Commit Graph

Select branches

Hide Pull Requests

dev

main

#1

#10

#11

#14

#15

#16

#17

#2

#3

#4

#5

#5

v0.2.1

v0.2.5

v0.2.8

v0.2.9

v0.3.0

v0.4.0

v0.5.0

v0.5.5

v0.6.0

v0.6.5

v0.7.0

v0.8.0

v0.8.5

v0.9.0

v0.9.5

v1.0.0

Mono Color

• 714a5efc5d docs(security): align no-origin CSRF override guidance across README and deployment docs rookiestar28 2026-03-01 02:01:17 +08:00
• 3b69b0c358 feat(s68): surface no-origin override posture in startup and doctor rookiestar28 2026-03-01 01:42:06 +08:00
• df03ecb173 fix(r135): make audit hash-chain writes atomic with lock rookiestar28 2026-03-01 01:35:59 +08:00
• ea38c96432 refactor(r134): remove unreachable startup-gate branch after fatal raise rookiestar28 2026-03-01 01:30:02 +08:00
• 80ae3a83a0 refactor(r133): unify image encoding helper and converge node class names rookiestar28 2026-03-01 01:15:40 +08:00
• 9aef5eb2d4 refactor(r132): harden JSON object extraction via stdlib decoder rookiestar28 2026-03-01 01:07:52 +08:00
• bbc2bc10b8 refactor(r130): split bootstrap/llm failover internals with compat shims rookiestar28 2026-03-01 00:56:50 +08:00
• 8f45f6364a fix(r131): harden provider adapter error contract and retry-after handling rookiestar28 2026-03-01 00:20:50 +08:00
• 6bfcf37508 added new standalone remote Admin Console and bump to v0.6.1 rookiestar28 2026-02-28 22:58:16 +08:00
• 9d4965c5ac feat(logging): add startup log truncation env flag and sync docs rookiestar28 2026-02-28 22:22:55 +08:00
• 06a933dcd0 update docs rookiestar28 2026-02-28 21:57:30 +08:00
• 0de70c2188 feat: add F61 standalone remote admin console rookiestar28 2026-02-28 20:38:09 +08:00
• 2e788cb434 chore: apply pre-commit formatting to R129 test files rookiestar28 2026-02-28 20:30:20 +08:00
• 9c72671cef chore: align ignore patterns with lowercase roadmap/reference mirrors rookiestar28 2026-02-28 20:14:56 +08:00
• ba64113a37 feat: implement R129 executor lane split with IO callback isolation rookiestar28 2026-02-28 20:13:15 +08:00
• 4f95dd0bca fix: hot-reload LLM client config across assist/vision/composer paths and harden audit import fallback rookiestar28 2026-02-26 21:20:48 +08:00
• 218356c29d chore: update pics in readme rookiestar28 2026-02-26 21:19:43 +08:00
• 5c914b2068 bump version to v0.6.0 (and apply some pre-commit formatting collateral) v0.6.0 rookiestar28 2026-02-26 16:43:21 +08:00
• 3671be8b99 feat: implement R67/R65/R66 lifecycle consistency, structured logging, and OpenAPI generation rookiestar28 2026-02-26 16:28:01 +08:00
• 4651bbb5ff chore: apply pre-commit formatting collateral rookiestar28 2026-02-26 16:27:31 +08:00
• d1a0b460e1 feat: implement R38/R96 streaming assist UX and docs full update rookiestar28 2026-02-26 15:43:21 +08:00
• f6b8b2e0e9 feat: implement R90/R95 governance and query contracts rookiestar28 2026-02-26 03:53:41 +08:00
• 28126613e2 feat: implement R119 drills and S66 guardrails rookiestar28 2026-02-26 03:34:37 +08:00
• 6785ad7150 refactor: close R55/R64 helper consolidation rookiestar28 2026-02-26 03:15:30 +08:00
• 63b95086db feat(assist): add F25 Phase B automation payload composer endpoint with validated trigger/webhook draft generation rookiestar28 2026-02-24 03:04:43 +08:00
• ceb282085e feat(ui): implement R38-lite shared request lifecycle with staged loading, cancel-safe retries, and E2E coverage rookiestar28 2026-02-24 02:37:31 +08:00
• b3a0f7d2ad feat(scheduler): implement R92 delegated mode, anti-skip cadence invariants, and compute-error safeguards rookiestar28 2026-02-24 02:20:05 +08:00
• 8c8d65e982 Merge branch 'dev' rookiestar28 2026-02-24 01:39:50 +08:00
• 13aa463286 Remove low-risk Moltbot aliases and add configurable Playwright E2E port tcedison777 2026-02-24 01:23:33 +08:00
• 8033500e50 feat(r128): complete OpenClaw naming unification phase 3 with legacy telemetry, canonical UI selectors, and e2e alignment rookiestar28 2026-02-21 00:19:12 +08:00
• a99f2aa673 feat(r128): complete OpenClaw naming convergence phase 2 with legacy bridge parity and hardened mutation gate coverage rookiestar28 2026-02-20 23:10:18 +08:00
• c35fe05d3e fix(ci): harden R113 mutation gate with critical note on access-control test suite breadth rookiestar28 2026-02-20 21:27:16 +08:00
• 4c0ac67b37 refactor(web): unify OpenClaw naming across UI/API/session while preserving Moltbot compatibility aliases rookiestar28 2026-02-20 04:25:23 +08:00
• 4f593471c4 chore: file modified rookiestar28 2026-02-20 03:40:53 +08:00
• 361b28e227 feat(parameter-lab): complete F60 dynamic dimension picker with safe rendering guards, E2E coverage, and roadmap/record closeout rookiestar28 2026-02-20 02:54:24 +08:00
• 68e7d06133 feat(slack): finalize secure Events API integration with no-skip R124/R125 gates and docs/roadmap sync v0.5.5 rookiestar28 2026-02-19 23:21:31 +08:00
• f3fadd6d8a feat(slack): finalize secure Events API integration with no-skip R124/R125 gates and docs/roadmap sync rookiestar28 2026-02-19 20:44:27 +08:00
• a88a3320f8 docs: align deployment/runbook/env-var docs with current S56/S62+SSRF posture and replace sidecar.md with a deprecated stub rookiestar28 2026-02-19 18:16:33 +08:00
• 20cacd9399 fix(ci): harden R118 mutation gate with explicit module baseline, non-zero fail semantics, and stale-report/bytecode guards rookiestar28 2026-02-19 17:09:58 +08:00
• e6adcacadf post-wave-e: finalize bundle C with adversarial gate parity, dual-lane retry partition, and SOP/pre-push alignment rookiestar28 2026-02-19 16:44:26 +08:00
• db40c0c538 add R123 real-backend model-list SSRF parity lane and enforce no-skip CI/SOP/full-gate checks rookiestar28 2026-02-19 15:22:48 +08:00
• 06bca8df03 fix(ssrf): restore local LLM loopback egress and unify pre/post outbound validation rookiestar28 2026-02-19 14:34:48 +08:00
• d5063c2169 feat(security): close post-wave E bundle B with S65 safe_io egress convergence and R120 CI/local preflight parity gates rookiestar28 2026-02-19 14:08:17 +08:00
• 242bd98db4 close S64/R116 with explicit route-plane governance and invariant-gated MAE validation rookiestar28 2026-02-19 03:03:03 +08:00
• b948852eaa test(ci): add R122 real-backend low-mock E2E lane with no-skip CI gate and SOP coverage rookiestar28 2026-02-19 02:37:16 +08:00
• 90319ffc8d enforce MAE no-skip CI gates and add key/token lifecycle rotation-revocation-DR SOP rookiestar28 2026-02-19 00:41:47 +08:00
• 3376f44d33 fix(ci-tests): install cryptography in CI/pre-push, add requirements.txt baseline, and harden no-crypto fallback for registry signature + secret store tests v0.5.0 rookiestar28 2026-02-19 00:09:15 +08:00
• 93439ff095 complete wave e bundle c: deliver signed policy posture, security telemetry, deterministic fuzz harness, mutation baseline, and sop-validated closeout rookiestar28 2026-02-18 23:53:38 +08:00
• 0f487a72dd feat(security): complete Wave E Bundle B (R108/R109/S43/R89) with matrix contracts, threat-intel gating, and resilience verification rookiestar28 2026-02-18 22:46:22 +08:00
• 5cbfcbdb46 feat(wave-e): complete Bundle A (S56/R105/R68/R107) and enforce fail-closed startup profile gate rookiestar28 2026-02-18 21:59:10 +08:00
• 9486c358bb feat(bundle-b): close S58-S61 integration gaps and finalize Wave D Bundle B with full SOP gate pass rookiestar28 2026-02-18 20:15:15 +08:00
• 8d19fab12a feat(security): close S62/R106/F55/S57 control-plane split baseline with external adapter hardening and encrypted secrets-at-rest rookiestar28 2026-02-18 15:55:59 +08:00
• 4c91d90abc fix(security-doctor): honor OPENCLAW_CALLBACK_ALLOW_HOSTS with legacy fallback and add SSRF env-key regression tests rookiestar28 2026-02-18 05:17:36 +08:00
• 9554d2a614 docs(readme): add deployment profile guide and self-check CLI rookiestar28 2026-02-18 04:55:39 +08:00
• 866489329e feat(wave-c): finalize operator guidance/context actions/parameter-lab compare and sync README with Wave A-B-C hardening v0.4.0 rookiestar28 2026-02-18 02:59:38 +08:00
• db7fe477f6 feat(security): close out Wave B hardening with mTLS binding, pack integrity guards, DoS lifecycle controls, and release provenance verification rookiestar28 2026-02-18 01:23:02 +08:00
• 2520f7426a fix(wave-a): close R91/R94/R93/S50/S51 with strict durable idempotency, connector auth-invalidation lock, and outbound policy enforcement rookiestar28 2026-02-18 00:14:02 +08:00
• 5927ad54aa feat(security): close C1 posture-report contract with S45 parity and schema-drift regression coverage rookiestar28 2026-02-17 21:29:14 +08:00
• 1a40255501 docs(readme): add sidebar modules matrix and TOC link for all 10 OpenClaw tabs rookiestar28 2026-02-17 20:36:00 +08:00
• 13e4d4ca21 fix(frontend): harden OpenClaw sidebar imports and E2E core-script mocking to prevent masked path regressions rookiestar28 2026-02-17 20:22:57 +08:00
• 67f9dc317a security: finalize R99/S47 closeout with deny-path audit coverage, sandbox FS guards, and full SOP validation rookiestar28 2026-02-17 20:02:19 +08:00
• ace9e63af5 feat(security): deliver S46 WP3 RBAC baseline with regression tests and legacy auth-contract safeguards rookiestar28 2026-02-17 18:54:32 +08:00
• 0632361e6a feat(security): complete S45 startup exposure hard-stop and sync roadmap/implementation evidence rookiestar28 2026-02-17 18:17:50 +08:00
• d20a4f7818 feat(security): complete endpoint inventory drift guard, align roadmap progress, and document latest hardening updates rookiestar28 2026-02-17 17:05:13 +08:00
• 4a3c8d3a38 fix: close contract-first remediation gaps with winner-route integrity, strict winner safety gate, tab-action regression fix, and full TEST_SOP verification rookiestar28 2026-02-17 16:10:22 +08:00
• 3b880ca98b feat(connector): finalize S44/R97 semantic guardrails with structured policy contracts and chat firewall enforcement rookiestar28 2026-02-17 01:35:28 +08:00
• 1769546648 feat(operator-ux): close F49/F51/F52/F50 remainder gaps and sync compare/auth/history contracts rookiestar28 2026-02-17 00:55:33 +08:00
• df91b68e3a feat(operator-ux): harden F52 lab routes and align F49/F51/F52/F50 baseline progress rookiestar28 2026-02-17 00:13:38 +08:00
• 606c5d76e5 Merge remote-tracking branch 'origin/main' rookiestar28 2026-02-16 23:15:17 +08:00
• 7a2bde5b2e fix(security): fail closed when transform process runner is unavailable and harden doctor diagnostics rookiestar28 2026-02-16 22:43:12 +08:00
• 4e26f88a0e docs: additional security patch content rookiestar28 2026-02-16 06:34:22 +08:00
• d7ef0278bd Merge pull request #4 from BentWorks/fix/cve-packs-api-input-validation rookiestar28 2026-02-16 06:17:40 +08:00
• 7e9f4985cf fix: remove leftover merge marker in pack registry rookiestar28 2026-02-16 06:08:08 +08:00
• c796dde48e fix(security): add path traversal protection to install_pack metadata BentleyandClaude Opus 4.6 2026-02-15 14:50:31 -05:00
• 2049af4ae8 Merge remote-tracking branch 'origin/main' rookiestar28 2026-02-16 06:10:04 +08:00
• 5be595738f Merge pull request #2 from BentWorks/fix/cve-pack-registry-path-traversal-uninstall rookiestar28 2026-02-16 06:03:06 +08:00
• 3acdbfba83 fix(security): add input validation to pack API route handlers BentleyandClaude Opus 4.6 2026-02-15 14:52:24 -05:00
• 788ab32293 fix(security): add path traversal protection to uninstall_pack and get_pack_path BentleyandClaude Opus 4.6 2026-02-15 14:45:32 -05:00
• b8a5ef7875 feat: complete S42/R86/R87 hardening wave and sync roadmap with partial F48 status rookiestar28 2026-02-15 21:18:26 +08:00
• 3e6f4c0e4c fix(bridge): harden handshake imports for ComfyUI loader and add import-regression test rookiestar28 2026-02-15 18:02:34 +08:00
• f7b2c42cdb docs: add advanced runtime/security setup guides, update README TOC and bridge docs rookiestar28 2026-02-15 17:40:07 +08:00
• ca2552fe15 docs: modify readme rookiestar28 2026-02-15 17:11:32 +08:00
• 9d86dff86a feat: add runtime profile startup hardening, module boot boundaries, and bridge handshake compatibility rookiestar28 2026-02-15 16:51:21 +08:00
• e23580bbac docs(connector): add comprehensive KakaoTalk setup guide and troubleshooting rookiestar28 2026-02-15 15:08:10 +08:00
• f3cd94204e Strengthen WeChat/KakaoTalk robustness and security, bump to v0.3.0 rookiestar28 2026-02-14 04:27:07 +08:00
• f0ccbfb68c feat(connector): complete with Kakao output hardening, WeChat AES parity, and sidecar worker endpoint E2E alignment v0.3.0 rookiestar28 2026-02-14 04:11:33 +08:00
• 21b4f6c254 chore(kakao): align F45/F44/F46 implementation record status and roadmap links with partial/prototype progress rookiestar28 2026-02-14 03:10:56 +08:00
• 000271ca0b docs: change pics in assets/ v0.2.9 rookiestar28 2026-02-14 01:31:53 +08:00
• 6387a5141c feat(security): finalize R80/S38/S39 with command auth policy, registry anti-abuse, and fail-closed preflight trust enforcement rookiestar28 2026-02-14 01:19:23 +08:00
• 1798b65b90 feat(api): implement R61/R62 unified error contract and lazy aiohttp queue degrade with regression tests rookiestar28 2026-02-14 00:06:48 +08:00
• fec211d603 docs(connector): add complete WeChat Official Account setup guide with env vars, webhook verification flow, security notes, and deployment checklist rookiestar28 2026-02-13 22:31:33 +08:00
• e6f56d4952 fix(api-config): suppress expected model-list refresh tracebacks when cache fallback is served rookiestar28 2026-02-13 22:22:20 +08:00
• c222e18c12 feat(security): complete wave2 hardening with S12 tool runner, S30 wave2 doctor checks, and R78 auth coverage for tools routes v0.2.8 rookiestar28 2026-02-13 22:00:03 +08:00
• 9252f1b397 feat(security): implement S35/R77/S34 wave2 with process-isolated transforms, tamper-evident persistence, and observability tier enforcement rookiestar28 2026-02-13 21:15:35 +08:00
• ac68cf2b11 fix(wechat-s31): enforce fail-closed Expat runtime gate, add WeChat security-doctor coverage, and extend XML gate regression tests rookiestar28 2026-02-13 19:11:26 +08:00
• 455cb351f5 fix(security): harden S36/S37/R79 with safe_io response cleanup, expanded egress primitive guards, and roadmap/record alignment rookiestar28 2026-02-13 18:35:25 +08:00
• 5be628e8ae test(auth): harden R78 with explicit route auth manifest, drift guards, and handler contract checks rookiestar28 2026-02-13 12:39:07 +08:00
• 71c6c7c1d8 feat(kakao): deliver F44 Phase A webhook adapter with S32 shared security primitives, tests, and roadmap/record alignment rookiestar28 2026-02-13 03:43:06 +08:00
• 1d2fa210fb feat(connector): WeChat OA bundle with fail-closed ingress security, adapter wiring, and 49-test validation rookiestar28 2026-02-13 03:22:05 +08:00
• 2cd1156aeb feat(connector-security): harden shared security profile and align LINE/WhatsApp adapters with primitives plus regression coverage rookiestar28 2026-02-13 02:33:43 +08:00