Peter Steinberger
fe58839ed1
docs(changelog): thank ghsa reporter for exec fix
2026-02-22 23:04:29 +01:00
Peter Steinberger
498138e77e
docs(changelog): record avatar security hardening
2026-02-22 23:04:23 +01:00
Peter Steinberger
9a6a4131ba
docs(changelog): note shell-wrapper line-continuation exec hardening
2026-02-22 23:03:53 +01:00
Peter Steinberger
c677be9d5f
fix(exec): skip default timeout for background sessions
2026-02-22 23:03:44 +01:00
Peter Steinberger
4b0fddc075
fix(test): prevent env leak causing models.json CI flake
2026-02-22 22:00:44 +00:00
Peter Steinberger
862975507a
refactor(exec): split command resolution and trusted-dir normalization
2026-02-22 23:00:33 +01:00
Peter Steinberger
70cac824b1
perf(test): optimize parallel vitest worker budget
2026-02-22 21:59:22 +00:00
Peter Steinberger
24c954d972
fix(security): harden allow-always wrapper persistence
2026-02-22 22:55:33 +01:00
Peter Steinberger
4adfe80027
fix(extensions): preserve mediaLocalRoots in telegram/discord sendMedia
2026-02-22 22:53:57 +01:00
Peter Steinberger
1e582dcc6f
fix: harden windows path handling in CI tests
2026-02-22 21:52:10 +00:00
Tak Hoffman
556af3f08b
fix(cron): cancel timed-out runs before side effects (openclaw#22411) thanks @Takhoffman
...
Verified:
- pnpm check
- pnpm vitest run src/memory/qmd-manager.test.ts src/cron/service.issue-regressions.test.ts src/cron/isolated-agent.delivers-response-has-heartbeat-ok-but-includes.test.ts --maxWorkers=1
Co-authored-by: Takhoffman <781889+Takhoffman@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-02-22 15:45:27 -06:00
Peter Steinberger
64b273a71c
fix(exec): harden safe-bin trust and add explicit trusted dirs
2026-02-22 22:43:18 +01:00
Vignesh Natarajan
08fb38f729
Fix: resolve pnpm check type regressions
2026-02-22 13:40:51 -08:00
Peter Steinberger
6970c2c2db
fix(gateway): harden control-ui avatar reads
2026-02-22 22:40:22 +01:00
Peter Steinberger
e16f93af0c
fix: stabilize ci test typings and mocks
2026-02-22 21:38:47 +00:00
Peter Steinberger
3f0b9dbb36
fix(security): block shell-wrapper line-continuation allowlist bypass
2026-02-22 22:36:29 +01:00
Peter Steinberger
7c109f5737
fix: resolve ci type errors and reconnect test flake
2026-02-22 21:35:20 +00:00
Vignesh Natarajan
d75b594e07
Agents/Replies: scope done fallback to direct sessions
2026-02-22 13:30:30 -08:00
Peter Steinberger
e4d67137db
fix(node): default mac headless system.run to local host
...
Co-authored-by: aethnova <262512133+aethnova@users.noreply.github.com >
2026-02-22 22:24:28 +01:00
Peter Steinberger
d24f5c1e3a
fix(gateway): fail fast exec approvals when no approvers are reachable
...
Co-authored-by: fanxian831-netizen <262880470+fanxian831-netizen@users.noreply.github.com >
2026-02-22 22:24:27 +01:00
Peter Steinberger
73fab7e445
fix(agents): map container workdir paths in workspace guard
...
Co-authored-by: Explorer1092 <32663226+Explorer1092@users.noreply.github.com >
2026-02-22 22:24:27 +01:00
Peter Steinberger
7bbd597383
fix(media): enforce agent media roots in plugin send actions
...
Co-authored-by: Oliver Drobnik <333270+odrobnik@users.noreply.github.com >
Co-authored-by: thisischappy <257418353+thisischappy@users.noreply.github.com >
2026-02-22 22:24:27 +01:00
Peter Steinberger
33a43a151d
refactor(security): split elevated allowFrom matcher internals
2026-02-22 22:20:04 +01:00
Peter Steinberger
2081b3a3c4
refactor(channels): dedupe hook and monitor execution paths
2026-02-22 21:19:09 +00:00
Peter Steinberger
06b0a60bef
refactor(daemon): share runtime and service probe helpers
2026-02-22 21:19:09 +00:00
Peter Steinberger
e029f78447
refactor(config): dedupe install and typing schema definitions
2026-02-22 21:19:09 +00:00
Peter Steinberger
4bf67ab698
refactor(commands): centralize shared command formatting helpers
2026-02-22 21:19:09 +00:00
Peter Steinberger
06bdd53658
refactor(agents): dedupe workspace and session tool flows
2026-02-22 21:19:09 +00:00
Peter Steinberger
2f8c68ae4d
refactor(test): dedupe run-loop signal harness setup
2026-02-22 21:19:09 +00:00
Peter Steinberger
52ee1f697e
test(memory): cover shared batch output and error helpers
2026-02-22 21:19:09 +00:00
Peter Steinberger
ad51372f78
refactor(memory): share batch provider scaffolding
2026-02-22 21:19:09 +00:00
Tak Hoffman
f8171ffcdc
Config UI: tag filters and complete schema help/labels coverage ( #23796 )
...
* Config UI: add tag filters and complete schema help/labels
* Config UI: finalize tags/help polish and unblock test suite
* Protocol: regenerate Swift gateway models
2026-02-22 15:17:07 -06:00
Peter Steinberger
c539782c09
test(gateway-lock): stabilize port-probe liveness coverage
2026-02-22 22:11:53 +01:00
Peter Steinberger
ffb12397a8
fix(cron): direct-deliver thread and topic announce targets
...
Co-authored-by: Andrei Aratmonov <247877121+AndrewArto@users.noreply.github.com >
2026-02-22 22:11:52 +01:00
Peter Steinberger
320cf8eb3e
fix(subagents): restore configurable announce timeout
...
Co-authored-by: Valadon <20071960+Valadon@users.noreply.github.com >
2026-02-22 22:11:52 +01:00
Peter Steinberger
3820ad77ba
fix(cron): pass agentDir into embedded follow-up runs
...
Co-authored-by: seilk <88271769+seilk@users.noreply.github.com >
2026-02-22 22:11:52 +01:00
Peter Steinberger
34fef3ae60
fix(delivery): quarantine permanent recovery failures
...
Co-authored-by: Aldo <17973757+aldoeliacim@users.noreply.github.com >
2026-02-22 22:11:51 +01:00
Peter Steinberger
e6383a2c13
fix(gateway): probe port liveness for stale lock recovery
...
Co-authored-by: Operative-001 <261882263+Operative-001@users.noreply.github.com >
2026-02-22 22:11:51 +01:00
Peter Steinberger
9165bd7f37
fix(gateway): auto-approve loopback scope upgrades
...
Co-authored-by: Marcus Widing <245375637+widingmarcus-cyber@users.noreply.github.com >
2026-02-22 22:11:50 +01:00
Peter Steinberger
6817c0ec7b
fix(security): tighten elevated allowFrom sender matching
2026-02-22 22:00:08 +01:00
Peter Steinberger
3a088c9f4f
docs: prune completed experiment plan notes
2026-02-22 21:56:01 +01:00
Peter Steinberger
382785c6ce
refactor(webchat): extract shared chat state helpers
2026-02-22 21:37:19 +01:00
Peter Steinberger
d574056761
fix(control-ui): send stable websocket instance IDs ( #23616 )
...
Co-authored-by: zq58855371-ui <248869919+zq58855371-ui@users.noreply.github.com >
2026-02-22 21:37:19 +01:00
Peter Steinberger
dc6afeb4f8
perf(webchat): skip unnecessary full history reloads on final events ( #20588 )
...
Co-authored-by: amzzzzzzz <154392693+amzzzzzzz@users.noreply.github.com >
2026-02-22 21:37:19 +01:00
Peter Steinberger
f2e9986813
fix(webchat): append out-of-band final payloads in active chat ( #11139 )
...
Co-authored-by: AkshayNavle <110360+AkshayNavle@users.noreply.github.com >
2026-02-22 21:37:19 +01:00
Peter Steinberger
8264d4521b
fix(webchat): render final assistant payloads without history wait ( #14928 )
...
Co-authored-by: BradGroux <3053586+BradGroux@users.noreply.github.com >
2026-02-22 21:37:19 +01:00
Peter Steinberger
02dc0c8752
fix(control-ui): stop websocket client on lifecycle teardown ( #23422 )
...
Co-authored-by: floatinggball-design <262259579+floatinggball-design@users.noreply.github.com >
2026-02-22 21:37:19 +01:00
Peter Steinberger
19046e0cfc
fix(webchat): preserve session labels across /new resets ( #23755 )
...
Co-authored-by: ThunderStormer <16649514+ThunderStormer@users.noreply.github.com >
2026-02-22 21:37:19 +01:00
Peter Steinberger
8a83ca54a1
fix(webchat): preserve session channel routing on internal turns ( #23258 )
...
Co-authored-by: binary64 <1680627+binary64@users.noreply.github.com >
2026-02-22 21:37:18 +01:00
Peter Steinberger
b0252ab90c
docs: fix canonical session doc path hint
2026-02-22 21:35:14 +01:00
