Pavan Kumar Gondhi 9ac4272b35 fix: harden safe-bin argument validation [AI] (#80999) ...

* fix: reject shell expansion in safe-bin tokens

* fix: complete safe-bin shell payload handling

* addressing codex review

* addressing ci

* addressing ci

* addressing codex review

* docs: add changelog entry for PR merge

2026-05-12 20:37:58 +05:30

..

acp

test: guard acp manager mock calls

2026-05-12 05:04:35 +01:00

agents

Require auth for sandbox browser CDP relay [AI] (#81002)

2026-05-12 19:37:32 +05:30

auto-reply

test: dedupe export session write mock calls

2026-05-12 15:04:54 +01:00

bindings

…

bootstrap

…

channels

test: guard channel loader jiti mock call

2026-05-12 05:15:49 +01:00

chat

…

cli

test: remove duplicate gateway startup case

2026-05-12 11:09:49 +01:00

commands

test: dedupe daemon install mock calls

2026-05-12 15:02:28 +01:00

commitments

test: guard commitment telegram send mock call

2026-05-12 02:53:45 +01:00

compat

…

config

feat(agents): make run loop retry limits configurable in openclaw.json (#80661)

2026-05-12 04:43:12 -07:00

context-engine

test: check context and music options

2026-05-11 18:11:15 +01:00

crestodian

test: guard crestodian rescue mock calls

2026-05-12 03:46:40 +01:00

cron

test: guard cron infra ui mock calls

2026-05-12 10:56:25 +01:00

daemon

test: guard launchd handoff mock calls

2026-05-12 04:42:36 +01:00

docs

test: guard metadata wizard null checks

2026-05-11 21:28:48 +01:00

flows

test: guard provider flow mock calls

2026-05-12 03:40:48 +01:00

gateway

Reject truncated exec approval commands [AI] (#81001)

2026-05-12 19:33:42 +05:30

hooks

test: guard message hook mock calls

2026-05-12 04:45:49 +01:00

i18n

…

image-generation

test: stabilize core fast tests (#80803)

2026-05-11 16:40:51 -07:00

infra

fix: harden safe-bin argument validation [AI] (#80999)

2026-05-12 20:37:58 +05:30

interactive

…

link-understanding

…

logging

test: guard logging mock calls

2026-05-11 22:34:04 +01:00

markdown

…

mcp

test: guard channel mcp mock call

2026-05-12 03:43:03 +01:00

media

test: check media read roots

2026-05-12 10:08:06 +01:00

media-generation

…

media-understanding

feat(openrouter): add inbound audio STT support

2026-05-12 06:50:12 +01:00

memory

…

memory-host-sdk

…

model-catalog

test: tighten manifest catalog planner assertions

2026-05-11 04:30:22 +01:00

music-generation

test: guard tasks and media assertions

2026-05-11 20:03:37 +01:00

node-host

fix: harden safe-bin argument validation [AI] (#80999)

2026-05-12 20:37:58 +05:30

pairing

test: tighten pairing setup token assertion

2026-05-11 04:26:07 +01:00

plugin-sdk

fix: normalize oauth auth-result config patches

2026-05-12 13:31:42 +01:00

plugin-state

…

plugins

fix: scan plugin runtime entries during install [AI] (#80998)

2026-05-12 20:28:40 +05:30

process

test: guard windows exec mock calls

2026-05-12 04:19:02 +01:00

proxy-capture

…

realtime-transcription

test: guard realtime websocket mock calls

2026-05-12 03:51:05 +01:00

routing

refactor: share channel route target collection

2026-05-11 17:07:18 +01:00

scripts

test: verify generated core values

2026-05-11 17:07:48 +01:00

secrets

test: guard runtime web tools mock arg

2026-05-12 04:02:08 +01:00

security

test: guard security audit mock calls

2026-05-12 04:09:49 +01:00

sessions

fix(heartbeat): remap cron-run exec events to session keys (#80214)

2026-05-11 12:13:17 +01:00

shared

test: tighten device auth store assertions

2026-05-11 04:26:51 +01:00

status

…

talk

test: anchor consult runtime prompt

2026-05-12 13:31:03 +01:00

tasks

test: guard task registry calls

2026-05-11 22:31:20 +01:00

terminal

fix: remove OSC payloads from terminal text

2026-05-11 19:44:08 +01:00

test-helpers

…

test-utils

…

tools

…

trajectory

Redact persisted secret-shaped payloads [AI] (#79006)

2026-05-11 12:52:32 +05:30

tts

test: guard utility mock call helpers

2026-05-11 23:02:07 +01:00

tui

test: guard core support mock calls

2026-05-12 10:43:53 +01:00

types

build: refresh deps and route testbox through crabbox

2026-05-11 03:41:00 +01:00

utils

test: guard fetch timeout mock calls

2026-05-12 04:16:12 +01:00

video-generation

test: stabilize core fast tests (#80803)

2026-05-11 16:40:51 -07:00

web

…

web-fetch

…

web-search

test: guard core truthiness assertions

2026-05-11 20:35:33 +01:00

wizard

test: guard metadata wizard null checks

2026-05-11 21:28:48 +01:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

fix(docker): persist auth profile key mount

2026-05-12 16:35:53 +05:30

dockerfile.test.ts

fix(ci): keep Docker patch smoke on pnpm workspace config

2026-05-12 06:21:09 +01:00

entry.compile-cache.test.ts

test: guard core mock call reads

2026-05-11 23:18:51 +01:00

entry.compile-cache.ts

…

entry.respawn.test.ts

test: guard respawn and image mock calls

2026-05-11 23:39:59 +01:00

entry.respawn.ts

…

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

test: tighten verbose logger assertion

2026-05-11 05:09:53 +01:00

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…