Pavan Kumar Gondhi and GitHub
8d5ad804a6
fix: require admin for keyed session model changes [AI] ( #111651 )
...
* fix: gate keyed session model creation
* fix: preserve fresh keyed session creation
* fix: cover existing keyed model adoption
* fix: keep keyed session create idempotent
* fix: resolve keyed session model aliases before gating
* fix: tighten keyed session gate comparison
* docs: clarify keyed session gate fail-closed cases
* docs: explain keyed session model error gating
* fix: clarify unscoped keyed session gate
* fix: share session model patch resolution
* fix: preserve existing auth profile no-op creates
* fix: resolve subagent defaults in keyed session gate
2026-07-20 16:33:33 +05:30
Pavan Kumar Gondhi and GitHub
391c3bcb17
fix(ui): neutralize Usage CSV text cells [AI] ( #111653 )
...
* fix(ui): neutralize usage csv text cells
* test(ui): align usage csv fixture types
* fix(ui): preserve benign usage csv whitespace
2026-07-20 14:08:33 +05:30
Pavan Kumar Gondhi and GitHub
1de4a099ca
fix: keep exec approval carriers scoped [AI] ( #111652 )
...
* fix: unwrap shell argv carriers for exec approvals
* fix: constrain shell carrier unwraps
* fix: block command path-search carriers
2026-07-20 14:06:03 +05:30
Pavan Kumar Gondhi and GitHub
93e9e2fe93
fix(google-meet): neutralize attendance CSV formulas [AI] ( #109725 )
...
* fix: neutralize meet attendance csv cells
* fix: cover fullwidth csv formula prefixes
* test: use temp dir tracker for meet csv export
2026-07-17 15:38:12 +05:30
Pavan Kumar Gondhi and GitHub
0d177c9b4d
fix: keep command cron jobs operator-scoped [AI] ( #106057 )
...
* fix: scope agent cron command access
* test: avoid secret-like cron fixture text
2026-07-13 14:08:04 +05:30
ffff72c43a
fix(line): keep group allowlists scoped ( #106056 )
...
Prevent LINE group allowlist policy from inheriting DM allowFrom entries, so open DMs do not broaden group access. Keep group-specific allowlists and per-group overrides as the only group admission sources, and document the scoped behavior.
Co-authored-by: pgondhi987 <pgondhi987@users.noreply.github.com >
2026-07-13 01:18:31 -07:00
Pavan Kumar Gondhi and GitHub
ef9383d88a
fix: protect SMS webhook callback quota [AI] ( #103620 )
...
* fix: scope SMS webhook rate limiting after validation
* fix: separate SMS webhook validation throttles
* fix: loosen SMS pre-validation throttle
* docs: clarify SMS webhook quota stages
* fix: preserve signed sms callback capacity
* fix: name sms invalid request limiter
* test: cover sms validation disabled quota
* fix: skip signed limiter without sms validation
* docs: clarify sms webhook request budget
* fix: keep sms disabled validation dispatch cap
2026-07-13 10:29:59 +05:30
Pavan Kumar Gondhi and GitHub
5f709cfd87
fix: isolate Synology webhook preauth throttling [AI] ( #103619 )
...
* fix: scope Synology preauth throttling by client ip
* fix: clarify Synology preauth limiter comments
2026-07-11 13:44:21 +05:30
Pavan Kumar Gondhi and GitHub
0ac5394192
fix: enforce sandbox tool policy for loopback tools [AI] ( #103074 )
...
* fix: apply sandbox policy to gateway loopback tools
* test: type gateway sandbox policy helper
* style: format gateway sandbox policy import
* test: exercise sandbox deny on allowed loopback tool
2026-07-10 12:30:51 +05:30
Pavan Kumar Gondhi and GitHub
c70f3d0dae
fix: block unspecified trusted DNS targets ( #103075 )
2026-07-10 11:16:26 +05:30
Pavan Kumar Gondhi and GitHub
436ed5f308
fix: redact diagnostics config with schema hints ( #102426 )
2026-07-09 20:49:21 +05:30
Pavan Kumar Gondhi and GitHub
9775f09194
fix: scope ACP search path approvals [AI] ( #102416 )
...
* fix: scope acp search path approvals
* fix: include acp search locations in approval scope
* fix: keep acp read path approval unchanged
* fix: keep acp search title text display-only
* fix: parse explicit acp search title paths
2026-07-09 20:33:18 +05:30
Pavan Kumar Gondhi and GitHub
3ba72f624a
fix: trust hook mapping provenance ( #102418 )
2026-07-09 19:26:00 +05:30
Pavan Kumar Gondhi and GitHub
534ace4d8a
fix: bind package-manager exec approvals to inner commands [AI] ( #102035 )
...
* fix: bind package-manager exec approvals to inner commands
* fix: fail closed package manager exec approval gaps
* chore: refresh pr branch metadata
* fix: cover npm exec alias approvals
* fix: fail closed hidden package manager exec aliases
* fix: unwrap chained package manager approvals
* fix: cover yarn package manager approvals
* fix: preserve yarn run approval compatibility
* fix: bind package manager script argv checks
* test: fix package manager script argv type check
* fix: fail closed pnpm shorthand approvals
* fix: preserve pnpm built-in approvals
* fix: preserve pnpm script shortcuts
* fix: preserve npm cwd exec unwrapping
* fix: fail closed cwd and yarn package shorthands
2026-07-08 21:29:02 +05:30
Pavan Kumar Gondhi and GitHub
64015e71dd
fix: harden web fetch HTML conversion [AI] ( #102033 )
...
* fix: harden web fetch html conversion
* fix: consume malformed html tag tails
* fix: consume invalid html tag spans
* fix: preserve html scanner edge cases
* fix: preserve title-only html fallback
* fix: harden html scanner malformed tokens
* fix: close html scanner review gaps
* fix: keep malformed html raw text hidden
* fix: keep html scanner comment content hidden
* fix: skip unsupported html attribute values
* fix: skip raw text from opener end
* fix: drop malformed html tag tails
* fix: preserve trailing slash href links
* fix: close html scanner review gaps
* fix: preserve literal less-than text
* fix: bound html render context nesting
* fix: drop bogus html closing tags
* fix: handle abrupt html comments
* fix: remove dead html scanner branches
* fix: close quoted self-closing html tags
* fix: track anchor text incrementally
* fix: ignore quoted raw text markers
* fix: close title contexts through literal markup
* fix: close anchors through nested contexts
* fix: close nested HTML contexts consistently
2026-07-08 18:58:38 +05:30
Pavan Kumar Gondhi and GitHub
e25fa79c5d
fix: gate Gateway message action requester provenance [AI] ( #102031 )
...
* fix: gate message action requester provenance
* fix: preserve trusted gateway action context
* fix: preserve message action effective scopes
* chore: refresh gateway protocol swift model
* fix: keep swift message action init additive
* fix: avoid message action wire shape change
* fix: downscope non-owner message action bridge
* fix: keep cli message actions least privileged
* fix: downscope message action runtime scope
* fix: normalize message action bridge provenance
2026-07-08 18:28:25 +05:30
Pavan Kumar Gondhi and GitHub
3101aa31ca
fix: restrict non-owner gateway tool inventory [AI] ( #102030 )
...
* fix: restrict non-owner gateway tool inventory
* fix: clarify non-owner gateway tool policy
2026-07-08 18:21:38 +05:30
Pavan Kumar Gondhi and GitHub
58891c85b6
fix: detect joined inline eval flags [AI] ( #101353 )
...
* fix: detect joined inline eval flags
* fix: avoid joined eval flag false positives
* fix: detect clustered inline eval flags
* fix: avoid cluster matcher string spread
* fix: cover common eval flag clusters
* fix: cover ruby perl eval clusters
* fix: detect python x inline eval cluster
* fix: detect numeric eval clusters
* fix: cover ruby perl eval clusters
2026-07-08 15:49:54 +05:30
Pavan Kumar Gondhi and GitHub
5f04dc97e6
Harden jq safe-bin semantics ( #102032 )
2026-07-08 15:43:37 +05:30
9133d552ac
fix: block mixed-case cron shell jobs from agent tool [AI] ( #101350 )
...
* fix: normalize cron tool shell guard kinds
* fix(cron): narrow mixed-case shell guard
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-07 10:52:20 +01:00
Pavan Kumar Gondhi and GitHub
5bcd25f0fb
fix(discord): gate guild metadata reads [AI] ( #98966 )
...
* fix(discord): gate guild metadata reads
* fix(discord): require guild-wide active thread reads
2026-07-02 15:26:36 +05:30
Pavan Kumar Gondhi and GitHub
6cb82eaab8
fix: require owner for trajectory export ( #97840 )
2026-06-30 16:59:50 +05:30
Pavan Kumar Gondhi and GitHub
738b2be4b4
fix: gate active memory global toggles ( #97841 )
2026-06-30 14:32:37 +05:30
Pavan Kumar Gondhi and GitHub
3d4b7cade9
fix: gate group activation changes by owner ( #97838 )
2026-06-30 13:56:56 +05:30
Pavan Kumar Gondhi and GitHub
86bab9699d
fix: block git protocol env controls [AI] ( #91619 )
...
* fix: block git protocol env controls
* fix: preserve restrictive git protocol env
* fix: preserve restrictive git allowlists
* fix: filter inherited git protocol allowlists
* test: cover restrictive git allowlists
* test: avoid opengrep fixture false positives
* test: type env fixture helper narrowly
* fix: preserve zero git protocol booleans
* fix: preserve invalid git protocol booleans
* fix: force git protocol from user off
* fix: share git inherited env sanitization
2026-06-09 21:09:14 +05:30
Pavan Kumar Gondhi and GitHub
7cdec28706
fix: block rustup toolchain env overrides [AI] ( #91615 )
...
* fix: block rustup toolchain env overrides [AI]
* test: cover inherited rustup env stripping [AI]
* fix: preserve inherited rustup env [AI]
* fix: filter ignored opengrep changed paths [AI]
* fix: honor opengrep ignored directory globs [AI]
* fix: match ignored opengrep descendants [AI]
* fix: cover rustup mirror overrides [AI]
* fix: preserve opengrep directory-only ignores [AI]
* chore: drop opengrep cleanup from rustup fix [AI]
2026-06-09 20:03:32 +05:30
Pavan Kumar Gondhi and GitHub
9f413acc18
fix: expand unsafe host env denylist ( #91618 )
...
* fix: expand unsafe host env denylist
* test: annotate host env security fixtures
* test: align opengrep fixture suppressions
* test: keep opengrep suppressions inline
* test: avoid opengrep fixture call patterns
2026-06-09 19:44:54 +05:30
Pavan Kumar Gondhi and GitHub
03a8d18cd4
fix(memory-lancedb): guard memory recall output [AI] ( #91425 )
...
* fix: guard memory recall output
* fix: overfetch memory recall candidates
* fix: avoid memory recall lint shadow
2026-06-09 10:31:55 +05:30
Pavan Kumar Gondhi and GitHub
53357e8e7f
fix: neutralize browser media directives ( #91422 )
2026-06-08 21:11:14 +05:30
2a21de6322
fix: gate owner-only HTTP tools ( #90261 )
...
* fix: gate owner-only HTTP tools
* fix: inherit HTTP owner tool denies
* fix: use mutable HTTP owner deny policy
* fix: preserve RPC owner tool access
* docs: clarify owner-only gateway tool allowlist
---------
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com >
2026-06-07 17:26:12 -05:00
Pavan Kumar Gondhi and GitHub
3c6259ebb7
fix: guard mcp http redirects ( #89732 )
2026-06-04 12:38:25 +05:30
Pavan Kumar Gondhi and GitHub
3f1e0ebb86
Rate limit node pairing requests [AI] ( #90147 )
...
* fix: rate limit node pairing requests
* fix: preserve paired node reconnects
2026-06-04 10:02:55 +05:30
Pavan Kumar Gondhi and GitHub
85b26bd206
fix: protect global agent config defaults ( #90145 )
2026-06-04 09:53:56 +05:30
5483ff705f
fix(telegram): require admin for target writeback [AI] ( #88973 )
...
* fix: require admin for Telegram target writeback
* fix(telegram): preserve internal target writeback
* fix: scope Telegram target writeback authority
* fix: infer internal writeback for durable sends
* fix: preserve scoped Telegram writeback boundaries
* fix: preserve direct Telegram writeback
* test: make Telegram writeback scope intent explicit
* fix(telegram): keep target writeback authority local
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-06-03 19:25:40 +05:30
Pavan Kumar Gondhi and GitHub
19fb9f1299
fix: redact trajectory exports consistently ( #89354 )
...
* fix trajectory export redaction
* fix trajectory export top-level redaction
* fix trajectory export key redaction
* fix trajectory export structural key redaction
2026-06-02 15:41:44 +05:30
Pavan Kumar Gondhi and GitHub
fbdf593778
fix: bound remote media reference reads [AI] ( #88974 )
...
* fix: bound remote media reference reads
* fix: remove unreachable video timeout wiring
* test: cover remote video reference handoff
2026-06-01 21:35:40 +05:30
Pavan Kumar Gondhi and GitHub
9497629c1e
fix(msteams): pin attachment fetch DNS
...
Route Microsoft Teams attachment downloads through the shared SSRF guarded fetch path so DNS validation is pinned into the dispatcher used for the actual request.
Keep Teams auth fallback and allowlisted HTTPS Authorization redirect behavior while failing closed for custom fetch hooks that cannot accept dispatcher injection.
Verification:
- CI=1 OPENCLAW_VITEST_MAX_WORKERS=1 timeout 300 node scripts/run-vitest.mjs run extensions/msteams/src/attachments/shared.test.ts extensions/msteams/src/attachments/bot-framework.test.ts src/infra/net/fetch-guard.ssrf.test.ts
- gh pr checks 87567 --repo openclaw/openclaw --watch=false
PR: #87567
2026-05-29 09:03:50 +01:00
Pavan Kumar Gondhi and GitHub
91a4635bdc
Tighten phone-control mutation authorization [AI] ( #87150 )
...
* fix: require admin authorization for phone control mutations
* addressing codex review
* addressing codex review
* addressing ci
* addressing ci
* test: restore provider registry mock isolation
* docs: add changelog entry for PR merge
2026-05-28 16:00:01 +05:30
Pavan Kumar Gondhi and GitHub
bb418a857e
Clarify directive persistence authorization policy [AI] ( #86369 )
...
* fix: require admin scope for persisted directive defaults
* addressing codex review
* fix: complete directive persistence scope gate
* addressing review-skill
* fix: preserve channel directive persistence
* fix: require admin scope for directive default persistence
* addressing codex review
* fix: complete directive persistence scope handling
* addressing codex review
* fix: complete directive persistence gate
* addressing review-skill
* fix: complete directive persistence gate
* addressing review-skill
* clarify directive persistence policy
* docs: add changelog entry for PR merge
2026-05-28 15:20:47 +05:30
Pavan Kumar Gondhi and GitHub
c923b07784
fix(gateway): expire browser tokens after auth rotation
...
Expire browser-origin Control UI/WebChat device tokens when shared gateway auth rotates by tagging those tokens with the shared-auth generation and enforcing it during verification.
Preserve the issuer tag when a shared-auth-derived device token reconnects through a non-browser client, so reconnect rotation cannot turn it into an untagged long-lived token.
Proof:
- OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs src/gateway/server.shared-auth-rotation.test.ts src/infra/device-pairing.test.ts src/gateway/control-ui.http.test.ts
- GitHub CI run 26535632102: relevant build/runtime/test-type checks green; inherited lint reds match origin/main.
- GitHub CodeQL Critical Quality run 26535631610: network-runtime-boundary green.
Co-authored-by: Pavan Kumar Gondhi <pavangondhi@gmail.com >
2026-05-27 21:13:20 +01:00
Pavan Kumar Gondhi and GitHub
0314d67d87
Harden hostname normalization for repeated trailing dots [AI] ( #87305 )
...
* fix: canonicalize trailing hostname dots
* test: reuse shared hostname normalization
* docs: add changelog entry for PR merge
2026-05-27 21:08:29 +05:30
Pavan Kumar Gondhi and GitHub
8e41c118fa
fix: block side-effecting command wrappers [AI] ( #87292 )
...
* fix: block side-effecting command wrappers
* docs: add changelog entry for PR merge
2026-05-27 20:56:53 +05:30
Pavan Kumar Gondhi and GitHub
91590132f6
Block unsafe Node runtime env overrides [AI] ( #87308 )
...
* fix: block unsafe node runtime env overrides
* fix: block node env path redirects
* docs: add changelog entry for PR merge
2026-05-27 20:34:12 +05:30
Pavan Kumar Gondhi and GitHub
10cb0a5ec0
Restore Control UI gateway token pairing [AI] ( #85459 )
...
* fix: restore control ui gateway token pairing
* docs: add changelog entry for PR merge
2026-05-22 23:13:32 +05:30
Pavan Kumar Gondhi and GitHub
ea5f2abb48
fix(integrations): enforce channel read target allowlists [AI] ( #84982 )
...
* fix: enforce message read target allowlists
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-22 14:11:06 +05:30
Pavan Kumar Gondhi and GitHub
229490a489
fix: constrain Windows task script names [AI] ( #85064 )
...
* fix: validate windows task script file names
* addressing ci
* docs: add changelog entry for PR merge
2026-05-22 09:46:52 +05:30
Pavan Kumar Gondhi and GitHub
3cc8b2a3d0
fix(config): validate browser sandbox bind sources [AI] ( #84799 )
...
* fix: validate browser sandbox bind sources
* docs: add changelog entry for PR merge
2026-05-21 12:54:48 +05:30
Pavan Kumar Gondhi and GitHub
a2d0d6b0c2
doctor: constrain legacy plugin cleanup paths [AI] ( #84801 )
...
* fix: constrain legacy plugin dependency cleanup roots
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-21 12:54:03 +05:30
Pavan Kumar Gondhi and GitHub
0c67dc7f82
fix(mattermost): fail closed on missing channel type [AI] ( #84091 )
...
* fix: fail closed on missing Mattermost channel type
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-20 12:33:55 +05:30
Pavan Kumar Gondhi and GitHub
e98760a1bf
Recheck rebuilt system.run argv [AI] ( #84090 )
...
* fix: recheck rebuilt system run argv
* docs: add changelog entry for PR merge
2026-05-20 12:30:26 +05:30
Pavan Kumar Gondhi and GitHub
48acdd3d85
harden update restart script creation [AI] ( #84088 )
...
* fix: harden update restart script creation
* docs: add changelog entry for PR merge
2026-05-19 21:05:37 +05:30
Pavan Kumar Gondhi and GitHub
6a12c6f799
fix(gateway): scope session data lookups by agent [AI] ( #81386 )
...
* fix: scope gateway session lookups by agent
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing ci
* addressing ci
* fix: complete root-cause handling
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* Fix Swift protocol optional initializer defaults
* Stabilize node command lookup in approval test
* Fix browser proxy approval test node lookup
* Trim unrelated changes from issue 642 fix
* Remove unrelated formatting churn from issue 642 fix
* Fix Swift protocol generator lint
* docs: add changelog entry for PR merge
2026-05-16 22:31:02 +05:30
Pavan Kumar Gondhi and GitHub
b9fbc57bbd
Bind shell script operands after combined options [AI] ( #81882 )
...
* fix: bind shell script operands after combined options
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-15 14:55:37 +05:30
Pavan Kumar Gondhi and GitHub
238b0fc76f
fix(canvas): validate snapshot response formats [AI] ( #81881 )
...
* fix: validate canvas snapshot formats
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-15 14:51:38 +05:30
Pavan Kumar Gondhi and GitHub
eb1e6099d2
Constrain provider catalog entry paths [AI] ( #81884 )
...
* fix: constrain provider catalog entries to plugin root
* addressing review-skill
* docs: add changelog entry for PR merge
2026-05-15 14:48:24 +05:30
Pavan Kumar Gondhi and GitHub
d656087b31
Require canonical node platform IDs [AI] ( #81880 )
...
* fix: require canonical node platform ids
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* fix: require consistent node platform metadata
* addressing review-skill
* addressing codex review
* fix: complete root-cause handling
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-15 14:46:46 +05:30
Pavan Kumar Gondhi and GitHub
386d321634
Bind gateway approval access to requester metadata [AI] ( #81380 )
...
* fix: bind approval access to requester metadata
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing claude review
* addressing ci
* fix: complete root-cause handling
* addressing review-skill
* addressing codex review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-14 23:21:34 +05:30
Pavan Kumar Gondhi and GitHub
418d7afb33
gateway: pass Talk session scope to resolver [AI] ( #81379 )
...
* fix: pass talk session visibility scope
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing claude review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 20:09:03 +05:30
Pavan Kumar Gondhi and GitHub
b17e77a22b
Require approval for setup-code device pairing [AI] ( #81292 )
...
* fix: require approval for setup-code bootstrap pairing
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 18:48:44 +05:30
Pavan Kumar Gondhi and GitHub
af42260440
Require explicit browser device pairing [AI] ( #81289 )
...
* fix: require explicit pairing for browser-origin device sessions
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 16:49:24 +05:30
Pavan Kumar Gondhi and GitHub
96fba91b3a
Require Control UI pairing before proxy-scoped access [AI] ( #81288 )
...
* fix: require control ui device pairing for proxy auth
* addressing review-skill
* fix: cover proxy control ui unbound scopes
* docs: add changelog entry for PR merge
2026-05-13 16:48:39 +05:30
Pavan Kumar Gondhi and GitHub
26c7da2d02
Harden trusted-proxy source validation [AI] ( #81290 )
...
* fix: reject local-interface trusted-proxy peers
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-13 16:10:11 +05:30
Pavan Kumar Gondhi and GitHub
39bcd1e088
fix(plugins): scan installed dependency runtime code [AI] ( #81066 )
...
* fix: scan installed plugin dependency code
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 10:26:24 +05:30
Pavan Kumar Gondhi and GitHub
6c918ca85f
Inherit tool restrictions for delegated sessions [AI] ( #80979 )
...
* fix: inherit tool restrictions for delegated sessions
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing review-skill
* addressing codex review
* addressing claude review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 10:21:36 +05:30
Pavan Kumar Gondhi and GitHub
3d93174c43
browser: enforce navigation checks for act interactions [AI] ( #81070 )
...
* fix: apply browser navigation policy to act interactions
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 09:59:36 +05:30
Pavan Kumar Gondhi and GitHub
17fa101c16
Validate node exec event provenance [AI] ( #81071 )
...
* fix: validate node exec event provenance
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing claude review
* addressing ci
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 09:56:09 +05:30
Pavan Kumar Gondhi and GitHub
a3fda2ada9
Limit hook CLI tool authority [AI] ( #81065 )
...
* fix: limit hook cli tool authority
* docs: add changelog entry for PR merge
2026-05-13 07:24:41 +05:30
Pavan Kumar Gondhi and GitHub
1c85eff9b1
Require admin scope for node device token management [AI] ( #81067 )
...
* fix: require admin for node device token management
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing claude review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-13 07:20:35 +05:30
Pavan Kumar Gondhi and GitHub
b7e0decf0c
Restrict chat sender allowlist matching [AI] ( #80898 )
...
* fix: restrict chat sender allowlist matching
* fix: restrict chat sender allowlist matching
* addressing codex review
* fix: complete sender allowlist root cause
* addressing codex review
* addressing codex review
* fix: complete root-cause handling
* addressing review-skill
* addressing codex review
* addressing review-skill
* addressing codex review
* addressing codex review
* fix: complete chat sender allowlist handling
* addressing codex review
* fix: complete root-cause handling
* addressing codex review
* fix: complete root-cause handling
* addressing codex review
* fix: cover sender matcher conversation target opt-in
* addressing review-skill
* addressing codex review
* fix: require explicit chat target sender matching
* addressing review-skill
* addressing codex review
* addressing codex review
* fix: require explicit chat target sender matching
* addressing codex review
* fix: require explicit chat target sender matching
* addressing codex review
* addressing codex review
* fix: require explicit chat target sender matching
* docs: add changelog entry for PR merge
2026-05-13 07:16:27 +05:30
Pavan Kumar Gondhi and GitHub
9ac4272b35
fix: harden safe-bin argument validation [AI] ( #80999 )
...
* fix: reject shell expansion in safe-bin tokens
* fix: complete safe-bin shell payload handling
* addressing codex review
* addressing ci
* addressing ci
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-12 20:37:58 +05:30
Pavan Kumar Gondhi and GitHub
a5dce367ce
fix: scan plugin runtime entries during install [AI] ( #80998 )
...
* fix: scan plugin runtime entries during install
* addressing review-skill
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-12 20:28:40 +05:30
Pavan Kumar Gondhi and GitHub
b6a94d4ef9
Require auth for sandbox browser CDP relay [AI] ( #81002 )
...
* fix: require auth for sandbox browser cdp relay
* addressing review-skill
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-12 19:37:32 +05:30
Pavan Kumar Gondhi and GitHub
65d7232218
fix: detect carried exec command forms [AI] ( #81000 )
...
* fix: detect carried inline exec forms
* addressing review-skill
* addressing codex review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-12 19:36:04 +05:30
Pavan Kumar Gondhi and GitHub
731af9c96b
Reject truncated exec approval commands [AI] ( #81001 )
...
* fix: reject truncated exec approval commands
* docs: add changelog entry for PR merge
2026-05-12 19:33:42 +05:30
Pavan Kumar Gondhi and GitHub
50f4440c96
Enforce inline shell wrapper payload matching [AI] ( #80978 )
...
* fix: enforce inline shell wrapper payload matching
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing claude review
* addressing claude review
* fix: complete shell wrapper allowlist handling
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-12 19:30:18 +05:30
Pavan Kumar Gondhi and GitHub
3aeb55b5e7
fix(node-pairing): replace changed pending requests [AI] ( #80894 )
...
* fix: replace changed node pairing requests
* fix: replace changed node pairing requests
* addressing codex review
* addressing codex review
* addressing ci
* fix: complete node pairing permission handling
* addressing review-skill
* addressing codex review
* addressing codex review
* addressing ci
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-12 16:33:55 +05:30
Pavan Kumar Gondhi and GitHub
1b22384c11
Rate limit Google Chat webhook requests [AI] ( #80974 )
...
* fix: rate limit google chat webhook requests
* addressing claude review
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-12 16:31:28 +05:30
Pavan Kumar Gondhi and GitHub
8c9dbe3e71
fix(feishu): normalize webhook rate-limit client keys [AI] ( #80975 )
...
* fix: normalize Feishu webhook rate limit keys
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-12 16:26:12 +05:30
Pavan Kumar Gondhi and GitHub
2d00bedc1e
fix(auth): prevent bootstrap pairing scope changes [AI] ( #80976 )
...
* fix: prevent bootstrap pairing scope changes before redemption
* docs: add changelog entry for PR merge
2026-05-12 16:11:35 +05:30
Pavan Kumar Gondhi and GitHub
5ef8d1ab5e
Validate Control UI loopback retry endpoints [AI] ( #80900 )
...
* fix: validate loopback retry endpoints
* fix: validate loopback retry endpoints
* docs: add changelog entry for PR merge
2026-05-12 16:06:00 +05:30
Pavan Kumar Gondhi and GitHub
fd12a48ee1
Harden exported markdown link rendering [AI] ( #80902 )
...
* fix: sanitize exported markdown links
* fix: sanitize exported markdown links
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-12 16:05:19 +05:30
Pavan Kumar Gondhi and GitHub
da6f32bedf
fix(gateway): honor minimal discovery mode for wide-area DNS-SD [AI] ( #80903 )
...
* fix: respect discovery mode for wide-area cli path
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-12 16:03:50 +05:30
Pavan Kumar Gondhi and GitHub
889afc7c31
slack: enforce reaction notification policy [AI] ( #80907 )
...
* fix: enforce slack reaction notification policy
* addressing claude review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-12 16:00:44 +05:30
Pavan Kumar Gondhi and GitHub
652f5f9b10
Enforce gateway command scopes by caller context [AI] ( #80891 )
...
* fix: enforce gateway command scopes by caller context
* fix: enforce gateway command scopes by caller context
* addressing codex review
* addressing claude review
* addressing claude review
* addressing ci
* docs: add changelog entry for PR merge
2026-05-12 15:59:22 +05:30
Pavan Kumar Gondhi and GitHub
a4da627da1
Enforce Slack plugin approval button authorization [AI] ( #80899 )
...
* fix: enforce slack plugin approval button authorization
* fix: enforce slack plugin approval button authorization
* addressing codex review
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-12 15:56:24 +05:30
Pavan Kumar Gondhi and GitHub
de47989731
Recognize PowerShell -ec inline commands [AI] ( #80893 )
...
* fix: recognize PowerShell -ec inline command flag
* fix: recognize PowerShell -ec inline command flag
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* fix: recognize PowerShell encoded command prefixes
* addressing review-skill
* addressing review-skill
* addressing codex review
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-12 15:53:10 +05:30
Pavan Kumar Gondhi and GitHub
6e498a1f62
fix(qqbot): authorize approval button callbacks [AI] ( #80892 )
...
* fix: authorize qqbot approval buttons
* fix: authorize qqbot approval buttons
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-12 15:51:13 +05:30
Pavan Kumar Gondhi and GitHub
47eb2d48d4
Scrub streamable MCP redirect headers [AI] ( #80906 )
...
* fix: scrub streamable mcp redirect headers
* addressing review-skill
* addressing codex review
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-12 15:28:54 +05:30
Pavan Kumar Gondhi and GitHub
aeb1ba9a53
fix(memory-wiki): require admin scope for ingest [AI] ( #80897 )
...
* fix: require admin scope for wiki ingest
* fix: require admin scope for wiki ingest
* docs: add changelog entry for PR merge
* docs: add changelog entry for PR merge
2026-05-12 15:19:43 +05:30
Pavan Kumar Gondhi and GitHub
c3f1f0c315
memory-wiki: require write scope for Obsidian search [AI] ( #80904 )
...
* fix: require write scope for obsidian search
* docs: add changelog entry for PR merge
2026-05-12 15:18:07 +05:30
Pavan Kumar Gondhi and GitHub
17ceca86d6
Redact persisted secret-shaped payloads [AI] ( #79006 )
...
* fix: redact persisted secret-shaped payloads
* docs: add changelog entry for PR merge
2026-05-11 12:52:32 +05:30
Pavan Kumar Gondhi and GitHub
93ff72a5e8
fix(matrix): gate name-based allowlist resolution [AI] ( #79007 )
...
* fix: gate matrix mutable name resolution
* addressing codex review
* addressing codex review
* addressing codex review
* address feedback
* addressing codex review
* addressing codex review
* addressing codex review
* addressing codex review
* chore: drop unrelated matrix fix churn
* chore: refresh channel config metadata
* chore: remove unrelated formatting churn
* docs: add changelog entry for PR merge
2026-05-11 10:47:27 +05:30
Pavan Kumar Gondhi and GitHub
ff80167e5a
fix(discord): gate user allowlist name resolution [AI] ( #79002 )
...
* fix: gate discord user allowlist name resolution
* docs: add changelog entry for PR merge
2026-05-08 10:38:39 +05:30
Pavan Kumar Gondhi and GitHub
c1edfafa3e
fix(msteams): gate startup user allowlist resolution [AI] ( #79003 )
...
* fix: gate msteams user allowlist name resolution
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-08 10:38:05 +05:30
fc065b2693
Harden macOS shell wrapper allowlist parsing [AI] ( #78518 )
...
* fix: harden shell wrapper allowlist parsing
* fix: harden shell wrapper approval binding
* docs: add changelog entry for PR merge
---------
Co-authored-by: Ishaan <ishaan@Ishaans-Mac-mini.local >
2026-05-08 10:18:41 +05:30
Pavan Kumar Gondhi and GitHub
c65f3bc70e
Compute plugin callback authorization dynamically [AI] ( #78866 )
...
* fix: compute plugin callback command authorization
* addressing codex review
* addressing ci
* addressing ci
* docs: add changelog entry for PR merge
2026-05-07 18:05:21 +05:30
Pavan Kumar Gondhi and GitHub
5852f5d15c
fix(active-memory): require admin scope for global toggles [AI] ( #78863 )
...
* fix: gate active-memory global writes by admin scope
* addressing claude review
* docs: add changelog entry for PR merge
2026-05-07 15:35:30 +05:30
Pavan Kumar Gondhi and GitHub
758051322d
Honor owner enforcement for native commands [AI] ( #78864 )
...
* fix: honor owner enforcement for native commands
* addressing codex review
* addressing codex review
* docs: add changelog entry for PR merge
2026-05-07 15:26:49 +05:30
Pavan Kumar Gondhi and GitHub
d5eabbd36c
fix(auto-reply): gate inline skill tool dispatch [AI] ( #78517 )
...
* fix: enforce tool hooks for inline skill dispatch
* addressing claude review
* addressing codex review
* addressing codex review
* fix: complete root-cause handling
* docs: add changelog entry for PR merge
2026-05-07 13:47:18 +05:30
Pavan Kumar Gondhi and GitHub
0003f3f755
feishu: honor config write policy for dynamic agents [AI] ( #78520 )
...
* fix: honor Feishu config write policy for dynamic agents
* docs: add changelog entry for PR merge
2026-05-07 13:30:05 +05:30
