Peter Steinberger b1bbf3fff1 fix: harden temp dir perms for umask 0002 (landed from #27860 by @stakeswky) ...

Co-authored-by: 不做了睡大觉 <stakeswky@gmail.com>

2026-02-26 21:59:55 +00:00

..

acp

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

agents

fix(models): extend gpt-5.3-codex forward compat to github-copilot

2026-02-26 21:36:57 +00:00

auto-reply

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

browser

refactor(browser): unify fill field normalization

2026-02-26 22:17:58 +01:00

canvas-host

test: tighten canvas host websocket watchdog timeouts

2026-02-21 23:02:44 +00:00

channels

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

cli

refactor(daemon): unify runtime binary detection

2026-02-26 22:39:05 +01:00

commands

fix: forward resolved session key in agent delivery (follow-up #27584 by @qualiobra)

2026-02-26 21:18:15 +00:00

compat

…

config

feat(config): add embedded pi project settings policy

2026-02-26 21:46:39 +01:00

cron

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

daemon

refactor(daemon): unify runtime binary detection

2026-02-26 22:39:05 +01:00

discord

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

docs

…

gateway

test(gateway): align outbound session assertion shape

2026-02-26 22:14:32 +01:00

hooks

refactor: unify boundary hardening for file reads

2026-02-26 13:04:37 +01:00

imessage

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

infra

fix: harden temp dir perms for umask 0002 (landed from #27860 by @stakeswky)

2026-02-26 21:59:55 +00:00

line

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

link-understanding

chore: remove verified dead code paths

2026-02-22 09:21:09 +01:00

logging

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105)

2026-02-25 04:54:51 +00:00

media

Mattermost: avoid raw fetch in monitor media download

2026-02-26 16:03:39 +00:00

media-understanding

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

memory

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

node-host

refactor(gateway): share node command catalog

2026-02-26 22:01:06 +01:00

pairing

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

plugin-sdk

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

plugins

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

process

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

routing

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

scripts

test(scripts): dedupe a2ui temp fixture and cover skip-missing env path

2026-02-21 21:40:39 +00:00

secrets

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

security

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

sessions

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

shared

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

signal

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

slack

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

telegram

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

terminal

test(core): use lightweight clears in runtime and telegram setup

2026-02-22 08:09:14 +00:00

test-helpers

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

test-utils

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

tts

test: streamline auto-reply and tts suites

2026-02-21 21:44:01 +00:00

tui

refactor(tui): simplify stream boundary-drop modes

2026-02-26 20:54:29 +01:00

types

chore(deadcode): add deadcode scanning and remove unused lockfile deps (#22468)

2026-02-21 01:29:20 -05:00

utils

feat(secrets): finalize external secrets runtime and migration hardening

2026-02-26 14:47:22 +00:00

web

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

whatsapp

WhatsApp: enforce allowFrom for explicit outbound sends (#20921)

2026-02-22 18:13:23 -05:00

wizard

feat(secrets): expand onboarding secret-ref flows and custom-provider parity

2026-02-26 14:47:22 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

dockerfile.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

entry.ts

fix(secrets): make apply idempotent and keep audit read-only

2026-02-26 14:47:22 +00:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

utils.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

version.test.ts

test(core): increase coverage for sessions, auth choice, and model listing

2026-02-22 14:08:51 +00:00

version.ts

…