kumarabhirup 6594de6186

Merge Ironclaw changes onto upstream Openclaw 2026.2.22 ...

Replays all Ironclaw-specific changes (176 commits) onto the latest
upstream Openclaw release (2026.2.22). Conflicts auto-resolved in
favor of Ironclaw to guarantee zero change loss.

Merge base: cbc3de6c9 (2026-02-16)
Upstream: a37e12eab (upstream/main, 2026.2.22)
Ironclaw: 3009566c9 (origin/main, 2026.2.15-1.9)
Backup: ironclaw-backup-pre-sync

Conflict resolutions:
- 6 GitHub workflow files: deleted (Ironclaw intentionally stripped)
- src/sessions/session-key-utils.test.ts: kept (Ironclaw modified)
- Duplicate imports from merge: deduplicated
- Unused imports from upstream code Ironclaw overrode: removed
- Broken test indentation from merge: fixed

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-02-21 18:06:01 -08:00

..

audit-channel.ts

fix(security): warn on Discord name-based allowlists in audit

2026-02-21 19:45:17 +01:00

audit-extra.async.ts

fix(sandbox): use one-time noVNC observer tokens

2026-02-21 13:56:58 +01:00

audit-extra.sync.test.ts

perf(test): fold secret equality assertions into audit extra suite

2026-02-16 00:18:27 +00:00

audit-extra.sync.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

audit-extra.ts

fix(security): force sandbox browser hash migration and audit stale labels

2026-02-21 13:25:41 +01:00

audit-fs.ts

Doctor/Security: fix telegram numeric ID + symlink config permission warnings (#19844)

2026-02-18 00:09:51 -08:00

audit-tool-policy.ts

refactor(core): dedupe tool policy and IPv4 matcher logic

2026-02-16 16:14:54 +00:00

audit.test.ts

test(security): simplify repeated audit finding assertions

2026-02-21 23:09:15 +00:00

audit.ts

Merge Ironclaw changes onto upstream Openclaw 2026.2.22

2026-02-21 18:06:01 -08:00

channel-metadata.ts

fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin)

2026-02-03 23:02:45 -08:00

dangerous-tools.ts

refactor(security): centralize dangerous tool lists

2026-02-14 13:27:05 +01:00

dm-policy-shared.test.ts

fix: enforce strict allowlist across pairing stores (#23017)

2026-02-22 00:00:23 +01:00

dm-policy-shared.ts

fix: enforce strict allowlist across pairing stores (#23017)

2026-02-22 00:00:23 +01:00

external-content.test.ts

Security: add per-wrapper IDs to untrusted-content markers (#19009)

2026-02-21 01:16:02 -05:00

external-content.ts

Fix formatting (#22474)

2026-02-21 01:37:02 -05:00

fix.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

fix.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

scan-paths.ts

fix(security): enforce plugin and hook path containment

2026-02-19 15:37:29 +01:00

secret-equal.ts

fix(security): SHA-256 hash before timingSafeEqual to prevent length leak (#20856)

2026-02-19 03:16:35 -08:00

skill-scanner.test.ts

security: add skill/plugin code safety scanner (#9806)

2026-02-05 16:06:11 -08:00

skill-scanner.ts

refactor(security): reuse shared scan path containment helper

2026-02-19 00:20:15 +00:00

temp-path-guard.test.ts

fix(test): skip test-utils files in temp path guard

2026-02-21 20:48:52 +01:00

windows-acl.test.ts

fix: stabilize windows acl tests and command auth registry (#9335) (thanks @M00N7682)

2026-02-05 00:38:35 -08:00

windows-acl.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00