Mark L 718d418b32 fix(daemon): harden launchd plist with umask 077 (#31919) ...

* fix(daemon): add launchd umask hardening

* fix: finalize launchd umask changelog + thanks (#31919) (thanks @liuxiaopai-ai)

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-03-02 18:13:41 +00:00

..

acp

windows: unify non-core spawn handling across acp qmd and docker (openclaw#31750) thanks @Takhoffman

2026-03-02 08:05:39 -06:00

agents

fix(agents): cap openai-completions tool call ids to provider-safe format (#31947)

2026-03-02 18:08:20 +00:00

auto-reply

fix(security): harden workspace bootstrap boundary reads

2026-03-02 17:07:36 +00:00

browser

test(perf): replace relay fixed sleeps with condition waits

2026-03-02 17:55:47 +00:00

canvas-host

refactor(agents): centralize tool display definitions

2026-03-02 12:13:45 +00:00

channels

sendPayload: add chunking, empty-payload guard, and tests

2026-03-02 15:35:47 +00:00

cli

fix(cli): apply --profile before dotenv bootstrap in runCli (#31950)

2026-03-02 18:09:45 +00:00

commands

feat(onboarding)!: default tools profile to messaging

2026-03-02 18:12:11 +00:00

compat

…

config

Config: newline-join sandbox setupCommand arrays (#31953)

2026-03-02 18:11:32 +00:00

cron

fix(cron): normalize topic-qualified target.to in messaging tool suppress check (#29480)

2026-03-02 10:32:06 -06:00

daemon

fix(daemon): harden launchd plist with umask 077 (#31919)

2026-03-02 18:13:41 +00:00

discord

refactor(security): split safe-regex parse and bounded matching

2026-03-02 16:47:00 +00:00

docs

…

gateway

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

hooks

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

i18n

fix(ci): resolve i18n typing and generated-policy drift

2026-03-02 04:29:18 +00:00

imessage

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

infra

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

line

fix: harden webhook auth-before-body handling

2026-03-02 17:21:09 +00:00

link-understanding

…

logging

refactor(logging): extract bounded regex redaction util

2026-03-02 16:47:00 +00:00

markdown

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

media

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

media-understanding

test(perf): align media auto-detect no-key mock with scenario

2026-03-02 12:20:51 +00:00

memory

test(memory): stabilize windows qmd spawn expectation

2026-03-02 18:06:12 +00:00

node-host

refactor(security): table-drive wrapper approval pinning tests

2026-03-02 17:30:48 +00:00

pairing

fix(pairing): handle missing accountId in allowFrom reads (#31369)

2026-03-01 23:24:33 -08:00

plugin-sdk

refactor: split webhook ingress and policy guards

2026-03-02 18:02:21 +00:00

plugins

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

process

test(windows): stabilize exec wrapper mock assertions (#31771)

2026-03-02 08:24:49 -06:00

providers

…

routing

fix(agents): validate sessions_spawn agentId format (#31381)

2026-03-02 15:59:45 +00:00

scripts

…

secrets

fix(secrets): ignore stdin EPIPE from fast-exit exec resolvers

2026-03-02 15:47:21 +00:00

security

refactor(security): split safe-regex parse and bounded matching

2026-03-02 16:47:00 +00:00

sessions

test(integration): dedupe messaging, secrets, and plugin test suites

2026-03-02 07:13:11 +00:00

shared

refactor(ui): share channel config extras and hint types

2026-03-02 15:21:19 +00:00

signal

fix(signal): land #31138 syncMessage presence filtering (@Sid-Qin)

2026-03-02 03:28:25 +00:00

slack

refactor(net): unify proxy env checks and guarded fetch modes

2026-03-02 16:24:26 +00:00

telegram

test(perf): trim telegram webhook artificial delay windows

2026-03-02 17:48:36 +00:00

terminal

fix(cli): preserve json stdout while keeping doctor migration (#24368) (thanks @altaywtf)

2026-03-02 03:10:02 +00:00

test-helpers

…

test-utils

fix(security): harden zip write race handling

2026-03-02 17:38:11 +00:00

tts

fix(tts): use opus format and enable voice bubbles for feishu and whatsapp (#27366)

2026-02-27 23:41:22 -06:00

tui

test(integration): dedupe messaging, secrets, and plugin test suites

2026-03-02 07:13:11 +00:00

types

…

utils

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570)

2026-02-26 18:39:13 -05:00

web

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

whatsapp

…

wizard

fix(security): harden sms.send dangerous-node defaults

2026-03-02 16:06:52 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

feat(docker): add opt-in sandbox support for Docker deployments (#29974)

2026-03-01 23:06:10 -08:00

dockerfile.test.ts

fix(docker): harden /app/extensions permissions to 755 (#30191)

2026-03-01 15:45:21 -08:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00

version.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00