Commit Graph

Select branches

Hide Pull Requests

main

#1

Mono Color

• ece55b4682 refactor(shared): dedupe frontmatter parsing Peter Steinberger 2026-02-14 13:55:30 +00:00
• 1b03eb71aa refactor(health): share channel line styling Peter Steinberger 2026-02-14 13:52:59 +00:00
• bc0160d0f2 refactor(shared): dedupe requirements evaluation Peter Steinberger 2026-02-14 13:44:31 +00:00
• 06bc9f368b refactor(nodes): share node id matcher Peter Steinberger 2026-02-14 13:42:47 +00:00
• 81361755b7 refactor(reactions): share reaction level resolver Peter Steinberger 2026-02-14 13:35:21 +00:00
• b769b65b48 refactor(browser): share proxy file helpers Peter Steinberger 2026-02-14 13:35:11 +00:00
• d71f6afb7f refactor(line): centralize action helpers Peter Steinberger 2026-02-14 13:35:04 +00:00
• 25ecd4216c refactor(shared): dedupe config path eval Peter Steinberger 2026-02-14 13:34:55 +00:00
• b3882eccef refactor(config): share include scan helper Peter Steinberger 2026-02-14 13:34:46 +00:00
• 7fc1026746 refactor(gateway): share agent prompt builder Peter Steinberger 2026-02-14 13:34:30 +00:00
• e707a7bd36 refactor(memory): reuse runWithConcurrency Peter Steinberger 2026-02-14 13:34:16 +00:00
• 60a7625f2a refactor(agents): share glob matcher Peter Steinberger 2026-02-14 13:34:10 +00:00
• fdc3a6a809 build(tsconfig): map plugin-sdk account-id Peter Steinberger 2026-02-14 13:34:01 +00:00
• 50a6e0e69e fix: strip leading empty lines in sanitizeUserFacingText (#16280) Peter Steinberger 2026-02-14 16:34:02 +01:00
• aa1dbd34a1 docs: fix typo p-coding-agent -> pi-coding-agent Andres G. Aragoneses 2026-02-14 23:20:46 +08:00
• 3881af5b37 fix: strip leading whitespace from sanitizeUserFacingText output (#16158) Jake 2026-02-15 04:23:05 +13:00
• e3b432e481 fix(telegram): require sender ids for allowlist auth Peter Steinberger 2026-02-14 16:08:41 +01:00
• 09e1cbc35d fix(cron): pass agent identity through delivery path (#16218) (#16242) Robby 2026-02-14 16:08:51 +01:00
• 497b060e49 refactor: simplify manifest registry duplicate detection (#16260) Peter Steinberger 2026-02-14 16:04:41 +01:00
• a6fbd0393d fix(browser): annotate csrf middleware type Peter Steinberger 2026-02-14 15:54:29 +01:00
• abf6b4997e test(archive): accept drive-path absolute tar errors Peter Steinberger 2026-02-14 15:52:31 +01:00
• b87b16e2b6 docs(changelog): note browser CSRF hardening Peter Steinberger 2026-02-14 15:42:33 +01:00
• b566b09f81 fix(security): block cross-origin mutations on loopback browser routes Peter Steinberger 2026-02-14 15:40:56 +01:00
• 1f1fc095a0 refactor(sandbox): auto-recreate browser container on config changes (#16254) Peter Steinberger 2026-02-14 15:47:59 +01:00
• 31791233d6 fix(security): reject oversized base64 before decode Peter Steinberger 2026-02-14 15:45:04 +01:00
• 4f043991e0 fix: suppress false duplicate plugin warnings (#16222) (thanks @shadril238) (#16245) Peter Steinberger 2026-02-14 15:45:21 +01:00
• 4c7838e3cf refactor(archive): centralize limits and budgets Peter Steinberger 2026-02-14 15:43:44 +01:00
• 5f4b29145c test(archive): cover archive size and absolute tar paths Peter Steinberger 2026-02-14 15:34:03 +01:00
• d3ee5deb87 fix(archive): enforce extraction resource limits Peter Steinberger 2026-02-14 15:30:05 +01:00
• c8424bf29a fix(googlechat): deprecate users/<email> allowlists (#16243) Peter Steinberger 2026-02-14 15:31:26 +01:00
• 3967ece625 fix(security): OC-25 — Validate OAuth state parameter to prevent CSRF attacks (#16058) Aether AI 2026-02-15 01:28:52 +11:00
• cb9a5e1cb9 feat(sandbox): separate bind mounts for browser containers (#16230) seheepeak 2026-02-14 23:27:41 +09:00
• 302dafbe1a Docs: move submission guidance to GitHub templates (#16232) Tak Hoffman 2026-02-14 08:27:01 -06:00
• 493f6f458b perf(test): speed up browser test suites Peter Steinberger 2026-02-14 14:25:35 +00:00
• 57f40a5da6 perf(test): speed up config tests Peter Steinberger 2026-02-14 14:25:22 +00:00
• 788ea6e9d1 fix: suppress false duplicate plugin id warning for symlinked extensions shadril238 2026-02-14 19:49:23 +06:00
• 1a7e180e68 refactor(media): normalize inbound MediaType/MediaTypes defaults (#16233) Peter Steinberger 2026-02-14 15:18:19 +01:00
• 00a0890889 fix(media): bound input media payload sizes Peter Steinberger 2026-02-14 15:13:12 +01:00
• 4b1cadaecb refactor(media): normalize inbound media type defaults (#16228) Peter Steinberger 2026-02-14 15:06:13 +01:00
• e53a221e5c chore: format changelog Peter Steinberger 2026-02-14 15:03:07 +01:00
• 28d9dd7a77 fix(macos): harden openclaw deep links Peter Steinberger 2026-02-14 14:53:20 +01:00
• 644bef157a docs: clarify hook transform module path constraints Peter Steinberger 2026-02-14 14:06:24 +01:00
• 35c0e66ed0 fix(security): harden hooks module loading Peter Steinberger 2026-02-14 14:04:29 +01:00
• 3d0a41b584 test(gateway): isolate device identity in auth e2e Peter Steinberger 2026-02-14 14:57:06 +01:00
• 3a67721dae docs(security): fix canvas host docs formatting Peter Steinberger 2026-02-14 14:57:02 +01:00
• 6a386a7886 docs(security): clarify canvas host exposure and auth Peter Steinberger 2026-02-14 14:55:10 +01:00
• 8025e7c6c2 fix(discord): respect gateway TLS config in exec approvals handler (#16216) (thanks @jasonftl) jasonftl 2026-02-14 13:53:38 +00:00
• 842499d6c5 test(security): reject hook archives with traversal entries (#16224) Peter Steinberger 2026-02-14 14:53:33 +01:00
• 3aa94afcfd fix(security): harden archive extraction (#16203) Peter Steinberger 2026-02-14 14:42:08 +01:00
• 9a134c8a10 perf(test): tune parallel vitest worker split Peter Steinberger 2026-02-14 13:27:10 +00:00
• ce0eddd384 test: isolate test home before runtime imports Peter Steinberger 2026-02-14 13:27:03 +00:00
• 7d3e5788e8 fix: stop enforcing <final> for ollama (#16191) (thanks @Glucksberg) Peter Steinberger 2026-02-14 14:13:18 +01:00
• 74193ff754 fix(ollama): remove Ollama from isReasoningTagProvider (#2279) Glucksberg 2026-02-14 12:49:01 +00:00
• c76288bdf1 fix(slack): download all files in multi-image messages (#15447) Tanwa Arpornthip 2026-02-14 20:16:02 +07:00
• ef70a55b7a refactor(reply): clarify explicit reply tags in off mode (#16189) Peter Steinberger 2026-02-14 14:15:37 +01:00
• 6f7d31c426 fix(security): harden plugin/hook npm installs Peter Steinberger 2026-02-14 14:07:07 +01:00
• d69b32a073 docs(changelog): clarify hooks transform dir restriction Peter Steinberger 2026-02-14 14:02:05 +01:00
• d73b48b32c fix(ts): map plugin-sdk subpaths Peter Steinberger 2026-02-14 13:00:36 +00:00
• ec399aaddf perf(test): parallelize unit-isolated Peter Steinberger 2026-02-14 13:00:31 +00:00
• 18e8bd68c5 fix(security): block hook manifest path escapes Peter Steinberger 2026-02-14 14:00:17 +01:00
• 3bbd29bef9 perf(gateway): cache session list transcript fields Peter Steinberger 2026-02-14 12:52:46 +00:00
• a0361b8ba9 fix(security): restrict hook transform module loading Peter Steinberger 2026-02-14 13:45:58 +01:00
• 6543ce717c perf(test): avoid plugin-sdk barrel imports Peter Steinberger 2026-02-14 12:42:11 +00:00
• 1ba266a8e8 refactor: split minimax-cn provider Peter Steinberger 2026-02-14 13:37:04 +01:00
• bf080c2338 Merge remote-tracking branch 'origin/main' Peter Steinberger 2026-02-14 13:36:18 +01:00
• 274da72c38 Revert "fix: don't auto-create HEARTBEAT.md on workspace init (openclaw#12027) thanks @shadril238" (#16183) Tak Hoffman 2026-02-14 06:33:14 -06:00
• 83248f7603 Merge remote-tracking branch 'origin/main' Peter Steinberger 2026-02-14 13:30:22 +01:00
• af50b914a4 refactor(browser): centralize http auth Peter Steinberger 2026-02-14 13:30:11 +01:00
• a2b45e1c13 fix(gateway): relax http tool deny typing Peter Steinberger 2026-02-14 13:29:50 +01:00
• 7b39543e8d fix(reply): honour explicit [[reply_to_*]] tags when replyToMode is off (#16174) Aldo 2026-02-14 06:29:42 -06:00
• 0af76f5f0e refactor(gateway): centralize node.invoke param sanitization Peter Steinberger 2026-02-14 13:26:15 +01:00
• c15946274e fix(gateway): allowlist system.run params Peter Steinberger 2026-02-14 13:18:21 +01:00
• a7af646fdf fix(gateway): bind approval ids to device identity Peter Steinberger 2026-02-14 13:16:03 +01:00
• 318379cdba fix(gateway): bind system.run approvals to exec approvals Peter Steinberger 2026-02-14 13:02:48 +01:00
• 233483d2b9 refactor(security): centralize dangerous tool lists Peter Steinberger 2026-02-14 13:25:28 +01:00
• 0cfea46293 fix: wire minimax-api-key-cn onboarding (#15191) (thanks @liuy) Peter Steinberger 2026-02-14 13:16:18 +01:00
• 9bb099736b feat: add minimax-api-key-cn option for China API endpoint Liu Yuan 2026-02-13 09:32:12 +08:00
• cd84885a4a test(browser): cover bridge auth registry fallback Peter Steinberger 2026-02-14 13:23:24 +01:00
• 586176730c perf(gateway): optimize sessions/ws/routing Peter Steinberger 2026-02-14 12:16:26 +00:00
• c90b3e4d5e perf(cli): speed up startup Peter Steinberger 2026-02-14 12:16:16 +00:00
• a7a08b6650 test(gateway): cover tools allow/deny precedence Peter Steinberger 2026-02-14 13:14:17 +01:00
• 153a7644ea fix(acp): tighten safe kind inference Peter Steinberger 2026-02-14 13:07:29 +01:00
• 6dd6bce997 fix(security): enforce sandbox bridge auth Peter Steinberger 2026-02-14 13:17:41 +01:00
• eb4215d570 perf(test): speed up Vitest bootstrap Peter Steinberger 2026-02-14 12:13:18 +00:00
• 626a225c08 docs: fix merge-pr comment variable expansion Mariano Belinky 2026-02-14 12:07:00 +00:00
• f8ba8f7699 fix(docs): update outdated hooks documentation URLs (#16165) Nicholas 2026-02-14 20:05:37 +08:00
• 01d2ad2050 docs: harden maintainer and advisory workflow (#16173) Mariano 2026-02-14 11:59:19 +00:00
• 79e78cff3b docs(changelog): thank reporter for ACP hardening Peter Steinberger 2026-02-14 12:54:47 +01:00
• 4711a943e3 fix(browser): authenticate sandbox browser bridge server Peter Steinberger 2026-02-14 12:54:16 +01:00
• bb1c3dfe10 fix(acp): prompt for non-read/search permissions Peter Steinberger 2026-02-14 12:53:27 +01:00
• 9e24eee52c docs(changelog): note audit warning for gateway tools override Peter Steinberger 2026-02-14 12:48:48 +01:00
• 539689a2f2 feat(security): warn when gateway.tools.allow re-enables dangerous HTTP tools Peter Steinberger 2026-02-14 12:44:43 +01:00
• fba19fe942 docs: link trusted-proxy auth from gateway docs (#16172) Peter Steinberger 2026-02-14 12:44:25 +01:00
• 3b56a6252b chore!: remove moltbot legacy state/config support Peter Steinberger 2026-02-14 12:40:41 +01:00
• e21a7aad54 docs: recommend loopback-only gateway bind Peter Steinberger 2026-02-14 12:36:23 +01:00
• 1fb52b4d7b feat(gateway): add trusted-proxy auth mode (#15940) Nick Taylor 2026-02-14 06:32:17 -05:00
• 3a330e681b fix(feishu): remove typing indicator on NO_REPLY cleanup (openclaw#15508) thanks @arosstale Artale 2026-02-14 12:24:27 +01:00
• 6182d3ef85 test: increase live-model retry token budget for reasoning-first providers Peter Steinberger 2026-02-14 12:23:45 +01:00
• 9475791d98 fix: update remaining replyToMode "first" defaults to "off" Pejman Pour-Moezzi 2026-02-13 22:21:08 -08:00
• c17a109daa fix: align extension plugin and docs with new replyToMode default Pejman Pour-Moezzi 2026-02-13 22:11:55 -08:00