openclaw/src
Vincent Koc 08aa57a3de
Commands: require owner for /config and /debug (#44305)
* Commands: add non-owner gate helper

* Commands: enforce owner-only config and debug

* Commands/test: cover owner-only config and debug

* Changelog: add owner-only config debug entry

* Commands/test: split config owner gating section

* Commands: redact sender ids in verbose command logs

* Commands: preserve internal read-only config access

* Commands/test: keep operator.write config show coverage non-owner
2026-03-12 14:58:14 -04:00
..
acp Gateway: harden custom session-store discovery (#44176) 2026-03-12 16:44:46 +00:00
agents onboard(minimax): flatten auth to 4 direct choices, unify CN/Global under single provider (#44284) 2026-03-12 11:23:42 -07:00
auto-reply Commands: require owner for /config and /debug (#44305) 2026-03-12 14:58:14 -04:00
browser fix(browser): restore proxy attachment media size cap (#43684) 2026-03-12 01:04:31 -04:00
canvas-host
channels Plugins: fix env-aware root resolution and caching (#44046) 2026-03-12 15:31:31 +00:00
cli Merge remote-tracking branch 'origin/vincentkoc-code/fix-terminal-table-width' 2026-03-12 04:56:21 -04:00
commands onboard(minimax): flatten auth to 4 direct choices, unify CN/Global under single provider (#44284) 2026-03-12 11:23:42 -07:00
compat
config fix: restore protocol outputs and stabilize Windows path CI (#44266) 2026-03-12 10:55:29 -07:00
context-engine fix: carry observed overflow token counts into compaction (#40357) 2026-03-12 06:58:42 -07:00
cron fix(cron): prevent duplicate proactive delivery on transient retry (#40646) 2026-03-12 03:01:19 -04:00
daemon build: align Node 22 guidance with 22.16 minimum 2026-03-12 20:07:44 +05:30
discord fix(discord): enforce users/roles allowlist in reaction ingress 2026-03-12 03:13:46 +01:00
docs
gateway Gateway/ws: clear unbound scopes for shared-token auth (#44306) 2026-03-12 14:52:24 -04:00
hooks fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875) 2026-03-08 19:07:28 +03:00
i18n
imessage fix(imessage): dedupe reflected self-chat duplicates (#38440) 2026-03-12 02:27:35 -04:00
infra feat(push): add iOS APNs relay gateway (#43369) 2026-03-12 18:15:35 +02:00
line Hardening: require LINE webhook signatures (#44090) 2026-03-12 10:50:36 -04:00
link-understanding
logging Logging: harden probe suppression for observations (#41338) 2026-03-10 01:40:15 +03:00
markdown
media Memory: add multimodal image and audio indexing (#43460) 2026-03-11 22:28:34 +00:00
media-understanding fix: add gemini 3.1 flash-lite support 2026-03-08 05:12:48 +00:00
memory build: raise Node 22 compatibility floor to 22.16 2026-03-12 20:07:44 +05:30
node-host fix(node-host): harden ambiguous approval operand binding (#44247) 2026-03-12 13:28:35 -04:00
pairing refactor(pairing): share allowFrom path resolution 2026-03-08 02:16:03 +00:00
plugin-sdk fix(mattermost): pass mediaLocalRoots through reply delivery (#44021) 2026-03-12 20:13:51 +05:30
plugins Plugins: require explicit trust for workspace-discovered plugins (#44174) 2026-03-12 12:12:41 -04:00
process refactor: share windows command shim resolution 2026-03-10 22:18:04 +00:00
providers build: update app deps except carbon 2026-03-09 06:09:33 +00:00
routing refactor(routing): centralize inbound last-route policy 2026-03-08 02:16:03 +00:00
scripts
secrets Security: require Feishu webhook encrypt key (#44087) 2026-03-12 11:01:00 -04:00
security fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983) 2026-03-10 13:54:23 +08:00
sessions Gateway: harden custom session-store discovery (#44176) 2026-03-12 16:44:46 +00:00
shared refactor: share sampled entry summary formatting 2026-03-08 00:05:24 +00:00
signal fix(signal): forward all inbound attachments from #39212 (thanks @joeykrug) 2026-03-07 23:35:55 +00:00
slack refactor: compile allowlist matchers 2026-03-11 00:07:47 +00:00
telegram feat: add sessions_yield tool for cooperative turn-ending (#36537) 2026-03-12 08:46:47 -07:00
terminal fix(terminal): sanitize skills JSON and fallback on legacy Windows (#43520) 2026-03-11 19:53:07 -04:00
test-helpers
test-utils refactor(security): simplify system.run approval model 2026-03-11 01:43:06 +00:00
tts feat: add sessions_yield tool for cooperative turn-ending (#36537) 2026-03-12 08:46:47 -07:00
tui fix: prevent duplicate assistant messages in TUI (fixes #35278) (#35364) 2026-03-12 02:59:42 -04:00
types
utils fix(exec): honor shell comments in allow-always analysis 2026-03-07 23:31:25 +00:00
web fix(whatsapp): trim leading whitespace in direct outbound sends (#43539) 2026-03-12 11:32:04 +11:00
whatsapp
wizard fix(cli): handle scheduled gateway restarts consistently 2026-03-12 01:38:39 +00:00
channel-web.ts
docker-build-cache.test.ts Docker: improve build cache reuse (#40351) 2026-03-08 17:57:46 -07:00
docker-image-digests.test.ts fix(ci): pin multi-arch docker base digests 2026-03-08 02:55:15 +00:00
docker-setup.e2e.test.ts Docker: trim runtime image payload (#40307) 2026-03-08 16:07:04 -07:00
dockerfile.test.ts build: default to Node 24 and keep Node 22 compat 2026-03-12 20:07:44 +05:30
entry.ts Exec: mark child command env with OPENCLAW_CLI (#41411) 2026-03-09 19:14:08 -04:00
entry.version-fast-path.test.ts CLI: include commit hash in --version output (#39712) 2026-03-08 19:10:48 +03:00
extensionAPI.ts
globals.ts
index.ts
install-sh-version.test.ts chore: bump version to 2026.3.10 2026-03-11 23:29:53 +00:00
logger.test.ts
logger.ts
logging.ts
poll-params.test.ts
poll-params.ts
polls.test.ts
polls.ts
runtime.ts
utils.test.ts Plugins: fix env-aware root resolution and caching (#44046) 2026-03-12 15:31:31 +00:00
utils.ts Plugins: fix env-aware root resolution and caching (#44046) 2026-03-12 15:31:31 +00:00
version.test.ts
version.ts