release: promote beta to main (runtime CVE refresh + auth/reconnect/e2e fixes) - #321

Merged

KrasimirKralev merged 73 commits into

mainfrom

Aug 8, 2026

Commits on Jul 8, 2026

fix(mascot): stop phrase-regen from swap-spiraling memory-pressured boxes

yalexx
and
claude
committed
4598284

Commits on Jul 20, 2026

Commits on Jul 21, 2026

fix: migrate legacy openai/<gpt> model+fallbacks to codex on startup (#266)

authored
120fcd3

Commits on Jul 22, 2026

fix(3.1.10): responsive chat header pills (wrap instead of overlap on narrow chat) (#267)

authored
c7beb31
fix(mascot): stop crab teleporting to the left corner on tap

Mike
and
claude
committed
a95d4e1

Commits on Jul 23, 2026

feat(3.1.10): new chat open animation + mascot panel-clearance + no chat auto-open
Mike SEO Bot
committed
61aed05
feat(3.1.10): uniform off/low/medium/high reasoning picker across all cloud providers
Mike SEO Bot
committed
410525c
fix(3.1.10): smooth reload/provider-switch progress bar (compositor-only, no jank)
Mike SEO Bot
committed
7159406
feat(codex): surface gpt-5.6-sol/terra/luna in the model picker for entitled ChatGPT accounts
Mike SEO Bot
committed
603832d
Merge pull request #269 from ID-Robots/fix/3.1.10-ui-anim
yalexx
authored
92bd39c

Commits on Jul 25, 2026

Point all references at clawbox.com, strengthen README entity/SEO

yalexx
authored and
Mike SEO Bot
committed
a923e57
Merge pull request #270 from ID-Robots/fix/clawbox-com-references-and-readme
yalexx
authored
96a17a5

Commits on Jul 26, 2026

fix(gateway): stop update/boot from bricking the box (3.1.11)
Mike SEO Bot
committed
9f7b090
fix(memory): local Ollama embeddings so semantic memory works without an API key (3.1.11)
Mike SEO Bot
committed
e029a20

Commits on Jul 27, 2026

Commits on Jul 28, 2026

docs: correct Wi-Fi spec and local-model performance to measured values (#277)

yalexx
and
claude
authored
6b10737
fix(codex): stop mirroring the rotating refresh token into every codex-home

Mike SEO Bot
and
claude
committed
4c20cea
fix(codex): make the sync unit survive a box that has never logged in

Mike SEO Bot
and
claude
committed
966bec8
Merge pull request #278 from ID-Robots/fix/codex-refresh-token-fanout
yalexx
authored
e403dbc
fix(codex): restore the credential #278 broke, and migrate legacy auth profiles

Mike SEO Bot
and
claude
committed
b5d5d22
Merge pull request #279 from ID-Robots/fix/codex-mirror-needs-refresh-token
yalexx
authored
43f1089
fix(codex): route codex turns through the app-server harness so they work

Mike SEO Bot
and
claude
committed
e8ecd82
Merge pull request #280 from ID-Robots/fix/codex-agent-runtime
yalexx
authored
aeb34cd

Commits on Aug 8, 2026

fix: handle expired VNC setup sessions

Baxter
authored and
KrasimirKralev
committed
2ba87d1
fix: detect base-path login redirects

Baxter
authored and
KrasimirKralev
committed
f42d078
refactor(vnc): fold repeated auth-expired handling into setupFetch

KrasimirKralev
and
claude
committed
e1e6823
fix(update): add 'Force full update' recovery action for force-update.sh

KrasimirKralev
and
claude
committed
05f3738
Merge pull request #303 from ID-Robots/fix/vnc-setup-expired-auth
KrasimirKralev
authored
a2c4cab
Merge main into beta — reconverge history after v3.1.10/v3.1.11 promotions
KrasimirKralev
committed
a3e88e2
fix(update): address /code-review on the Force-full-update affordance

KrasimirKralev
and
claude
committed
97a12f2
Merge branch 'beta' into fix/force-update-openclaw-handoff
KrasimirKralev
authored
e6a8118
Merge pull request #305 from ID-Robots/fix/force-update-openclaw-handoff
KrasimirKralev
authored
1e42d37
fix(gateway): preserve canonical token SecretRefs

Baxter
authored and
KrasimirKralev
committed
2784405
refactor(gateway): drop redundant key-presence checks in isGatewaySecretRef

KrasimirKralev
and
claude
committed
4c3f7ad
Merge pull request #306 from ID-Robots/fix/gateway-secretref-preserve
KrasimirKralev
authored
4e18a4d
fix(gateway): bound permanent startup failures

clawbox
authored and
KrasimirKralev
committed
32c5341
fix(gateway): harden breaker diagnostics

clawbox
authored and
KrasimirKralev
committed
c8d155d
fix(gateway): address /code-review on the breaker diagnostics

KrasimirKralev
and
claude
committed
50b0cdf
Merge pull request #308 from ID-Robots/fix/gateway-restart-limiter
KrasimirKralev
authored
0e7dfb1
feat(gateway): support trusted control UI origins

Baxter
authored and
KrasimirKralev
committed
f4769a0
fix(gateway): harden trusted origin handling

clawbox
authored and
KrasimirKralev
committed
9660443
fix(gateway): address /code-review on trusted origins

KrasimirKralev
and
claude
committed
b1dbcaa
test(gateway): cover additive reflection + TS/Python origin parity

KrasimirKralev
and
claude
committed
25ed4e1
fix(gateway): fall back gracefully on a malformed Host port

KrasimirKralev
and
claude
committed
63c7bc0
Merge pull request #313 from ID-Robots/fix/configurable-trusted-origins-v2
KrasimirKralev
authored
0623092
OpenRouter: stop rejecting every free model id (#283)

authored
40f1210
fix(auth): return JSON 401 for all expired /setup-api/* requests (#316)
KrasimirKralev
authored
2a0585c
refactor: extract shared useReconnect hook for reconnect overlays (#191) (#317)
KrasimirKralev
authored
c262f39
fix(e2e): warm Turbopack before the suite (partially addresses #114) (#318)
KrasimirKralev
authored
cce2026
fix(e2e): run the suite against a production build (#319)
KrasimirKralev
authored
3a9f6ef
fix(deps): patch runtime security advisories (#315)
KrasimirKralev
authored
fc7488e
test(e2e): re-enable mascot-context, scope desktop-selection (toward #114) (#320)
KrasimirKralev
authored
6abb8c3
Merge branch 'main' into beta
KrasimirKralev
authored
1a621a5