nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/extensions
History
Echo fb720193d9 fix(mattermost): fail closed on empty tokens + per-account slash state 
Address Codex review findings:

1. slash-http.ts: Token validation now rejects when commandTokens set is
   empty (e.g. registration failure). Previously an empty set meant any
   token was accepted — fail-open vulnerability.

2. slash-state.ts: Replaced global singleton with per-account state Map
   keyed by accountId. Multi-account deployments no longer overwrite each
   other's tokens, registered commands, or handlers. The HTTP route
   dispatcher matches inbound tokens to the correct account.

3. monitor.ts: Updated getSlashCommandState/deactivateSlashCommands calls
   to pass accountId.
 		2026-03-03 07:07:19 +00:00
..
acpx feat(acp): add kimi harness support surfaces 2026-03-03 01:05:24 +00:00
bluebubbles fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
copilot-proxy build: bump versions to 2026.3.2 2026-03-02 04:55:53 +00:00
device-pair feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580) 2026-03-03 02:58:20 +00:00
diagnostics-otel build: bump versions to 2026.3.2 2026-03-02 04:55:53 +00:00
diffs Diffs: Migrate tool usage guidance from before_prompt_build to a plugin skill (#32630) 2026-03-03 01:50:59 -05:00
discord build: bump versions to 2026.3.2 2026-03-02 04:55:53 +00:00
feishu fix: repair Feishu reset hook typing and stabilize secret resolver timeout 2026-03-03 05:06:08 +00:00
google-gemini-cli-auth chore: remove unreachable "LINUX" from resolvePlatform return type 2026-03-03 02:36:01 +00:00
googlechat feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580) 2026-03-03 02:58:20 +00:00
imessage fix(ci): align strict nullable typing across channels and ui 2026-03-02 09:56:14 +00:00
irc fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
line test(perf): trim fixed waits in relay and startup tests 2026-03-02 17:30:33 +00:00
llm-task fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
lobster fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
matrix fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
mattermost fix(mattermost): fail closed on empty tokens + per-account slash state 2026-03-03 07:07:19 +00:00
memory-core ci: fix lint and audit regressions on main 2026-03-02 23:08:23 +00:00
memory-lancedb fix: add regression for memory-lancedb dimensions pass-through (#32036) (thanks @scotthuang) 2026-03-02 19:02:11 +00:00
minimax-portal-auth feat(models): support minimax highspeed across onboarding 2026-03-03 00:40:15 +00:00
msteams feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580) 2026-03-03 02:58:20 +00:00
nextcloud-talk fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
nostr refactor(gateway): hard-break plugin wildcard http handlers 2026-03-02 16:24:06 +00:00
open-prose build: bump versions to 2026.3.2 2026-03-02 04:55:53 +00:00
phone-control refactor(gateway): harden plugin http route contracts 2026-03-02 16:48:00 +00:00
qwen-portal-auth refactor(extensions): dedupe channel config, onboarding, and monitors 2026-03-02 08:54:20 +00:00
shared fix(acpx): share windows wrapper resolver and add strict hardening mode 2026-03-01 23:57:06 +00:00
signal fix(ci): align strict nullable typing across channels and ui 2026-03-02 09:56:14 +00:00
slack fix(ci): align strict nullable typing across channels and ui 2026-03-02 09:56:14 +00:00
synology-chat fix(synology-chat): prevent restart loop in startAccount (#23074) 2026-03-02 20:06:16 +00:00
talk-voice feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580) 2026-03-03 02:58:20 +00:00
telegram fix: add regression tests for telegram token guard (#31973) (thanks @ningding97) 2026-03-02 18:33:49 +00:00
test-utils fix: resolve pi-tools typing regressions 2026-03-03 02:27:59 +00:00
thread-ownership test(extensions): cast fetch mocks to satisfy tsgo 2026-02-16 21:25:35 -05:00
tlon fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
twitch build: bump versions to 2026.3.2 2026-03-02 04:55:53 +00:00
voice-call fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
whatsapp refactor(extensions): dedupe channel config, onboarding, and monitors 2026-03-02 08:54:20 +00:00
zalo fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00
zalouser fix: scope extension runtime deps to plugin manifests 2026-03-03 05:33:12 +00:00