惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

GbyAI
GbyAI
Simon Willison's Weblog
Simon Willison's Weblog
Microsoft Security Blog
Microsoft Security Blog
Y
Y Combinator Blog
The GitHub Blog
The GitHub Blog
Engineering at Meta
Engineering at Meta
F
Fortinet All Blogs
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
A
About on SuperTechFans
Last Week in AI
Last Week in AI
月光博客
月光博客
有赞技术团队
有赞技术团队
P
Proofpoint News Feed
MyScale Blog
MyScale Blog
Martin Fowler
Martin Fowler
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
C
Check Point Blog
U
Unit 42
The Register - Security
The Register - Security
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Hugging Face - Blog
Hugging Face - Blog
阮一峰的网络日志
阮一峰的网络日志
V
Visual Studio Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
D
DataBreaches.Net
WordPress大学
WordPress大学
aimingoo的专栏
aimingoo的专栏
H
Hacker News: Front Page
Recent Announcements
Recent Announcements
C
CXSECURITY Database RSS Feed - CXSecurity.com
Latest news
Latest news
小众软件
小众软件
P
Palo Alto Networks Blog
PCI Perspectives
PCI Perspectives
Security Latest
Security Latest
S
Secure Thoughts
Scott Helme
Scott Helme
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
T
Threat Research - Cisco Blogs
P
Proofpoint News Feed
M
MIT News - Artificial intelligence
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Google DeepMind News
Google DeepMind News
Recorded Future
Recorded Future
O
OpenAI News
S
Securelist
云风的 BLOG
云风的 BLOG
H
Help Net Security
T
Troy Hunt's Blog

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311 test: trim remaining hotspot tests · openclaw/openclaw@6ba8626 test: narrow hotspot mocks · openclaw/openclaw@dbc8179 test: isolate gemini embedding request helpers · openclaw/openclaw@cd330f5 test: trim memory and mcp hotspots · openclaw/openclaw@fd48dfa test: slim provider registry mocks · openclaw/openclaw@2e08c77 test: harden Parallels update smoke · openclaw/openclaw@1a98090 feat: default Anthropic to Opus 4.7 · openclaw/openclaw@628b454 fix: harden node-host shell payload mutability checks · openclaw/openclaw@75c551e fix: land node-host approval binding for native binaries (#66731) (th… · openclaw/openclaw@29919bb CI: add daily schedule to CodeQL workflow (#67645) · openclaw/openclaw@69d25f5 fix(gateway): capture config hash after plugin auto-enable to prevent… · openclaw/openclaw@8c11210 fix: repair sanitized replay tool results before send (#67620) (thank… · openclaw/openclaw@c3c7a99 fix: restrict HTML timeout short-circuit to transient statuses · openclaw/openclaw@de129a6 fix: keep TUI watchdog bound to active run (#67401) (thanks @xantorres) · openclaw/openclaw@3525273 Gateway/skills: dedupe skills prefix-match + drop dead fallback on log · openclaw/openclaw@d7f489f Extensions/lmstudio: back off inference preload after consecutive fai… · openclaw/openclaw@b555214 TUI/streaming: add watchdog that resets the activity indicator after … · openclaw/openclaw@f44ab20 Agents/tool-loop: enable unknown-tool stream guard by default · openclaw/openclaw@36ed367 Gateway/skills: invalidate session skills snapshot on config write · openclaw/openclaw@b23d59a fix: classify HTML provider error pages correctly (#67642) (thanks @s… · openclaw/openclaw@e588e90 fix(skills): remove unused model-usage import (#67641) · openclaw/openclaw@55f05df docs(changelog): credit codex fix superseded PRs · openclaw/openclaw@e485f24 fix(openai-codex): normalize stale transport metadata in resolution a… · openclaw/openclaw@90801ba CI: pin Docker-related GitHub Actions (#67632) · openclaw/openclaw@f697b01 Android: modernize WebView and discovery API usage (#67627) · openclaw/openclaw@44a6e50 fix(deps): bump hono to 4.12.14 and @hono/node-server to 1.19.14 (GHS… · openclaw/openclaw@fbccc18 fix(deps): bump dompurify to 3.4.0 (#67614) · openclaw/openclaw@2c2dc00 CI: add explicit permissions to all workflow jobs (fixes code-scannin… · openclaw/openclaw@01b7516 fix: register bundled TTS providers and route overrides correctly (#6… · openclaw/openclaw@6ea3cdd fix: align host tilde paths with OS home (#62804) (thanks @stainlu) · openclaw/openclaw@ecfaf64 fix: flush creds queue before reconnect socket open (#67464) (thanks … · openclaw/openclaw@405c63f fix: strip standalone <function> tool call tags from visible text (#6… · openclaw/openclaw@78df859 fix(agents): preserve cli session metadata before transcript persist … · openclaw/openclaw@898fd04 docs(changelog): move cli transcript entry · openclaw/openclaw@c1817c6 fix(agents): normalize cli transcript api field · openclaw/openclaw@3a3fae0 docs(changelog): note cli transcript persistence · openclaw/openclaw@6c343f1 fix(agents): persist cli transcript turns · openclaw/openclaw@b8ef507 fix(msteams): harden security-sensitive flows (#65841) · openclaw/openclaw@c56b56e [Dashboard] Fix exec approval modal overflow for long command content… · openclaw/openclaw@053c5b0 Docs: remove QA changelog entry · openclaw/openclaw@7fd5771 QA: fix private runtime source loading (#67428) · openclaw/openclaw@d5933af docs(gateway): correct protocol.md schema path, hello-ok example, aut… · openclaw/openclaw@489404d CI: pin Node 22 runners to 22.18.0 · openclaw/openclaw@4ffa621 models.authStatus: normalize provider ids + tighten env-backed escape… · openclaw/openclaw@f2fdb9d Update CHANGELOG.md · openclaw/openclaw@7694a92 test(parallels): clean up npm update guard jobs · openclaw/openclaw@045ea7b Plugins: prefer scanDir override paths · openclaw/openclaw@b2974da fix(dreaming): default storage.mode to "separate" so phase blocks sto… · openclaw/openclaw@8c392f0 fix(memory-core): skip dreaming transcript ingestion via session stor… · openclaw/openclaw@a1b01f0 fix: dedupe replayed exec.finished node events (#67281) · openclaw/openclaw@5dcf526
fix(bedrock): omit Opus temperature for profiles · openclaw/openclaw@771846c
steipete · 2026-04-29 · via Recent Commits to openclaw:main

@@ -144,15 +144,27 @@ function resolvedModelSupportsCaching(modelArn: string): boolean {

144144

return matchesPiAiPromptCachingModelId(modelArn);

145145

}

146146147+

function isOpus47BedrockModelRef(modelRef: string): boolean {

148+

return /(?:^|[/.:])(?:(?:us|eu|ap|apac|au|jp|global)\.)?anthropic\.claude-opus-4[.-]7(?:$|[-.:/])/i.test(

149+

modelRef,

150+

);

151+

}

152+147153

/**

148154

* Resolve the underlying foundation model for an application inference profile

149155

* via GetInferenceProfile. Results are cached so we only call the API once per

150-

* profile ARN. Returns true if the underlying model supports prompt caching.

156+

* profile ARN. Returns traits needed for request shaping when the model id is

157+

* otherwise opaque.

151158

*

152159

* Region is extracted from the profile ARN itself to avoid mismatches when

153160

* the OpenClaw config region differs from the profile's home region.

154161

*/

155-

const appProfileCacheEligibleCache = new Map<string, boolean>();

162+

type BedrockAppProfileTraits = {

163+

cacheEligible: boolean;

164+

omitTemperature: boolean;

165+

};

166+167+

const appProfileTraitsCache = new Map<string, BedrockAppProfileTraits>();

156168157169

type BedrockGetInferenceProfileResponse = {

158170

models?: Array<{ modelArn?: string }>;

@@ -169,7 +181,7 @@ type BedrockControlPlaneFactory = (region: string | undefined) => BedrockControl

169181

let bedrockControlPlaneOverride: BedrockControlPlaneFactory | undefined;

170182171183

export function resetBedrockAppProfileCacheEligibilityForTest(): void {

172-

appProfileCacheEligibleCache.clear();

184+

appProfileTraitsCache.clear();

173185

}

174186175187

export function setBedrockAppProfileControlPlaneForTest(

@@ -190,27 +202,34 @@ async function createBedrockControlPlane(region: string | undefined): Promise<Be

190202

};

191203

}

192204193-

async function resolveAppProfileCacheEligible(

205+

async function resolveAppProfileTraits(

194206

modelId: string,

195207

fallbackRegion: string | undefined,

196-

): Promise<boolean> {

197-

if (appProfileCacheEligibleCache.has(modelId)) {

198-

return appProfileCacheEligibleCache.get(modelId)!;

208+

): Promise<BedrockAppProfileTraits> {

209+

const cached = appProfileTraitsCache.get(modelId);

210+

if (cached) {

211+

return cached;

199212

}

200213

try {

201214

const region = extractRegionFromArn(modelId) ?? fallbackRegion;

202215

const controlPlane = await createBedrockControlPlane(region);

203216

const resp = await controlPlane.getInferenceProfile({ inferenceProfileIdentifier: modelId });

204217

const models = resp.models ?? [];

205-

const eligible =

206-

models.length > 0 &&

207-

models.every((m: { modelArn?: string }) => resolvedModelSupportsCaching(m.modelArn ?? ""));

208-

appProfileCacheEligibleCache.set(modelId, eligible);

209-

return eligible;

218+

const modelArns = models.map((m: { modelArn?: string }) => m.modelArn ?? "");

219+

const traits = {

220+

cacheEligible:

221+

models.length > 0 && modelArns.every((modelArn) => resolvedModelSupportsCaching(modelArn)),

222+

omitTemperature: modelArns.some(isOpus47BedrockModelRef),

223+

};

224+

appProfileTraitsCache.set(modelId, traits);

225+

return traits;

210226

} catch {

211227

// Transient failures (throttling, network, IAM) should not be cached —

212228

// return the heuristic fallback but allow retry on the next request.

213-

return isAnthropicBedrockModel(modelId);

229+

return {

230+

cacheEligible: isAnthropicBedrockModel(modelId),

231+

omitTemperature: isOpus47BedrockModelRef(modelId),

232+

};

214233

}

215234

}

216235

@@ -279,6 +298,8 @@ export function registerAmazonBedrockPlugin(api: OpenClawPluginApi): void {

279298

/ValidationException.*(?:exceeds? the (?:maximum|max) (?:number of )?(?:input )?tokens)/i,

280299

/ModelStreamErrorException.*(?:Input is too long|too many input tokens)/i,

281300

] as const;

301+

const deprecatedTemperatureValidationRe =

302+

/ValidationException[\s\S]*(?:invalid_request_error[\s\S]*)?temperature[\s\S]*deprecated|ValidationException[\s\S]*deprecated[\s\S]*temperature/i;

282303

const anthropicByModelReplayHooks = ANTHROPIC_BY_MODEL_REPLAY_HOOKS;

283304

const startupPluginConfig = (api.pluginConfig ?? {}) as AmazonBedrockPluginConfig;

284305

@@ -306,6 +327,26 @@ export function registerAmazonBedrockPlugin(api: OpenClawPluginApi): void {

306327

return createBedrockNoCacheWrapper(streamFn);

307328

};

308329330+

function omitDeprecatedOpus47Temperature<TOptions extends object>(

331+

modelId: string,

332+

options: TOptions,

333+

): TOptions {

334+

if (!isOpus47BedrockModelRef(modelId) || !("temperature" in options)) {

335+

return options;

336+

}

337+

const next = { ...options } as typeof options & { temperature?: unknown };

338+

delete next.temperature;

339+

return next;

340+

}

341+342+

function omitDeprecatedOpus47PayloadTemperature(payload: Record<string, unknown>): void {

343+

const inferenceConfig = payload.inferenceConfig;

344+

if (!inferenceConfig || typeof inferenceConfig !== "object") {

345+

return;

346+

}

347+

delete (inferenceConfig as Record<string, unknown>).temperature;

348+

}

349+309350

/** Extract the AWS region from a bedrock-runtime baseUrl. */

310351

function extractRegionFromBaseUrl(baseUrl: string | undefined): string | undefined {

311352

if (!baseUrl) {

@@ -386,12 +427,13 @@ export function registerAmazonBedrockPlugin(api: OpenClawPluginApi): void {

386427

const region = resolveBedrockRegion(config) ?? extractRegionFromBaseUrl(model?.baseUrl);

387428

const mayNeedCacheInjection =

388429

isBedrockAppInferenceProfile(modelId) && !piAiWouldInjectCachePoints(modelId);

430+

const shouldOmitTemperature = isOpus47BedrockModelRef(modelId);

389431390432

// For known Anthropic models (heuristic match), enable injection immediately.

391433

// For opaque profile IDs, we'll resolve via GetInferenceProfile on first call.

392434

const heuristicMatch = needsCachePointInjection(modelId);

393435394-

if (!region && !mayNeedCacheInjection) {

436+

if (!region && !mayNeedCacheInjection && !shouldOmitTemperature) {

395437

return wrapped;

396438

}

397439

@@ -400,7 +442,10 @@ export function registerAmazonBedrockPlugin(api: OpenClawPluginApi): void {

400442

return wrapped;

401443

}

402444

return (streamModel, context, options) => {

403-

const merged = Object.assign({}, options, region ? { region } : {});

445+

const merged = omitDeprecatedOpus47Temperature(

446+

modelId,

447+

Object.assign({}, options, region ? { region } : {}),

448+

);

404449405450

if (!mayNeedCacheInjection) {

406451

return underlying(streamModel, context, merged);

@@ -416,25 +461,46 @@ export function registerAmazonBedrockPlugin(api: OpenClawPluginApi): void {

416461

// want caching enabled, so defaulting to "short" is the safer behavior.

417462

const cacheRetention =

418463

typeof merged.cacheRetention === "string" ? merged.cacheRetention : "short";

464+

const originalOnPayload = merged.onPayload as

465+

| ((payload: unknown, model: unknown) => unknown)

466+

| undefined;

419467420468

if (heuristicMatch) {

421-

// Fast path: ARN heuristic already identified this as Claude.

422-

return streamWithPayloadPatch(underlying, streamModel, context, merged, (payload) => {

423-

injectBedrockCachePoints(payload, cacheRetention);

469+

// Fast path: ARN heuristic already identified this as Claude, but the

470+

// concrete target may still need profile traits for Opus 4.7 payloads.

471+

const mayNeedTemperatureTrait = "temperature" in merged;

472+

return underlying(streamModel, context, {

473+

...merged,

474+

onPayload: async (payload: unknown, payloadModel: unknown) => {

475+

if (payload && typeof payload === "object") {

476+

const payloadRecord = payload as Record<string, unknown>;

477+

injectBedrockCachePoints(payloadRecord, cacheRetention);

478+

if (mayNeedTemperatureTrait) {

479+

const traits = await resolveAppProfileTraits(modelId, region);

480+

if (traits.omitTemperature) {

481+

omitDeprecatedOpus47PayloadTemperature(payloadRecord);

482+

}

483+

}

484+

}

485+

return originalOnPayload?.(payload, payloadModel);

486+

},

424487

});

425488

}

426489427490

// Slow path: opaque profile ID — resolve underlying model via API (cached).

428491

// pi-ai's onPayload supports async, so we await the resolution inline.

429-

const originalOnPayload = merged.onPayload as

430-

| ((payload: unknown, model: unknown) => unknown)

431-

| undefined;

432492

return underlying(streamModel, context, {

433493

...merged,

434494

onPayload: async (payload: unknown, payloadModel: unknown) => {

435-

const eligible = await resolveAppProfileCacheEligible(modelId, region);

436-

if (eligible && payload && typeof payload === "object") {

437-

injectBedrockCachePoints(payload as Record<string, unknown>, cacheRetention);

495+

const traits = await resolveAppProfileTraits(modelId, region);

496+

if (payload && typeof payload === "object") {

497+

const payloadRecord = payload as Record<string, unknown>;

498+

if (traits.cacheEligible) {

499+

injectBedrockCachePoints(payloadRecord, cacheRetention);

500+

}

501+

if (traits.omitTemperature) {

502+

omitDeprecatedOpus47PayloadTemperature(payloadRecord);

503+

}

438504

}

439505

return originalOnPayload?.(payload, payloadModel);

440506

},

@@ -450,6 +516,9 @@ export function registerAmazonBedrockPlugin(api: OpenClawPluginApi): void {

450516

if (/ModelNotReadyException/i.test(errorMessage)) {

451517

return "overloaded";

452518

}

519+

if (deprecatedTemperatureValidationRe.test(errorMessage)) {

520+

return "format";

521+

}

453522

return undefined;

454523

},

455524

resolveThinkingProfile: ({ modelId }) => ({