Urian Paul Danut d1a59557b5 fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983) ...

Merged via squash.

Prepared head SHA: ff07dc45a9c9665c0a88c9898684a5c97f76473b
Co-authored-by: urianpaul94 <33277984+urianpaul94@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn

2026-03-10 13:54:23 +08:00

..

acp

acp: harden follow-up reliability and attachments (#41464)

2026-03-09 23:03:50 +01:00

agents

fix(web-search): recover OpenRouter Perplexity citations from message annotations (#40881)

2026-03-10 10:37:44 +05:30

auto-reply

fix: protect bootstrap files during memory flush (#38574)

2026-03-10 12:44:33 +08:00

browser

…

canvas-host

…

channels

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

cli

fix(secrets): resolve web tool SecretRefs atomically at runtime

2026-03-09 22:57:03 -05:00

commands

Agents: add fallback error observations (#41337)

2026-03-10 01:12:10 +03:00

compat

…

config

fix(secrets): resolve web tool SecretRefs atomically at runtime

2026-03-09 22:57:03 -05:00

context-engine

test(context-engine): add bundle chunk isolation tests for registry (#40460)

2026-03-09 08:15:35 -07:00

cron

cron: record lastErrorReason in job state (#14382)

2026-03-10 00:01:45 -05:00

daemon

fix: stabilize launchd paths and appcast secret scan

2026-03-09 08:37:37 +00:00

discord

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

docs

…

gateway

cron: record lastErrorReason in job state (#14382)

2026-03-10 00:01:45 -05:00

hooks

…

i18n

…

imessage

…

infra

fix: protect bootstrap files during memory flush (#38574)

2026-03-10 12:44:33 +08:00

line

…

link-understanding

…

logging

Logging: harden probe suppression for observations (#41338)

2026-03-10 01:40:15 +03:00

markdown

…

media

…

media-understanding

…

memory

Fix one-shot exit hangs by tearing down cached memory managers (#40389)

2026-03-10 07:34:46 +08:00

node-host

ui: fix sessions table collapse on narrow widths (#12175)

2026-03-09 23:14:07 -05:00

pairing

…

plugin-sdk

fix(plugins): expose model auth API to context-engine plugins (#41090)

2026-03-09 16:07:26 -07:00

plugins

fix(plugins): expose model auth API to context-engine plugins (#41090)

2026-03-09 16:07:26 -07:00

process

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

providers

…

routing

…

scripts

…

secrets

fix(secrets): resolve web tool SecretRefs atomically at runtime

2026-03-09 22:57:03 -05:00

security

fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983)

2026-03-10 13:54:23 +08:00

sessions

…

shared

…

signal

…

slack

…

telegram

fix(telegram): prevent duplicate messages when preview edit times out (#41662)

2026-03-10 10:17:39 +05:30

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

…

types

…

utils

…

web

…

whatsapp

…

wizard

…

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

install-sh-version.test.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…