aerelune 0e2bc588c4 fix: enforce 600 perms for cron store and run logs (#36078) ...

* fix: enforce secure permissions for cron store and run logs

* fix(cron): enforce dir perms and gate posix tests on windows

* Cron store tests: cover existing directory permission hardening

* Cron run-log tests: cover existing directory permission hardening

* Changelog: note cron file permission hardening

---------

Co-authored-by: linhey <linhey@mini.local>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>

2026-03-06 00:48:35 -05:00

..

acp

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

agents

fix(agents): avoid xAI web_search tool-name collisions

2026-03-05 21:37:47 -08:00

auto-reply

Fix Control UI duplicate iMessage replies for internal webchat turns (#36151)

2026-03-06 00:47:57 -05:00

browser

fix(browser): close tracked tabs on session cleanup (#36666)

2026-03-05 16:40:52 -08:00

canvas-host

refactor(tests): dedupe canvas host server setup

2026-03-03 02:53:13 +00:00

channels

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

cli

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

commands

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

compat

…

config

fix(gateway): support image_url in OpenAI chat completions (#34068)

2026-03-06 00:35:50 -05:00

cron

fix: enforce 600 perms for cron store and run logs (#36078)

2026-03-06 00:48:35 -05:00

daemon

Fix Linux daemon install checks when systemd user bus env is missing (#34884)

2026-03-04 11:54:03 -08:00

discord

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

docs

…

gateway

Fix Control UI duplicate iMessage replies for internal webchat turns (#36151)

2026-03-06 00:47:57 -05:00

hooks

refactor(hooks): dedupe install parameter wiring

2026-03-03 01:06:00 +00:00

i18n

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

imessage

refactor: unify inbound debounce policy and split gateway/models helpers

2026-03-03 00:54:33 +00:00

infra

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

line

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

link-understanding

…

logging

build: fix ineffective dynamic imports with lazy boundaries (#33690)

2026-03-03 20:14:41 -05:00

markdown

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

media

security: add X-Content-Type-Options nosniff header to media route (#30356)

2026-03-03 13:35:46 -08:00

media-understanding

build: prevent mixed static/dynamic pi-model-discovery imports

2026-03-03 21:27:14 -05:00

memory

fix(memory): handle qmd search results without docid

2026-03-05 20:39:26 -08:00

node-host

fix(node-host): sync rawCommand with hardened argv after executable path pinning (#33137)

2026-03-04 11:30:33 -05:00

pairing

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

plugin-sdk

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

plugins

Plugins: avoid false integrity drift prompts on unpinned updates (#37179)

2026-03-05 23:43:35 -05:00

process

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

providers

refactor: dedupe agent and browser cli helpers

2026-03-03 00:15:00 +00:00

routing

fix(routing): avoid full binding rescans in resolveAgentRoute (#36915)

2026-03-05 16:49:29 -08:00

scripts

test(ci): add changed-scope shell-injection regression

2026-03-03 03:34:51 +00:00

secrets

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

security

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

sessions

fix: add runtime.events regression tests (#16044) (thanks @scifantastic)

2026-03-03 01:37:56 +00:00

shared

add prependSystemContext and appendSystemContext to before_prompt_build (fixes #35131) (#35177)

2026-03-05 13:06:59 -05:00

signal

fix(outbound): unify resolved cfg threading across send paths (#33987)

2026-03-04 00:20:44 -06:00

slack

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

telegram

fix: clear Telegram DM draft after materialize (#36746) (thanks @joelnishanth)

2026-03-06 11:16:01 +05:30

terminal

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

test-helpers

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

test-utils

fix(agents): honor explicit rate-limit cooldown probes in fallback runs

2026-03-05 20:03:06 -08:00

tts

TTS: add baseUrl support to OpenAI TTS config (#34321)

2026-03-05 07:25:04 +00:00

tui

fix(tui): preserve credential-like tokens in render sanitization

2026-03-05 21:06:07 -08:00

types

Memory: handle SecretRef keys in doctor embeddings (#36835)

2026-03-05 20:05:59 -06:00

utils

fix(secrets): harden api key normalization for ByteString headers

2026-03-05 18:31:45 -08:00

web

fix(whatsapp): remove implicit [openclaw] self-chat prefix

2026-03-05 20:49:56 -08:00

whatsapp

refactor: dedupe channel outbound and monitor tests

2026-03-03 00:15:15 +00:00

wizard

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974)

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): correct awk quoting in Docker GPG fingerprint check (#32153)

2026-03-03 02:32:46 +00:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

logging.ts

…

poll-params.test.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

poll-params.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

polls.test.ts

…

polls.ts

Harden Telegram poll gating and schema consistency (#36547)

2026-03-05 19:24:43 -05:00

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00

version.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00