openclaw

acp

refactor(test): remove duplicate cron tool harnesses

2026-02-21 12:25:23 +00:00

agents

fix(security): OC-91 validate WhatsApp JID against allowlist in all send paths — Aether AI Agent

2026-02-21 13:57:54 +01:00

auto-reply

fix(telegram): split streaming preview per assistant block (#22613 )

2026-02-21 18:05:23 +05:30

browser

fix(sandbox): use one-time noVNC observer tokens

2026-02-21 13:56:58 +01:00

canvas-host

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

channels

fix(telegram): split streaming preview per assistant block (#22613 )

2026-02-21 18:05:23 +05:30

cli

CLI: default pairing channel for pairing commands

2026-02-20 19:59:54 -08:00

commands

refactor(security): centralize host env policy and harden env ingestion

2026-02-21 13:04:39 +01:00

compat

…

config

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

cron

fix(cron): honor maxConcurrentRuns in timer loop (openclaw#22413) thanks @Takhoffman

2026-02-20 22:31:58 -06:00

daemon

Daemon: harden systemd unit env rendering

2026-02-20 12:51:14 -06:00

discord

fix(security): force sandbox browser hash migration and audit stale labels

2026-02-21 13:25:41 +01:00

docs

…

gateway

refactor(test): dedupe temp-home setup in voicewake suite

2026-02-21 12:56:34 +00:00

hooks

Hooks: persist session memory on /reset

2026-02-20 20:19:29 -08:00

imessage

style: format files and fix safe-bins e2e typing

2026-02-19 14:26:12 +01:00

infra

refactor(security): centralize host env policy and harden env ingestion

2026-02-21 13:04:39 +01:00

line

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

link-understanding

fix: block ISATAP SSRF bypass via shared host/ip guard

2026-02-19 09:59:47 +01:00

logging

fix(ui): unblock docker onboarding build

2026-02-19 16:32:33 +01:00

macos

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

markdown

fix(security): use YAML core schema to prevent type coercion (#20857 )

2026-02-19 03:15:36 -08:00

media

Security: harden tool media paths

2026-02-20 13:32:49 -06:00

media-understanding

fix(tui): strip inbound metadata blocks from user messages (clean rewrite) (#22345 )

2026-02-20 23:52:43 -05:00

memory

fix(tui): strip inbound metadata blocks from user messages (clean rewrite) (#22345 )

2026-02-20 23:52:43 -05:00

node-host

fix(security): harden and refactor system.run command resolution

2026-02-21 11:49:38 +01:00

pairing

fix(cron/whatsapp): route implicit delivery to allowlisted recipients (openclaw#21533) thanks @Takhoffman

2026-02-19 20:33:37 -06:00

plugin-sdk

refactor(security): unify webhook auth matching paths

2026-02-21 11:52:34 +01:00

plugins

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

process

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

providers

fix(oauth): harden refresh token refresh-response validation

2026-02-21 13:44:14 +01:00

routing

refactor(test): dedupe agent harnesses and routing fixtures

2026-02-18 04:49:22 +00:00

scripts

…

security

fix(sandbox): use one-time noVNC observer tokens

2026-02-21 13:56:58 +01:00

sessions

fix(auth/session): preserve override reset behavior and repair oauth profile-id drift (openclaw#18820) thanks @Glucksberg

2026-02-19 21:16:26 -06:00

shared

fix(tui): strip inbound metadata blocks from user messages (clean rewrite) (#22345 )

2026-02-20 23:52:43 -05:00

signal

refactor(signal): reuse shared reaction types

2026-02-18 23:34:15 +00:00

slack

fix(slack): pass recipient_team_id to streaming API calls (#20988 )

2026-02-19 14:44:34 -08:00

fix(telegram): split streaming preview per assistant block (#22613 )

2026-02-21 18:05:23 +05:30

terminal

refactor(cli): share styled select prompt helper

2026-02-18 17:48:02 +00:00

test-helpers

refactor(test): simplify state dir env helpers

2026-02-16 00:08:00 +00:00

test-utils

refactor(test): dedupe gateway env setup and add env util coverage

2026-02-21 12:52:21 +00:00

tts

fix(tts): make model provider overrides opt-in

2026-02-21 13:16:07 +01:00

tui

TUI: strip only leading inbound metadata (#22461 )

2026-02-21 01:13:02 -05:00

types

chore(deadcode): add deadcode scanning and remove unused lockfile deps (#22468 )

2026-02-21 01:29:20 -05:00

utils

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

web

test: isolate local media regression fixtures to allowed roots (#22369 )

2026-02-20 21:50:50 -05:00

test: dedupe line and whatsapp target resolution tests

2026-02-18 05:31:13 +00:00

wizard

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

channel-web.ts

…

docker-image-digests.test.ts

fix(docker): pin base images to SHA256 digests (#7734 )

2026-02-19 12:42:07 -08:00

docker-setup.test.ts

fix(docker): harden docker-setup mount validation

2026-02-19 10:44:46 +01:00

dockerfile.test.ts

test(docker): cover browser install build arg

2026-02-16 22:35:27 -05:00

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

test: merge logger subsystem prefix drop cases

2026-02-19 08:49:52 +00:00

logger.ts

…

logging.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

polls.test.ts

test: table-drive poll duration clamp cases

2026-02-18 23:27:50 +00:00

polls.ts

refactor(outbound): dedupe poll threading + tighten duration semantics

2026-02-14 19:03:46 +01:00

runtime.ts

chore: chore: Fix types in tests 12/N.

2026-02-17 11:22:49 +09:00

utils.test.ts

perf(test): drop redundant index entrypoint tests

2026-02-16 02:45:00 +00:00

utils.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

version.test.ts

refactor: centralize presence routing and version precedence coverage (#19609 )

2026-02-18 00:02:51 -05:00

version.ts

refactor: centralize presence routing and version precedence coverage (#19609 )

2026-02-18 00:02:51 -05:00