Peter Steinberger
a8fe8b6bf8
test(guardrails): exclude suite files and harden auth temp identity naming
2026-03-02 18:21:13 +00:00
Peter Steinberger
82f01d6081
perf(runtime): reduce startup import overhead in logging and schema validation
2026-03-02 18:21:13 +00:00
Sid
41c8734afd
fix(gateway): move plugin HTTP routes before Control UI SPA catch-all ( #31885 )
...
* fix(gateway): move plugin HTTP routes before Control UI SPA catch-all
The Control UI handler (`handleControlUiHttpRequest`) acts as an SPA
catch-all that matches every path, returning HTML for GET requests and
405 for other methods. Because it ran before `handlePluginRequest` in
the request chain, any plugin HTTP route that did not live under
`/plugins` or `/api` was unreachable — shadowed by the catch-all.
Reorder the handlers so plugin routes are evaluated first. Core
built-in routes (hooks, tools, Slack, Canvas, etc.) still take
precedence because they are checked even earlier in the chain.
Unmatched plugin paths continue to fall through to Control UI as before.
Closes #31766
* fix: add changelog for plugin route precedence landing (#31885 ) (thanks @Sid-Qin)
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-03-02 18:16:14 +00:00
Mark L
718d418b32
fix(daemon): harden launchd plist with umask 077 ( #31919 )
...
* fix(daemon): add launchd umask hardening
* fix: finalize launchd umask changelog + thanks (#31919 ) (thanks @liuxiaopai-ai)
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-03-02 18:13:41 +00:00
Peter Steinberger
16df7ef4a9
feat(onboarding)!: default tools profile to messaging
2026-03-02 18:12:11 +00:00
Mark L
9b8e642475
Config: newline-join sandbox setupCommand arrays ( #31953 )
2026-03-02 18:11:32 +00:00
bmendonca3
8b27582509
fix(cli): apply --profile before dotenv bootstrap in runCli ( #31950 )
...
Co-authored-by: bmendonca3 <bmendonca3@users.noreply.github.com >
2026-03-02 18:09:45 +00:00
bmendonca3
a6489ab5e9
fix(agents): cap openai-completions tool call ids to provider-safe format ( #31947 )
...
Co-authored-by: bmendonca3 <bmendonca3@users.noreply.github.com >
2026-03-02 18:08:20 +00:00
Peter Steinberger
83c8406f01
refactor(security): split gateway auth suites and share safe write path checks
2026-03-02 18:07:03 +00:00
Peter Steinberger
602f6439bd
test(memory): stabilize windows qmd spawn expectation
2026-03-02 18:06:12 +00:00
Peter Steinberger
1c9deeda97
refactor: split webhook ingress and policy guards
2026-03-02 18:02:21 +00:00
Peter Steinberger
fc0d374390
test(perf): drop duplicate gateway config patch validation case
2026-03-02 18:00:11 +00:00
Peter Steinberger
0ebe0480fa
test(perf): replace relay fixed sleeps with condition waits
2026-03-02 17:55:47 +00:00
Peter Steinberger
8ae8056622
test(perf): trim telegram webhook artificial delay windows
2026-03-02 17:48:36 +00:00
Peter Steinberger
d7ae61c412
test(gateway): fix trusted-proxy control-ui auth test origin config
2026-03-02 17:45:45 +00:00
Peter Steinberger
26b8e6d510
test(perf): avoid cron min-refire delay in auto-run coverage
2026-03-02 17:41:51 +00:00
Peter Steinberger
7dac9b05dd
fix(security): harden zip write race handling
2026-03-02 17:38:11 +00:00
Peter Steinberger
b9e820b7ed
test(perf): cut exec approval metadata test timeout
2026-03-02 17:33:06 +00:00
Peter Steinberger
aee27d0e38
refactor(security): table-drive wrapper approval pinning tests
2026-03-02 17:30:48 +00:00
Peter Steinberger
34ff873a7e
test(perf): trim fixed waits in relay and startup tests
2026-03-02 17:30:33 +00:00
Peter Steinberger
d4bf07d075
refactor(security): unify hardened install and fs write flows
2026-03-02 17:23:29 +00:00
Peter Steinberger
d3e8b17aa6
fix: harden webhook auth-before-body handling
2026-03-02 17:21:09 +00:00
Peter Steinberger
dded569626
fix(security): preserve system.run wrapper approval semantics
2026-03-02 17:20:52 +00:00
Peter Steinberger
104d32bb64
fix(security): unify root-bound write hardening
2026-03-02 17:12:33 +00:00
Peter Steinberger
be3a62c5e0
test(perf): defer delivery queue fixture cleanup to suite end
2026-03-02 17:10:55 +00:00
Peter Steinberger
07b16d5ad0
fix(security): harden workspace bootstrap boundary reads
2026-03-02 17:07:36 +00:00
Peter Steinberger
11562c452a
test(perf): avoid unused heartbeat fixture file writes
2026-03-02 17:01:40 +00:00
Peter Steinberger
db7a8a6982
test(perf): reuse delivery queue suite temp root
2026-03-02 16:55:18 +00:00
Peter Steinberger
4a80311628
refactor(security): split sandbox media staging and stream safe copies
2026-03-02 16:53:14 +00:00
Peter Steinberger
7a7eee920a
refactor(gateway): harden plugin http route contracts
2026-03-02 16:48:00 +00:00
Peter Steinberger
33e76db12a
refactor(gateway): scope ws origin fallback metrics to runtime
2026-03-02 16:47:00 +00:00
Peter Steinberger
9a68590385
refactor(logging): extract bounded regex redaction util
2026-03-02 16:47:00 +00:00
Peter Steinberger
031bf0c6c0
refactor(security): split safe-regex parse and bounded matching
2026-03-02 16:47:00 +00:00
Peter Steinberger
8611fd67b5
test(perf): remove duplicate bundled memory slot loader case
2026-03-02 16:46:17 +00:00
Artale
1b462ed174
fix(test): use NTFS junctions and platform guards for symlink tests on Windows (openclaw#28747) thanks @arosstale
...
Verified:
- pnpm install --frozen-lockfile
- pnpm test src/agents/apply-patch.test.ts src/agents/sandbox/fs-bridge.test.ts src/agents/sandbox/validate-sandbox-security.test.ts src/infra/archive.test.ts
Co-authored-by: arosstale <117890364+arosstale@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-02 10:45:19 -06:00
Peter Steinberger
18f8393b6c
fix: harden sandbox writes and centralize atomic file writes
2026-03-02 16:45:12 +00:00
Peter Steinberger
b1592457fa
perf(security): bound regex input in filters and redaction
2026-03-02 16:37:45 +00:00
Peter Steinberger
31c7637e0f
fix(security): block quantified ambiguous alternation regex
2026-03-02 16:37:45 +00:00
Peter Steinberger
d5ae4b8337
fix(gateway): require local client for loopback origin fallback
2026-03-02 16:37:45 +00:00
Peter Steinberger
0dbb92dd2b
fix(security): harden tar archive extraction parity
2026-03-02 16:36:56 +00:00
Peter Steinberger
17ede52a4b
fix(security): harden sandbox media staging destination writes
2026-03-02 16:35:08 +00:00
zwffff
8828418111
test(subagent-announce): fix flaky Windows-only test failure ( #31298 ) (openclaw#31370) thanks @zwffff
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check (fails on main baseline issues in extensions/googlechat and extensions/phone-control)
- pnpm test:e2e src/agents/subagent-announce.format.e2e.test.ts
Co-authored-by: zwffff <5809959+zwffff@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-02 10:33:07 -06:00
Peter Steinberger
4dd6c7a509
test(perf): avoid redundant root mkdir in hooks install tests
2026-03-02 16:33:00 +00:00
bboyyan
d94de5c4a1
fix(cron): normalize topic-qualified target.to in messaging tool suppress check ( #29480 )
...
* fix(cron): pass job.delivery.accountId through to delivery target resolution
* fix(cron): normalize topic-qualified target.to in messaging tool suppress check
When a cron job targets a Telegram forum topic (e.g. delivery.to =
"-1003597428309:topic:462"), delivery.to is stripped to the chatId
only by resolveOutboundTarget. However, the agent's message tool may
pass the full topic-qualified address as its target, causing
matchesMessagingToolDeliveryTarget to fail the equality check and not
suppress the tool send.
Strip the :topic:NNN suffix from target.to before comparing so the
suppress check works correctly for topic-bound cron deliveries.
Without this, the agent's message tool fires separately using the
announce session's accountId (often "default"), hitting 403 when
default bot is not in the multi-account target group.
* fix(cron): remove duplicate accountId keys after rebase
---------
Co-authored-by: jaxpkm <jaxpkm@jaxpkmdeMac-mini.local >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-02 10:32:06 -06:00
Glucksberg
09f49cd921
fix(cron): accept delivery mode "none" for sessionTarget="main" ( #27431 ) ( #28871 )
2026-03-02 10:32:00 -06:00
Peter Steinberger
d74bc257d8
fix(line): mark webhook route as plugin-authenticated
2026-03-02 16:27:47 +00:00
Ayaan Zaidi
6edb512efa
feat(telegram): use sendMessageDraft for private chat streaming ( #31824 )
...
* feat(telegram): use sendMessageDraft for private stream previews
* test(telegram): cover DM draft id rotation race
* fix(telegram): keep DM reasoning updates in draft preview
* fix(telegram): split DM reasoning preview transport
* fix(telegram): harden DM draft preview fallback paths
* style(telegram): normalize draft preview formatting
2026-03-02 21:56:59 +05:30
Peter Steinberger
c973b053a5
refactor(net): unify proxy env checks and guarded fetch modes
2026-03-02 16:24:26 +00:00
Peter Steinberger
2fd8264ab0
refactor(gateway): hard-break plugin wildcard http handlers
2026-03-02 16:24:06 +00:00
Peter Steinberger
b13d48987c
refactor(gateway): unify control-ui and plugin webhook routing
2026-03-02 16:18:12 +00:00
