Vincent Koc 5e389d5e7c Gateway/ws: clear unbound scopes for shared-token auth (#44306) ...

* Gateway/ws: clear unbound shared-auth scopes

* Gateway/auth: cover shared-token scope stripping

* Changelog: add shared-token scope stripping entry

* Gateway/ws: preserve allowed control-ui scopes

* Gateway/auth: assert control-ui admin scopes survive allowed device-less auth

* Gateway/auth: cover shared-password scope stripping

2026-03-12 14:52:24 -04:00

..

acp

Gateway: harden custom session-store discovery (#44176)

2026-03-12 16:44:46 +00:00

agents

onboard(minimax): flatten auth to 4 direct choices, unify CN/Global under single provider (#44284)

2026-03-12 11:23:42 -07:00

auto-reply

feat(ui): dashboard-v2 views refactor (slice 3/3 of dashboard-v2) (#41503)

2026-03-12 12:46:19 -05:00

browser

fix(browser): restore proxy attachment media size cap (#43684)

2026-03-12 01:04:31 -04:00

canvas-host

…

channels

Plugins: fix env-aware root resolution and caching (#44046)

2026-03-12 15:31:31 +00:00

cli

Merge remote-tracking branch 'origin/vincentkoc-code/fix-terminal-table-width'

2026-03-12 04:56:21 -04:00

commands

onboard(minimax): flatten auth to 4 direct choices, unify CN/Global under single provider (#44284)

2026-03-12 11:23:42 -07:00

compat

…

config

fix: restore protocol outputs and stabilize Windows path CI (#44266)

2026-03-12 10:55:29 -07:00

context-engine

fix: carry observed overflow token counts into compaction (#40357)

2026-03-12 06:58:42 -07:00

cron

fix(cron): prevent duplicate proactive delivery on transient retry (#40646)

2026-03-12 03:01:19 -04:00

daemon

build: align Node 22 guidance with 22.16 minimum

2026-03-12 20:07:44 +05:30

discord

fix(discord): enforce users/roles allowlist in reaction ingress

2026-03-12 03:13:46 +01:00

docs

…

gateway

Gateway/ws: clear unbound scopes for shared-token auth (#44306)

2026-03-12 14:52:24 -04:00

hooks

fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875)

2026-03-08 19:07:28 +03:00

i18n

…

imessage

fix(imessage): dedupe reflected self-chat duplicates (#38440)

2026-03-12 02:27:35 -04:00

infra

feat(push): add iOS APNs relay gateway (#43369)

2026-03-12 18:15:35 +02:00

line

Hardening: require LINE webhook signatures (#44090)

2026-03-12 10:50:36 -04:00

link-understanding

…

logging

Logging: harden probe suppression for observations (#41338)

2026-03-10 01:40:15 +03:00

markdown

perf: harden chunking against quadratic scans

2026-03-07 16:50:35 +00:00

media

Memory: add multimodal image and audio indexing (#43460)

2026-03-11 22:28:34 +00:00

media-understanding

fix: add gemini 3.1 flash-lite support

2026-03-08 05:12:48 +00:00

memory

build: raise Node 22 compatibility floor to 22.16

2026-03-12 20:07:44 +05:30

node-host

fix(node-host): harden ambiguous approval operand binding (#44247)

2026-03-12 13:28:35 -04:00

pairing

refactor(pairing): share allowFrom path resolution

2026-03-08 02:16:03 +00:00

plugin-sdk

fix(mattermost): pass mediaLocalRoots through reply delivery (#44021)

2026-03-12 20:13:51 +05:30

plugins

Plugins: require explicit trust for workspace-discovered plugins (#44174)

2026-03-12 12:12:41 -04:00

process

refactor: share windows command shim resolution

2026-03-10 22:18:04 +00:00

providers

build: update app deps except carbon

2026-03-09 06:09:33 +00:00

routing

refactor(routing): centralize inbound last-route policy

2026-03-08 02:16:03 +00:00

scripts

CI: cover skill and extension tests

2026-03-06 11:21:03 -05:00

secrets

Security: require Feishu webhook encrypt key (#44087)

2026-03-12 11:01:00 -04:00

security

fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983)

2026-03-10 13:54:23 +08:00

sessions

Gateway: harden custom session-store discovery (#44176)

2026-03-12 16:44:46 +00:00

shared

refactor: share sampled entry summary formatting

2026-03-08 00:05:24 +00:00

signal

fix(signal): forward all inbound attachments from #39212 (thanks @joeykrug)

2026-03-07 23:35:55 +00:00

slack

refactor: compile allowlist matchers

2026-03-11 00:07:47 +00:00

telegram

feat: add sessions_yield tool for cooperative turn-ending (#36537)

2026-03-12 08:46:47 -07:00

terminal

fix(terminal): sanitize skills JSON and fallback on legacy Windows (#43520)

2026-03-11 19:53:07 -04:00

test-helpers

…

test-utils

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

tts

feat: add sessions_yield tool for cooperative turn-ending (#36537)

2026-03-12 08:46:47 -07:00

tui

fix: prevent duplicate assistant messages in TUI (fixes #35278) (#35364)

2026-03-12 02:59:42 -04:00

types

…

utils

fix(exec): honor shell comments in allow-always analysis

2026-03-07 23:31:25 +00:00

web

fix(whatsapp): trim leading whitespace in direct outbound sends (#43539)

2026-03-12 11:32:04 +11:00

whatsapp

…

wizard

fix(cli): handle scheduled gateway restarts consistently

2026-03-12 01:38:39 +00:00

channel-web.ts

…

docker-build-cache.test.ts

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

docker-image-digests.test.ts

fix(ci): pin multi-arch docker base digests

2026-03-08 02:55:15 +00:00

docker-setup.e2e.test.ts

Docker: trim runtime image payload (#40307)

2026-03-08 16:07:04 -07:00

dockerfile.test.ts

build: default to Node 24 and keep Node 22 compat

2026-03-12 20:07:44 +05:30

entry.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

entry.version-fast-path.test.ts

CLI: include commit hash in --version output (#39712)

2026-03-08 19:10:48 +03:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

install-sh-version.test.ts

chore: bump version to 2026.3.10

2026-03-11 23:29:53 +00:00

logger.test.ts

…

logger.ts

…

logging.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

Plugins: fix env-aware root resolution and caching (#44046)

2026-03-12 15:31:31 +00:00

utils.ts

Plugins: fix env-aware root resolution and caching (#44046)

2026-03-12 15:31:31 +00:00

version.test.ts

…

version.ts

…