Dima/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 8aceaf5d0f fix(security): close fail-open bypass in exec script preflight [AI] (#59398) pgondhi987 2026-04-02 22:30:39 +05:30
  • e36c563775 refactor(exec): dedupe executable candidate resolution Peter Steinberger 2026-04-03 01:57:20 +09:00
  • 48279dca84 UI: apply accent color to Settings page header and content headings SudheerDev-AIML 2026-03-22 22:25:27 -05:00
  • 990545181b fix(ci): preserve strict inline-eval denial after durable awk trust Vincent Koc 2026-04-03 01:54:19 +09:00
  • 2170d36171 docs(changelog): add Windows drive-less exec fix note (#58040) (thanks @SnowSky1) Peter Steinberger 2026-04-03 01:48:36 +09:00
  • e6ce31eb54 fix(exec): ignore malformed drive-less windows exec paths SnowSky1 2026-04-01 11:21:47 +08:00
  • a26f4d0f3e Separate Gemini OAuth state from PKCE verifier (#59116) Agustin Rivera 2026-04-02 09:51:11 -07:00
  • 367969759c perf(memory): trim matrix host validation imports Vincent Koc 2026-04-03 01:44:44 +09:00
  • 47f5d72931 chore(checks): serialize local heavy gates Vincent Koc 2026-04-03 01:45:50 +09:00
  • 96b55821bc fix: share ACP owner-only approval classes (#201) (#59255) Devin Robison 2026-04-02 10:45:41 -06:00
  • 176c059b05 node-host: bind pnpm dlx approval scripts (#58374) Jacob Tomlinson 2026-04-02 09:41:28 -07:00
  • 7cea7c2970 fix(zalo): scope replay dedupe cache key to path and account [AI] (#59387) pgondhi987 2026-04-02 22:06:35 +05:30
  • d5b6bfc48c test(discord): align native approval fixture with auto mode Peter Steinberger 2026-04-02 17:33:02 +01:00
  • e4818a345e test(tasks): close flow registry before temp dir cleanup Vincent Koc 2026-04-03 01:31:27 +09:00
  • bf1fcf2e5f docs(approvals): clarify auto native approval routing Peter Steinberger 2026-04-02 17:30:30 +01:00
  • 17f6626ffe feat(approvals): auto-enable native chat approvals Peter Steinberger 2026-04-02 17:28:32 +01:00
  • 721cab2b8d refactor(exec): split allowlist segment evaluation helpers Peter Steinberger 2026-04-03 01:21:43 +09:00
  • 812a7636fb refactor: simplify exec approval followup delivery Peter Steinberger 2026-04-02 17:19:02 +01:00
  • 47dcfc49b8 fix: scope #57584 to shell allowlist changes Peter Steinberger 2026-04-03 01:10:29 +09:00
  • 34a5c47351 fix: preserve Android assistant auto-send queue Ayaan Zaidi 2026-04-02 21:38:46 +05:30
  • 462b4020bc fix(browser): block SSRF redirect bypass via real-time route interception (#58771) pgondhi987 2026-04-02 21:37:57 +05:30
  • 8d81e76f23 fix: evaluate shell wrapper inline commands against allowlist (#57377) (#57584) biao 2026-04-03 00:06:40 +08:00
  • 578a0ed31a refactor(agent): dedupe tool error summary Peter Steinberger 2026-04-02 17:04:09 +01:00
  • 59bdf870b9 fix: add Android assistant auto-send changelog (#59721) Ayaan Zaidi 2026-04-02 21:23:21 +05:30
  • 5d524617e1 fix: clear stale Android assistant auto-send queue Ayaan Zaidi 2026-04-02 21:03:54 +05:30
  • 186647cb74 feat: auto-send Android assistant prompts Ayaan Zaidi 2026-04-02 19:56:24 +05:30
  • 4207ca2eb8 Fix Telegram exec approval delivery and auto-resume fallback seonang 2026-04-02 02:20:28 +00:00
  • b5161042b7 Diffs: validate viewerBaseUrl in manifest schema Gustavo Madeira Santana 2026-04-02 11:54:14 -04:00
  • 77e636cf78 fix(agents): include received keys in missing-param error for write tool (#55317) Priyansh Gupta 2026-04-02 21:24:28 +05:30
  • c0b6531ec7 docs: add changelog for cron exec timeout fix (#58247) (thanks @skainguyen1412) Peter Steinberger 2026-04-02 16:42:14 +01:00
  • 3b6825ab93 Cron: honor trigger for custom session timeouts spaceman1412 2026-03-31 16:06:42 +07:00
  • 102462b7a6 Cron: restrict exec visibility to timeouts spaceman1412 2026-03-31 15:51:06 +07:00
  • d300a20440 Cron: surface exec timeouts in cron runs spaceman1412 2026-03-31 15:10:45 +07:00
  • 047b701859 refactor(telegram): unify callback-data byte limit checks Peter Steinberger 2026-04-03 00:37:49 +09:00
  • 7e2a450e31 docs: remove duplicated beta changelog fixes Peter Steinberger 2026-04-02 16:33:51 +01:00
  • 1f531d373b docs: dedupe changelog mirror fixes Peter Steinberger 2026-04-02 16:32:44 +01:00
  • 423f7c3487 build: prep 2026.4.2-beta.1 release Peter Steinberger 2026-04-02 16:06:03 +01:00
  • 0ad2dbd307 fix(providers): route image generation through shared transport (#59729) Vincent Koc 2026-04-03 00:32:37 +09:00
  • d2ce3e9acc perf(plugins): keep gateway startup channel-only (#59754) Vincent Koc 2026-04-03 00:28:15 +09:00
  • 988f7627de refactor(telegram): centralize approval callback shaping Peter Steinberger 2026-04-03 00:16:54 +09:00
  • efe9464f5f fix(tasks): tighten task-flow CLI surface (#59757) Vincent Koc 2026-04-03 00:25:10 +09:00
  • 0a76780f57 docs(changelog): mark 2026.4.1 as stable Peter Steinberger 2026-04-02 16:18:48 +01:00
  • 874a585d57 refactor(agent): share exec parser and runtime context codec Peter Steinberger 2026-04-03 00:13:12 +09:00
  • 576337ef31 fix(tasks): use no-persist cleanup in executor tests Vincent Koc 2026-04-03 00:14:15 +09:00
  • 8c3295038c test: harden task executor state-dir cleanup Peter Steinberger 2026-04-02 16:11:48 +01:00
  • eb261fa690 fix: land Windows exec allowlist (#56285) (thanks @kpngr) Peter Steinberger 2026-04-02 16:07:16 +01:00
  • 36d953aab6 fix(exec): make Windows exec hints accurate and dynamic Peter Steinberger 2026-04-02 15:30:12 +01:00
  • fff6333773 fix(exec): implement Windows argPattern allowlist flow Peter Steinberger 2026-04-02 15:29:55 +01:00
  • cc5146b9c6 fix(tasks): reset heartbeat and system event state in executor tests Vincent Koc 2026-04-03 00:01:50 +09:00
  • a5f99f4a30 test: stabilize docker test lanes Peter Steinberger 2026-04-02 15:57:44 +01:00
  • d46240090a test(tasks): add task-flow operator coverage (#59683) Vincent Koc 2026-04-02 23:58:33 +09:00
  • 3872a866a1 fix(xai): make x_search auth plugin-owned (#59691) Vincent Koc 2026-04-02 23:54:07 +09:00
  • b6debb4382 fix(agent): close remaining internal-context leak paths (#59649) Leo Zhang 2026-04-03 01:45:06 +11:00
  • 831729be4a docs(changelog): note telegram approval alias fix (#59217) (thanks @jameslcowan) Peter Steinberger 2026-04-02 23:34:54 +09:00
  • 52866656c3 fix(telegram): preserve allow-always callback alias Peter Steinberger 2026-04-02 23:23:32 +09:00
  • 53c29df2a9 Channel setup: ignore untrusted workspace shadows (#59158) mappel-nv 2026-04-02 10:40:23 -04:00
  • 4251ad6638 fix(telegram): allow trusted explicit proxy media fetches Vincent Koc 2026-04-02 23:35:44 +09:00
  • 7fea8250fb fix(approvals): use canonical decision values in interactive button payloads James Cowan 2026-04-01 16:14:58 -03:00
  • 316d10637b refactor: canonicalize legacy x search secret target coverage Peter Steinberger 2026-04-02 15:29:32 +01:00
  • 65c1716ad4 refactor(infra): clarify jsonl socket contract Peter Steinberger 2026-04-02 15:20:00 +01:00
  • ef86edacf7 fix: harden plugin auto-enable empty config handling Peter Steinberger 2026-04-02 15:19:18 +01:00
  • b40ef364b7 fix: pin admin-only subagent gateway scopes (#59555) (thanks @openperf) wangchunyue 2026-04-02 22:10:03 +08:00
  • 4f692190b4 fix(config): tolerate missing facade boundary config Vincent Koc 2026-04-02 23:02:21 +09:00
  • e0d20966ae Refine JSONL socket EOF regression test skernelx 2026-04-02 20:06:19 +08:00
  • 0e3cc12900 Fix macOS exec-host JSONL socket deadlock skernelx 2026-04-02 19:10:35 +08:00
  • c4fb15e492 test: make web fetch runtime env handling hermetic Peter Steinberger 2026-04-02 15:01:49 +01:00
  • ecf72319ed fix: use JSON5 parser for plugin manifest loading (#57734) [AI-assisted] (#59084) jacky 2026-04-02 22:02:04 +08:00
  • bb3f17fc02 refactor(plugins): drop generic status report alias (#59700) Vincent Koc 2026-04-02 22:59:25 +09:00
  • b0f94a227b refactor(providers): normalize transport policy wiring (#59682) Vincent Koc 2026-04-02 22:54:34 +09:00
  • 4269f40811 docs(security): clarify exec yolo default Peter Steinberger 2026-04-02 14:52:00 +01:00
  • c678ae7e7a feat(exec): default host exec to yolo Peter Steinberger 2026-04-02 14:50:31 +01:00
  • 0500b410c5 docs: update config paths for Firecrawl web_fetch and xAI x_search migrations, add Android assistant section, backfill PR numbers Vincent Koc 2026-04-02 22:51:20 +09:00
  • def5b954a8 feat(plugins): surface imported runtime state in status tooling (#59659) Vincent Koc 2026-04-02 22:50:17 +09:00
  • 1ecd92af89 chore: refresh deps and backfill changelog Peter Steinberger 2026-04-02 14:48:48 +01:00
  • a1f95e5278 fix: land Android assistant entrypoints (#59596) Ayaan Zaidi 2026-04-02 19:15:05 +05:30
  • 41b81ca7f8 fix: address Android assistant review feedback Ayaan Zaidi 2026-04-02 15:45:22 +05:30
  • 59eccef768 feat: add Google Assistant App Actions entrypoint Ayaan Zaidi 2026-04-02 15:29:42 +05:30
  • e45b29b247 feat: add Android assistant role entrypoint Ayaan Zaidi 2026-04-02 15:28:49 +05:30
  • fcf708665c feat: route Android assistant launches into chat Ayaan Zaidi 2026-04-02 15:27:54 +05:30
  • 290e5bf219 fix(dotenv): block helper interpreter workspace overrides (#58473) Agustin Rivera 2026-04-02 06:45:13 -07:00
  • 52a6e354a8 fix(tasks): reset agent events in executor tests Vincent Koc 2026-04-02 22:25:59 +09:00
  • ec6a07ef05 fix(secrets): add legacy x_search secret target Vincent Koc 2026-04-02 22:23:20 +09:00
  • 3528e15817 changelog: add openshell mirror sync fix entry (#58515) Jacob Tomlinson 2026-04-02 13:23:58 +00:00
  • 3cca07a983 docs: reorder changelog entries by user interest Peter Steinberger 2026-04-02 14:22:00 +01:00
  • b21c9840c2 OpenShell: constrain mirror sync roots (#58515) Agustin Rivera 2026-04-02 06:21:30 -07:00
  • 3e4de956c0 !refactor(xai): move x_search config behind plugin boundary (#59674) Vincent Koc 2026-04-02 22:08:59 +09:00
  • ef7c553dd1 fix(zalo): scope webhook replay dedupe (#58444) Agustin Rivera 2026-04-02 06:07:14 -07:00
  • 12bd6b7bb9 fix(tasks): address task-flow audit review (#59672) origin/vk/tasks-flow-surface Vincent Koc 2026-04-02 22:02:00 +09:00
  • 7eae9c0e62 Block remaining host env override pivots (#59233) Devin Robison 2026-04-02 07:00:26 -06:00
  • 54a0878517 fix(gateway): enforce session kill HTTP scopes (#59128) Agustin Rivera 2026-04-02 05:56:17 -07:00
  • be10ecef77 fix(compare): reuse shared secret comparison helper (#58432) Agustin Rivera 2026-04-02 05:53:19 -07:00
  • 4c08b0bb08 fix(tasks): allow task-flow registry audit seams Vincent Koc 2026-04-02 21:49:26 +09:00
  • cfbad0a4f9 fix(providers): unify request policy resolution (#59653) Vincent Koc 2026-04-02 21:42:11 +09:00
  • d4f69878da fix(tasks): close registry stores on test resets Vincent Koc 2026-04-02 21:38:35 +09:00
  • 6f91f87f3b refactor(tasks): move task-flow ownership under tasks Vincent Koc 2026-04-02 21:36:56 +09:00
  • 0f45630d19 fix(tasks): harden task-flow restore and maintenance Vincent Koc 2026-04-02 21:36:47 +09:00
  • 9c22d63669 Browser: normalize localhost absolute-form CDP hosts (#59236) mappel-nv 2026-04-02 08:34:55 -04:00
  • e48ee8ae9e test(secrets): update inactive warning coverage Vincent Koc 2026-04-02 21:21:38 +09:00
  • b18de06bff test(secrets): fix runtime coverage env allowlist Vincent Koc 2026-04-02 21:10:30 +09:00
  • 15e6a88c67 fix(config): sync generated base schema Vincent Koc 2026-04-02 21:04:06 +09:00