Xinhua Gu aee585065e fix(plugins): wrap modelAuth helpers to prevent credential steering ...

Address Aisle security review: wrap getApiKeyForModel and
resolveApiKeyForProvider so plugins cannot pass arbitrary agentDir or
store overrides to steer credential lookups outside their own context.

Only provider, model, cfg, profileId, and preferredProfile are
forwarded to the underlying auth pipeline.

Add test verifying the wrappers are not direct references to the raw
functions.

2026-03-09 15:59:24 -07:00

..

acp

acp: harden follow-up reliability and attachments (#41464)

2026-03-09 23:03:50 +01:00

agents

Add HTTP 499 to transient error codes for model fallback (#41468)

2026-03-10 01:55:10 +03:00

auto-reply

Agents: add fallback error observations (#41337)

2026-03-10 01:12:10 +03:00

browser

fix(browser): enforce redirect-hop SSRF checks

2026-03-09 05:41:36 +00:00

canvas-host

refactor(tests): dedupe canvas host server setup

2026-03-03 02:53:13 +00:00

channels

refactor: share multi-account config schema fragments

2026-03-08 23:38:24 +00:00

cli

Cron: enforce cron-owned delivery contract (#40998)

2026-03-09 20:12:37 +01:00

commands

Agents: add fallback error observations (#41337)

2026-03-10 01:12:10 +03:00

compat

…

config

fix(kimi-coding): fix kimi tool format: use native Anthropic tool schema instead of OpenAI … (openclaw#40008)

2026-03-09 08:28:47 -05:00

context-engine

test(context-engine): add bundle chunk isolation tests for registry (#40460)

2026-03-09 08:15:35 -07:00

cron

Agents: add fallback error observations (#41337)

2026-03-10 01:12:10 +03:00

daemon

fix: stabilize launchd paths and appcast secret scan

2026-03-09 08:37:37 +00:00

discord

fix(discord): apply effective maxLinesPerMessage in live replies (#40133)

2026-03-10 01:30:24 +03:00

docs

…

gateway

acp: add regression coverage and smoke-test docs (#41456)

2026-03-09 22:40:14 +01:00

hooks

fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875)

2026-03-08 19:07:28 +03:00

i18n

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

imessage

refactor: unify DM pairing challenge flows

2026-03-07 20:33:50 +00:00

infra

fix(agents): bound compaction retry wait and drain embedded runs on restart (#40324)

2026-03-09 08:27:29 -07:00

line

refactor: share missing-sender matched allowlist evaluation

2026-03-08 00:05:24 +00:00

link-understanding

…

logging

Logging: harden probe suppression for observations (#41338)

2026-03-10 01:40:15 +03:00

markdown

perf: harden chunking against quadratic scans

2026-03-07 16:50:35 +00:00

media

fix(media): accept reader read result type

2026-03-09 03:49:50 +00:00

media-understanding

fix: add gemini 3.1 flash-lite support

2026-03-08 05:12:48 +00:00

memory

refactor: extract qmd process runner

2026-03-08 18:40:15 +00:00

node-host

test: fix windows runtime and restart loop harnesses

2026-03-09 07:22:23 +00:00

pairing

refactor(pairing): share allowFrom path resolution

2026-03-08 02:16:03 +00:00

plugin-sdk

fix(plugins): expose model auth API to context-engine plugins

2026-03-09 15:59:24 -07:00

plugins

fix(plugins): wrap modelAuth helpers to prevent credential steering

2026-03-09 15:59:24 -07:00

process

fix(sessions): clear stale contextTokens on model switch (#38044)

2026-03-08 10:59:16 -07:00

providers

build: update app deps except carbon

2026-03-09 06:09:33 +00:00

routing

refactor(routing): centralize inbound last-route policy

2026-03-08 02:16:03 +00:00

scripts

CI: cover skill and extension tests

2026-03-06 11:21:03 -05:00

secrets

test(secrets): skip ACL-dependent runtime snapshot tests on windows

2026-03-09 05:38:54 +00:00

security

fix: narrow dm shared group policy typing

2026-03-08 00:05:24 +00:00

sessions

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

shared

refactor: share sampled entry summary formatting

2026-03-08 00:05:24 +00:00

signal

fix(signal): forward all inbound attachments from #39212 (thanks @joeykrug)

2026-03-07 23:35:55 +00:00

slack

refactor(channels): share native command session targets

2026-03-08 01:27:05 +00:00

telegram

fix(telegram): bridge direct delivery to internal message:sent hooks (#40185)

2026-03-09 11:21:19 -07:00

terminal

fix(agents): warn clearly on unresolved model ids (#39215, thanks @ademczuk)

2026-03-07 22:50:27 +00:00

test-helpers

…

test-utils

fix(ci): restore strip-ansi and typecheck fixtures (#39146)

2026-03-07 23:13:13 +03:00

tts

fix(ollama): register custom api for compaction and summarization (#39332)

2026-03-07 17:40:34 -08:00

tui

fix(tui): improve color contrast for light-background terminals (#40345)

2026-03-08 16:17:28 -07:00

types

Memory: handle SecretRef keys in doctor embeddings (#36835)

2026-03-05 20:05:59 -06:00

utils

fix(exec): honor shell comments in allow-always analysis

2026-03-07 23:31:25 +00:00

web

refactor: reuse broadcast route key construction

2026-03-08 23:38:24 +00:00

whatsapp

refactor: dedupe channel outbound and monitor tests

2026-03-03 00:15:15 +00:00

wizard

fix(onboard): avoid persisting talk fallback on fresh setup

2026-03-09 08:33:58 +00:00

channel-web.ts

…

docker-build-cache.test.ts

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

docker-image-digests.test.ts

fix(ci): pin multi-arch docker base digests

2026-03-08 02:55:15 +00:00

docker-setup.e2e.test.ts

Docker: trim runtime image payload (#40307)

2026-03-08 16:07:04 -07:00

dockerfile.test.ts

Docker: trim runtime image payload (#40307)

2026-03-08 16:07:04 -07:00

entry.ts

CLI: include commit hash in --version output (#39712)

2026-03-08 19:10:48 +03:00

entry.version-fast-path.test.ts

CLI: include commit hash in --version output (#39712)

2026-03-08 19:10:48 +03:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

install-sh-version.test.ts

build: bump unreleased version to 2026.3.9

2026-03-09 08:33:58 +00:00

logger.test.ts

…

logger.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

logging.ts

…

poll-params.test.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

poll-params.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

polls.test.ts

…

polls.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00

version.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00