Peter Steinberger
86ed25af34
feat: add workboard dashboard plugin
2026-05-29 11:04:37 +01:00
Vincent Koc
7708e8c7ef
refactor: share qqbot media path decoding
2026-05-29 11:53:33 +02:00
Peter Steinberger
656c238295
fix(telegram): ignore unsafe cached message ids
2026-05-29 05:44:15 -04:00
Peter Steinberger
e890d7ea4f
fix(telegram): reject unsafe topic targets
2026-05-29 05:39:57 -04:00
Peter Steinberger
97afdc144d
fix(file-transfer): validate node fetch byte limits
2026-05-29 05:15:56 -04:00
Vincent Koc
966c274f20
refactor: share browser snapshot helpers
2026-05-29 11:11:46 +02:00
Vincent Koc
9e002c12ac
fix(video): bound generated video downloads
2026-05-29 11:00:06 +02:00
Vincent Koc
bee163bf37
refactor: share chrome cdp websocket diagnostics
2026-05-29 10:57:12 +02:00
Peter Steinberger
5fce8cef1e
refactor(qa-lab): share guarded config merge patches
2026-05-29 04:54:42 -04:00
Vincent Koc
850f7c24d4
refactor: share browser basic route helpers
2026-05-29 10:45:55 +02:00
Peter Steinberger
03ac6e3171
fix(qa-lab): ignore prototype keys in patch checks
2026-05-29 04:44:37 -04:00
tanshanshan
8201e851ca
feat(zalouser): forward data.quote metadata into agent context
...
Forward Zalo quote-reply metadata from zca-js data.quote into the existing ReplyToId, ReplyToBody, and ReplyToIsQuote context keys so agents can correlate quoted replies with prior bot messages.
Adds parser and monitor regression coverage for quote extraction and context projection.
Fixes #86851 .
Thanks @tanshanshan.
2026-05-29 09:42:39 +01:00
Peter Steinberger
e144d1c8d9
fix(oc-path): reject noncanonical array indexes
2026-05-29 04:37:41 -04:00
Vincent Koc
628104662b
refactor: share browser client request helpers
2026-05-29 10:26:44 +02:00
UB
d18ee1881c
fix(discord): remove optional runtime error shims
...
Remove unreachable optional chaining from four Discord message-handler-family runtime error calls.
This aligns the code with the required RuntimeEnv.error contract while leaving production behavior unchanged for valid runtimes. Maintainer-updated PR proof clarifies that shared queue reporter hooks still treat malformed runtime reporter failures as best-effort.
2026-05-29 09:22:44 +01:00
Peter Steinberger
f6d293a1ee
fix(telegram): reject unsafe callback pages
2026-05-29 04:15:13 -04:00
Vincent Koc
a4bb9b1438
refactor: share browser debug route responses
2026-05-29 10:14:18 +02:00
Peter Steinberger
895d1a90f3
fix(google-meet): reject invalid auth timeouts
2026-05-29 04:11:02 -04:00
Vincent Koc
456cade93c
fix(together): bound generated video downloads
2026-05-29 10:10:39 +02:00
Pavan Kumar Gondhi
9497629c1e
fix(msteams): pin attachment fetch DNS
...
Route Microsoft Teams attachment downloads through the shared SSRF guarded fetch path so DNS validation is pinned into the dispatcher used for the actual request.
Keep Teams auth fallback and allowlisted HTTPS Authorization redirect behavior while failing closed for custom fetch hooks that cannot accept dispatcher injection.
Verification:
- CI=1 OPENCLAW_VITEST_MAX_WORKERS=1 timeout 300 node scripts/run-vitest.mjs run extensions/msteams/src/attachments/shared.test.ts extensions/msteams/src/attachments/bot-framework.test.ts src/infra/net/fetch-guard.ssrf.test.ts
- gh pr checks 87567 --repo openclaw/openclaw --watch=false
PR: #87567
2026-05-29 09:03:50 +01:00
Peter Steinberger
e5063f51cb
fix(phone-control): reject invalid arm durations
2026-05-29 04:03:45 -04:00
Vincent Koc
3e050d05e8
refactor: share session tab registry helpers
2026-05-29 10:02:18 +02:00
Peter Steinberger
24614ac100
refactor(browser): centralize route numeric readers
2026-05-29 03:59:19 -04:00
Vincent Koc
6c309b9883
refactor: share browser route navigation policy
2026-05-29 09:52:12 +02:00
Peter Steinberger
2ea8d88d63
fix(browser): validate cookie expiry values
2026-05-29 03:50:19 -04:00
Peter Steinberger
ac52499aca
fix(browser): validate screenshot timeout
2026-05-29 03:46:53 -04:00
Peter Steinberger
c48a4a3188
fix(browser): validate geolocation options
2026-05-29 03:43:06 -04:00
Peter Steinberger
c7f50738c0
fix(browser): validate permission grant timeout
2026-05-29 03:34:06 -04:00
Peter Steinberger
dca86d47e0
fix(browser): validate hook download timeouts
2026-05-29 03:30:46 -04:00
Peter Steinberger
854cb9292d
fix(browser): validate response body numeric options
2026-05-29 03:27:34 -04:00
Vincent Koc
fce7470495
refactor: share file transfer node host path handling
2026-05-29 09:26:24 +02:00
Peter Steinberger
0b24f47465
fix(browser): tighten act numeric parsing
2026-05-29 03:23:42 -04:00
Peter Steinberger
4fae13e29e
fix(browser): centralize snapshot numeric parsing
2026-05-29 03:15:56 -04:00
Peter Steinberger
0bc591a7d7
fix(browser): reject invalid tab indexes
2026-05-29 03:07:15 -04:00
Vincent Koc
0a14f593c3
refactor: share file transfer node invoke handling
2026-05-29 09:05:36 +02:00
Peter Steinberger
286883cc54
fix(browser): cap route timer delays
2026-05-29 03:03:07 -04:00
Peter Steinberger
b0730944eb
fix(browser): cap cli request timeouts
2026-05-29 02:50:51 -04:00
Vincent Koc
2879f76301
refactor: share xai code execution tool config
2026-05-29 08:48:27 +02:00
Peter Steinberger
13ac8a0758
fix(google-meet): validate api page size
2026-05-29 02:46:50 -04:00
Peter Steinberger
31f3914082
fix(voice-call): bound cli numeric options
2026-05-29 02:42:44 -04:00
Vincent Koc
70230f4235
refactor: share brave web search metadata
2026-05-29 08:34:37 +02:00
Peter Steinberger
4829d30cf0
fix(mattermost): bound slash callback env port
2026-05-29 02:31:53 -04:00
Vincent Koc
91a78477d0
refactor: share xai web search metadata
2026-05-29 08:23:32 +02:00
YEEE
aa53823981
fix(whatsapp): resolve auth dir from active profile ( #82492 )
...
Merged via squash.
Prepared head SHA: 82b1404905243035832+lidge-jun@users.noreply.github.com >
Co-authored-by: mcaxtr <7562095+mcaxtr@users.noreply.github.com >
Reviewed-by: @mcaxtr
2026-05-29 03:20:26 -03:00
Vincent Koc
05ff7d374f
refactor: share tavily web search helpers
2026-05-29 08:12:48 +02:00
Gio Della-Libera
08beb6b0e8
Policy: add policy file comparison command ( #86768 )
...
Merged via squash.
Prepared head SHA: 2023e8cba1235387111+giodl73-repo@users.noreply.github.com >
Reviewed-by: @giodl73-repo
2026-05-28 23:10:27 -07:00
Vincent Koc
611adb2ee0
test(browser): align loopback auth mock types
2026-05-29 08:01:21 +02:00
Vincent Koc
667c03f87e
refactor: share fal provider http auth
2026-05-29 08:01:21 +02:00
Peter Steinberger
fa9901c78f
fix(discord): escape component custom id delimiters
2026-05-29 01:58:31 -04:00
Vincent Koc
2e042fbca8
fix(browser): reject excessive viewport resizes
2026-05-29 07:51:27 +02:00
