fix: add missing @microsoft/agents-hosting dependency for msteams extension#1
Merged
EthanHunter1229 merged 29 commits intomainfrom Mar 16, 2026
Merged
Conversation
Merge endpoint and status into a single grouped card with icons. Split connect/disconnect into context-aware buttons.
Add text label under speaker toggle, balance layout with matching spacer column, and wrap status text in a colored pill.
Remove MESSAGE label and divider, let text field auto-size instead of fixed 92dp, and merge Detail/Attach into the bottom action row.
Rename role labels to You/OpenClaw/System, update streaming label to OpenClaw · Live, and remove the redundant SESSION row + Connected pill since the top bar and chip row already convey both.
Remove header bloat, merge Node info into a single Device card, group permissions into Media/Notifications/Data Access cards with internal dividers, and combine Screen+Debug into Preferences. Sections reduced from 9 to 6.
…unts (openclaw#26054) * fix(agents): avoid injecting memory file twice on case-insensitive mounts On case-insensitive file systems mounted into Docker from macOS, both MEMORY.md and memory.md pass fs.access() even when they are the same underlying file. The previous dedup via fs.realpath() failed in this scenario because realpath does not normalise case through the Docker mount layer, so both paths were treated as distinct entries and the same content was injected into the bootstrap context twice, wasting tokens. Fix by replacing the collect-then-dedup approach with an early-exit: try MEMORY.md first; fall back to memory.md only when MEMORY.md is absent. This makes the function return at most one entry regardless of filesystem case-sensitivity. * docs: clarify singular memory bootstrap fallback * fix: note memory bootstrap fallback docs and changelog (openclaw#26054) (thanks @Lanfei) --------- Co-authored-by: Ayaan Zaidi <[email protected]>
* Docker: add OPENCLAW_TZ timezone support * fix: validate docker timezone names * fix: support Docker timezone override (openclaw#34119) (thanks @Lanfei) --------- Co-authored-by: Ayaan Zaidi <[email protected]>
…w#43780) * Android: fix HttpURLConnection leak in TalkModeVoiceResolver.listVoices * fix null errorStream NPE and preserve HTTP keep-alive * fix: restore voice resolver disconnect cleanup --------- Co-authored-by: Ayaan Zaidi <[email protected]>
…enai-completions (openclaw#44432) Reviewed-by: @frankekn
…ma fixture Adds the missing requiresOpenAiAnthropicToolPayload field to the model-compat schema acceptance test, guarding against regressions like openclaw#43339 where onboarding fails with "Unrecognized key". Closes openclaw#43339
…ter (openclaw#43403) * fix(agents): rephrase session reset prompt to avoid Azure content filter Azure OpenAI's content filter flags the phrase 'Execute your Session Startup sequence now' as potentially harmful, causing /new and /reset to return 400 for all Azure-hosted deployments. Replace 'Execute ... now' with 'Run your Session Startup sequence' in session-reset-prompt.ts and post-compaction-context.ts. The semantics are identical but the softer phrasing avoids the false-positive. Closes openclaw#42769 * ci: retrigger checks (windows shard timeout) * fix: add changelog for Azure startup prompt fix (openclaw#43403) (thanks @xingsy97) --------- Co-authored-by: Ayaan Zaidi <[email protected]>
…ema (openclaw#41171) Merged via squash. Prepared head SHA: 9522761 Co-authored-by: atian8179 <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf
…aw#42583) Merged via squash. Prepared head SHA: e37f965 Co-authored-by: stim64045-spec <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf
Merged via squash. Prepared head SHA: 4ba4a39 Co-authored-by: unisone <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf
* feat(ios): add onboarding welcome pager * feat(ios): add onboarding welcome pager (openclaw#45054) (thanks @ngutman)
…nclaw#35615) Merged via squash. Prepared head SHA: d81d332 Co-authored-by: ingyukoh <[email protected]> Co-authored-by: altaywtf <[email protected]> Reviewed-by: @altaywtf
…ension The msteams extension depends on @microsoft/agents-hosting but this dependency was not included in the root package.json, causing runtime errors when the MS Teams channel starts. Fixes openclaw#44857
…tems Add memory check before generating shell completion cache during updates. Skip cache generation if free memory is below 512MB to prevent OOM errors on low-memory systems (issue openclaw#45065). Also increased Node.js memory limit for the completion generation process and added error handling for graceful failure.
f9dfa07 to
becd91d
Compare
added 6 commits
March 13, 2026 18:12
Fix GHSA-qpjj-47vm-64pj: Missing authentication for local browser-control endpoints. Previously, when gateway.auth.mode was set to 'none' or 'trusted-proxy', the browser control server would start without authentication, allowing unauthorized local callers to invoke privileged browser operations. This fix removes the bypass for 'none' and 'trusted-proxy' modes, ensuring browser control always requires authentication regardless of gateway auth mode. CVSS: 7.5 (High) CWE: CWE-306 Missing Authentication for Critical Function
…urce Resolves openclaw#46494 - health command was showing running=false and tokenSource=none for Telegram even when channels status showed running=true and tokenSource=config. The health command was building channel status from config only, not querying the gateway for runtime status. Now it calls channels.status from gateway and merges runtime fields.
- Add runtime validation for gateway response structure - Extract getGatewayChannelData helper to avoid code duplication - Use proper TypeScript types instead of unsafe as assertions - Use const assertion for key arrays for better type safety
Resolves openclaw#46369 - cron.remove now cleans up: 1. Session record in sessions.json (by sessionKey or jobId) 2. Run history file in ~/.openclaw/cron/runs/ The fix adds cleanup logic in the gateway's cron.remove method to delete associated session records and history files when a cron job is removed.
Resolves openclaw#46411 - console.log with PATH was printed on every node start. Now only shown when OPENCLAW_DEBUG or VERBOSE is set.
Resolves openclaw#46520 - Origin validation now accepts custom URL schemes like tauri://, electron://, capacitor:// when listed in allowedOrigins. The parseOrigin function now handles non-standard schemes that fail new URL() parsing.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The msteams extension depends on @microsoft/agents-hosting but this dependency was not included in the root package.json, causing runtime errors when the MS Teams channel starts.
Fixes openclaw#44857