Commit Graph

8167 Commits

Author SHA1 Message Date
Vignesh
f72b881276 docs: fix formal verification route (#2583) 2026-01-26 20:50:11 -08:00
Gustavo Madeira Santana
d2b5037203 fix: auto-scroll to bottom on user send (#2471) (thanks @kennyklee) 2026-01-26 23:46:02 -05:00
Gustavo Madeira Santana
913530402d fix: local updates for PR #2471
Co-authored-by: kennyklee <kennyklee@users.noreply.github.com>
2026-01-26 23:46:02 -05:00
Kenny Lee
4c2d8eedb0 fix(macos): auto-scroll to bottom when sending message while scrolled up
When the user sends a message while reading older messages, scroll to
bottom so they can see their sent message and the response.

Fixes #2470

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 23:46:02 -05:00
Vignesh
066b222b28 docs: publish formal verification page in docs index 2026-01-26 20:38:07 -08:00
vignesh07
b3003ed1aa docs: add formal verification page to Mintlify navigation 2026-01-26 20:37:23 -08:00
Vignesh
2d24e65d19 docs(security): fix formal verification docs URL 2026-01-26 20:33:13 -08:00
vignesh07
39260e7055 docs(security): publish formal verification page under gateway/security 2026-01-26 20:32:12 -08:00
Vignesh
552b2956d4 Merge pull request #2568 from clawdbot/docs/formal-verification
docs(security): add formal verification page
2026-01-26 20:27:11 -08:00
Peter Steinberger
1b219cc5cb fix(macos): gate project-local node_modules bins to DEBUG 2026-01-27 04:17:40 +00:00
vignesh07
e487fe2fc4 docs(security): improve formal verification page reproducibility 2026-01-26 20:16:33 -08:00
vignesh07
e03e2ba11a docs(security): clarify formal models caveats and reproduction 2026-01-26 20:13:20 -08:00
vignesh07
286b3caf2f docs(security): add formal verification page (draft) 2026-01-26 20:13:20 -08:00
Gustavo Madeira Santana
2044b3ca8d Build: restore A2UI scaffold assets (#2455) (thanks @0oAstro)
Co-authored-by: 0oAstro <0oAstro@users.noreply.github.com>
2026-01-26 23:08:25 -05:00
Gustavo Madeira Santana
b8645e98b6 Build: update A2UI bundle hash (#2455) (thanks @0oAstro)
Co-authored-by: 0oAstro <0oAstro@users.noreply.github.com>
2026-01-26 23:08:25 -05:00
Gustavo Madeira Santana
c2a4863b15 Build: stop tracking bundled artifacts (#2455) (thanks @0oAstro)
Co-authored-by: 0oAstro <0oAstro@users.noreply.github.com>
2026-01-26 23:08:25 -05:00
0oAstro
615ccf6411 git: stop tracking bundled build artifacts
These files are generated at build time and shouldn't be committed:
- dist/control-ui assets (JS/CSS bundles)
- src/canvas-host/a2ui bundle files

This removes ~100MB+ of bloat from git history by no longer tracking
repeatedly regenerated bundle files. Add to .gitignore to prevent
accidental re-addition.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-26 23:08:25 -05:00
Peter Steinberger
1cca0e5072 chore: warn on weak uuid fallback 2026-01-27 04:00:30 +00:00
Peter Steinberger
912c869ed1 test(exec): quote PATH injection string 2026-01-27 04:00:23 +00:00
Peter Steinberger
407498172c test(exec): normalize PATH injection quoting 2026-01-27 04:00:22 +00:00
Peter Steinberger
771f23d36b fix(exec): prevent PATH injection in docker sandbox 2026-01-27 04:00:22 +00:00
Peter Steinberger
83de980d6c style: wrap fs-safe 2026-01-27 03:35:08 +00:00
Peter Steinberger
71196fb150 style: format fs-safe 2026-01-27 03:35:07 +00:00
Peter Steinberger
5eee991913 fix: harden file serving 2026-01-27 03:35:07 +00:00
Peter Steinberger
8b56f0e68d docs: warn against public web binding 2026-01-27 03:30:34 +00:00
Peter Steinberger
e7fdccce39 refactor: route browser control via gateway/node 2026-01-27 03:24:54 +00:00
Vignesh
b151b8d196 test: stabilize CLI hint assertions under CLAWDBOT_PROFILE (#2507) 2026-01-26 19:20:54 -08:00
Gustavo Madeira Santana
959ddae612 Agents: finish cooldowned provider skip (#2534)
* Agents: skip cooldowned providers in fallback

* fix: skip cooldowned providers during model failover (#2143) (thanks @YiWang24)
2026-01-26 22:05:31 -05:00
Yi Wang
ff42a48b54 Skip cooldowned providers during model failover (#2143)
* feat(agents): skip cooldowned providers during failover

When all auth profiles for a provider are in cooldown, the failover
mechanism now skips that provider immediately rather than attempting
and waiting for the cooldown error. This prevents long delays when
multiple OAuth providers fail in sequence.

* fix(agents): correct imports and API usage for cooldown check
2026-01-26 21:59:38 -05:00
Shakker Nerd
dce7925e2a fix: inherit main agent credentials on secondary agent refresh failure
Merges #2480
2026-01-27 02:39:49 +00:00
Shakker Nerd
357ff6edb2 feat: Add test case for OAuth fallback failure when both secondary and main agent credentials are expired and migrate fs operations to promises API. 2026-01-27 02:37:52 +00:00
Shadow
ba5f3198e9 fix: summarize dropped compaction messages (#2509) (thanks @jogi47) 2026-01-26 20:35:08 -06:00
jigar
dde9605874 Agents: summarize dropped messages during compaction safeguard pruning (#2418) 2026-01-26 20:35:08 -06:00
Shadow
7d5221bcb2 fix: centralize telegram api error logging (#2492) (thanks @altryne) 2026-01-26 20:32:21 -06:00
Shadow
9e200068dc telegram: centralize api error logging 2026-01-26 20:27:36 -06:00
Shakker
45ca0d9052 Merge branch 'main' into fix/secondary-agent-oauth-fallback 2026-01-27 02:17:50 +00:00
Gustavo Madeira Santana
66a5b324a1 fix: harden session lock cleanup (#2483) (thanks @janeexai) 2026-01-26 21:16:05 -05:00
Shadow
5796a92231 fix: log telegram API fetch errors (#2492) (thanks @altryne) 2026-01-26 20:04:05 -06:00
wolfred
241436a525 fix: handle fetch/API errors in telegram delivery to prevent gateway crashes
Wrap all bot.api.sendXxx() media calls in delivery.ts with error handler
that logs failures before re-throwing. This ensures network failures are
properly logged with context instead of causing unhandled promise rejections
that crash the gateway.

Also wrap the fetch() call in telegram onboarding with try/catch to
gracefully handle network errors during username lookup.

Fixes #2487

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 20:04:05 -06:00
Shakker Nerd
d5f2924b5a fix(msteams): use sendActivity for typing indicator
Merges #1810
2026-01-27 02:02:37 +00:00
Shakker Nerd
e33114551d Merge branch 'main' into pr-1810 2026-01-27 02:01:19 +00:00
Shadow
260f6e2c00 Docs: fix /scripts redirect loop 2026-01-26 19:57:49 -06:00
Shakker Nerd
f300875dfe Fix: Corrected the sendActivity parameter type from an array to a single activity object 2026-01-27 01:57:13 +00:00
Glucksberg
481bd333eb fix(gateway): gracefully handle AbortError and transient network errors (#2451)
* fix(tts): generate audio when block streaming drops final reply

When block streaming succeeds, final replies are dropped but TTS was only
applied to final replies. Fix by accumulating block text during streaming
and generating TTS-only audio after streaming completes.

Also:
- Change truncate vs skip behavior when summary OFF (now truncates)
- Align TTS limits with Telegram max (4096 chars)
- Improve /tts command help messages with examples
- Add newline separator between accumulated blocks

* fix(tts): add error handling for accumulated block TTS

* feat(tts): add descriptive inline menu with action descriptions

- Add value/label support for command arg choices
- TTS menu now shows descriptive title listing each action
- Capitalize button labels (On, Off, Status, etc.)
- Update Telegram, Discord, and Slack handlers to use labels

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(gateway): gracefully handle AbortError and transient network errors

Addresses issues #1851, #1997, and #2034.

During config reload (SIGUSR1), in-flight requests are aborted, causing
AbortError exceptions. Similarly, transient network errors (fetch failed,
ECONNRESET, ETIMEDOUT, etc.) can crash the gateway unnecessarily.

This change:
- Adds isAbortError() to detect intentional cancellations
- Adds isTransientNetworkError() to detect temporary connectivity issues
- Logs these errors appropriately instead of crashing
- Handles nested cause chains and AggregateError

AbortError is logged as a warning (expected during shutdown).
Network errors are logged as non-fatal errors (will resolve on their own).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(test): update commands-registry test expectations

Update test expectations to match new ResolvedCommandArgChoice format
(choices now return {label, value} objects instead of plain strings).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: harden unhandled rejection handling and tts menus (#2451) (thanks @Glucksberg)

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Shadow <hi@shadowing.dev>
2026-01-26 19:51:53 -06:00
Shadow
d8e5dd91ba fix: clean up session locks on exit (#2483) (thanks @janeexai) 2026-01-26 19:48:46 -06:00
Jane
14f8acdecb fix(agents): release session locks on process termination
Adds process exit handlers to release all held session locks on:
- Normal process.exit() calls
- SIGTERM / SIGINT signals

This ensures locks are cleaned up even when the process terminates
unexpectedly, preventing the 'session file locked' error.
2026-01-26 19:46:04 -06:00
Shakker
761cb01e20 Merge branch 'main' into main 2026-01-27 01:39:22 +00:00
Yuan Chen
27174f5d82 bugfix:The Mintlify navbar (logo + search bar with ⌘K) scrolls away w… (#2445)
* bugfix:The Mintlify navbar (logo + search bar with ⌘K) scrolls away when scrolling down the documentation, so it disappears from view.

* fix(docs): keep navbar visible on scroll (#2445) (thanks @chenyuan99)

---------

Co-authored-by: vignesh07 <vigneshnatarajan92@gmail.com>
2026-01-26 17:39:10 -08:00
Gustavo Madeira Santana
2f7fff8dcd CLI: add changelog for versioned node argv (#2490) (thanks @David-Marsh-Photo) 2026-01-26 20:29:47 -05:00
Gustavo Madeira Santana
566c9982b3 CLI: expand versioned node argv handling 2026-01-26 20:29:47 -05:00