Devin Robison 1b3a1246d0 Block reset-profile on lower-privilege browser request surfaces (#54618) ...

* Block reset-profile on lower-privilege browser request surfaces

* add missing tests

* Fix tests

* Test fix

2026-03-25 13:36:59 -06:00

..

acp

test: speed up targeted unit suites

2026-03-24 19:36:08 +00:00

agents

fix: per-model cooldown scope, stepped backoff, and user-facing rate-limit message (#49834)

2026-03-25 22:03:49 +03:00

auto-reply

fix: per-model cooldown scope, stepped backoff, and user-facing rate-limit message (#49834)

2026-03-25 22:03:49 +03:00

bindings

…

bootstrap

refactor: centralize node startup tls planning

2026-03-21 15:58:42 -07:00

browser

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

canvas-host

test: harden canvas host undici isolation

2026-03-23 11:54:49 -07:00

channels

Fix/telegram writeback admin scope gate (#54561)

2026-03-25 12:12:09 -06:00

cli

fix(compaction): surface safeguard cancel reasons and clarify /compact skips (#51072)

2026-03-25 11:03:22 -07:00

commands

feat(minimax): add image generation provider and trim model catalog to M2.7 (#54487)

2026-03-25 09:29:35 -07:00

compat

…

config

build: prepare 2026.3.24 release

2026-03-25 09:31:05 -07:00

context-engine

refactor: consolidate core runtime state helpers

2026-03-22 18:09:45 +00:00

cron

cron: queue isolated delivery awareness

2026-03-25 15:21:14 +05:30

daemon

fix(runtime): support Node 22.14 installs

2026-03-25 06:22:18 -07:00

docs

…

extensions

refactor: polish trigger and manifest seams

2026-03-23 22:22:48 -07:00

gateway

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

hooks

fix: skip session:patch hook clone without listeners

2026-03-25 16:12:39 +05:30

i18n

…

image-generation

test: speed up media and image-generation suites

2026-03-24 23:45:33 +00:00

infra

test: fix windows tmp root assertions

2026-03-25 13:44:54 -05:00

interactive

…

line

refactor(plugins): move remaining channel and provider ownership out of src

2026-03-22 19:13:25 -07:00

link-understanding

perf(core): narrow sandbox status imports for error helpers (#51897)

2026-03-21 15:40:45 -07:00

logging

fix: unify log timestamp offsets (#38904) (thanks @sahilsatralkar)

2026-03-25 16:06:33 +05:30

markdown

…

media

fix: reject path traversal and home-dir patterns in media parse layer (#54642)

2026-03-25 13:35:16 -06:00

media-understanding

test: finish no-isolate suite hardening

2026-03-23 02:02:03 -07:00

memory

fix(runtime): support Node 22.14 installs

2026-03-25 06:22:18 -07:00

node-host

Block reset-profile on lower-privilege browser request surfaces (#54618)

2026-03-25 13:36:59 -06:00

pairing

refactor: align pairing replies, daemon hints, and feishu mention policy

2026-03-25 04:22:53 -07:00

plugin-sdk

fix: stop leaking reply tags in iMessage outbound text (#39512) (thanks @mvanhorn)

2026-03-25 23:00:16 +05:30

plugins

plugin-runtime: expose runHeartbeatOnce in system API (#40299)

2026-03-25 10:47:01 -07:00

process

refactor(core): make event and queue state lazy

2026-03-24 11:45:27 -07:00

routing

refactor: share normalized account lookups

2026-03-22 19:01:52 +00:00

scripts

fix(image): deprecate legacy skill and clarify auth

2026-03-22 18:42:18 -07:00

secrets

fix(slack): trim DM reply overhead and restore Codex auto transport (#53957)

2026-03-24 15:03:40 -07:00

security

fix(sandbox): honor sandbox alsoAllow and explicit re-allows (#54492)

2026-03-25 16:51:13 +02:00

sessions

…

shared

refactor: tighten split-runtime live-state guardrails

2026-03-24 21:58:50 -07:00

terminal

…

test-helpers

test: harden threaded shared-worker suites

2026-03-24 08:37:00 +00:00

test-utils

refactor: dedupe test helpers and harnesses

2026-03-24 21:41:46 +00:00

tts

chore(tts): rename VOICE_BUBBLE identifiers to OPUS and update docs

2026-03-25 10:49:21 +05:30

tui

fix: preserve deferred TUI history sync (#53130) (thanks @joelnishanth)

2026-03-23 23:18:59 -07:00

types

fix(types): add workspace module shims

2026-03-24 10:07:14 -07:00

utils

fix: stop leaking reply tags in iMessage outbound text (#39512) (thanks @mvanhorn)

2026-03-25 23:00:16 +05:30

web-search

fix(slack): trim DM reply overhead and restore Codex auto transport (#53957)

2026-03-24 15:03:40 -07:00

wizard

refactor: dedupe test helpers and harnesses

2026-03-24 21:41:46 +00:00

bundled-web-search-registry.ts

feat(web-search): add DuckDuckGo bundled plugin (#52629)

2026-03-22 22:05:33 -07:00

channel-web.ts

…

docker-build-cache.test.ts

fix(ci): restore stale guardrails and baselines

2026-03-23 06:50:23 +00:00

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

refactor: clarify docker setup cli phases

2026-03-24 16:46:12 -07:00

dockerfile.test.ts

…

entry.respawn.test.ts

fix: handle Linux nvm CA env before startup (#51146) (thanks @GodsBoy)

2026-03-21 11:06:31 -07:00

entry.respawn.ts

refactor: centralize node startup tls planning

2026-03-21 15:58:42 -07:00

entry.test.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

entry.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

entry.version-fast-path.test.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

extensionAPI.test.ts

restore extension-api backward compatibility with migration warning

2026-03-20 13:27:30 -05:00

extensionAPI.ts

restore extension-api backward compatibility with migration warning

2026-03-20 13:27:30 -05:00

global-state.ts

fix: stabilize logging config imports

2026-03-24 17:21:28 +00:00

globals.ts

fix: stabilize logging config imports

2026-03-24 17:21:28 +00:00

index.test.ts

perf: reduce runtime and test startup overhead

2026-03-21 20:18:16 +00:00

index.ts

…

install-sh-version.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

poll-params.test.ts

fix(poll-params): treat zero-valued numeric poll params as unset (#52150)

2026-03-22 18:39:31 +08:00

poll-params.ts

fix(poll-params): treat zero-valued numeric poll params as unset (#52150)

2026-03-22 18:39:31 +08:00

polls.test.ts

…

polls.ts

…

runtime.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

utils.test.ts

…

utils.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

version.test.ts

…

version.ts

…