Commit Graph

  • e0dc49f287 line: centralize webhook signature validation Shadow 2026-01-26 19:10:11 -06:00
  • 3b8792ee29 Security: fix timing attack vulnerability in LINE webhook signature validation Luka Zhang 2026-01-26 16:51:46 -08:00
  • 5672a25097 fix: note LINE signature validation (#2475) (thanks @Kiwitwitter) fix/line-webhook-timing-attack Shadow 2026-01-26 19:21:09 -06:00
  • 1f81bbb18f fix: support versioned node binaries (e.g., node-22) David Marsh 2026-01-26 15:29:32 -08:00
  • 1e7cb23f00 Fix: avoid plugin registration on global help/version (#2212) (thanks @dial481) Shadow 2026-01-26 15:38:35 -06:00
  • 2d2f840464 line: centralize webhook signature validation Shadow 2026-01-26 19:10:11 -06:00
  • bbbcecf62f Security: fix timing attack vulnerability in LINE webhook signature validation Luka Zhang 2026-01-26 16:51:46 -08:00
  • 1a0e5f168f Fix: avoid plugin registration on global help/version (#2212) (thanks @dial481) plugin-cli-commands-fix-2173 Shadow 2026-01-26 15:38:35 -06:00
  • 4b6347459b fix: fallback to main agent OAuth credentials when secondary agent refresh fails Dave Lauer 2026-01-26 20:03:25 -05:00
  • 1506d493ea fix: switch Matrix plugin SDK Peter Steinberger 2026-01-27 01:00:17 +00:00
  • 0c855bd36a Infra: fix recoverable error formatting Gustavo Madeira Santana 2026-01-26 19:59:25 -05:00
  • b861a0bd73 Telegram: harden network retries and config Gustavo Madeira Santana 2026-01-26 19:24:13 -05:00
  • e43f4c0628 fix(telegram): handle network errors gracefully techboss 2026-01-26 15:25:27 -07:00
  • dc09f1a8f6 Telegram: harden network retries and config fix/telegram-node22-network-stability Gustavo Madeira Santana 2026-01-26 19:24:13 -05:00
  • bd10a981b3 fix(telegram): handle network errors gracefully techboss 2026-01-26 15:25:27 -07:00
  • a8ad242f88 fix(security): properly test Windows ACL audit for config includes (#2403) Dominic 2026-01-26 18:27:53 -06:00
  • 343882d45c feat(telegram): add edit message action (#2394) (thanks @marcelomar21) vignesh07 2026-01-26 15:26:15 -08:00
  • 5c35b62a5c fix: refresh history key order for LRU eviction Shadow 2026-01-26 15:23:51 -06:00
  • af9606de36 fix(history): add LRU eviction for groupHistories to prevent memory leak Robby (AI-assisted) 2026-01-26 21:06:12 +00:00
  • 5aa02cf3f7 fix(gateway): sanitize error responses to prevent information disclosure Robby (AI-assisted) 2026-01-26 21:03:41 +00:00
  • 91d5ea6e33 Fix: allow cron heartbeat payloads through filters (#2219) (thanks @dwfinkelstein) Shadow 2026-01-26 17:21:29 -06:00
  • 82746973d4 fix(heartbeat): remove unhandled rejection crash in wake handler Dave Lauer 2026-01-26 09:50:26 -05:00
  • cd7be58b8e docs: add Northflank deploy guide to changelog (#2167) (thanks @AdeboyeDN) vignesh07 2026-01-26 15:10:31 -08:00
  • 107f07ad69 docs: add Northflank page to nav + polish copy Clawdbot Maintainers 2026-01-26 15:01:10 -08:00
  • 99ce47e86a minor update adeboyedn 2026-01-26 15:41:19 +01:00
  • 2a709385f8 cleanup adeboyedn 2026-01-26 15:05:42 +01:00
  • 0aa48a26d1 docs: add Northflank deployment guide for Clawdbot adeboyedn 2026-01-26 08:07:33 +01:00
  • 6cbdd767af fix: pin tar override for npm installs Peter Steinberger 2026-01-26 22:58:05 +00:00
  • c2056b23be docs: add Northflank page to nav + polish copy docs/northflank-deploy-guide Pocket Clawd 2026-01-26 14:56:59 -08:00
  • 2807f5afbc feat: add heartbeat visibility filtering for webchat Dave Lauer 2026-01-26 16:03:59 -05:00
  • 0eb0364819 fix(webchat): suppress ack-only heartbeats + update changelog (#2396) (thanks @dlauer) feat/webchat-heartbeat-visibility Pocket Clawd 2026-01-26 14:52:07 -08:00
  • 1a172ba873 test(webchat): cover heartbeat visibility suppression Pocket Clawd 2026-01-26 14:44:11 -08:00
  • 1284c3d868 fix(webchat): suppress heartbeat ok broadcasts; stabilize audit/status tests Pocket Clawd 2026-01-26 14:44:06 -08:00
  • cec996c812 fix(webchat): suppress heartbeat chat broadcast using agent runId Pocket Clawd 2026-01-26 13:37:40 -08:00
  • 822663001a feat: add heartbeat visibility filtering for webchat Dave Lauer 2026-01-26 16:03:59 -05:00
  • b3a60af71c fix: gate ngrok free-tier bypass to loopback Peter Steinberger 2026-01-26 22:26:22 +00:00
  • fe1f2d971a fix: add multi-image input support to nano-banana-pro skill (#1958) (thanks @tyler6204) Tyler Yust 2026-01-26 14:22:24 -08:00
  • 3888f1edc6 docs: update SKILL.md and generate_image.py to support multi-image editing and improve input handling Tyler Yust 2026-01-25 13:28:21 -08:00
  • 0f8f0fb9d7 docs: clarify command authorization for exec directives Peter Steinberger 2026-01-26 22:18:36 +00:00
  • 9c0c5866db fix: coalesce BlueBubbles link previews (#1981) (thanks @tyler6204) Tyler Yust 2026-01-26 14:11:37 -08:00
  • 147842fadc refactor(bluebubbles): remove URL balloon message handling and improve error logging Tyler Yust 2026-01-26 14:04:03 -08:00
  • 420e5299d2 fix(bluebubbles): increase inbound message debounce time for URL previews Tyler Yust 2026-01-26 13:23:56 -08:00
  • 6d26971051 fix(bluebubbles): add inbound message debouncing to coalesce URL link previews Tyler Yust 2026-01-25 14:14:41 -08:00
  • f074611625 Merge branch 'main' into docs/northflank-deploy-guide Daniel Adeboye 2026-01-26 22:50:02 +01:00
  • 86fa9340ae fix: reset chat state on webchat reconnect after gateway restart Dave Lauer 2026-01-26 16:40:13 -05:00
  • 820ab8765a docs: clarify exec defaults Peter Steinberger 2026-01-26 21:37:52 +00:00
  • 20f6a5546f feat(telegram): add silent message option (#2382) Suksham 2026-01-27 02:44:13 +05:30
  • fb14146033 fix: harden ssh target handling Peter Steinberger 2026-01-26 21:10:36 +00:00
  • d34ae86114 chore: expand labeler coverage Shadow 2026-01-26 15:01:04 -06:00
  • fbc5ac1fde docs(install): add migration guide for moving to a new machine (#2381) Vignesh 2026-01-26 12:59:06 -08:00
  • e4e2756e87 Revert "docs(install): add migration guide for moving to a new machine" feat/tools-alsoAllow Pocket Clawd 2026-01-26 12:55:58 -08:00
  • dd99b9d67e docs(install): add migration guide for moving to a new machine Pocket Clawd 2026-01-26 12:47:01 -08:00
  • ff382f6b68 Merge pull request #1742 from clawdbot/feat/tools-alsoAllow Shakker 2026-01-26 20:44:48 +00:00
  • bc8c31eeed Merge branch 'main' into feat/tools-alsoAllow Shakker 2026-01-26 20:39:09 +00:00
  • bdea265704 CI: run auto-response on pull_request_target Shadow 2026-01-26 14:37:39 -06:00
  • ec75e0b3dc CI: use app token for auto-response Shadow 2026-01-26 14:36:20 -06:00
  • 9e6b45faab fix(discord): honor threadId for thread-reply Paul Pamment 2026-01-26 17:00:34 +00:00
  • 8e051a418f test: stub windows ACL for include perms audit Peter Steinberger 2026-01-26 20:28:09 +00:00
  • a5b99349c9 style: format workspace bootstrap signature Peter Steinberger 2026-01-26 20:28:06 +00:00
  • 1371e95e57 docs: clarify onboarding + credentials Peter Steinberger 2026-01-26 20:26:03 +00:00
  • 320b45c051 docs: note sandbox opt-in in gateway security Peter Steinberger 2026-01-26 20:13:04 +00:00
  • 97248a2885 feat: surface security audit + docs Peter Steinberger 2026-01-26 19:58:54 +00:00
  • f5c90f0e5c feat: Twitch Plugin (#1612) jaydenfyi 2026-01-27 03:48:10 +08:00
  • c5ffc11df5 chore(repo): remove stray .DS_Store Peter Steinberger 2026-01-26 19:40:38 +00:00
  • 1a947a21d6 fix: support memory.md in bootstrap files (#2318) (thanks @czekaj) Shadow 2026-01-26 13:29:54 -06:00
  • 2cbc991bfe feat(agents): add MEMORY.md to bootstrap files (#2318) Lucas Czekaj 2026-01-26 11:30:43 -08:00
  • 10d5ea5de6 docs: Add Oracle Cloud (OCI) platform guide (#2333) Frank Harris 2026-01-26 14:23:11 -05:00
  • 34b3494246 Merge branch 'main' into feat/tools-alsoAllow Shakker 2026-01-26 19:15:39 +00:00
  • fba7afaa12 chore(scripts): update claude auth status hints Peter Steinberger 2026-01-26 19:04:49 +00:00
  • 000d5508aa docs(auth): remove external CLI OAuth reuse Peter Steinberger 2026-01-26 19:04:46 +00:00
  • aa2a1a17e3 test(auth): update auth profile coverage Peter Steinberger 2026-01-26 19:04:42 +00:00
  • 526303d9a2 refactor(auth)!: remove external CLI OAuth reuse Peter Steinberger 2026-01-26 19:04:29 +00:00
  • 39d219da59 Add FUNDING.yml alexstyl 2026-01-26 18:25:55 +07:00
  • f625303d13 test(config): enforce allow+alsoAllow mutual exclusion pr-1742 Pocket Clawd 2026-01-26 10:42:03 -08:00
  • 3314b3996e fix: harden gateway auth defaults Peter Steinberger 2026-01-26 18:18:55 +00:00
  • ab73aceb27 fix: use Windows ACLs for security audit Peter Steinberger 2026-01-26 18:19:58 +00:00
  • 42d039998d feat(config): forbid allow+alsoAllow in same scope; auto-merge Pocket Clawd 2026-01-26 10:17:50 -08:00
  • 3497be2963 docs: recommend tools.alsoAllow for optional plugin tools Vignesh Natarajan 2026-01-25 00:40:13 -08:00
  • d62b7c0d1e fix: treat tools.alsoAllow as implicit allow-all when no allowlist Vignesh Natarajan 2026-01-25 00:36:47 -08:00
  • 2ad3508a33 feat(config): add tools.alsoAllow additive allowlist Vignesh Natarajan 2026-01-25 00:29:28 -08:00
  • d57c9ce9f1 Merge branch 'main' into feat/plan-mode feat/plan-mode Shakker 2026-01-26 18:00:53 +00:00
  • b9098f3401 fix: remove unsupported gateway auth off option Peter Steinberger 2026-01-26 17:44:13 +00:00
  • e6bdffe568 feat: add control ui device auth bypass Peter Steinberger 2026-01-26 17:40:24 +00:00
  • a486940781 fix: honor tools.exec.safeBins config Peter Steinberger 2026-01-26 17:22:40 +00:00
  • 2a4ccb624a Docs: update clawtributors Shadow 2026-01-26 11:02:52 -06:00
  • e0b8661eee Docs: credit LINE channel guide contributor Shadow 2026-01-26 11:02:10 -06:00
  • bfe9bb8a23 docs(changelog): note slack redirect fix Peter Steinberger 2026-01-26 16:57:57 +00:00
  • 287ab84060 fix(slack): handle file redirects Peter Steinberger 2026-01-26 16:57:53 +00:00
  • b06fc50e25 docs: clarify onboarding security warning Peter Steinberger 2026-01-26 16:58:51 +00:00
  • 94ead83ba4 fix: telegram sendPayload and plugin auth (#1917) (thanks @JoshuaLelon) Ayaan Zaidi 2026-01-26 22:25:55 +05:30
  • db2395744b fix(telegram): extract and send buttons from channelData Joshua Mitchell 2026-01-25 16:15:40 -06:00
  • b8e6f0b135 fix(telegram): register bot.command handlers for plugin commands Joshua Mitchell 2026-01-25 15:44:52 -06:00
  • 0e3340d1fc feat(plugins): sync plugin commands to Telegram menu and export gateway types Joshua Mitchell 2026-01-25 15:09:01 -06:00
  • ce60c6db1b feat(telegram): implement sendPayload for channelData support Joshua Mitchell 2026-01-25 13:26:37 -06:00
  • c01cc61f9a docs: note fly private deployment fixups (#2289) (thanks @dguido) Peter Steinberger 2026-01-26 16:58:01 +00:00
  • 5b6a211583 docs: tighten fly private deployment steps Peter Steinberger 2026-01-26 16:55:29 +00:00
  • b9643ad60e docs(fly): add private/hardened deployment guide Dan Guido 2026-01-26 02:40:31 -05:00
  • e05039b98f docs: tighten fly private deployment steps (#2121) (thanks @dguido) docs/fly-private-deployment Peter Steinberger 2026-01-26 16:52:39 +00:00
  • aea8c678e3 docs(fly): add private/hardened deployment guide Dan Guido 2026-01-26 02:40:31 -05:00
  • 07e34e3423 Discord: add presence cache tests (#2266) (thanks @kentaro) Shadow 2026-01-26 10:43:23 -06:00