673d732dc6
docs(iOS): add 2026 security audit report and domain-specific findings
...
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-02 12:33:54 -05:00
d08960aef8
test(iOS): update gateway tests for Keychain-backed storage
2026-03-02 12:33:54 -05:00
fea884f4d0
iOS: gate env var API key behind DEBUG, tighten deep link rate limit, cap WebSocket message size
2026-03-02 12:33:54 -05:00
96a1edcdc2
iOS: fix data races with OSAllocatedUnfairLock in TLS probe and camera delegates
2026-03-02 12:33:54 -05:00
4a30f8820a
iOS: move gateway connection metadata to Keychain, harden diagnostics log
2026-03-02 12:33:54 -05:00
fe5e14657a
iOS: migrate TLS fingerprints from UserDefaults to Keychain
2026-03-02 12:33:54 -05:00
cf122ce68e
iOS: harden Keychain storage with delete-then-add and accessibility attribute
2026-03-02 12:33:54 -05:00
eb35fb745d
docs: remove provider recommendation language
2026-03-02 17:33:38 +00:00
b9e820b7ed
test(perf): cut exec approval metadata test timeout
2026-03-02 17:33:06 +00:00
aee27d0e38
refactor(security): table-drive wrapper approval pinning tests
2026-03-02 17:30:48 +00:00
34ff873a7e
test(perf): trim fixed waits in relay and startup tests
2026-03-02 17:30:33 +00:00
310dd24ce3
test(perf): clean acpx runtime fixtures at suite end
2026-03-02 17:30:33 +00:00
d4bf07d075
refactor(security): unify hardened install and fs write flows
2026-03-02 17:23:29 +00:00
d3e8b17aa6
fix: harden webhook auth-before-body handling
2026-03-02 17:21:09 +00:00
dded569626
fix(security): preserve system.run wrapper approval semantics
2026-03-02 17:20:52 +00:00
104d32bb64
fix(security): unify root-bound write hardening
2026-03-02 17:12:33 +00:00
be3a62c5e0
test(perf): defer delivery queue fixture cleanup to suite end
2026-03-02 17:10:55 +00:00
193ad2f4f0
fix: handle PowerShell execution policy on Windows install ( #24794 )
...
* fix: add Arch Linux support to install.sh (GH#8051)
* fix: handle PowerShell execution policy on Windows install (GH#24784)
2026-03-02 11:09:01 -06:00
a0e11e63fe
docs(faq): add Windows exec encoding troubleshooting ( #30736 )
...
Co-authored-by: dalomeve <dalomeve@users.noreply.github.com>
2026-03-02 11:08:26 -06:00
07b16d5ad0
fix(security): harden workspace bootstrap boundary reads
2026-03-02 17:07:36 +00:00
67b2dde7c5
Docs: add WSL2 boot auto-start guide ( #31616 )
2026-03-02 11:07:15 -06:00
7a55a3ca07
fix(install): correct Windows PATH troubleshooting docs ( #28102 )
...
* fix(install): correct Windows PATH troubleshooting — no \bin suffix needed (closes #19921 )
* fix(docs): apply same PATH fix to FAQ
2026-03-02 11:07:07 -06:00
11562c452a
test(perf): avoid unused heartbeat fixture file writes
2026-03-02 17:01:40 +00:00
eb2e20c994
fix(ui): preserve margin-top: 0 for onboarding mode
...
- Change margin from -12px -16px -32px to 0 -16px -32px
- Preserves zero top offset required for onboarding mode
- Prevents clipping of top edge/actions area when padding-top: 0
2026-03-02 11:01:27 -06:00
24a13c05b3
fix(ui): add mobile responsive margins and overflow fallback
...
- Add margin: 0 for mobile viewports (<=600px, <=400px) to prevent clipping
- Add overflow: hidden fallback for older browsers (Safari <16, Firefox <81)
- Fixes mobile regression where negative margins over-cancel padding
Addresses issue where save button was clipped on mobile due to
hard-coded desktop negative margins not accounting for mobile's
smaller content padding (4px 4px 16px).
2026-03-02 11:01:27 -06:00
20c36f7e84
fix(ui): prevent config page save button from being clipped by overflow
...
The config-layout used a uniform margin: -16px that did not match the
parent .content padding (12px 16px 32px), causing the right edge of the
actions bar—including the Save button—to extend into the overflow-hidden
region on systems with non-overlay scrollbars (e.g. Ubuntu/GTK).
Changes:
- Match negative margin to actual .content padding (-12px -16px -32px).
- Use overflow: clip instead of overflow: hidden on .config-main so it
does not create a scroll container that shifts the stacking context.
- Add flex-shrink: 0 and position: relative on .config-actions to
guarantee the actions bar is never collapsed or layered behind the
scrollable content area.
Closes #31658
2026-03-02 11:01:27 -06:00
db7a8a6982
test(perf): reuse delivery queue suite temp root
2026-03-02 16:55:18 +00:00
4a80311628
refactor(security): split sandbox media staging and stream safe copies
2026-03-02 16:53:14 +00:00
7a7eee920a
refactor(gateway): harden plugin http route contracts
2026-03-02 16:48:00 +00:00
33e76db12a
refactor(gateway): scope ws origin fallback metrics to runtime
2026-03-02 16:47:00 +00:00
9a68590385
refactor(logging): extract bounded regex redaction util
2026-03-02 16:47:00 +00:00
031bf0c6c0
refactor(security): split safe-regex parse and bounded matching
2026-03-02 16:47:00 +00:00
8611fd67b5
test(perf): remove duplicate bundled memory slot loader case
2026-03-02 16:46:17 +00:00
14c93d2646
docs(changelog): add skills archive extraction hardening note
2026-03-02 16:45:47 +00:00
1b462ed174
fix(test): use NTFS junctions and platform guards for symlink tests on Windows (openclaw#28747) thanks @arosstale
...
Verified:
- pnpm install --frozen-lockfile
- pnpm test src/agents/apply-patch.test.ts src/agents/sandbox/fs-bridge.test.ts src/agents/sandbox/validate-sandbox-security.test.ts src/infra/archive.test.ts
Co-authored-by: arosstale <117890364+arosstale@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-02 10:45:19 -06:00
18f8393b6c
fix: harden sandbox writes and centralize atomic file writes
2026-03-02 16:45:12 +00:00
14e4575af5
docs(changelog): note gateway and regex hardening
2026-03-02 16:38:03 +00:00
b1592457fa
perf(security): bound regex input in filters and redaction
2026-03-02 16:37:45 +00:00
31c7637e0f
fix(security): block quantified ambiguous alternation regex
2026-03-02 16:37:45 +00:00
d5ae4b8337
fix(gateway): require local client for loopback origin fallback
2026-03-02 16:37:45 +00:00
0dbb92dd2b
fix(security): harden tar archive extraction parity
2026-03-02 16:36:56 +00:00
17ede52a4b
fix(security): harden sandbox media staging destination writes
2026-03-02 16:35:08 +00:00
be65dc8acc
docs(diffs): clarify file size limitations
2026-03-02 11:34:12 -05:00
8828418111
test(subagent-announce): fix flaky Windows-only test failure ( #31298 ) (openclaw#31370) thanks @zwffff
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check (fails on main baseline issues in extensions/googlechat and extensions/phone-control)
- pnpm test:e2e src/agents/subagent-announce.format.e2e.test.ts
Co-authored-by: zwffff <5809959+zwffff@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-02 10:33:07 -06:00
4dd6c7a509
test(perf): avoid redundant root mkdir in hooks install tests
2026-03-02 16:33:00 +00:00
d94de5c4a1
fix(cron): normalize topic-qualified target.to in messaging tool suppress check ( #29480 )
...
* fix(cron): pass job.delivery.accountId through to delivery target resolution
* fix(cron): normalize topic-qualified target.to in messaging tool suppress check
When a cron job targets a Telegram forum topic (e.g. delivery.to =
"-1003597428309:topic:462"), delivery.to is stripped to the chatId
only by resolveOutboundTarget. However, the agent's message tool may
pass the full topic-qualified address as its target, causing
matchesMessagingToolDeliveryTarget to fail the equality check and not
suppress the tool send.
Strip the :topic:NNN suffix from target.to before comparing so the
suppress check works correctly for topic-bound cron deliveries.
Without this, the agent's message tool fires separately using the
announce session's accountId (often "default"), hitting 403 when
default bot is not in the multi-account target group.
* fix(cron): remove duplicate accountId keys after rebase
---------
Co-authored-by: jaxpkm <jaxpkm@jaxpkmdeMac-mini.local>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-02 10:32:06 -06:00
09f49cd921
fix(cron): accept delivery mode "none" for sessionTarget="main" ( #27431 ) ( #28871 )
2026-03-02 10:32:00 -06:00
87d05592ea
docs(changelog): add telegram dm streaming note ( #31824 )
2026-03-02 21:59:19 +05:30
d74bc257d8
fix(line): mark webhook route as plugin-authenticated
2026-03-02 16:27:47 +00:00
6edb512efa
feat(telegram): use sendMessageDraft for private chat streaming ( #31824 )
...
* feat(telegram): use sendMessageDraft for private stream previews
* test(telegram): cover DM draft id rotation race
* fix(telegram): keep DM reasoning updates in draft preview
* fix(telegram): split DM reasoning preview transport
* fix(telegram): harden DM draft preview fallback paths
* style(telegram): normalize draft preview formatting
2026-03-02 21:56:59 +05:30
Rocuts
Peter Steinberger
Hiren Thakore
Dalomeve
Mark L
Glucksberg
Val Alexander
SidQin-cyber
Artale
Gustavo Madeira Santana
zwffff
bboyyan
Ayaan Zaidi
Ayaan Zaidi