Paul Pitchford efa8075c68 fix: external plugin tabs fail under gateway auth (#107323) ...

* fix: load plugin tabs with gateway auth

* fix: harden plugin tab cookie signature compare

* fix(gateway): authenticate external plugin tabs

Co-authored-by: Paul Pitchford <paul@paulpitchford.co.uk>

* refactor(gateway): simplify plugin frame auth proof

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-07-16 07:26:00 -07:00

..

.generated

refactor(channels): table-drive setup and control-plane helpers (#109028)

2026-07-16 07:17:01 -07:00

.i18n

feat(linux): canvas UI via CLI-node + Tauri app IPC bridge (#107633)

2026-07-14 16:05:14 -07:00

announcements

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

assets

docs(readme): trim banner whitespace for a more compact hero

2026-07-09 14:53:52 -07:00

automation

docs(cron): remove retired run-log settings

2026-07-13 11:41:27 -07:00

channels

feat(widgets): unify show_widget across surfaces (#108983)

2026-07-16 05:24:11 -07:00

clawhub

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

cli

fix(update): repair obsolete managed Gateway Node (#108668)

2026-07-16 00:41:43 -07:00

concepts

fix(agents): preserve worktree-local ignored state during lossless cleanup (#108401)

2026-07-16 07:06:25 -07:00

debug

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

diagnostics

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

gateway

fix(ui): add thinking level to new cloud sessions (#108679)

2026-07-15 23:54:00 -07:00

help

improve: speed up ring-zero QA smoke (#108694)

2026-07-16 01:12:40 -07:00

images

chore: remove unused tracked assets

2026-05-26 02:21:58 +01:00

install

fix(update): preserve pnpm and Bun global installs (#107802)

2026-07-15 08:03:35 -07:00

maturity

fix(docs): render taxonomy closing tags

2026-07-16 04:50:41 -04:00

nodes

refactor(node-host): move configuration to shared SQLite (#108457)

2026-07-15 14:02:23 -07:00

plan

refactor: flip sessions and transcripts to sqlite storage (#98236)

2026-07-11 14:50:37 -07:00

platforms

feat(linux): discover gateways via Bonjour and open their dashboard (#108115)

2026-07-15 01:22:36 -07:00

plugins

fix: external plugin tabs fail under gateway auth (#107323)

2026-07-16 07:26:00 -07:00

providers

fix(clawrouter): normalize Perplexity tool schemas and harden dynamic model cache (#108758)

2026-07-16 02:39:33 -07:00

refactor

refactor(apns): move registrations to shared SQLite (#108543)

2026-07-16 01:52:15 -07:00

reference

docs: align QA transport and release workflow contracts (#108463)

2026-07-15 14:51:37 -07:00

releases

docs: publish release notes for v2026.7.1 (#107040)

2026-07-13 22:54:04 -06:00

security

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

snippets/plugin-publish

docs: restore source-backed contract details (#100182)

2026-07-05 01:26:25 -04:00

specs

fix: explain and control native session discovery (#107162)

2026-07-14 00:18:18 -07:00

start

fix(onboarding): explain how to get provider tokens and revive logged-out CLI candidates (#108739)

2026-07-16 01:12:15 -07:00

tools

feat(widgets): unify show_widget across surfaces (#108983)

2026-07-16 05:24:11 -07:00

web

feat(widgets): unify show_widget across surfaces (#108983)

2026-07-16 05:24:11 -07:00

agent-runtime-architecture.md

fix(openai): align auth availability with effective routes (#104685)

2026-07-11 15:26:48 -07:00

AGENTS.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

auth-credential-semantics.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

brave-search.md

…

ci.md

docs: align QA transport and release workflow contracts (#108463)

2026-07-15 14:51:37 -07:00

CLAUDE.md

…

date-time.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

docs_map.md

docs(lobster): enumerate injected workflow env vars and clarify step-output access (#108622)

2026-07-16 05:05:21 -07:00

docs.json

feat(discord): opt-in Discord Activities widget support (#107442)

2026-07-15 04:07:46 -07:00

index.md

fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065)

2026-07-13 13:59:00 +08:00

logging.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

nav-tabs-underline.js

docs: document repo support scripts

2026-06-04 08:01:15 -04:00

network.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

openclaw-agent-runtime.md

refactor: flip sessions and transcripts to sqlite storage (#98236)

2026-07-11 14:50:37 -07:00

perplexity.md

…

prose.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

style.css

fix(docs): expose generated taxonomy links

2026-07-15 07:28:58 -04:00

tts.md

…

vps.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

whatsapp-openclaw.jpg

…