openclaw

acp

windows: unify non-core spawn handling across acp qmd and docker (openclaw#31750) thanks @Takhoffman

2026-03-02 08:05:39 -06:00

agents

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

auto-reply

fix(security): harden workspace bootstrap boundary reads

2026-03-02 17:07:36 +00:00

browser

fix(security): unify root-bound write hardening

2026-03-02 17:12:33 +00:00

canvas-host

refactor(agents): centralize tool display definitions

2026-03-02 12:13:45 +00:00

channels

sendPayload: add chunking, empty-payload guard, and tests

2026-03-02 15:35:47 +00:00

cli

fix(tsgo): unblock baseline type errors (#31873 )

2026-03-02 10:09:49 -06:00

commands

refactor(commands): dedupe session target resolution and fs tool test setup

2026-03-02 14:36:41 +00:00

compat

…

config

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

cron

fix(cron): normalize topic-qualified target.to in messaging tool suppress check (#29480 )

2026-03-02 10:32:06 -06:00

daemon

fix(gateway): avoid stale running status from Windows Scheduled Task (openclaw#19504) thanks @Fologan

2026-03-02 08:12:24 -06:00

discord

refactor(security): split safe-regex parse and bounded matching

2026-03-02 16:47:00 +00:00

docs

…

gateway

refactor(gateway): harden plugin http route contracts

2026-03-02 16:48:00 +00:00

hooks

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

i18n

fix(ci): resolve i18n typing and generated-policy drift

2026-03-02 04:29:18 +00:00

imessage

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

infra

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

line

fix: harden webhook auth-before-body handling

2026-03-02 17:21:09 +00:00

link-understanding

chore: remove verified dead code paths

2026-02-22 09:21:09 +01:00

logging

refactor(logging): extract bounded regex redaction util

2026-03-02 16:47:00 +00:00

markdown

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

media

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

media-understanding

test(perf): align media auto-detect no-key mock with scenario

2026-03-02 12:20:51 +00:00

memory

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

node-host

fix(security): preserve system.run wrapper approval semantics

2026-03-02 17:20:52 +00:00

pairing

fix(pairing): handle missing accountId in allowFrom reads (#31369 )

2026-03-01 23:24:33 -08:00

plugin-sdk

fix: harden webhook auth-before-body handling

2026-03-02 17:21:09 +00:00

plugins

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

process

test(windows): stabilize exec wrapper mock assertions (#31771 )

2026-03-02 08:24:49 -06:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921 )

2026-02-23 21:17:37 -05:00

routing

fix(agents): validate sessions_spawn agentId format (#31381 )

2026-03-02 15:59:45 +00:00

scripts

…

secrets

fix(secrets): ignore stdin EPIPE from fast-exit exec resolvers

2026-03-02 15:47:21 +00:00

security

refactor(security): split safe-regex parse and bounded matching

2026-03-02 16:47:00 +00:00

sessions

test(integration): dedupe messaging, secrets, and plugin test suites

2026-03-02 07:13:11 +00:00

shared

refactor(ui): share channel config extras and hint types

2026-03-02 15:21:19 +00:00

signal

fix(signal): land #31138 syncMessage presence filtering (@Sid-Qin)

2026-03-02 03:28:25 +00:00

slack

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

terminal

fix(cli): preserve json stdout while keeping doctor migration (#24368 ) (thanks @altaywtf)

2026-03-02 03:10:02 +00:00

test-helpers

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

test-utils

refactor(gateway): hard-break plugin wildcard http handlers

2026-03-02 16:24:06 +00:00

tts

fix(tts): use opus format and enable voice bubbles for feishu and whatsapp (#27366 )

2026-02-27 23:41:22 -06:00

tui

test(integration): dedupe messaging, secrets, and plugin test suites

2026-03-02 07:13:11 +00:00

types

…

utils

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570 )

2026-02-26 18:39:13 -05:00

web

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

WhatsApp: enforce allowFrom for explicit outbound sends (#20921 )

2026-02-22 18:13:23 -05:00

wizard

fix(security): harden sms.send dangerous-node defaults

2026-03-02 16:06:52 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974 )

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): harden /app/extensions permissions to 755 (#30191 )

2026-03-01 15:45:21 -08:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975 )

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

utils.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

version.test.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00

version.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00