Gustavo Madeira Santana
6ec66d4d0f
Matrix: split monitor verification event routing
2026-03-12 16:47:13 +00:00
Gustavo Madeira Santana
5d3a61027a
Matrix: remove orphaned inbound body helpers
2026-03-12 16:47:13 +00:00
Gustavo Madeira Santana
6de0456738
Matrix: extract inbound route resolution
2026-03-12 16:47:13 +00:00
Gustavo Madeira Santana
d2290351e2
Docs: clarify Matrix onboarding and pairing
2026-03-12 16:47:13 +00:00
Gustavo Madeira Santana
cc5ade5893
Matrix: dedupe monitor handler tests
2026-03-12 16:47:12 +00:00
Gustavo Madeira Santana
fd1d5555ad
Matrix: centralize monitor config normalization
2026-03-12 16:47:12 +00:00
Gustavo Madeira Santana
54966deca1
Matrix: extract monitor access state
2026-03-12 16:47:12 +00:00
Gustavo Madeira Santana
0669abdda5
Matrix: remove orphaned send queue
2026-03-12 16:47:12 +00:00
Gustavo Madeira Santana
774daae80a
Docs: clarify Matrix account defaults
2026-03-12 16:47:12 +00:00
Gustavo Madeira Santana
93114f8918
Matrix: dedupe resolver test harness
2026-03-12 16:47:11 +00:00
Gustavo Madeira Santana
3e3bb5f6f7
Matrix: remove unused internal helpers
2026-03-12 16:47:11 +00:00
Gustavo Madeira Santana
504ce688e5
Matrix: share reusable client bootstrap
2026-03-12 16:47:11 +00:00
Gustavo Madeira Santana
b758666867
Matrix: register thread bindings before client sync
2026-03-12 16:47:11 +00:00
Gustavo Madeira Santana
3541b6f9ea
Matrix: harden live directory lookups
2026-03-12 16:47:11 +00:00
Gustavo Madeira Santana
5613ad679d
Matrix: centralize target normalization
2026-03-12 16:47:11 +00:00
Gustavo Madeira Santana
9878b4743f
Matrix: centralize account config helpers
2026-03-12 16:47:10 +00:00
Gustavo Madeira Santana
4c4b2ba571
Matrix: warn and clean stale managed devices
2026-03-12 16:47:10 +00:00
Gustavo Madeira Santana
df6b6762c0
Matrix: fix verification client lifecycle and quiet CLI noise
2026-03-12 16:47:10 +00:00
Gustavo Madeira Santana
a3573ac71f
Matrix: retry cross-signing after secret storage repair
2026-03-12 16:47:10 +00:00
Gustavo Madeira Santana
46cd37bc0d
Matrix: repair explicit secret storage bootstrap
2026-03-12 16:47:10 +00:00
Gustavo Madeira Santana
fdf7953226
Matrix: preserve owner-signed verification state
2026-03-12 16:47:09 +00:00
Gustavo Madeira Santana
21f1e903a4
Plugins: scope SDK imports and harden Matrix routing
2026-03-12 16:47:09 +00:00
Gustavo Madeira Santana
e80483ff00
poll and profile fixes
2026-03-12 16:47:09 +00:00
Gustavo Madeira Santana
50568f29d5
Matrix: tighten verification trust and expose profile updates
2026-03-12 16:47:09 +00:00
Gustavo Madeira Santana
9101916e53
Matrix: improve migration startup warnings
2026-03-12 16:47:09 +00:00
Gustavo Madeira Santana
b2623c2a9f
Docs: clarify Matrix migration update flow
2026-03-12 16:47:08 +00:00
Gustavo Madeira Santana
0fdc404a2b
Matrix: keep default account device fields scoped
2026-03-12 16:47:08 +00:00
Gustavo Madeira Santana
8e962668ce
Matrix: replace legacy plugin with new implementation
2026-03-12 16:47:08 +00:00
Gustavo Madeira Santana
455c4f3436
Create matrix-supersession-migration.md
2026-03-12 16:47:08 +00:00
Gustavo Madeira Santana
5d5e500475
matrix-js: simplify storage paths
2026-03-12 16:47:07 +00:00
Gustavo Madeira Santana
9b4b8032de
Update subagents.md
2026-03-12 16:47:07 +00:00
Gustavo Madeira Santana
887e2aca79
matrix-js: require explicit thread-bound spawn config
2026-03-12 16:47:07 +00:00
Gustavo Madeira Santana
94f3b1b57d
matrix-js: add account-aware bindings and ACP routing
2026-03-12 16:47:07 +00:00
Gustavo Madeira Santana
d4e3a98613
matrix-js: add startup verification policy
2026-03-12 16:47:07 +00:00
Gustavo Madeira Santana
08cf9a1b7f
matrix-js: format thread helpers
2026-03-12 16:47:06 +00:00
Gustavo Madeira Santana
3eb6c4c8ec
matrix-js: improve thread context and auto-threading
2026-03-12 16:47:06 +00:00
Gustavo Madeira Santana
a670c21ab4
matrix-js: harden reaction handling
2026-03-12 16:47:06 +00:00
Gustavo Madeira Santana
00019c73e4
move matrix-js helpers to be locally scoped
2026-03-12 16:47:06 +00:00
Gustavo Madeira Santana
e07b6072b5
make matrix-js atomic and add poll voting support
2026-03-12 16:47:06 +00:00
Gustavo Madeira Santana
082a1aedd5
Tests: restore matrix-js bind integration coverage
2026-03-12 16:47:05 +00:00
Gustavo Madeira Santana
5fddbc1d9b
Matrix-js: sync with main plugin-loading standards
2026-03-12 16:47:05 +00:00
Peter Steinberger
115f24819e
fix: make node-llama-cpp optional for npm installs
2026-03-12 16:45:59 +00:00
Peter Steinberger
9f08af1f06
fix(ci): harden docker builds and unblock config docs
2026-03-12 16:45:29 +00:00
Gustavo Madeira Santana
46f0bfc55b
Gateway: harden custom session-store discovery ( #44176 )
...
Merged via squash.
Prepared head SHA: 52ebbf51885599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-03-12 16:44:46 +00:00
Peter Steinberger
dc3bb1890b
docs: clarify gateway HTTP trust boundary
2026-03-12 16:40:36 +00:00
Vincent Koc
f96ba87f03
Zalo: rate limit invalid webhook secret guesses before auth ( #44173 )
...
* Zalo: rate limit webhook guesses before auth
* Tests: cover pre-auth Zalo webhook rate limiting
* Changelog: note Zalo pre-auth rate limiting
* Zalo: preserve auth-before-content-type response ordering
* Tests: cover auth-before-content-type webhook ordering
* Zalo: split auth and unauth webhook rate-limit buckets
* Tests: cover auth bucket split for Zalo webhook rate limiting
* Zalo: use trusted proxy client IP for webhook rate limiting
* Tests: cover trusted proxy client IP rate limiting for Zalo
2026-03-12 12:30:50 -04:00
Nimrod Gutman
96fb423528
fix(ios): add live activity horizontal padding
2026-03-12 18:20:44 +02:00
Nimrod Gutman
b77b7485e0
feat(push): add iOS APNs relay gateway ( #43369 )
...
* feat(push): add ios apns relay gateway
* fix(shared): avoid oslog string concatenation
# Conflicts:
# apps/shared/OpenClawKit/Sources/OpenClawKit/GatewayChannel.swift
* fix(push): harden relay validation and invalidation
* fix(push): persist app attest state before relay registration
* fix(push): harden relay invalidation and url handling
* feat(push): use scoped relay send grants
* feat(push): configure ios relay through gateway config
* feat(push): bind relay registration to gateway identity
* fix(push): tighten ios relay trust flow
* fix(push): bound APNs registration fields (#43369 ) (thanks @ngutman)
2026-03-12 18:15:35 +02:00
2233admin
9342739d71
fix(providers): respect user-configured baseUrl for kimi-coding ( #36647 )
...
* fix(providers): respect user-configured baseUrl for kimi-coding
The kimi-coding provider was built exclusively from
`buildKimiCodingProvider()` defaults, ignoring any user-specified
`baseUrl` or other overrides in `openclaw.json` providers config.
This caused 404 errors when users configured a custom endpoint.
Now merge `explicitProviders["kimi-coding"]` on top of defaults,
matching the pattern used by ollama/vllm. User's `baseUrl`, `api`,
and `models` take precedence; env/profile API key still wins.
Fixes #36353
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
* Tests: use Kimi implicit provider harness
---------
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-03-12 12:14:07 -04:00
Vincent Koc
3e28e10c2f
Plugins: require explicit trust for workspace-discovered plugins ( #44174 )
...
* Plugins: disable implicit workspace plugin auto-load
* Tests: cover workspace plugin trust gating
* Changelog: note workspace plugin trust hardening
* Plugins: keep workspace trust gate ahead of memory slot defaults
* Tests: cover workspace memory-slot trust bypass
2026-03-12 12:12:41 -04:00
