fix #26322 · docs(changelog): add codex oauth pi entry · ci(tests): rebalance extension shards by estimated cost · test(boundary): allow contract public-surface helpers

fix(ci): guard qa matrix fault proxy fetch · fix(ci): prepare plugin sdk dts before lint · fix(ci): trim slow task and gateway paths · fix(ci): cap core shard checkout stalls

feat(plugins): narrow gateway route loads from manifests · fix(ui): skip chat history reload during active sends to prevent mess… · fix(cron): preserve all fields in announce delivery by removing summarization instruction · fix(security): redact secrets in exec approval prompts (#61077)

fix(systemd): reconcile managed-env unit migrations · fix(hooks): pass workspaceDir in gateway session reset internal hook context · [codex] fix(onboard): normalize channel setup metadata · fix(google): strip Gemini compat base suffixes

feat(docs): add Hostinger installation guide and link in VPS document… · docs(changelog): add 2026.4.12 dedupe note · docs(changelog): note perf fixes · fix(ci): mirror whatsapp runtime dependency

fix(config): resolve CLI command aliases against parent plugin in plugins.allow (#64748) · fix(imessage): retry watch.subscribe startup failures · fix(memory-core): match daily notes stored in memory/ subdirectories · refactor(plugins): centralize manifest owner trust policy

feat(plugins): add manifest activation and setup descriptors · fix(canvas): refresh a2ui bundle hash · fix(auto-reply): stop mention-only inline status turns · fix(agents): split preemptive compaction route types

fix(auth): brand codex oauth as openclaw · docs(ci): refresh release notes lane references · ci(test): align node lane names with boundary split

test(boundary): guard src imports from bundled plugin paths · fix(qa): route cli registration through facade · fix(feishu): remove runtime api type cycle · fix(bluebubbles): remove status type barrel cycle

fix(slack): preserve auth on same-origin media redirects · test(plugin-sdk): cover packaged telegram setup sidecars

perf(qa): lazy-load runner catalog for lab ui · fix(qa): preserve gateway cli auth in no-fork rpc path · perf(qa): drop per-rpc gateway cli forks · perf(qa): trim frontier direct-agent waits

fix(tui): strip inbound metadata from command messages before rendering (#59871) · fix: restore terminal keyboard state after TUI exit · fix: don't broadcast state:error on per-attempt lifecycle errors · refactor: add xai plugin-sdk boundary canary

fix(google): disable pinned dns for image generation · Fix gemini-cli detection and project discovery · feat(bedrock): add inference profile discovery and region injection · fix(openai): avoid em dashes in gpt-5 overlay

fix(providers): centralize compat endpoint detection · docs: add PR limits to contribution guide · fix(agents): prefer background completion wake over polling · fix(google-gemini-cli-auth): fix Gemini CLI OAuth failures on Windows

fix(security): close active April 4 transport and auth gaps · fix(providers): centralize compat endpoint detection · feat: UI discovery hub overhaul · fix(security): harden discord proxy and bundled channel activation

refactor(tasks): move task-flow ownership under tasks · fix(plugins): reuse runtime registries for web provider snapshots · fix(plugins): reuse runtime registry for provider resolution · refactor(plugins): separate activation from enablement

perf/test hotspots phase2 20260401 · perf(test): reduce hotspot reload churn [AI-assisted] · fix(subagents): harden task-registry lifecycle writes · fix(sandbox): use browser image for browser runtime matching

fix(voice-call): reject oversized pre-start media frames · fix(feishu): filter fetched group thread context · fix(pairing): scope pending request caps per account · fix(media): reject oversized image inputs before decode

feat(tasks): harden maintenance repair paths · refactor(tasks): clarify detached run surfaces · refactor(tasks): route acp through executor · feat(tasks): move task ledger to sqlite and add audit CLI