Peter Steinberger f789f880c9 fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

..

acp

…

agents

fix: disable tts tool for voice provider

2026-02-26 04:12:39 +01:00

auto-reply

fix(typing): call markDispatchIdle in followup runner to prevent stuck indicator (#26881)

2026-02-26 00:53:38 +00:00

browser

refactor(browser): split act route modules and dedupe path guards

2026-02-26 01:21:34 +01:00

canvas-host

…

channels

style: expand curly braces per oxfmt

2026-02-25 14:49:21 +02:00

cli

fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

commands

fix(auth): distinguish revoked API keys from transient auth errors (#25754)

2026-02-25 19:47:16 -05:00

compat

…

config

feat(heartbeat): add directPolicy and restore default direct delivery

2026-02-26 03:57:03 +01:00

cron

fix(cron): suppress fallback summary after attempted announce delivery

2026-02-26 03:09:14 +00:00

daemon

fix: back up existing systemd unit before overwriting on update (#24350) (#24937)

2026-02-24 03:22:55 +00:00

discord

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

docs

…

gateway

fix(routing): preserve explicit cron account and bound message defaults

2026-02-26 02:56:03 +00:00

hooks

fix: slug-generator uses effective model instead of agent-primary

2026-02-24 14:27:01 +00:00

imessage

refactor: extract iMessage echo cache and unify suppression guards

2026-02-25 00:53:39 +00:00

infra

refactor(security): unify path alias guard policies

2026-02-26 03:59:17 +01:00

line

security(line): cap unsigned webhook body read budget

2026-02-25 04:50:50 +00:00

link-understanding

…

logging

…

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105)

2026-02-25 04:54:51 +00:00

media

refactor(tmp): harden temp boundary guardrails

2026-02-24 23:51:10 +00:00

media-understanding

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

memory

…

node-host

fix(security): harden approval-bound node exec cwd handling

2026-02-26 04:14:11 +01:00

pairing

…

plugin-sdk

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

plugins

fix(plugins): pass session context to before_compaction hook in subscribe handler

2026-02-24 04:33:50 +00:00

process

test: stabilize no-output timeout exec test

2026-02-25 02:46:23 +00:00

providers

…

routing

fix: normalize input peer.kind in resolveAgentRoute (#22730)

2026-02-24 04:33:50 +00:00

scripts

…

security

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

sessions

…

shared

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

signal

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

slack

refactor(slack): share system-event ingress and test harness

2026-02-26 04:01:33 +01:00

telegram

fix(telegram): webhook hang - tests and fix (openclaw#26933) thanks @huntharo

2026-02-25 20:56:53 -06:00

terminal

…

test-helpers

…

test-utils

…

tts

…

tui

test: fix post-merge config and tui command-handler tests

2026-02-24 04:38:21 +00:00

types

…

utils

…

web

fix: suppress reasoning payload leakage in whatsapp replies

2026-02-25 01:36:37 +00:00

whatsapp

…

wizard

docs: clarify personal-by-default onboarding security notice

2026-02-26 02:59:34 +01:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

…

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…