-
79176cc4e5
fix(typing): force cleanup when dispatch idle is never received
SidQin-cyber
2026-02-26 21:04:31 +08:00
-
4b259ab81b
fix(models): normalize trailing @profile parsing across resolver paths



2026-02-26 14:31:57 +01:00
-
00e8e88a7c
docs(changelog): note auth-profile alias normalization (#26950) (thanks @byungsker)
Peter Steinberger
2026-02-26 14:31:53 +01:00
-
7e7ca43a79
fix(auth-profiles): accept mode/apiKey aliases to prevent silent credential loss
lbo728
2026-02-26 08:27:59 +09:00
-
85b075d0cc
fix: record ios talk voice directive hint removal (#27543) (thanks @ngutman)
Nimrod Gutman
2026-02-26 15:18:39 +02:00
-
185c393459
fix(ios): remove talk voice directive hint
Nimrod Gutman
2026-02-26 15:05:33 +02:00
-
490cb5174d
fix(apps): sign gateway device auth with v3 payload
Peter Steinberger
2026-02-26 14:16:41 +01:00
-
473a27470f
fix(auto-reply): gate inline directives on resolved auth (#27248)

Peter Steinbergerandshenghui kevin
2026-02-26 13:11:18 +00:00
-
7d8aeaaf06
fix(gateway): pin paired reconnect metadata for node policy
Peter Steinberger
2026-02-26 14:10:00 +01:00
-
cf311978ea
fix(plugins): fallback bundled channel specs when npm install returns 404 (#12849)
Vincent Koc
2026-02-26 08:06:54 -05:00
-
7b5153f214
refactor: dedupe boundary-path canonical checks
Peter Steinberger
2026-02-26 14:04:40 +01:00
-
b402770f63
refactor(reply): split abort cutoff and timeout policy modules
Peter Steinberger
2026-02-26 14:00:31 +01:00
-
f53e4e9ffb
chore: Fix broken build protocol:check
Harold Hunt
2026-02-26 07:37:09 -05:00
-
c397a02c9a
fix(queue): harden drain/abort/timeout race handling



2026-02-26 13:43:30 +01:00
-
1aef45bc06
fix: harden boundary-path canonical alias handling
Peter Steinberger
2026-02-26 13:43:23 +01:00
-
4b71de384c
fix(core): unify session-key normalization and plugin boundary checks
Peter Steinberger
2026-02-26 12:40:57 +00:00
-
e3385a6578
fix(security): harden root file guards and host writes
Peter Steinberger
2026-02-26 13:32:02 +01:00
-
2ca2d5ab1c
docs: add changelog note for sandbox alias fix
Peter Steinberger
2026-02-26 13:30:00 +01:00
-
4fd29a35bb
fix: block broken-symlink sandbox path escapes
Peter Steinberger
2026-02-26 13:19:48 +01:00
-
8b5ebff67b
fix(cron): prevent isolated hook session-key double-prefixing (land #27333, @MaheshBhushan)

Peter SteinbergerandMaheshBhushan
2026-02-26 12:28:07 +00:00
-
f692288301
feat(cron): add --session-key option to cron add/edit CLI commands

Matt HulmeandClaude Opus 4.6
2026-02-25 22:16:51 -06:00
-
452a8c9db9
fix: use canonical cron session detection for spawn note
Ayaan Zaidi
2026-02-26 17:20:45 +05:30
-
69590de276
fix: suppress SUBAGENT_SPAWN_ACCEPTED_NOTE for cron isolated sessions
Taras Lukavyi
2026-02-26 11:34:25 +01:00
-
46eba86b45
fix: harden workspace boundary path resolution
Peter Steinberger
2026-02-26 13:19:55 +01:00
-
ecb2053fdd
chore(pr): guard against dropped changelog refs
Peter Steinberger
2026-02-26 13:19:21 +01:00
-
125dc322f5
refactor(feishu): unify account-aware tool routing and message body
Peter Steinberger
2026-02-26 13:19:17 +01:00
-
5df9aacf68
fix(podman): default run-openclaw-podman bind to loopback (land #27491, thanks @robbyczgw-cla)

Peter Steinbergerandrobbyczgw-cla
2026-02-26 12:11:50 +00:00
-
a288f3066f
fix(gateway): warn on non-loopback bind at startup (land #25397, thanks @let5sne)

Peter Steinbergerandlet5sne
2026-02-26 12:11:12 +00:00
-
327f0526d1
fix(gateway): use loopback for CLI status probe when bind=lan (land #26997, thanks @chikko80)

Peter SteinbergerandManuel Seitz
2026-02-26 12:10:02 +00:00
-
da53015ef5
fix(onboard): seed Control UI origins for non-loopback binds (land #26157, thanks @stakeswky)

Peter Steinbergerand不做了睡大觉
2026-02-26 12:09:36 +00:00
-
a97cec0018
refactor: harden remaining plugin manifest reads
Peter Steinberger
2026-02-26 13:12:44 +01:00
-
892a9c24b0
refactor(security): centralize channel allowlist auth policy
Peter Steinberger
2026-02-26 13:06:27 +01:00
-
eac86c2081
refactor: unify boundary hardening for file reads
Peter Steinberger
2026-02-26 13:04:33 +01:00
-
cf4853e2b8
fix: avoid duplicate feishu permission-error dispatch replies (#27381) (thanks @byungsker)
Peter Steinberger
2026-02-26 13:03:29 +01:00
-
736ec9690f
fix(feishu): merge permission error notice into main dispatch instead of separate agent turn
lbo728
2026-02-26 18:26:03 +09:00
-
d671d7a0a2
fix: preserve feishu message_id in agent-visible body (#27253) (thanks @xss925175263)
Peter Steinberger
2026-02-26 13:01:46 +01:00
-
6d52b47076
feishu: send message_id in BodyForAgent (fix #27218)
xianshishan
2026-02-26 14:44:39 +08:00
-
db6c513d1e
feishu: include message_id in agent message body (fix #27218)
咸士山 0668001391
2026-02-26 14:23:55 +08:00
-
6632fd1ea9
refactor(security): extract protected-route path policy helpers
Peter Steinberger
2026-02-26 13:01:12 +01:00
-
39b5ffdaa6
fix: route feishu doc tools by agent account context (#27338) (thanks @AaronL725)
Peter Steinberger
2026-02-26 13:00:15 +01:00
-
58c100f66f
fix(feishu): remove hook registration, fix docx getClient call
root
2026-02-26 08:52:41 +00:00
-
10d9549764
fix(feishu): fix hook types and docx client call
root
2026-02-26 08:44:06 +00:00
-
151ee6014a
fix(feishu): route doc tools by agent account
root
2026-02-26 08:27:23 +00:00
-
8bdda7a651
fix(security): keep DM pairing allowlists out of group auth
Peter Steinberger
2026-02-26 12:58:06 +01:00
-
d08dafb08f
fix(feishu): bitable tools use listEnabledFeishuAccounts for multi-account mode (#27244)
echoVic
2026-02-26 14:30:24 +08:00
-
0ed675b1df
fix(security): harden canonical auth matching for plugin channel routes
Peter Steinberger
2026-02-26 12:55:23 +01:00
-
0231cac957
feat(typing): add TTL safety-net for stuck indicators (land #27428, thanks @Crpdim)

Peter SteinbergerandCrpdim
2026-02-26 11:48:35 +00:00
-
3d30ba18a2
fix(slack): gate member and message subtype system events
Peter Steinberger
2026-02-26 12:48:10 +01:00
-
da0ba1b73a
fix(security): harden channel auth path checks and exec approval routing
Peter Steinberger
2026-02-26 12:45:56 +01:00
-
b096ad267e
fix(telegram): add sendChatAction 401 backoff guard (land #27415, thanks @widingmarcus-cyber)

Peter SteinbergerandMarcus Widing
2026-02-26 11:45:43 +00:00
-
b74be2577f
refactor(web): unify proxy-guarded fetch path for web tools
Peter Steinberger
2026-02-26 12:44:06 +01:00
-
8bf1c9a23a
fix(typing): stop keepalive restarts after run completion (land #27413, thanks @widingmarcus-cyber)

Peter SteinbergerandMarcus Widing
2026-02-26 11:41:38 +00:00
-
fec3fdf7ef
test(msteams): align silent-prefix expectation with exact NO_REPLY semantics
Peter Steinberger
2026-02-26 11:41:37 +00:00
-
242188b7b1
refactor: unify boundary-safe reads for bootstrap and includes
Peter Steinberger
2026-02-26 12:42:06 +01:00
-
199ef9f8ea
fix(typing): add main-run dispatch idle safety net (land #27250, thanks @Sid-Qin)

Peter SteinbergerandSid Qin
2026-02-26 11:36:08 +00:00
-
46003e85bf
fix: unify web tool proxy path (#27430) (thanks @kevinWangSheng)
Peter Steinberger
2026-02-26 12:32:30 +01:00
-
d8e2030d47
fix(web-search): honor HTTP_PROXY environment variable for Brave Search API
Kevin Shenghui
2026-02-26 02:26:05 -08:00
-
9925ac6a2d
fix(config): harden include file loading path checks
Peter Steinberger
2026-02-26 12:23:22 +01:00
-
caace61ba1
chore: bump versions to 2026.2.26
Peter Steinberger
2026-02-26 12:10:08 +01:00
-
e7b600e318
chore(acpx): bump package version to 2026.2.25
Ayaan Zaidi
2026-02-26 16:29:12 +05:30
-
4f869b2b76
docs(changelog): thank @emanuelst for telegram preview fix (#27449)
Ayaan Zaidi
2026-02-26 16:18:16 +05:30
-
d9ed2c425a
fix(telegram): prime final preview before stop flush
Ayaan Zaidi
2026-02-26 16:13:24 +05:30
-
e273b9851e
Tests: tighten discord work account type in doctor config flow
Gustavo Madeira Santana
2026-02-26 05:38:53 -05:00
-
1ffc319831
Doctor: keep allowFrom account-scoped in multi-account configs
Gustavo Madeira Santana
2026-02-26 05:31:51 -05:00
-
97fa44dc82
fix: changelog for NO_REPLY streaming fix (#19576) (thanks @aldoeliacim)
Ayaan Zaidi
2026-02-26 16:04:31 +05:30
-
133f14c0af
docs(auto-reply): align silent token comment with regex
Ayaan Zaidi
2026-02-26 15:59:53 +05:30
-
e64d72299e
fix(auto-reply): tighten silent token semantics and prefix streaming
Ayaan Zaidi
2026-02-26 15:51:52 +05:30
-
2f2110a32c
fix: tighten isSilentReplyText to match whole-text only
HAL
2026-02-17 18:02:20 -06:00
-
a7d56e3554
feat: ACP thread-bound agents (#23580)
Onur Solmaz
2026-02-26 11:00:09 +01:00
-
a9d9a968ed
chore(changelog): move post release entries to unreleased section
Gustavo Madeira Santana
2026-02-26 04:59:54 -05:00
-
a690b62391
Doctor: ignore slash sessions in transcript integrity check

Gustavo Madeira Santanaandgumadeiras
2026-02-26 04:35:08 -05:00
-
30fd2bbe19
fix(ssrf): honor global family policy for pinned dispatcher
Ayaan Zaidi
2026-02-26 14:48:35 +05:30
-
0e3ed28950
fix: changelog for telegram group inline callbacks (#27343) (thanks @GodsBoy)
Ayaan Zaidi
2026-02-26 14:42:47 +05:30
-
58fef1d703
fix(telegram): allow inline button callbacks in groups when command was authorized (#27309)
GodsBoy
2026-02-26 10:33:57 +02:00
-
dfa0b5b4fc
Channels: move single-account config into accounts.default (#27334)

Gustavo Madeira Santanaandgumadeiras
2026-02-26 04:06:03 -05:00
-
da6a96ed33
fix: update changelog for notifications list land (#27344) (thanks @obviyus)
Ayaan Zaidi
2026-02-26 14:33:00 +05:30
-
a0cf753b2e
refactor(agents): dedupe node read invoke commands
Ayaan Zaidi
2026-02-26 14:16:34 +05:30
-
05817187fe
refactor(android): unify notifications.list status flow
Ayaan Zaidi
2026-02-26 14:16:31 +05:30
-
c0073b3d47
feat(agents): add nodes notifications_list action
Ayaan Zaidi
2026-02-26 14:02:51 +05:30
-
e6a5d5784c
feat(gateway): allow notifications.list for android nodes
Ayaan Zaidi
2026-02-26 14:02:43 +05:30
-
cf4fe41957
feat(android): add notifications.list node command
Ayaan Zaidi
2026-02-26 14:02:39 +05:30
-
c289b5ff9f
fix(config): preserve agent-level apiKey/baseUrl during models.json merge (#27293)
Sid
2026-02-26 16:46:36 +08:00
-
92c309f2e1
docs: fix wrong Providers link in configuration examples
yinghaosang
2026-02-26 12:07:29 +08:00
-
39d725f4d3
Daemon tests: guard undefined runtime status
Gustavo Madeira Santana
2026-02-26 03:24:48 -05:00
-
4ebefe647a
fix(daemon): keep launchd KeepAlive while preserving restart hardening
Gustavo Madeira Santana
2026-02-26 02:52:00 -05:00
-
b975711429
fix(daemon): stabilize LaunchAgent restart and proxy env passthrough (#27276)
Frank Yang
2026-02-25 23:40:48 -08:00
-
96c7702526
Agents: add account-scoped bind and routing commands (#27195)

Gustavo Madeira Santanaandgumadeiras
2026-02-26 02:36:56 -05:00
-
c5d040bbea
fix: update changelog for android invoke distill (#27257) (thanks @obviyus)
Ayaan Zaidi
2026-02-26 12:17:14 +05:30
-
ac6539ed03
refactor(android): unify invoke availability gating
Ayaan Zaidi
2026-02-26 12:07:51 +05:30
-
a87d961ebc
fix(android): require gateway device auth store
Ayaan Zaidi
2026-02-26 12:07:09 +05:30
-
f7865527af
fix(android): omit websocket Origin for native gateway connect
Ayaan Zaidi
2026-02-26 11:56:04 +05:30
-
c3f54fcddd
refactor(android): unify invoke error parsing
Ayaan Zaidi
2026-02-26 11:48:50 +05:30
-
39d362aeff
refactor(android): distill invoke dispatcher command flow
Ayaan Zaidi
2026-02-26 11:47:39 +05:30
-
18fc4c113b
refactor(android): centralize invoke command registry
Ayaan Zaidi
2026-02-26 11:46:00 +05:30
-
d4ae8a8d34
test(android): cover invoke paramsJSON and error mapping
Ayaan Zaidi
2026-02-26 11:41:07 +05:30
-
8117a13dd6
fix(nodes): default camera snap to front high-quality image
Ayaan Zaidi
2026-02-26 11:35:05 +05:30
-
bee0c564cf
test(android): add GatewaySession invoke roundtrip test
Ayaan Zaidi
2026-02-26 11:35:00 +05:30
-
72adf2458b
CI: shard Windows test lane for faster CI critical path (#27234)
Josh Avant
2026-02-26 00:33:36 -06:00
-
f08fe02a1b
Onboarding: support plugin-owned interactive channel flows (#27191)

Gustavo Madeira Santanaandgumadeiras
2026-02-26 01:14:57 -05:00
-
39a1c13635
chore(ci): fix cross-platform symlink path assertions in agents file tests
Gustavo Madeira Santana
2026-02-26 00:39:18 -05:00