openclaw/src at dbccc73d7a1b6681c96c1f513ca42646755a0cae - openclaw - Gitea

Ayuriel/openclaw

History

Tak Hoffman dbccc73d7a

security(line): synthesize strict LINE auth boundary hardening

LINE auth boundary hardening synthesis for inbound webhook authn/z/authz:
- account-scoped pairing-store access
- strict DM/group allowlist boundary separation
- fail-closed webhook auth/runtime behavior
- replay and duplicate handling with in-flight continuity for concurrent redeliveries

Source PRs: #26701, #26683, #25978, #17593, #16619, #31990, #26047, #30584, #18777
Related continuity context: #21955

Co-authored-by: bmendonca3 <208517100+bmendonca3@users.noreply.github.com>
Co-authored-by: davidahmann <46606159+davidahmann@users.noreply.github.com>
Co-authored-by: harshang03 <58983401+harshang03@users.noreply.github.com>
Co-authored-by: haosenwang1018 <167664334+haosenwang1018@users.noreply.github.com>
Co-authored-by: liuxiaopai-ai <73659136+liuxiaopai-ai@users.noreply.github.com>
Co-authored-by: coygeek <65363919+coygeek@users.noreply.github.com>
Co-authored-by: lailoo <20536249+lailoo@users.noreply.github.com>

2026-03-03 00:21:15 -06:00

..

fix(gateway+acp): thread stopReason through final event to ACP bridge (#24867 )

2026-03-03 00:40:54 -05:00

test(e2e): isolate module mocks across harnesses

2026-03-03 05:52:14 +00:00

refactor(acp): dedupe runtime option command plumbing

2026-03-03 02:53:13 +00:00

refactor(browser): dedupe playwright interaction helpers

2026-03-03 02:53:13 +00:00

refactor(tests): dedupe canvas host server setup

2026-03-03 02:53:13 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

fix(gateway): flush throttled delta before emitChatFinal (#24856 )

2026-03-02 23:45:46 -05:00

…

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

refactor(tests): dedupe cron store migration setup

2026-03-03 01:54:27 +00:00

refactor: split slack/discord/session maintenance helpers

2026-03-02 23:07:20 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

…

test(live): harden gateway model profile probes

2026-03-03 05:52:14 +00:00

refactor(hooks): dedupe install parameter wiring

2026-03-03 01:06:00 +00:00

fix(ci): resolve i18n typing and generated-policy drift

2026-03-02 04:29:18 +00:00

refactor: unify inbound debounce policy and split gateway/models helpers

2026-03-03 00:54:33 +00:00

fix(ci): tighten type signatures in gateway params validation

2026-03-03 03:04:13 +00:00

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

link-understanding

…

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

media-understanding

security(line): synthesize strict LINE auth boundary hardening

2026-03-03 00:21:15 -06:00

test: fix strict runtime mock types in channel tests

2026-03-03 03:06:22 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

feat(feishu): add broadcast support for multi-agent groups (#29575 )

2026-03-02 21:38:46 -06:00

refactor: split plugin runtime type contracts

2026-03-03 02:37:23 +00:00

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

refactor: dedupe agent and browser cli helpers

2026-03-03 00:15:00 +00:00

perf(runtime): reduce hot-path config and routing overhead

2026-03-03 00:20:46 +00:00

test(ci): add changed-scope shell-injection regression

2026-03-03 03:34:51 +00:00

fix: repair Feishu reset hook typing and stabilize secret resolver timeout

2026-03-03 05:06:08 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

fix: add runtime.events regression tests (#16044 ) (thanks @scifantastic)

2026-03-03 01:37:56 +00:00

refactor(nodes): dedupe camera payload and node resolve helpers

2026-03-02 23:32:41 +00:00

refactor: unify inbound debounce policy and split gateway/models helpers

2026-03-03 00:54:33 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

test(e2e): isolate module mocks across harnesses

2026-03-03 05:52:14 +00:00

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

refactor(test): extract cron issue-regression harness and frozen-time helper

2026-03-03 01:44:21 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

…

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

test(e2e): isolate module mocks across harnesses

2026-03-03 05:52:14 +00:00

refactor: dedupe channel outbound and monitor tests

2026-03-03 00:15:15 +00:00

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580 )

2026-03-03 02:58:20 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974 )

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): correct awk quoting in Docker GPG fingerprint check (#32153 )

2026-03-03 02:32:46 +00:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975 )

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00

version.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00