Dima/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • edfefdff7d docs(changelog): mark ACP hardening as next npm release Peter Steinberger 2026-02-24 01:56:16 +00:00
  • a1c4bf07c6 fix(security): harden exec wrapper allowlist execution parity Peter Steinberger 2026-02-24 01:51:33 +00:00
  • 5eb72ab769 fix(security): harden browser SSRF defaults and migrate legacy key Peter Steinberger 2026-02-24 01:51:44 +00:00
  • 8779b523dc test(sandbox): speed up agent-config coverage with pure resolvers Peter Steinberger 2026-02-24 01:46:04 +00:00
  • 467666adc7 test(sandbox): use focused modules in lightweight suites Peter Steinberger 2026-02-24 01:45:58 +00:00
  • f0f886ecc4 docs(security): clarify gateway-node trust boundary in docs Peter Steinberger 2026-02-24 01:35:40 +00:00
  • 1f81677093 docs(changelog): note dangerous name-matching audit unification Peter Steinberger 2026-02-24 01:33:00 +00:00
  • 161d9841dc refactor(security): unify dangerous name matching handling Peter Steinberger 2026-02-24 01:32:23 +00:00
  • 6a7c303dcc test(msteams): fix allowlist name-match expectations Peter Steinberger 2026-02-24 01:26:53 +00:00
  • 2e36bdda85 docs(changelog): credit ACP security reporter Peter Steinberger 2026-02-24 01:18:58 +00:00
  • 22467902ea fix(doctor): inherit dangerous name-matching flag in mutable allowlist scan Peter Steinberger 2026-02-24 01:16:14 +00:00
  • e5931554bf test: tighten slow test timeouts and cleanup Peter Steinberger 2026-02-24 01:16:43 +00:00
  • 6c43d0a08e test(gateway): move sessions_send error paths to unit tests Peter Steinberger 2026-02-24 01:16:36 +00:00
  • 63dcd28ae0 fix(acp): harden permission tool-name validation Peter Steinberger 2026-02-24 01:11:24 +00:00
  • f97c0922e1 fix(security): harden account-key handling against prototype pollution Peter Steinberger 2026-02-24 01:09:23 +00:00
  • 12cc754332 fix(acp): harden permission auto-approval policy Peter Steinberger 2026-02-24 01:03:12 +00:00
  • ddf93d9845 docs(security): add vps trust-boundary guidance Peter Steinberger 2026-02-24 01:02:06 +00:00
  • cfa44ea6b4 fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907) Peter Steinberger 2026-02-24 01:01:51 +00:00
  • 41b0568b35 docs(security): clarify shared-agent trust boundaries Peter Steinberger 2026-02-24 00:59:20 +00:00
  • 0cc327546b test(gateway): speed up slow e2e test setup Peter Steinberger 2026-02-24 00:59:44 +00:00
  • 13478cc79a refactor(config): harden catchall hint mapping and array fallback Peter Steinberger 2026-02-24 00:59:44 +00:00
  • 30c622554f Providers: disable developer role for DashScope-compatible endpoints (#24675) Vincent Koc 2026-02-23 19:51:16 -05:00
  • 83eae14ed6 docs: add security-advisory triage reminder to agents guide Peter Steinberger 2026-02-24 00:45:41 +00:00
  • 400220275c docs: clarify multi-instance recommendations for user isolation Peter Steinberger 2026-02-24 00:40:04 +00:00
  • a430e1722b test(channels): reduce media test runtime and polling Peter Steinberger 2026-02-24 00:31:43 +00:00
  • 663f784e4e test(core): trim redundant setup and tighten waits Peter Steinberger 2026-02-24 00:31:36 +00:00
  • f58c1ef34e test(gateway): speed up contract and polling suites Peter Steinberger 2026-02-24 00:31:30 +00:00
  • 7d55277d72 docs: clarify operator trust boundary for shared gateways Peter Steinberger 2026-02-24 00:24:48 +00:00
  • f0c3c8b6a3 fix(config): redact dynamic catchall secret keys Peter Steinberger 2026-02-24 00:21:19 +00:00
  • 8dfa33d373 test(sandbox): add root bind mount regression Peter Steinberger 2026-02-24 00:17:03 +00:00
  • d68380bb7f docs(security): clarify exposed-secret report scope Peter Steinberger 2026-02-24 00:17:00 +00:00
  • 25f6fcc63a docs(changelog): note safeBins exec hardening Peter Steinberger 2026-02-23 23:58:54 +00:00
  • 3b8e33037a fix(security): harden safeBins long-option validation Peter Steinberger 2026-02-23 23:55:28 +00:00
  • 7b4d2cb5cb docs(security): clarify trusted-config dos scope Peter Steinberger 2026-02-23 23:57:26 +00:00
  • a2dfe9879f fix(security): harden regex compilation for filters and redaction Peter Steinberger 2026-02-23 23:54:46 +00:00
  • e6484cb65f refactor: harden kilocode auth ordering and dedupe provider wiring Peter Steinberger 2026-02-23 23:37:07 +00:00
  • f52a0228ca test: optimize auth and audit test runtime Peter Steinberger 2026-02-23 23:31:42 +00:00
  • 13f32e2f7d feat: Add Kilo Gateway provider (#20212) John Fawcett 2026-02-23 17:29:27 -06:00
  • ddb7ec99a8 test: speed up cron test polling and waits Peter Steinberger 2026-02-23 22:42:15 +00:00
  • 0cc46d774c test: consolidate auth-choice tests for faster coverage Peter Steinberger 2026-02-23 22:42:11 +00:00
  • eff3c5c707 Session/Cron maintenance hardening and cleanup UX (#24753) Gustavo Madeira Santana 2026-02-23 17:39:48 -05:00
  • 29b19455e3 test(commands): collapse provider and endpoint matrices Peter Steinberger 2026-02-23 22:16:45 +00:00
  • b922ecb8c1 test(security): reduce duplicate audit assertions Peter Steinberger 2026-02-23 22:16:39 +00:00
  • cd5f3fe0c1 test(config): consolidate env/include scenario coverage Peter Steinberger 2026-02-23 22:16:30 +00:00
  • c248c515a3 test: collapse sandbox agent config duplicate cases Peter Steinberger 2026-02-23 22:01:32 +00:00
  • 287586206c test: consolidate sandbox docker merge scenarios Peter Steinberger 2026-02-23 22:01:22 +00:00
  • 8b192beaaf test: combine web reconnect progression assertions Peter Steinberger 2026-02-23 21:57:30 +00:00
  • ecd278b67b test: merge redundant telegram media path scenarios Peter Steinberger 2026-02-23 21:57:23 +00:00
  • ca761d6225 test: consolidate gateway auth test scenarios Peter Steinberger 2026-02-23 21:57:17 +00:00
  • b9f01e8d3f test: consolidate directive behavior suites for faster runs Peter Steinberger 2026-02-23 21:48:12 +00:00
  • b8fc8e7e6d test: optimize directive behavior test scenarios Peter Steinberger 2026-02-23 21:35:36 +00:00
  • 0183610db3 refactor: de-duplicate channel runtime and payload helpers Peter Steinberger 2026-02-23 21:25:20 +00:00
  • 0ae7f470a2 test: normalize skill prompt path assertions on windows Peter Steinberger 2026-02-23 21:17:29 +00:00
  • 31ca7fb277 test: consolidate directive behavior test scenarios Peter Steinberger 2026-02-23 21:13:11 +00:00
  • 426f803b8a test: speed up sessions_spawn tool harness Peter Steinberger 2026-02-23 21:13:05 +00:00
  • 7e5f771d27 test: speed up skills test suites Peter Steinberger 2026-02-23 21:02:05 +00:00
  • 75423a00d6 refactor: deduplicate shared helpers and test setup Peter Steinberger 2026-02-23 20:40:38 +00:00
  • 1f5e6444ee test: remove redundant pi embedded runner cases Peter Steinberger 2026-02-23 20:15:45 +00:00
  • 3b5a276a48 test: speed up supervisor test timing Peter Steinberger 2026-02-23 20:15:40 +00:00
  • 5a475259bb fix(telegram): suppress reasoning-only leaks when reasoning is off Peter Steinberger 2026-02-23 20:05:45 +00:00
  • 63e4dfaa9c test: consolidate pi-tools gating assertions Peter Steinberger 2026-02-23 19:59:54 +00:00
  • cba8037d90 test: prune redundant trigger handling integration coverage Peter Steinberger 2026-02-23 19:59:47 +00:00
  • 32e6ccb7b6 test(cron): cover announce failure when best-effort is off Peter Steinberger 2026-02-23 19:48:16 +00:00
  • 9af3ec92a5 fix(gateway): add HSTS header hardening and docs Peter Steinberger 2026-02-23 19:47:09 +00:00
  • c88915b721 test: consolidate trigger handling suites Peter Steinberger 2026-02-23 19:40:39 +00:00
  • 87603b5c45 fix: sync built-in channel enablement across config paths Peter Steinberger 2026-02-23 19:40:32 +00:00
  • 69b17a37e8 docs(reference): add cache trace diagnostics knobs to prompt-caching guide Peter Steinberger 2026-02-23 19:39:13 +00:00
  • 7a40d99b1d refactor(cron): extract delivery dispatch + harden reset notices Peter Steinberger 2026-02-23 19:24:58 +00:00
  • fe62711342 test(gate): stabilize env- and timing-sensitive process/web-search checks Peter Steinberger 2026-02-23 19:19:39 +00:00
  • 46dee26600 docs(reference): add prompt-caching guide and knobs Peter Steinberger 2026-02-23 19:06:47 +00:00
  • 31e4c21b67 fix(auto-reply): move volatile inbound flags out of system metadata Peter Steinberger 2026-02-23 19:05:57 +00:00
  • cf38339f25 fix(tools): improve session_status cache-aware usage reporting Peter Steinberger 2026-02-23 19:05:27 +00:00
  • 40db3fef49 fix(agents): cache bootstrap snapshots per session key Peter Steinberger 2026-02-23 19:04:54 +00:00
  • 8b3eee71ec fix: tier local vitest worker defaults by host memory (#24719) (thanks @ngutman) Nimrod Gutman 2026-02-23 21:18:54 +02:00
  • 420c18364e fix(test): tier local vitest worker defaults by host memory Nimrod Gutman 2026-02-23 20:48:05 +02:00
  • 2931e215ca docs: add GitHub comment formatting/linking guardrails Peter Steinberger 2026-02-23 19:17:33 +00:00
  • 47723b646d refactor(test): de-duplicate msteams and bash test helpers Peter Steinberger 2026-02-23 19:12:21 +00:00
  • 8d69251475 fix(doctor): use gateway health status for memory search key check (#22327) Ruslan Kharitonov 2026-02-23 14:07:16 -05:00
  • bf373eeb43 refactor: harden reset notice + cron delivery target flow Peter Steinberger 2026-02-23 19:00:30 +00:00
  • d266d12be1 refactor(exec): simplify env-prefixed wrapper modifier check Peter Steinberger 2026-02-23 18:48:07 +00:00
  • 42373b6742 fix(skills): support multiline frontmatter fallback without PyYAML Peter Steinberger 2026-02-23 18:48:07 +00:00
  • f18f087c3c fix(skills): make quick_validate work without PyYAML Brian Mendonca 2026-02-23 11:01:41 -07:00
  • bd8b9af9a7 fix(exec): bind env-prefixed shell wrappers to full approval text Brian Mendonca 2026-02-23 02:26:42 -07:00
  • 216d99e585 fix(browser): derive relay auth token from gateway token in Chrome extension oneaix 2026-02-23 19:30:36 +08:00
  • bb8f538cd4 Browser relay: accept raw gateway token in extension auth Mustafa Kemal 2026-02-23 20:43:39 +08:00
  • d00d814ad1 fix(gateway): include platform and reason in node command rejection error justinhuangcode 2026-02-23 17:26:04 +00:00
  • 5de1f540e7 CLI: fix gateway restart health ownership for child listener pids (#24696) Gustavo Madeira Santana 2026-02-23 13:53:10 -05:00
  • 78e7f41d28 docs: detail per-agent prompt caching configuration Peter Steinberger 2026-02-23 18:45:30 +00:00
  • d637fd4801 fix(config): tighten bedrock cache-retention type narrowing Peter Steinberger 2026-02-23 18:21:50 +00:00
  • 160bd61fff feat(agents): add per-agent stream params overrides for cache tuning (#17470) (thanks @rrenamed) Peter Steinberger 2026-02-23 18:19:08 +00:00
  • be6f0b8c84 fix(providers): support Bedrock Anthropic cacheRetention defaults/pass-through (#22303) (thanks @snese) Peter Steinberger 2026-02-23 18:17:50 +00:00
  • ca5c0bc02b fix(providers): disable Bedrock prompt caching for non-Anthropic models (#20866) (thanks @pierreeurope) Peter Steinberger 2026-02-23 18:16:18 +00:00
  • e40ee3c2c7 docs(changelog): note /new and /reset auth-label removal (#24409) Peter Steinberger 2026-02-23 18:30:21 +00:00
  • b9b77cea4e fix(reply): omit auth labels in /new and /reset Peter Steinberger 2026-02-23 18:29:15 +00:00
  • 4c21ef9ce9 docs(changelog): correct kimi issue references Peter Steinberger 2026-02-23 18:28:56 +00:00
  • ff0c40d367 test(tools): fix kimi web_search mock typing Peter Steinberger 2026-02-23 18:27:16 +00:00
  • 7837d23103 feat(media): add moonshot video provider and wiring Peter Steinberger 2026-02-23 18:24:50 +00:00
  • e02c470d5e feat(tools): add kimi web_search provider Peter Steinberger 2026-02-23 18:20:16 +00:00
  • f93ca93498 fix(agents): extend cache-ttl eligibility for moonshot and zai Peter Steinberger 2026-02-23 18:16:07 +00:00
  • 2fa6aa6ea6 test(agents): add comprehensive kimi regressions Peter Steinberger 2026-02-23 17:37:16 +00:00