Dev by tmlxrd · Pull Request #21 · iClawApp/iClaw

tmlxrd · 2026-06-08T12:09:07Z

Summary

Changes

…

Screenshots / GIFs

How to test

Checklist

PR targets dev
npm run typecheck passes
npm run build passes
Updated CHANGELOG.md under [Unreleased] if user-visible
Updated ROADMAP.md if a planned item is now done
No new heavyweight dependencies (or motivated in the description)

@deprecated

Drop the @deprecated isE2ePlaintextExemptPath wrapper — zero callers in src/ or test/; its replacement isE2ePlaintextTunnelExempt is the only path used. Pure dead-code removal, no behaviour change. Bump 0.2.1 → 0.2.2. typecheck clean; 366 tests pass. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

highlightCodeBlocks() called hljs.highlightElement() unconditionally, so fences without a language tag fell back to highlight.js auto-detection. That mis-classified prose as Ruby — an apostrophe (e.g. "пам'ятає") opens a string literal and the github-dark theme dims the rest of the block, making plain text hard to read. Now highlight only when the fence declares a language hljs recognizes; bare/unknown/text fences render as plain monospace (no auto-detect). Explicit-language blocks still highlight normally, so Cyrillic in code comments is unaffected. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

- Config-driven modes in services/chatModes.ts (ask, execute + disabled research/image/safe_run placeholders); single source of truth, extensible. - Persist mode per message (messages.mode) and per queued row (queued_messages.mode); idempotent ensureColumn migrations, plain TEXT. - Thread mode frontend -> WS 'send' -> chatRunner -> queue flush; missing/ unknown -> 'execute' so legacy chats and older clients keep working. - Ask prepends a lightweight 'answer, don't execute' directive to the gateway message; Execute is byte-for-byte unchanged. Seams left for routing Ask to a no-tools OpenClaw profile or OpenRouter later (see chatModes.ts + README). - Minimal composer pill + dropdown selector, choice persisted in localStorage.

Ask no longer relies only on a prompt instruction. When a tools-restricted agent exists on the gateway (ICLAW_ASK_AGENT, default 'ask'), each Ask turn runs on a throwaway session bound to it, so OpenClaw enforces its tool policy and the model physically cannot use shell/file/browser tools. The fresh session is seeded with a compact snapshot of the recent thread so Ask keeps context; the reply lands in the same chat thread. - config: loadAskAgentId() (ICLAW_ASK_AGENT; empty/off disables hard Ask) - openclawWs: cached agentExists() via agents.list - chatRunner: resolveTurnTarget() routes ask->ephemeral restricted session (seeded context) or falls back to the soft prompt-only preamble; Execute unchanged. activeRunSessionKeys lets abort target the ephemeral ask session. - docs: README hard-vs-soft Ask + config example + v1 limits; .env.example. v1 limitation: Execute's native session memory doesn't include Ask turns (Ask->Execute bridge via chat.inject is a planned follow-up).

After a hard-Ask turn (which runs on a throwaway tools-restricted session), the chat's main Execute session has no native memory of it. Append a compact [Ask] Q&A note to the main session via chat.inject — no model run, zero cost — so a later Execute turn sees the exchange. Best-effort; stored content keeps secret placeholders so nothing sensitive is injected. - openclawWs.injectMessage({sessionKey,message,label}) - chatRunner: buildAskBridgeNote + inject after successful hard-Ask turn - README: context now bridged both ways

Previously Ask silently fell back to a prompt-only 'please don't use tools' turn on the full-tools session when the ask agent wasn't configured — so the model could (and did) still create files. That fail-open is removed. Now: a lightweight (Ask) turn runs only on the tools-restricted ask agent. If that agent isn't configured/present (or ICLAW_ASK_AGENT is empty), chatRunner refuses the turn with a system note instead of running with tools. No prompt-only path remains. - chatRunner: fail-closed gate before turn start; resolveTurnTarget no longer has a soft branch. - chatModes: drop ASK_PREAMBLE + applyModeToGatewayMessage (dead); update notes. - README/.env.example: document fail-closed behavior (no prompt fallback).

- New openRouter.ts: streaming/non-streaming chat completions + audio transcription (transcribeAudio) via /chat/completions. No extra deps — Node 25 global fetch. - New kv.ts: tiny iclaw_kv accessor (key/value over existing DB table) so config can read settings without pulling store.ts (cycle-free). - config.ts: loadOpenRouterConfig reads API key from KV (set in Settings, not .env); adds setOpenRouterApiKey / clearOpenRouterApiKey / maskOpenRouterApiKey. - chatTitle.ts: prefer cheap OpenRouter call for titles; fall back to OpenClaw session when key absent or call fails. - chatModes.ts: Ask gated on openRouterEnabled() — hidden from composer without key, posted 'ask' coerced to 'execute'. - chatRunner.ts: Ask branch replaced — direct OpenRouter stream (gemini- 2.0-flash default), AbortController for Stop, chat.inject bridge into main OpenClaw session preserved. Removed ask-agent machinery (ICLAW_ASK_AGENT, resolveTurnTarget, ASK_PREAMBLE). No prompt-only fallback. - index.ts route: POST /api/stt endpoint (express.raw, 25 MB limit) → transcribeAudio → {text}; sttEnabled local for views. - chats.ts: pass sttEnabled to chat view. - .env.example / README: key is now set in Settings UI, not env. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Add mic button next to the send button (rendered only when OPENROUTER_API_KEY is set via Settings). - composer.ejs: mic button with idle/recording/busy SVG states; gated on sttEnabled EJS local. - iclaw.js: mic JS — MediaRecorder recording, pickMicMime(), transcribeBlob() POST to /api/stt, insertTranscript() into composer textarea on success. Stop mic on second click; spinner during transcription; alert on error. - style.css: .composer-mic — mirrors .composer-attach tokens (32px circle, --muted, color-mix hover). Recording state: --danger color + 12% tint bg + pulse animation. Busy state: spinner replaces mic icon. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Settings is now sectioned by URL (/settings/voice-ask, /settings/remote-access) with pill-tab navigation. /settings redirects to the first tab. Voice & Ask page: - Minimal CTA: one-liner description + monospace key input + Connect button + openrouter.ai/keys link. No perks list (removed as noise). - Connected state: green dot, masked key (sk-or-v••••••••xxxx), Disconnect button, live spend readout ($0.42 spent / $9.58 remaining + thin progress bar loaded async from /api/openrouter/usage). - Endpoints: POST /api/openrouter/key (save+validate), DELETE /api/openrouter/key (clear), GET /api/openrouter/usage (fetchUsage). - Key validated for sk-or- prefix; 400 on bad format. - Page reloads on connect/disconnect so composer picks up new key state. settings.ts: sidebarLocals() helper; per-tab routes with only the locals each tab needs. RA script/modal/dialog gated in EJS so they don't load on voice-ask tab. sidebar.ejs: settings gear links directly to /settings/voice-ask. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

- Extend ChatMode type to include 'work' - Add Work Mode entry in CHAT_MODES catalog (requires OpenRouter key) - Wire chatRunner to route 'work' turns to iclaw-runtime service - Add workRuntime.ts HTTP client (port 7430, SSE events) - Add packages/iclaw-runtime/ — NanoClaw fork stripped to essentials: - No OneCLI dependency (removed) - No Telegram/WhatsApp/Slack/Discord channels - OpenRouter via ANTHROPIC_BASE_URL env passthrough - New iclaw-http channel: HTTP/SSE API for iClaw browser UI - Approval flow simplified for browser-first approval - Mount security module intact (path traversal prevention) - Convert repo to npm workspaces monorepo Attribution: packages/iclaw-runtime/ forked from NanoClaw (MIT) https://github.com/nanocoai/nanoclaw Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Spawns packages/iclaw-runtime/src/index.ts via tsx when iClaw starts, shuts it down on SIGINT/SIGTERM. Auto-restarts on crash (max 5 times per minute). No-op when iclaw-runtime is not installed. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Voice & Ask section now shows a bullet list of what the key unlocks: voice messages, Ask mode, Work mode (with description), auto-named chats. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>