openclaw

acp

refactor(security): centralize dangerous tool lists

2026-02-14 13:27:05 +01:00

agents

refactor(sandbox): auto-recreate browser container on config changes (#16254 )

2026-02-14 15:47:59 +01:00

auto-reply

refactor(media): normalize inbound media type defaults (#16228 )

2026-02-14 15:06:13 +01:00

browser

fix(browser): annotate csrf middleware type

2026-02-14 15:54:29 +01:00

canvas-host

perf(test): trim browser smoke and speed canvas test reload

2026-02-14 01:47:47 +00:00

channels

refactor(reply): clarify explicit reply tags in off mode (#16189 )

2026-02-14 14:15:37 +01:00

cli

perf(test): speed up config tests

2026-02-14 14:25:54 +00:00

commands

fix(security): OC-25 — Validate OAuth state parameter to prevent CSRF attacks (#16058 )

2026-02-14 15:28:52 +01:00

compat

…

config

feat(sandbox): separate bind mounts for browser containers (#16230 )

2026-02-14 15:27:41 +01:00

cron

chore(test): fix cron every-jobs-fire unused import

2026-02-14 04:57:28 +00:00

daemon

fix(daemon): preserve backslashes in parseCommandLine on Windows (#15642 )

2026-02-13 19:27:06 +01:00

discord

fix(discord): respect gateway TLS config in exec approvals handler (#16216 ) (thanks @jasonftl)

2026-02-14 14:53:38 +01:00

docs

…

gateway

fix(security): reject oversized base64 before decode

2026-02-14 15:45:41 +01:00

hooks

fix(security): harden hooks module loading

2026-02-14 15:03:27 +01:00

imessage

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

infra

test(archive): accept drive-path absolute tar errors

2026-02-14 15:52:38 +01:00

line

refactor(line): split flex template builders

2026-02-13 19:08:37 +00:00

link-understanding

fix(security): block private/loopback/metadata IPs in link-understanding URL detection (#15604 )

2026-02-13 18:38:40 +01:00

logging

perf(test): reduce vitest logging overhead and media fixture cost

2026-02-14 00:59:53 +00:00

macos

refactor: unify gateway restart deferral and dispatcher cleanup

2026-02-14 00:38:18 +01:00

markdown

feat(telegram): render blockquotes as native <blockquote> tags (#14608 ) (#14626 )

2026-02-12 08:11:57 -05:00

media

fix(security): reject oversized base64 before decode

2026-02-14 15:45:41 +01:00

media-understanding

refactor(media): extract runner entry execution helpers

2026-02-13 19:08:37 +00:00

memory

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

node-host

refactor(node-host): extract invoke handlers

2026-02-13 19:08:37 +00:00

pairing

perf: replace proper-lockfile with lightweight file locks

2026-02-13 17:57:30 +00:00

plugin-sdk

perf(test): avoid plugin-sdk barrel imports

2026-02-14 12:42:19 +00:00

plugins

refactor: simplify manifest registry duplicate detection (#16260 )

2026-02-14 16:04:41 +01:00

process

perf(test): trim duplicate gateway and auto-reply test overhead

2026-02-13 23:40:38 +00:00

providers

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

routing

perf(gateway): optimize sessions/ws/routing

2026-02-14 12:21:44 +00:00

scripts

…

security

refactor(security): centralize dangerous tool lists

2026-02-14 13:27:05 +01:00

sessions

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

shared/text

…

signal

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

slack

refactor(media): normalize inbound media type defaults (#16228 )

2026-02-14 15:06:13 +01:00

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

terminal

fix(onboarding): exit cleanly after web ui hatch

2026-02-13 03:20:32 +01:00

test-helpers

…

test-utils

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

tts

perf(test): speed up Vitest bootstrap

2026-02-14 12:13:27 +00:00

tui

perf(test): reduce import and fixture overhead in hot tests

2026-02-14 02:49:19 +00:00

types

…

utils

fix: stop enforcing <final> for ollama (#16191 ) (thanks @Glucksberg)

2026-02-14 14:21:34 +01:00

web

perf(test): remove last-route polling in partial reply gating

2026-02-14 04:57:28 +00:00

…

wizard

fix(configure): reject literal "undefined" and "null" gateway auth tokens (#13767 )

2026-02-13 17:04:41 +01:00

channel-web.barrel.test.ts

…

channel-web.ts

…

docker-setup.test.ts

perf(test): speed up hot test files

2026-02-14 02:55:39 +00:00

entry.ts

perf(cli): speed up help/config paths and route config get/unset

2026-02-14 00:27:35 +00:00

extensionAPI.ts

…

globals.test.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

logger.test.ts

perf(test): reduce vitest logging overhead and media fixture cost

2026-02-14 00:59:53 +00:00

logger.ts

…

logging.ts

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

polls.test.ts

…

polls.ts

…

runtime.ts

perf(test): gate monitor runtime logs during vitest

2026-02-14 01:14:56 +00:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…