openclaw

acp

fix(security): OC-53 validate prompt size before string concatenation to prevent memory exhaustion — Aether AI Agent

2026-02-19 15:41:01 +01:00

agents

refactor(security): centralize trusted sender checks for discord moderation

2026-02-19 15:39:56 +01:00

auto-reply

fix(security): centralize owner-only tool gating and scope maps

2026-02-19 15:29:23 +01:00

browser

refactor(browser): unify navigation guard path and error typing

2026-02-19 14:04:18 +01:00

canvas-host

Canvas: improve A2UI asset resolution and empty state (#20312 )

2026-02-18 19:44:55 +00:00

channels

refactor(security): centralize trusted sender checks for discord moderation

2026-02-19 15:39:56 +01:00

cli

fix: harden ACP secret handling and exec preflight boundaries

2026-02-19 15:34:20 +01:00

commands

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

compat

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

config

refactor: dedupe redact snapshot restore prelude

2026-02-19 14:27:37 +00:00

cron

Security: use crypto.randomBytes for temp file names (#20654 )

2026-02-19 03:19:29 -08:00

daemon

Security: use execFileSync instead of execSync with shell strings (#20655 )

2026-02-19 03:19:09 -08:00

discord

refactor(security): centralize trusted sender checks for discord moderation

2026-02-19 15:39:56 +01:00

docs

Docs: landing page revamp (#8885 )

2026-02-04 10:37:14 -05:00

gateway

fix(security): centralize owner-only tool gating and scope maps

2026-02-19 15:29:23 +01:00

hooks

fix(security): enforce plugin and hook path containment

2026-02-19 15:37:29 +01:00

imessage

style: format files and fix safe-bins e2e typing

2026-02-19 14:26:12 +01:00

infra

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

line

refactor: share allow-from merge and sender-id checks

2026-02-19 14:27:37 +00:00

link-understanding

fix: block ISATAP SSRF bypass via shared host/ip guard

2026-02-19 09:59:47 +01:00

logging

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

macos

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

markdown

fix(security): use YAML core schema to prevent type coercion (#20857 )

2026-02-19 03:15:36 -08:00

media

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

media-understanding

style: format files and fix safe-bins e2e typing

2026-02-19 14:26:12 +01:00

memory

test: share memory manager bootstrap helper

2026-02-19 14:27:37 +00:00

node-host

refactor(exec): split host flows and harden safe-bin trust

2026-02-19 14:22:01 +01:00

pairing

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugin-sdk

refactor(security): harden temp-path handling for inbound media

2026-02-19 14:06:37 +01:00

plugins

fix(security): enforce plugin and hook path containment

2026-02-19 15:37:29 +01:00

process

perf(test): dedupe telegram thread cases and tighten PTY timer

2026-02-18 22:29:31 +00:00

providers

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

routing

refactor(test): dedupe agent harnesses and routing fixtures

2026-02-18 04:49:22 +00:00

scripts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

security

fix(security): enforce plugin and hook path containment

2026-02-19 15:37:29 +01:00

sessions

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

shared

fix(security): enforce strict IPv4 SSRF literal handling

2026-02-19 15:24:47 +01:00

signal

refactor(signal): reuse shared reaction types

2026-02-18 23:34:15 +00:00

slack

refactor: dedupe slack monitor mrkdwn and modal event base

2026-02-19 14:27:36 +00:00

refactor: share allow-from merge and sender-id checks

2026-02-19 14:27:37 +00:00

terminal

refactor(cli): share styled select prompt helper

2026-02-18 17:48:02 +00:00

test-helpers

refactor(test): simplify state dir env helpers

2026-02-16 00:08:00 +00:00

test-utils

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

tts

Security: use crypto.randomBytes for temp file names (#20654 )

2026-02-19 03:19:29 -08:00

tui

fix(security): block plaintext WebSocket connections to non-loopback addresses (#20803 )

2026-02-19 03:13:08 -08:00

types

fix: update pi packages to 0.51.0, remove bogus type augmentation

2026-02-02 01:52:33 +01:00

utils

test(queue): cover collect drain helper states

2026-02-19 07:01:54 +00:00

web

style: format fs-safe and web media

2026-02-19 09:25:12 +00:00

test: dedupe line and whatsapp target resolution tests

2026-02-18 05:31:13 +00:00

wizard

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

channel-web.ts

…

docker-setup.test.ts

fix(docker): harden docker-setup mount validation

2026-02-19 10:44:46 +01:00

dockerfile.test.ts

test(docker): cover browser install build arg

2026-02-16 22:35:27 -05:00

entry.ts

refactor(cli): share windows argv normalization

2026-02-14 15:39:46 +00:00

extensionAPI.ts

chore: Migrate to tsdown, speed up JS bundling by ~10x (thanks @hyf0).

2026-02-03 20:18:16 +09:00

globals.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

index.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logger.test.ts

test: merge logger subsystem prefix drop cases

2026-02-19 08:49:52 +00:00

logger.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

logging.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

polls.test.ts

test: table-drive poll duration clamp cases

2026-02-18 23:27:50 +00:00

polls.ts

refactor(outbound): dedupe poll threading + tighten duration semantics

2026-02-14 19:03:46 +01:00

runtime.ts

chore: chore: Fix types in tests 12/N.

2026-02-17 11:22:49 +09:00

utils.test.ts

perf(test): drop redundant index entrypoint tests

2026-02-16 02:45:00 +00:00

utils.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

version.test.ts

refactor: centralize presence routing and version precedence coverage (#19609 )

2026-02-18 00:02:51 -05:00

version.ts

refactor: centralize presence routing and version precedence coverage (#19609 )

2026-02-18 00:02:51 -05:00