Commit Graph

339 Commits

Author SHA1 Message Date
Gustavo Madeira Santana 0f837b718a
Session: split stable group ids from labels 2026-03-17 23:10:58 +00:00
Gustavo Madeira Santana 7814e33559
Matrix: dedupe strict DM trust checks 2026-03-17 23:10:57 +00:00
Gustavo Madeira Santana de5001c3c6
Matrix: default invite auto-join to off 2026-03-17 23:10:57 +00:00
Gustavo Madeira Santana 7f921b60a3
Docs: clarify Matrix token rotation storage reuse 2026-03-17 23:10:53 +00:00
Gustavo Madeira Santana 36f8fc13a2
Matrix: harden migration workflow 2026-03-17 23:10:53 +00:00
Gustavo Madeira Santana 57ac54a807
Matrix: harden IndexedDB snapshot persistence 2026-03-17 23:10:52 +00:00
Gustavo Madeira Santana 1e8c5794c1
Docs: clarify Matrix recovery order 2026-03-17 23:10:52 +00:00
Gustavo Madeira Santana a15e4266c7
Matrix: add backup reset and fix migration targeting 2026-03-17 23:10:52 +00:00
Gustavo Madeira Santana a90ca7383e
Docs: expand Matrix verification docs 2026-03-17 23:10:51 +00:00
Gustavo Madeira Santana b70801b6a2
Matrix: fix secrets scan false positives 2026-03-17 23:10:51 +00:00
Gustavo Madeira Santana 328d958937
Docs: clarify Matrix account-scoped CLI usage 2026-03-17 23:10:49 +00:00
Gustavo Madeira Santana 300716c3c2
Docs: clarify Matrix pairing reminders 2026-03-17 23:10:47 +00:00
Gustavo Madeira Santana f236d33388
Docs: clarify Matrix onboarding and pairing 2026-03-17 23:10:46 +00:00
Gustavo Madeira Santana 40b56c89ce
Docs: clarify Matrix account defaults 2026-03-17 23:10:46 +00:00
Gustavo Madeira Santana 97ff604996
Matrix: harden live directory lookups 2026-03-17 23:10:45 +00:00
Gustavo Madeira Santana 4ef8b360f7
Matrix: replace legacy plugin with new implementation 2026-03-17 23:10:42 +00:00
Gustavo Madeira Santana cb4548b766
matrix-js: simplify storage paths 2026-03-17 23:10:42 +00:00
Gustavo Madeira Santana 67c49a7af7
matrix-js: require explicit thread-bound spawn config 2026-03-17 23:10:42 +00:00
Gustavo Madeira Santana adf31706c8
matrix-js: add account-aware bindings and ACP routing 2026-03-17 23:10:41 +00:00
Gustavo Madeira Santana 7eb5f325e7
matrix-js: add startup verification policy 2026-03-17 23:10:41 +00:00
Gustavo Madeira Santana db47ec61ba
matrix-js: improve thread context and auto-threading 2026-03-17 23:10:41 +00:00
Gustavo Madeira Santana 8ecbda54e0
matrix-js: harden reaction handling 2026-03-17 23:10:41 +00:00
Gustavo Madeira Santana f17097b18e
Matrix-js: sync with main plugin-loading standards 2026-03-17 23:10:40 +00:00
Jonathan Jing 2145eb5908
feat(mattermost): add retry logic and timeout handling for DM channel creation (#42398)
Merged via squash.

Prepared head SHA: 3db47be907
Co-authored-by: JonathanJing <17068507+JonathanJing@users.noreply.github.com>
Co-authored-by: mukhtharcm <56378562+mukhtharcm@users.noreply.github.com>
Reviewed-by: @mukhtharcm
2026-03-17 22:16:56 +05:30
Josh Avant da34f81ce2
fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)
* fix(secrets): scope message runtime resolution and harden doctor/status

* docs: align message/doctor/status SecretRef behavior notes

* test(cli): accept scoped targetIds wiring in secret-resolution coverage

* fix(secrets): keep scoped allowedPaths isolation and tighten coverage gate

* fix(secrets): avoid default-account coercion in scoped target selection

* test(doctor): cover inactive telegram secretref inspect path

* docs

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-17 00:01:34 -05:00
Tak Hoffman 4863b651c6 docs: rename onboarding user-facing wizard copy
Co-authored-by: Tak <contact-redacted@example.com>
2026-03-16 19:50:31 -05:00
Tak Hoffman 3c6a49b27e
feishu: harden media support and align capability docs (#47968)
* feishu: harden media support and action surface

* feishu: format media action changes

* feishu: fix review follow-ups

* fix: scope Feishu target aliases to Feishu (#47968) (thanks @Takhoffman)
2026-03-16 02:02:48 -05:00
Peter Steinberger f9e185887f docs: restore onboard docs references 2026-03-16 05:50:57 +00:00
Peter Steinberger 823039c000
docs: prefer setup wizard command 2026-03-15 22:01:04 -07:00
Peter Steinberger c4a5fd8465
docs: update channel setup wording 2026-03-15 21:07:18 -07:00
Peter Steinberger dfc237c319
docs: update channel setup docs 2026-03-15 20:44:26 -07:00
Peter Steinberger 46482a283a
feat: add nostr setup and unify channel setup discovery 2026-03-15 19:58:22 -07:00
Tomáš Dinh 4a7fbe090a
docs(zalo): document current Marketplace bot behavior (openclaw#47552)
Verified:
- pnpm check:docs

Co-authored-by: Tomáš Dinh <82420070+No898@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
2026-03-15 14:40:35 -05:00
Peter Steinberger ff61343d76
fix: harden mention pattern regex compilation 2026-03-15 08:44:12 -07:00
Tak Hoffman 89e3969d64
feat(feishu): add ACP and subagent session binding (#46819)
* feat(feishu): add ACP session support

* fix(feishu): preserve sender-scoped ACP rebinding

* fix(feishu): recover sender scope from bound ACP sessions

* fix(feishu): support DM ACP binding placement

* feat(feishu): add current-conversation session binding

* fix(feishu): avoid DM parent binding fallback

* fix(feishu): require canonical topic sender ids

* fix(feishu): honor sender-scoped ACP bindings

* fix(feishu): allow user-id ACP DM bindings

* fix(feishu): recover user-id ACP DM bindings
2026-03-15 10:33:49 -05:00
Vincent Koc c30cabcca4
Docs: sweep recent user-facing updates (#46424)
* Docs: document Telegram force-document sends

* Docs: note Telegram document send behavior

* Docs: clarify memory file precedence

* Docs: align default AGENTS memory guidance

* Docs: update workspace FAQ memory note

* Docs: document gateway status require-rpc

* Docs: add require-rpc to gateway CLI index
2026-03-14 10:20:44 -07:00
Vincent Koc 8c7bdbe4d1
Docs: describe Slack interactive replies (#45463) 2026-03-13 17:16:14 -04:00
Alex Zaytsev 61429230b2
fix(signal): add groups config to Signal channel schema (#27199)
Merged via squash.

Prepared head SHA: 4ba4a39ddf
Co-authored-by: unisone <32521398+unisone@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-03-13 15:14:30 +03:00
Jealous e986aa175f
docs: fix session key :dm: → :direct (#26506) 2026-03-13 14:28:33 +05:30
Peter Steinberger ddeb423944 fix: quiet Telegram command overflow retry logs 2026-03-13 01:45:56 +00:00
Peter Steinberger de3e6a8c5b fix(routing): require ids for slack and msteams allowlists 2026-03-13 01:44:42 +00:00
Peter Steinberger b14a5c6713 fix(zalouser): require ids for group allowlist auth 2026-03-13 01:31:17 +00:00
Peter Steinberger bf89947a8e
fix: switch pairing setup codes to bootstrap tokens 2026-03-12 22:23:07 +00:00
Gustavo Madeira Santana 46f0bfc55b
Gateway: harden custom session-store discovery (#44176)
Merged via squash.

Prepared head SHA: 52ebbf5188
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
2026-03-12 16:44:46 +00:00
Vincent Koc 7844bc89a1
Security: require Feishu webhook encrypt key (#44087)
* Feishu: require webhook encrypt key in schema

* Feishu: cover encrypt key webhook validation

* Feishu: enforce encrypt key at startup

* Feishu: add webhook forgery regression test

* Feishu: collect encrypt key during onboarding

* Docs: require Feishu webhook encrypt key

* Changelog: note Feishu webhook hardening

* Docs: clarify Feishu encrypt key screenshot

* Feishu: treat webhook encrypt key as secret input

* Feishu: resolve encrypt key only in webhook mode
2026-03-12 11:01:00 -04:00
Teconomix 171d2df9e0
feat(mattermost): add replyToMode support (off | first | all) (#29587)
Merged via squash.

Prepared head SHA: 4a67791f53
Co-authored-by: teconomix <6959299+teconomix@users.noreply.github.com>
Co-authored-by: mukhtharcm <56378562+mukhtharcm@users.noreply.github.com>
Reviewed-by: @mukhtharcm
2026-03-12 18:03:12 +05:30
Josh Avant 0125ce1f44
Gateway: fail closed unresolved local auth SecretRefs (#42672)
* Gateway: fail closed unresolved local auth SecretRefs

* Docs: align node-host gateway auth precedence

* CI: resolve rebase breakages in checks lanes

* Tests: isolate LOCAL_REMOTE_FALLBACK_TOKEN env state

* Gateway: remove stale remote.enabled auth-surface semantics

* Changelog: note gateway SecretRef fail-closed fix
2026-03-10 21:41:56 -05:00
Peter Steinberger 201420a7ee fix: harden secret-file readers 2026-03-10 23:40:10 +00:00
Altay 0ff184397d
docs(telegram): clarify group and sender allowlists (#42451)
Merged via squash.

Prepared head SHA: f30cacafb3
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com>
Reviewed-by: @altaywtf
2026-03-10 21:56:30 +03:00
Josh Avant 0687e04760
fix: thread runtime config through Discord/Telegram sends (#42352) (thanks @joshavant) (#42352) 2026-03-10 13:30:57 -05:00