openclaw

Files

Peter Steinberger 65e13c7b6e fix(fs): honor unset tools.fs.workspaceOnly default (land #31128 by @SaucePackets)

Landed-from: #31128
Contributor: @SaucePackets
Co-authored-by: SaucePackets <33006469+SaucePackets@users.noreply.github.com>

2026-03-02 01:43:50 +00:00

acp

ACP: carry dedupe/projector updates onto configurable acpx branch

2026-03-01 20:39:24 +01:00

agents

fix(fs): honor unset tools.fs.workspaceOnly default (land #31128 by @SaucePackets)

2026-03-02 01:43:50 +00:00

auto-reply

fix(auto-reply): land #31080 from @scoootscooob

2026-03-02 01:17:42 +00:00

browser

test(browser): fix windows download tmp path assertions

2026-03-02 01:32:28 +00:00

canvas-host

…

channels

fix(discord): unify reconnect watchdog and land #31025/#30530

2026-03-02 00:24:15 +00:00

cli

CLI: avoid plugin preload for health --json route (#31108 )

2026-03-01 17:13:58 -08:00

commands

fix: handle CLI session expired errors gracefully instead of crashing gateway (#31090 )

2026-03-02 01:11:05 +00:00

compat

…

config

fix(signal): prevent sentTranscript sync messages from bypassing loop protection (#31093 )

2026-03-02 01:11:22 +00:00

cron

Cron: fix 1/3 timeout on fresh isolated CLI runs (openclaw#30140) thanks @ningding97

2026-03-01 19:34:18 -06:00

daemon

Node install: persist gateway token in service env (#31122 )

2026-03-01 17:35:24 -08:00

discord

refactor(web): split trusted and strict web tool fetch paths

2026-03-02 01:14:06 +00:00

docs

…

gateway

fix(security): harden root-scoped writes against symlink races

2026-03-02 01:27:46 +00:00

hooks

refactor: unify boundary hardening for file reads

2026-02-26 13:04:37 +01:00

imessage

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

infra

fix(security): harden root-scoped writes against symlink races

2026-03-02 01:27:46 +00:00

line

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

link-understanding

chore: remove verified dead code paths

2026-02-22 09:21:09 +01:00

logging

refactor(diagnostics): hot-reload stuck warning threshold

2026-03-02 00:32:33 +00:00

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105 )

2026-02-25 04:54:51 +00:00

media

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

media-understanding

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

memory

fix(memory): discard stdout for qmd update/embed to prevent output cap failure (openclaw#28900) thanks @Glucksberg

2026-03-01 12:16:50 -06:00

node-host

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

pairing

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

plugin-sdk

fix(acpx): default strict windows wrapper policy on windows

2026-03-02 01:31:32 +00:00

plugins

fix(plugins): prioritize bundled duplicates in auto-discovery

2026-03-01 23:48:30 +00:00

process

test: harden flaky timeout and resolver specs

2026-03-01 21:30:07 +00:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921 )

2026-02-23 21:17:37 -05:00

routing

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

scripts

…

secrets

test: harden flaky timeout and resolver specs

2026-03-01 21:30:07 +00:00

security

Fixes minor security vulnerability (#30948 ) (#30951 )

2026-03-02 00:38:01 +00:00

sessions

TUI: sync /model status immediately

2026-02-28 14:02:56 -08:00

shared

Web UI: strip relevant-memories scaffolding

2026-02-28 13:20:50 -08:00

signal

fix(signal): prevent sentTranscript sync messages from bypassing loop protection (#31093 )

2026-03-02 01:11:22 +00:00

slack

fix(channels): align command-body parsing sources

2026-03-01 23:11:48 +00:00

feat(diagnostics): add configurable stuck-session warning threshold

2026-03-02 00:07:29 +00:00

terminal

test(core): use lightweight clears in runtime and telegram setup

2026-02-22 08:09:14 +00:00

test-helpers

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

test-utils

diffs plugin

2026-02-28 18:38:00 -05:00

tts

fix(tts): use opus format and enable voice bubbles for feishu and whatsapp (#27366 )

2026-02-27 23:41:22 -06:00

tui

TUI: guard SIGTERM shutdown against setRawMode EBADF

2026-02-28 14:56:01 -08:00

types

…

utils

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570 )

2026-02-26 18:39:13 -05:00

web

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

WhatsApp: enforce allowFrom for explicit outbound sends (#20921 )

2026-02-22 18:13:23 -05:00

wizard

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

fix: allow docker cli container to connect to gateway (#12504 )

2026-03-01 17:28:35 -08:00

dockerfile.test.ts

fix(docker): harden /app/extensions permissions to 755 (#30191 )

2026-03-01 15:45:21 -08:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975 )

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

utils.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

version.test.ts

test(core): increase coverage for sessions, auth choice, and model listing

2026-02-22 14:08:51 +00:00

version.ts

…