Dima/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • d6eefe2e75 style: format auth boundary updates Peter Steinberger 2026-02-26 18:50:47 +01:00
  • 262bca9bdd fix: restore dm command and self-chat auth behavior Peter Steinberger 2026-02-26 18:46:51 +01:00
  • 64de4b6d6a fix: enforce explicit group auth boundaries across channels Peter Steinberger 2026-02-26 18:15:57 +01:00
  • d0d83a2020 docs(changelog): add PR #17017 entry Shakker 2026-02-26 17:04:00 +00:00
  • fe842b5f14 test(auto-reply): cover inbound timestamp guard Shakker 2026-02-26 16:37:18 +00:00
  • c596658b8d feat(auto-reply): make agent time-aware with message timestamps Liu Yuan 2026-02-15 13:38:28 +08:00
  • 10481097f8 refactor(security): enforce v1 node exec approval binding Peter Steinberger 2026-02-26 18:08:51 +01:00
  • f4391c1725 docs(security): clarify Teams fileConsent uploadUrl report scope Peter Steinberger 2026-02-26 17:58:22 +01:00
  • 9597cf1890 docs(security): scope obfuscation parity reports as hardening Peter Steinberger 2026-02-26 17:58:20 +01:00
  • edf7ad9b7d add me to Maintainers list joshavant 2026-02-26 10:55:03 -06:00
  • 9f154efa8d docs(acp): expand /acp operator playbook Peter Steinberger 2026-02-26 16:49:08 +00:00
  • c5facb8477 fix(discord): avoid invalid /acp native option payload Peter Steinberger 2026-02-26 16:48:59 +00:00
  • cd80c7e7ff refactor: unify dm policy store reads and reason codes Peter Steinberger 2026-02-26 17:47:51 +01:00
  • 53e30475e2 test(agents): add compaction and workspace reset regressions Peter Steinberger 2026-02-26 17:40:29 +01:00
  • 0ec7711bc2 fix(agents): harden compaction and reset safety Peter Steinberger 2026-02-26 17:35:55 +01:00
  • 273973d374 refactor: unify typing dispatch lifecycle and policy boundaries Peter Steinberger 2026-02-26 17:36:09 +01:00
  • 6fd9ec97de fix(gateway): preserve turn-origin messageChannel in agent runs Peter Steinberger 2026-02-26 17:25:50 +01:00
  • 08e3357480 refactor: share gateway security path canonicalization Peter Steinberger 2026-02-26 17:23:41 +01:00
  • 15e3e63705 protocol: regenerate Swift models for exec env field Shakker 2026-02-26 16:19:44 +00:00
  • b044c149c1 Mattermost: avoid raw fetch in monitor media download Shakker 2026-02-26 16:03:20 +00:00
  • 8a51891ed5 test(exec-approvals): cover v1 binding precedence and mismatch mapping Peter Steinberger 2026-02-26 17:02:43 +01:00
  • 258d615c4d fix: harden plugin route auth path canonicalization Peter Steinberger 2026-02-26 17:01:41 +01:00
  • 37a138c554 fix: harden typing lifecycle and cross-channel suppression Peter Steinberger 2026-02-26 17:01:03 +01:00
  • 4894d907fa refactor(exec-approvals): unify system.run binding and generate host env policy Peter Steinberger 2026-02-26 16:57:29 +01:00
  • baf1c8ea13 docs: add changelog for android device node commands (#27664) (thanks @obviyus) Ayaan Zaidi 2026-02-26 21:25:42 +05:30
  • cf327f60ba fix(android): require validated network for device status Ayaan Zaidi 2026-02-26 20:46:32 +05:30
  • d14e734e9c refactor(android): remove dead thermal sdk branch Ayaan Zaidi 2026-02-26 20:46:23 +05:30
  • d768c1f81c feat(android): wire device commands into runtime Ayaan Zaidi 2026-02-26 18:30:10 +05:30
  • 67f6a13c5a feat(android): add device status and info handler Ayaan Zaidi 2026-02-26 18:30:05 +05:30
  • 551647aa96 feat(android): add device invoke protocol commands Ayaan Zaidi 2026-02-26 18:30:03 +05:30
  • 60bb475355 fix: set authHeader: true by default for MiniMax API provider (#27622) riccoyuanft 2026-02-26 23:53:51 +08:00
  • 1708b11fab refactor(pi): simplify image reference detection Peter Steinberger 2026-02-26 16:52:06 +01:00
  • b678308d96 docs: add unreleased security note for msteams ssrf hardening Peter Steinberger 2026-02-26 16:48:28 +01:00
  • 75ed72e807 refactor(pi): extract history image prune helpers Peter Steinberger 2026-02-26 16:44:47 +01:00
  • 57334cd7d8 refactor: unify channel/plugin ssrf fetch policy and auth fallback Peter Steinberger 2026-02-26 16:43:44 +01:00
  • 2e97d0dd95 fix: finalize teams file-consent timeout landing (#27641) (thanks @scz2011) Peter Steinberger 2026-02-26 16:38:50 +01:00
  • 773ab319ef fix(msteams): Fix code formatting AI Assistant 2026-02-26 22:59:53 +08:00
  • ecbb3bcc1a fix(msteams): Fix test timing for async file upload handling AI Assistant 2026-02-26 22:53:37 +08:00
  • 09f4abdd61 fix(msteams): Send invokeResponse immediately to prevent Teams timeout (#27632) AI Assistant 2026-02-26 22:42:34 +08:00
  • 7d9397099b fix(bluebubbles): allow configured host for attachment SSRF guard Peter Steinberger 2026-02-26 16:40:38 +01:00
  • 4da6a7f212 refactor(restart): extract stale pid cleanup and supervisor markers Peter Steinberger 2026-02-26 16:39:14 +01:00
  • c81e9866ff fix(pi): stop history image reinjection token blowup Peter Steinberger 2026-02-26 16:38:09 +01:00
  • 9a4b2266cc fix(security): bind node system.run approvals to env Peter Steinberger 2026-02-26 16:37:54 +01:00
  • f877e7e74c fix(telegram): split stop-created preview finalization path Peter Steinberger 2026-02-26 15:35:10 +00:00
  • 051fdcc428 fix(security): centralize dm/group allowlist auth composition Peter Steinberger 2026-02-26 16:35:18 +01:00
  • 7f863e22b0 docs(changelog): unify gateway restart-loop fixes Peter Steinberger 2026-02-26 16:27:32 +01:00
  • 16ccd5a874 fix(gateway): add ThrottleInterval to launchd plist to prevent restart loop Kevin Shenghui 2026-02-26 06:56:19 -08:00
  • ed9cd846d0 chore(deps): refresh grammy and @types/node Peter Steinberger 2026-02-26 16:21:39 +01:00
  • 03d7641b0e feat(agents): default codex transport to websocket-first Peter Steinberger 2026-02-26 16:21:34 +01:00
  • 63c6080d50 fix: clean stale gateway PIDs before triggerOpenClawRestart calls launchctl/systemctl SidQin-cyber 2026-02-26 18:42:39 +08:00
  • 792ce7b5b4 fix: detect OpenClaw-managed launchd/systemd services in process respawn taw0002 2026-02-26 10:03:29 -05:00
  • 5c0255477c fix: tolerate missing pi-coding-agent backend export Peter Steinberger 2026-02-26 16:11:29 +01:00
  • d8477cbb3f fix(ci): sync protocol models and acpx version Peter Steinberger 2026-02-26 16:09:49 +01:00
  • fae8de9ae0 fix(browser): land PR #27617 relay reconnect resilience Peter Steinberger 2026-02-26 15:08:26 +00:00
  • aa17bdbe4a docs(changelog): reorder all unreleased entries by user impact Peter Steinberger 2026-02-26 16:05:47 +01:00
  • 45b5c23825 docs(changelog): reorder unreleased changes by user interest Peter Steinberger 2026-02-26 16:03:29 +01:00
  • 0f9c602591 docs(changelog): highlight external secrets management (#26155) Peter Steinberger 2026-02-26 16:01:08 +01:00
  • cc1eaf130b docs(gateway): clarify remote token local fallback semantics Peter Steinberger 2026-02-26 15:59:39 +01:00
  • 47fc6a0806 fix: stabilize secrets land + docs note (#26155) (thanks @joshavant) Peter Steinberger 2026-02-26 15:46:57 +01:00
  • 4380d74d49 docs(secrets): add dedicated apply plan contract page Peter Steinberger 2026-02-26 14:32:04 +01:00
  • 820d614757 fix(secrets): harden plan target paths and ref-only auth profiles Peter Steinberger 2026-02-26 14:25:01 +01:00
  • 485cd0c512 fix(test): skip exec-backed audit batching assertion on windows joshavant 2026-02-26 01:12:10 -06:00
  • 14897e8de7 docs(secrets): clarify partial migration guidance joshavant 2026-02-26 00:54:14 -06:00
  • 7671c1dd10 test(secrets): cover skill migration and symlinked exec command flow joshavant 2026-02-26 00:48:09 -06:00
  • d879c7c641 fix(secrets): harden apply and audit plan handling joshavant 2026-02-26 00:02:02 -06:00
  • ea1ccf4896 docs(secrets): add direct 1password exec example joshavant 2026-02-25 23:39:33 -06:00
  • f46b9c996f feat(secrets): allow opt-in symlink exec command paths joshavant 2026-02-25 23:25:23 -06:00
  • 06290b49b2 feat(secrets): finalize mode rename and validated exec docs joshavant 2026-02-25 23:17:31 -06:00
  • ba2eb583c0 fix(secrets): make apply idempotent and keep audit read-only joshavant 2026-02-25 22:19:21 -06:00
  • f413e314b9 feat(secrets): replace migrate flow with audit/configure/apply joshavant 2026-02-25 20:29:39 -06:00
  • 8944b75e16 fix(secrets): align ref contracts and non-interactive ref persistence joshavant 2026-02-25 19:36:32 -06:00
  • 86622ebea9 fix(secrets): enforce file provider read timeouts joshavant 2026-02-25 19:08:56 -06:00
  • 67e9554645 test(session): normalize parent fork parentSession path assertion joshavant 2026-02-25 18:47:40 -06:00
  • 060ede8aaa test(secrets): skip windows ACL-sensitive file-provider runtime tests joshavant 2026-02-25 18:27:21 -06:00
  • b84d7796be test(secrets): skip strict file-permission resolver tests on windows joshavant 2026-02-25 18:10:48 -06:00
  • bde9cbb058 docs(secrets): align provider model and add exec resolver coverage joshavant 2026-02-25 17:58:10 -06:00
  • 4e7a833a24 feat(security): add provider-based external secrets management joshavant 2026-02-25 17:39:31 -06:00
  • bb60cab76d test: sops invocation assertion joshavant 2026-02-24 23:06:50 -06:00
  • 5e3a86fd2f feat(secrets): expand onboarding secret-ref flows and custom-provider parity joshavant 2026-02-24 22:26:33 -06:00
  • e8637c79b3 fix(secrets): harden sops migration sops rule matching joshavant 2026-02-24 20:34:47 -06:00
  • 0e69660c41 feat(secrets): finalize external secrets runtime and migration hardening joshavant 2026-02-24 19:34:29 -06:00
  • c5b89fbaea Docs: address review feedback on secrets docs joshavant 2026-02-24 16:34:07 -06:00
  • 9203d583f9 Docs: add secrets and CLI secrets reference pages joshavant 2026-02-24 16:26:59 -06:00
  • c0a3801086 Docs: document secrets refs runtime and migration joshavant 2026-02-24 16:26:51 -06:00
  • cb119874dc Onboard: require explicit mode for env secret refs joshavant 2026-02-24 15:01:53 -06:00
  • 4d94b05ac5 Secrets: keep read-only runtime sync in-memory joshavant 2026-02-24 15:01:36 -06:00
  • 13b4993289 Onboard non-interactive: avoid rewriting profile-backed keys joshavant 2026-02-21 17:08:34 -08:00
  • 59e5f12bf9 Onboard: move volcengine/byteplus auth from .env to profiles joshavant 2026-02-21 15:09:42 -08:00
  • 2ef109f00a Onboard OpenAI: explicit secret-input-mode behavior joshavant 2026-02-24 15:42:45 -06:00
  • e8d1725187 Onboard auth: remove leftover merge marker joshavant 2026-02-24 15:07:29 -06:00
  • fce4d76a78 Tests: narrow OpenAI default model assertion typing joshavant 2026-02-24 12:09:15 -06:00
  • 68b9d89ee7 Onboard: store OpenAI auth in profiles instead of .env joshavant 2026-02-21 14:55:56 -08:00
  • 09c7cb5d34 Tests: update onboard credential expectations for explicit ref mode joshavant 2026-02-24 15:32:06 -06:00
  • b50d2ce93c Tests: align auth-choice helper expectations with secret mode joshavant 2026-02-24 15:19:14 -06:00
  • 04aa856fc0 Onboard: require explicit mode for env secret refs joshavant 2026-02-24 15:04:04 -06:00
  • 103d02f98c Auth choice tests: expect env-backed key refs joshavant 2026-02-24 11:59:33 -06:00
  • 56f73ae080 Auth choice tests: assert env-backed keyRef persistence joshavant 2026-02-22 15:56:33 -08:00
  • 58590087de Onboard auth: use shared secret-ref helpers joshavant 2026-02-21 17:08:30 -08:00
  • 7e1557b8c9 Onboard: persist env-backed API keys as secret refs joshavant 2026-02-21 14:43:28 -08:00
  • 363334253b Secrets migrate: split plan/apply/backup modules joshavant 2026-02-24 13:42:41 -06:00