Commit Graph

1404 Commits

Author SHA1 Message Date
Peter Steinberger
3bf3ebf514 refactor: share exec approval dm route checks 2026-03-13 18:38:12 +00:00
Peter Steinberger
06bdfc403e refactor: share system run command resolution 2026-03-13 18:38:11 +00:00
Peter Steinberger
0bf930bdc7 test: harden agent event bus coverage 2026-03-13 18:36:23 +00:00
Peter Steinberger
6a9285d1f5 test: tighten byte count and file identity coverage 2026-03-13 18:35:55 +00:00
Peter Steinberger
54998a1042 test: expand exec wrapper helper coverage 2026-03-13 18:34:42 +00:00
Peter Steinberger
c1b3a49320 test: expand heartbeat event filter coverage 2026-03-13 18:34:13 +00:00
Peter Steinberger
5ea03efe92 fix: harden windows gateway lifecycle 2026-03-13 18:33:59 +00:00
Peter Steinberger
84a2a289e6 test: tighten scp host coverage 2026-03-13 18:32:45 +00:00
Peter Steinberger
9c343fb3db test: tighten small infra helper coverage 2026-03-13 18:31:59 +00:00
Peter Steinberger
8cef6f2120 test: tighten cli root option coverage 2026-03-13 18:30:36 +00:00
Peter Steinberger
f0a266cb86 test: expand archive path helper coverage 2026-03-13 18:29:56 +00:00
Peter Steinberger
bc9a9cf972 test: expand update channel helper coverage 2026-03-13 18:29:09 +00:00
Peter Steinberger
cc3846d1b5 test: simplify numeric parsing coverage 2026-03-13 18:28:05 +00:00
Peter Steinberger
f5ab0c1d32 test: tighten retry helper coverage 2026-03-13 18:26:42 +00:00
Vincent Koc
cc5168b5c3 Fix plugin update dependency failures and dedupe warnings 2026-03-13 11:26:14 -07:00
Peter Steinberger
1d300c416d test: simplify home dir coverage 2026-03-13 18:25:54 +00:00
Peter Steinberger
fbc06f1926 test: simplify tailscale helper coverage 2026-03-13 18:24:02 +00:00
Peter Steinberger
5aa79f1ba4 test: harden guarded fetch redirect coverage 2026-03-13 18:21:02 +00:00
Peter Steinberger
f3d4bb4103 test: simplify ssrf hostname coverage 2026-03-13 18:20:08 +00:00
Peter Steinberger
584e3c2916 test: refine http body limit coverage 2026-03-13 18:13:39 +00:00
Peter Steinberger
2920d61f18 test: tighten minimax usage coverage 2026-03-13 18:10:40 +00:00
Peter Steinberger
4ed3b62f01 test: refine telegram network and install source coverage 2026-03-13 18:08:48 +00:00
Peter Steinberger
bec76be592 test: simplify talk config and path env coverage 2026-03-13 18:06:53 +00:00
Peter Steinberger
572df97179 test: simplify provider auth normalization coverage 2026-03-13 18:05:46 +00:00
Peter Steinberger
981062a94e test: simplify outbound channel coverage 2026-03-13 17:55:55 +00:00
Peter Steinberger
a68caaf719 test: dedupe infra runtime and heartbeat coverage 2026-03-13 17:54:38 +00:00
Peter Steinberger
2d32cf2839 test: harden infra formatter and retry coverage 2026-03-13 17:47:47 +00:00
Peter Steinberger
4a00cefe63 refactor: share outbound plugin test results 2026-03-13 17:29:59 +00:00
Frank Yang
f07033ed3f fix: address delivery dedupe review follow-ups (#44666)
Merged via squash.

Prepared head SHA: 8e6d254cc4
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn
2026-03-13 16:18:01 +08:00
Frank Yang
fa6ff39b9b fix: recover outbound plugins from the active registry 2026-03-13 14:32:07 +08:00
Josh Lehman
6d0939d84e fix: handle Discord gateway metadata fetch failures (#44397)
Merged via squash.

Prepared head SHA: edd17c0eff
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-03-12 21:52:17 -07:00
Ayaan Zaidi
8023f4c701 fix(telegram): thread media transport policy into SSRF (#44639)
* fix(telegram): preserve media download transport policy

* refactor(telegram): thread media transport policy

* fix(telegram): sync fallback media policy

* fix: note telegram media transport fix (#44639)
2026-03-13 10:11:43 +05:30
Efe Büken
771066d122 fix(compaction): use full-session token count for post-compaction sanity check (#28347)
Merged via squash.

Prepared head SHA: cf4eab1c51
Co-authored-by: efe-arv <259833796+efe-arv@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-03-12 21:26:30 -07:00
Peter Steinberger
fc2b796f02 test(proxy): make env proxy tests windows-safe 2026-03-13 04:17:10 +00:00
Cypherm
61d219cb39 feat: show status reaction during context compaction (#35474)
Merged via squash.

Prepared head SHA: 145a7b7c4e
Co-authored-by: Cypherm <28184436+Cypherm@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-03-12 21:06:15 -07:00
Nachx639
e951a42bcb fix(mac): adopt canonical session key and add reset triggers (#10898)
Add shared native chat handling for /new, /reset, and /clear.

This also aligns main session key handling in the shared chat UI and includes follow-up test and CI fixes needed to keep the branch mergeable.

Co-authored-by: Nachx639 <71144023+Nachx639@users.noreply.github.com>
Co-authored-by: Luke <92253590+ImLukeF@users.noreply.github.com>
2026-03-13 12:35:39 +11:00
Vincent Koc
f12cd92bb3 Merge branch 'main' of https://github.com/openclaw/openclaw
* 'main' of https://github.com/openclaw/openclaw:
  build: update deps and fix vitest 4 regressions
2026-03-12 21:04:02 -04:00
Peter Steinberger
4dd4e36450 build: update deps and fix vitest 4 regressions 2026-03-13 01:02:00 +00:00
Vincent Koc
b2e21e3792 fix(security): strip Mongolian selectors in exec obfuscation detector 2026-03-12 21:00:00 -04:00
Peter Steinberger
d96069f0df feat: add windows update package spec override 2026-03-12 23:56:48 +00:00
Peter Steinberger
91b701e183 fix: harden windows native updates 2026-03-12 23:42:14 +00:00
Peter Steinberger
1c7ca391a8 refactor: trim bootstrap token metadata 2026-03-12 22:46:28 +00:00
Peter Steinberger
bf89947a8e fix: switch pairing setup codes to bootstrap tokens 2026-03-12 22:23:07 +00:00
Nimrod Gutman
b77b7485e0 feat(push): add iOS APNs relay gateway (#43369)
* feat(push): add ios apns relay gateway

* fix(shared): avoid oslog string concatenation

# Conflicts:
#	apps/shared/OpenClawKit/Sources/OpenClawKit/GatewayChannel.swift

* fix(push): harden relay validation and invalidation

* fix(push): persist app attest state before relay registration

* fix(push): harden relay invalidation and url handling

* feat(push): use scoped relay send grants

* feat(push): configure ios relay through gateway config

* feat(push): bind relay registration to gateway identity

* fix(push): tighten ios relay trust flow

* fix(push): bound APNs registration fields (#43369) (thanks @ngutman)
2026-03-12 18:15:35 +02:00
Vincent Koc
99170e2408 Hardening: normalize Unicode command obfuscation detection (#44091)
* Exec: cover unicode obfuscation cases

* Exec: normalize unicode obfuscation detection

* Changelog: note exec detection hardening

* Exec: strip unicode tag character obfuscation

* Exec: harden unicode suppression and length guards

* Exec: require path boundaries for safe URL suppressions
2026-03-12 10:57:49 -04:00
Altay
0a8d2b6200 build: raise Node 22 compatibility floor to 22.16 2026-03-12 20:07:44 +05:30
Vincent Koc
97683071b5 Tests: extend exec allowlist glob coverage 2026-03-12 04:01:49 -04:00
Vincent Koc
82e3ac21ee Infra: tighten exec allowlist glob matching (#43798)
* Infra: tighten exec allowlist glob matching

* Changelog: note GHSA-f8r2 exec allowlist fix
2026-03-12 03:33:50 -04:00
Vincent Koc
d8d8dc7421 Infra: fail closed without device scope baseline 2026-03-12 01:42:12 -04:00
Vincent Koc
276ee259ca Tests: clean up temp git helper directory 2026-03-12 01:42:12 -04:00