openclaw/src
Glucksberg 1e23d2ecea
fix(whatsapp): respect selfChatMode config in access-control (#24738)
The selfChatMode config field was resolved by accounts.ts but never
consumed in the access-control logic. Use nullish coalescing so an
explicit true/false from config takes precedence over the allowFrom
heuristic, while undefined falls back to the existing behavior.

Fixes #23788

Co-authored-by: Claude <noreply@anthropic.com>
2026-02-24 03:33:21 +00:00
..
acp fix(acp): harden permission tool-name validation 2026-02-24 01:11:34 +00:00
agents fix: clamp poll sleep duration to non-negative in bash-tools process (#24889) 2026-02-24 03:22:58 +00:00
auto-reply fix(security): harden session export image data-url handling 2026-02-24 02:53:39 +00:00
browser test: add env -S allowlist bypass regressions 2026-02-24 02:28:00 +00:00
canvas-host
channels fix(security): harden account-key handling against prototype pollution 2026-02-24 01:09:31 +00:00
cli fix(gateway): bind node exec approvals to nodeId 2026-02-24 03:05:58 +00:00
commands fix: suppress "Run doctor --fix" hint when already in fix mode with no changes (#24666) 2026-02-24 03:33:17 +00:00
compat
config fix(security): harden structural session path fallback 2026-02-24 02:52:48 +00:00
cron Session/Cron maintenance hardening and cleanup UX (#24753) 2026-02-23 22:39:48 +00:00
daemon fix: back up existing systemd unit before overwriting on update (#24350) (#24937) 2026-02-24 03:22:55 +00:00
discord refactor(security): unify dangerous name matching handling 2026-02-24 01:33:08 +00:00
docs
gateway fix(slack): map threadId to replyToId for restart sentinel notifications (#24885) 2026-02-24 03:22:45 +00:00
hooks fix: respect agent model config in slug generator (#24776) 2026-02-24 03:22:48 +00:00
imessage fix(security): harden account-key handling against prototype pollution 2026-02-24 01:09:31 +00:00
infra fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky) 2026-02-24 03:28:00 +00:00
line fix(security): harden account-key handling against prototype pollution 2026-02-24 01:09:31 +00:00
link-understanding chore: remove verified dead code paths 2026-02-22 09:21:09 +01:00
logging fix(security): harden regex compilation for filters and redaction 2026-02-23 23:54:50 +00:00
markdown
media fix(security): harden session export image data-url handling 2026-02-24 02:53:39 +00:00
media-understanding refactor: de-duplicate channel runtime and payload helpers 2026-02-23 21:25:28 +00:00
memory refactor: deduplicate shared helpers and test setup 2026-02-23 20:40:44 +00:00
node-host fix(security): trust resolved skill-bin paths in allowlist auto-allow 2026-02-24 03:12:43 +00:00
pairing refactor: de-duplicate channel runtime and payload helpers 2026-02-23 21:25:28 +00:00
plugin-sdk refactor(security): unify dangerous name matching handling 2026-02-24 01:33:08 +00:00
plugins refactor: deduplicate shared helpers and test setup 2026-02-23 20:40:44 +00:00
process test: speed up supervisor test timing 2026-02-23 20:15:56 +00:00
providers Config: expand Kilo catalog and persist selected Kilo models (#24921) 2026-02-23 21:17:37 -05:00
routing fix(security): harden account-key handling against prototype pollution 2026-02-24 01:09:31 +00:00
scripts
security fix(sandbox): harden fs bridge path checks and bind mount policy 2026-02-24 02:21:43 +00:00
sessions Agents/Replies: scope done fallback to direct sessions 2026-02-22 13:30:30 -08:00
shared fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky) 2026-02-24 03:28:00 +00:00
signal fix(security): harden account-key handling against prototype pollution 2026-02-24 01:09:31 +00:00
slack refactor(security): unify dangerous name matching handling 2026-02-24 01:33:08 +00:00
telegram fix: scope Telegram RFC2544 SSRF exception to policy opt-in (#24982) (thanks @stakeswky) 2026-02-24 03:28:00 +00:00
terminal test(core): use lightweight clears in runtime and telegram setup 2026-02-22 08:09:14 +00:00
test-helpers refactor: dedupe media and request-body test scaffolding 2026-02-22 18:37:25 +00:00
test-utils test: dedupe fixtures and test harness setup 2026-02-23 05:45:54 +00:00
tts
tui test: dedupe fixtures and test harness setup 2026-02-23 05:45:54 +00:00
types
utils refactor!: remove google-antigravity provider support 2026-02-23 05:20:14 +01:00
web fix(whatsapp): respect selfChatMode config in access-control (#24738) 2026-02-24 03:33:21 +00:00
whatsapp WhatsApp: enforce allowFrom for explicit outbound sends (#20921) 2026-02-22 18:13:23 -05:00
wizard test: dedupe gateway browser discord and channel coverage 2026-02-22 17:11:54 +00:00
channel-web.ts
docker-image-digests.test.ts
docker-setup.test.ts Docker: precreate identity dir in docker setup 2026-02-22 16:33:53 -08:00
dockerfile.test.ts
entry.ts refactor(gateway): simplify restart flow and expand lock tests 2026-02-22 10:44:47 +01:00
extensionAPI.ts
globals.ts
index.ts
logger.test.ts
logger.ts
logging.ts
polls.test.ts
polls.ts
runtime.ts
utils.test.ts fix(utils): guard resolveUserPath for missing workspace input 2026-02-22 13:19:25 +01:00
utils.ts fix(utils): guard resolveUserPath for missing workspace input 2026-02-22 13:19:25 +01:00
version.test.ts test(core): increase coverage for sessions, auth choice, and model listing 2026-02-22 14:08:51 +00:00
version.ts