openclaw

acp

refactor(acp): split session tests and share rate limiter

2026-02-19 14:55:06 +01:00

agents

test: share cron tool mock harness

2026-02-19 14:27:37 +00:00

auto-reply

fix: harden agent gateway authorization scopes

2026-02-19 14:37:56 +01:00

browser

refactor(browser): unify navigation guard path and error typing

2026-02-19 14:04:18 +01:00

canvas-host

…

channels

refactor: share allow-from merge and sender-id checks

2026-02-19 14:27:37 +00:00

cli

refactor: reuse daemon action response type in lifecycle core

2026-02-19 14:27:36 +00:00

commands

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

compat

…

config

refactor: dedupe redact snapshot restore prelude

2026-02-19 14:27:37 +00:00

cron

Security: use crypto.randomBytes for temp file names (#20654 )

2026-02-19 03:19:29 -08:00

daemon

Security: use execFileSync instead of execSync with shell strings (#20655 )

2026-02-19 03:19:09 -08:00

discord

fix(security): enforce trusted sender auth for discord moderation

2026-02-19 15:18:24 +01:00

docs

…

gateway

refactor: dedupe gateway session guards and agent test fixtures

2026-02-19 14:27:36 +00:00

hooks

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

imessage

style: format files and fix safe-bins e2e typing

2026-02-19 14:26:12 +01:00

infra

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

line

refactor: share allow-from merge and sender-id checks

2026-02-19 14:27:37 +00:00

link-understanding

fix: block ISATAP SSRF bypass via shared host/ip guard

2026-02-19 09:59:47 +01:00

logging

…

macos

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

markdown

fix(security): use YAML core schema to prevent type coercion (#20857 )

2026-02-19 03:15:36 -08:00

media

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

media-understanding

style: format files and fix safe-bins e2e typing

2026-02-19 14:26:12 +01:00

memory

test: share memory manager bootstrap helper

2026-02-19 14:27:37 +00:00

node-host

refactor(exec): split host flows and harden safe-bin trust

2026-02-19 14:22:01 +01:00

pairing

…

plugin-sdk

refactor(security): harden temp-path handling for inbound media

2026-02-19 14:06:37 +01:00

plugins

refactor(plugins): extract safety and provenance helpers

2026-02-19 15:24:14 +01:00

process

…

providers

…

routing

…

scripts

…

security

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

sessions

…

shared

fix(security): enforce strict IPv4 SSRF literal handling

2026-02-19 15:24:47 +01:00

signal

…

slack

refactor: dedupe slack monitor mrkdwn and modal event base

2026-02-19 14:27:36 +00:00

refactor: share allow-from merge and sender-id checks

2026-02-19 14:27:37 +00:00

terminal

…

test-helpers

…

test-utils

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

tts

Security: use crypto.randomBytes for temp file names (#20654 )

2026-02-19 03:19:29 -08:00

tui

fix(security): block plaintext WebSocket connections to non-loopback addresses (#20803 )

2026-02-19 03:13:08 -08:00

types

…

utils

test(queue): cover collect drain helper states

2026-02-19 07:01:54 +00:00

web

style: format fs-safe and web media

2026-02-19 09:25:12 +00:00

…

wizard

…

channel-web.ts

…

docker-setup.test.ts

fix(docker): harden docker-setup mount validation

2026-02-19 10:44:46 +01:00

dockerfile.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

test: merge logger subsystem prefix drop cases

2026-02-19 08:49:52 +00:00

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

version.test.ts

…

version.ts

…