openclaw

acp

fix(acp): harden permission tool-name validation

2026-02-24 01:11:34 +00:00

agents

fix(security): block workspace hardlink alias escapes

2026-02-26 03:42:54 +01:00

auto-reply

fix(typing): call markDispatchIdle in followup runner to prevent stuck indicator (#26881 )

2026-02-26 00:53:38 +00:00

browser

refactor(browser): split act route modules and dedupe path guards

2026-02-26 01:21:34 +01:00

canvas-host

…

channels

style: expand curly braces per oxfmt

2026-02-25 14:49:21 +02:00

cli

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

commands

fix(auth): distinguish revoked API keys from transient auth errors (#25754 )

2026-02-25 19:47:16 -05:00

compat

…

config

fix(security): clarify denyCommands exact-match guidance

2026-02-26 00:55:35 +01:00

cron

fix: cron model fallback to agent defaults when payload.model fails (#26717 )

2026-02-25 23:34:31 +00:00

daemon

fix: back up existing systemd unit before overwriting on update (#24350 ) (#24937 )

2026-02-24 03:22:55 +00:00

discord

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

docs

…

gateway

fix(security): bind system.run approvals to argv identity

2026-02-26 03:41:31 +01:00

hooks

fix: slug-generator uses effective model instead of agent-primary

2026-02-24 14:27:01 +00:00

imessage

refactor: extract iMessage echo cache and unify suppression guards

2026-02-25 00:53:39 +00:00

infra

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

line

security(line): cap unsigned webhook body read budget

2026-02-25 04:50:50 +00:00

link-understanding

…

logging

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105 )

2026-02-25 04:54:51 +00:00

media

refactor(tmp): harden temp boundary guardrails

2026-02-24 23:51:10 +00:00

media-understanding

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

memory

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

node-host

fix(security): clarify denyCommands exact-match guidance

2026-02-26 00:55:35 +01:00

pairing

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

plugin-sdk

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

plugins

fix(plugins): pass session context to before_compaction hook in subscribe handler

2026-02-24 04:33:50 +00:00

process

test: stabilize no-output timeout exec test

2026-02-25 02:46:23 +00:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921 )

2026-02-23 21:17:37 -05:00

routing

fix: normalize input peer.kind in resolveAgentRoute (#22730 )

2026-02-24 04:33:50 +00:00

scripts

…

security

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

sessions

Agents/Replies: scope done fallback to direct sessions

2026-02-22 13:30:30 -08:00

shared

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

signal

refactor: unify reaction ingress policy guards across channels

2026-02-26 01:34:47 +01:00

slack

fix(slack): land #26878 allowlist channel ID case-insensitive match (thanks @lbo728)

2026-02-26 02:21:02 +00:00

fix(telegram): preserve finalized previews on mixed text+voice turns

2026-02-26 03:42:47 +01:00

terminal

…

test-helpers

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

test-utils

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

tts

…

tui

test: fix post-merge config and tui command-handler tests

2026-02-24 04:38:21 +00:00

types

…

utils

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

web

fix: suppress reasoning payload leakage in whatsapp replies

2026-02-25 01:36:37 +00:00

WhatsApp: enforce allowFrom for explicit outbound sends (#20921 )

2026-02-22 18:13:23 -05:00

wizard

docs: clarify personal-by-default onboarding security notice

2026-02-26 02:59:34 +01:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

Docker: precreate identity dir in docker setup

2026-02-22 16:33:53 -08:00

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

utils.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

version.test.ts

test(core): increase coverage for sessions, auth choice, and model listing

2026-02-22 14:08:51 +00:00

version.ts

…