Peter Steinberger
d095d1663b
fix(exa): reject non-decimal search counts
2026-05-29 06:49:23 -04:00
Peter Steinberger
ed59629ccd
fix(nextcloud-talk): centralize integer coercion
2026-05-29 06:45:24 -04:00
Peter Steinberger
4a206db106
fix(irc): centralize setup port parsing
2026-05-29 06:41:44 -04:00
Peter Steinberger
1042dce454
fix(codex): centralize session limit parsing
2026-05-29 06:37:59 -04:00
Vincent Koc
529ea02353
refactor: share discord native command access context
2026-05-29 12:28:45 +02:00
Peter Steinberger
1b138d3f38
fix(qa-matrix): centralize timeout env parsing
2026-05-29 06:27:30 -04:00
Peter Steinberger
ba2620a9af
fix(memory-lancedb): centralize cli integer parsing
2026-05-29 06:24:22 -04:00
Peter Steinberger
182d60535a
test: fix main test type checks
2026-05-29 11:21:42 +01:00
Peter Steinberger
28a2043f51
fix(qa-lab): centralize cli integer parsing
2026-05-29 06:20:43 -04:00
Vincent Koc
036298fbae
fix(music): bound generated track downloads
2026-05-29 12:20:09 +02:00
Peter Steinberger
3430a2d26f
fix(memory-wiki): centralize cli line option parsing
2026-05-29 06:16:44 -04:00
Peter Steinberger
888cd08fa8
fix(memory-core): centralize cli integer parsing
2026-05-29 06:12:45 -04:00
Peter Steinberger
fbf900c746
refactor: move plugin state consumers to sqlite
...
Summary:
- add plugin-state runtime SDK subpaths backed by the existing sidecar DB
- migrate Discord model-picker preferences and Feishu dedup state to plugin-state keyed stores
- wire doctor legacy-state migration imports, including TTL preservation, for existing plugin JSON state
Verification:
- pnpm plugin-sdk:api:check
- focused plugin-state, doctor, Discord, Feishu, and package-boundary Vitest suites
- git diff --check origin/main...HEAD
- env -u OPENCLAW_TESTBOX pnpm check:changed
- autoreview --mode branch --base origin/main
- GitHub Actions PR checks green on 1025c2b570
2026-05-29 11:12:15 +01:00
Peter Steinberger
0ad43bbf3d
test(release): harden live provider gates
2026-05-29 11:09:15 +01:00
Peter Steinberger
7a803c113d
fix(talk-voice): parse signed list limits
2026-05-29 06:08:50 -04:00
Vincent Koc
bba28df9f7
refactor: share qqbot typing notify retry
2026-05-29 12:05:54 +02:00
Peter Steinberger
9f28e8c5f4
fix(browser): centralize cli integer option parsing
2026-05-29 06:05:01 -04:00
Peter Steinberger
1d645ff66b
feat(workboard): persist card metadata
2026-05-29 11:04:37 +01:00
Peter Steinberger
ab3eca14f1
fix(workboard): tighten controls and track card events
2026-05-29 11:04:37 +01:00
Peter Steinberger
7e59e43ce6
feat(workboard): add card execution actions
2026-05-29 11:04:37 +01:00
Peter Steinberger
e7e3b4a58b
fix(workboard): align bundled metadata
2026-05-29 11:04:37 +01:00
Peter Steinberger
8477e39db7
fix(workboard): keep plugin opt-in
2026-05-29 11:04:37 +01:00
Peter Steinberger
0cdb80078f
fix(workboard): polish card editing flow
2026-05-29 11:04:37 +01:00
Peter Steinberger
86ed25af34
feat: add workboard dashboard plugin
2026-05-29 11:04:37 +01:00
Vincent Koc
7708e8c7ef
refactor: share qqbot media path decoding
2026-05-29 11:53:33 +02:00
Peter Steinberger
656c238295
fix(telegram): ignore unsafe cached message ids
2026-05-29 05:44:15 -04:00
Peter Steinberger
e890d7ea4f
fix(telegram): reject unsafe topic targets
2026-05-29 05:39:57 -04:00
Peter Steinberger
97afdc144d
fix(file-transfer): validate node fetch byte limits
2026-05-29 05:15:56 -04:00
Vincent Koc
966c274f20
refactor: share browser snapshot helpers
2026-05-29 11:11:46 +02:00
Vincent Koc
9e002c12ac
fix(video): bound generated video downloads
2026-05-29 11:00:06 +02:00
Vincent Koc
bee163bf37
refactor: share chrome cdp websocket diagnostics
2026-05-29 10:57:12 +02:00
Peter Steinberger
5fce8cef1e
refactor(qa-lab): share guarded config merge patches
2026-05-29 04:54:42 -04:00
Vincent Koc
850f7c24d4
refactor: share browser basic route helpers
2026-05-29 10:45:55 +02:00
Peter Steinberger
03ac6e3171
fix(qa-lab): ignore prototype keys in patch checks
2026-05-29 04:44:37 -04:00
tanshanshan
8201e851ca
feat(zalouser): forward data.quote metadata into agent context
...
Forward Zalo quote-reply metadata from zca-js data.quote into the existing ReplyToId, ReplyToBody, and ReplyToIsQuote context keys so agents can correlate quoted replies with prior bot messages.
Adds parser and monitor regression coverage for quote extraction and context projection.
Fixes #86851 .
Thanks @tanshanshan.
2026-05-29 09:42:39 +01:00
Peter Steinberger
e144d1c8d9
fix(oc-path): reject noncanonical array indexes
2026-05-29 04:37:41 -04:00
Vincent Koc
628104662b
refactor: share browser client request helpers
2026-05-29 10:26:44 +02:00
UB
d18ee1881c
fix(discord): remove optional runtime error shims
...
Remove unreachable optional chaining from four Discord message-handler-family runtime error calls.
This aligns the code with the required RuntimeEnv.error contract while leaving production behavior unchanged for valid runtimes. Maintainer-updated PR proof clarifies that shared queue reporter hooks still treat malformed runtime reporter failures as best-effort.
2026-05-29 09:22:44 +01:00
Peter Steinberger
f6d293a1ee
fix(telegram): reject unsafe callback pages
2026-05-29 04:15:13 -04:00
Vincent Koc
a4bb9b1438
refactor: share browser debug route responses
2026-05-29 10:14:18 +02:00
Peter Steinberger
895d1a90f3
fix(google-meet): reject invalid auth timeouts
2026-05-29 04:11:02 -04:00
Vincent Koc
456cade93c
fix(together): bound generated video downloads
2026-05-29 10:10:39 +02:00
Pavan Kumar Gondhi
9497629c1e
fix(msteams): pin attachment fetch DNS
...
Route Microsoft Teams attachment downloads through the shared SSRF guarded fetch path so DNS validation is pinned into the dispatcher used for the actual request.
Keep Teams auth fallback and allowlisted HTTPS Authorization redirect behavior while failing closed for custom fetch hooks that cannot accept dispatcher injection.
Verification:
- CI=1 OPENCLAW_VITEST_MAX_WORKERS=1 timeout 300 node scripts/run-vitest.mjs run extensions/msteams/src/attachments/shared.test.ts extensions/msteams/src/attachments/bot-framework.test.ts src/infra/net/fetch-guard.ssrf.test.ts
- gh pr checks 87567 --repo openclaw/openclaw --watch=false
PR: #87567
2026-05-29 09:03:50 +01:00
Peter Steinberger
e5063f51cb
fix(phone-control): reject invalid arm durations
2026-05-29 04:03:45 -04:00
Vincent Koc
3e050d05e8
refactor: share session tab registry helpers
2026-05-29 10:02:18 +02:00
Peter Steinberger
24614ac100
refactor(browser): centralize route numeric readers
2026-05-29 03:59:19 -04:00
Vincent Koc
6c309b9883
refactor: share browser route navigation policy
2026-05-29 09:52:12 +02:00
Peter Steinberger
2ea8d88d63
fix(browser): validate cookie expiry values
2026-05-29 03:50:19 -04:00
Peter Steinberger
ac52499aca
fix(browser): validate screenshot timeout
2026-05-29 03:46:53 -04:00
Peter Steinberger
c48a4a3188
fix(browser): validate geolocation options
2026-05-29 03:43:06 -04:00
