Peter Steinberger
8779b523dc
test(sandbox): speed up agent-config coverage with pure resolvers
2026-02-24 01:46:12 +00:00
Peter Steinberger
467666adc7
test(sandbox): use focused modules in lightweight suites
2026-02-24 01:46:12 +00:00
Peter Steinberger
f0f886ecc4
docs(security): clarify gateway-node trust boundary in docs
2026-02-24 01:35:44 +00:00
Peter Steinberger
1f81677093
docs(changelog): note dangerous name-matching audit unification
2026-02-24 01:33:08 +00:00
Peter Steinberger
161d9841dc
refactor(security): unify dangerous name matching handling
2026-02-24 01:33:08 +00:00
Peter Steinberger
6a7c303dcc
test(msteams): fix allowlist name-match expectations
2026-02-24 01:26:53 +00:00
Peter Steinberger
2e36bdda85
docs(changelog): credit ACP security reporter
2026-02-24 01:19:03 +00:00
Peter Steinberger
22467902ea
fix(doctor): inherit dangerous name-matching flag in mutable allowlist scan
2026-02-24 01:18:38 +00:00
Peter Steinberger
e5931554bf
test: tighten slow test timeouts and cleanup
2026-02-24 01:16:53 +00:00
Peter Steinberger
6c43d0a08e
test(gateway): move sessions_send error paths to unit tests
2026-02-24 01:16:53 +00:00
Peter Steinberger
63dcd28ae0
fix(acp): harden permission tool-name validation
2026-02-24 01:11:34 +00:00
Peter Steinberger
f97c0922e1
fix(security): harden account-key handling against prototype pollution
2026-02-24 01:09:31 +00:00
Peter Steinberger
12cc754332
fix(acp): harden permission auto-approval policy
2026-02-24 01:03:30 +00:00
Peter Steinberger
ddf93d9845
docs(security): add vps trust-boundary guidance
2026-02-24 01:02:11 +00:00
Peter Steinberger
cfa44ea6b4
fix(security): make allowFrom id-only by default with dangerous name opt-in ( #24907 )
...
* fix(channels): default allowFrom to id-only; add dangerous name opt-in
* docs(security): align channel allowFrom docs with id-only default
2026-02-24 01:01:51 +00:00
Peter Steinberger
41b0568b35
docs(security): clarify shared-agent trust boundaries
2026-02-24 01:00:05 +00:00
Peter Steinberger
0cc327546b
test(gateway): speed up slow e2e test setup
2026-02-24 00:59:52 +00:00
Peter Steinberger
13478cc79a
refactor(config): harden catchall hint mapping and array fallback
2026-02-24 00:59:44 +00:00
Vincent Koc
30c622554f
Providers: disable developer role for DashScope-compatible endpoints ( #24675 )
...
* Agents: disable developer role for DashScope-compatible endpoints
* Agents: test DashScope developer-role compatibility
* Gateway: test allowlisted sessions.patch model selection
* Changelog: add DashScope role-compat fix note
2026-02-23 19:51:16 -05:00
Peter Steinberger
83eae14ed6
docs: add security-advisory triage reminder to agents guide
2026-02-24 00:45:41 +00:00
Peter Steinberger
400220275c
docs: clarify multi-instance recommendations for user isolation
2026-02-24 00:40:08 +00:00
Peter Steinberger
a430e1722b
test(channels): reduce media test runtime and polling
2026-02-24 00:31:58 +00:00
Peter Steinberger
663f784e4e
test(core): trim redundant setup and tighten waits
2026-02-24 00:31:58 +00:00
Peter Steinberger
f58c1ef34e
test(gateway): speed up contract and polling suites
2026-02-24 00:31:58 +00:00
Peter Steinberger
7d55277d72
docs: clarify operator trust boundary for shared gateways
2026-02-24 00:25:01 +00:00
Peter Steinberger
f0c3c8b6a3
fix(config): redact dynamic catchall secret keys
2026-02-24 00:21:29 +00:00
Peter Steinberger
8dfa33d373
test(sandbox): add root bind mount regression
2026-02-24 00:17:21 +00:00
Peter Steinberger
d68380bb7f
docs(security): clarify exposed-secret report scope
2026-02-24 00:17:21 +00:00
Peter Steinberger
25f6fcc63a
docs(changelog): note safeBins exec hardening
2026-02-23 23:58:58 +00:00
Peter Steinberger
3b8e33037a
fix(security): harden safeBins long-option validation
2026-02-23 23:58:58 +00:00
Peter Steinberger
7b4d2cb5cb
docs(security): clarify trusted-config dos scope
2026-02-23 23:57:26 +00:00
Peter Steinberger
a2dfe9879f
fix(security): harden regex compilation for filters and redaction
2026-02-23 23:54:50 +00:00
Peter Steinberger
e6484cb65f
refactor: harden kilocode auth ordering and dedupe provider wiring
2026-02-23 23:37:13 +00:00
Peter Steinberger
f52a0228ca
test: optimize auth and audit test runtime
2026-02-23 23:31:52 +00:00
John Fawcett
13f32e2f7d
feat: Add Kilo Gateway provider ( #20212 )
...
* feat: Add Kilo Gateway provider
Add support for Kilo Gateway as a model provider, similar to OpenRouter.
Kilo Gateway provides a unified API that routes requests to many models
behind a single endpoint and API key.
Changes:
- Add kilocode provider option to auth-choice and onboarding flows
- Add KILOCODE_API_KEY environment variable support
- Add kilocode/ model prefix handling in model-auth and extra-params
- Add provider documentation in docs/providers/kilocode.md
- Update model-providers.md with Kilo Gateway section
- Add design doc for the integration
* kilocode: add provider tests and normalize onboard auth-choice registration
* kilocode: register in resolveImplicitProviders so models appear in provider filter
* kilocode: update base URL from /api/openrouter/ to /api/gateway/
* docs: fix formatting in kilocode docs
* fix: address PR review — remove kilocode from cacheRetention, fix stale model refs and CLI name in docs, fix TS2742
* docs: fix stale refs in design doc — Moltbot to OpenClaw, MoltbotConfig to OpenClawConfig, remove extra-params section, fix doc path
* fix: use resolveAgentModelPrimaryValue for AgentModelConfig union type
---------
Co-authored-by: Mark IJbema <mark@kilocode.ai >
2026-02-23 23:29:27 +00:00
Peter Steinberger
ddb7ec99a8
test: speed up cron test polling and waits
2026-02-23 22:42:23 +00:00
Peter Steinberger
0cc46d774c
test: consolidate auth-choice tests for faster coverage
2026-02-23 22:42:23 +00:00
Gustavo Madeira Santana
eff3c5c707
Session/Cron maintenance hardening and cleanup UX ( #24753 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 7533b851565599352+gumadeiras@users.noreply.github.com >
Co-authored-by: shakkernerd <165377636+shakkernerd@users.noreply.github.com >
Reviewed-by: @shakkernerd
2026-02-23 22:39:48 +00:00
Peter Steinberger
29b19455e3
test(commands): collapse provider and endpoint matrices
2026-02-23 22:16:45 +00:00
Peter Steinberger
b922ecb8c1
test(security): reduce duplicate audit assertions
2026-02-23 22:16:39 +00:00
Peter Steinberger
cd5f3fe0c1
test(config): consolidate env/include scenario coverage
2026-02-23 22:16:30 +00:00
Peter Steinberger
c248c515a3
test: collapse sandbox agent config duplicate cases
2026-02-23 22:01:32 +00:00
Peter Steinberger
287586206c
test: consolidate sandbox docker merge scenarios
2026-02-23 22:01:22 +00:00
Peter Steinberger
8b192beaaf
test: combine web reconnect progression assertions
2026-02-23 21:57:30 +00:00
Peter Steinberger
ecd278b67b
test: merge redundant telegram media path scenarios
2026-02-23 21:57:23 +00:00
Peter Steinberger
ca761d6225
test: consolidate gateway auth test scenarios
2026-02-23 21:57:17 +00:00
Peter Steinberger
b9f01e8d3f
test: consolidate directive behavior suites for faster runs
2026-02-23 21:48:12 +00:00
Peter Steinberger
b8fc8e7e6d
test: optimize directive behavior test scenarios
2026-02-23 21:35:42 +00:00
Peter Steinberger
0183610db3
refactor: de-duplicate channel runtime and payload helpers
2026-02-23 21:25:28 +00:00
Peter Steinberger
0ae7f470a2
test: normalize skill prompt path assertions on windows
2026-02-23 21:17:29 +00:00
