Vatsal Garg d8a1ebbb49 fix(approvals): prevent cross-channel exec approval leak (#122517) ...

Reject unbound foreign-channel fallback at shared approval-account selection while preserving recorded bindings and explicit forwarding targets. Cover Telegram and Matrix routing contracts.

Co-authored-by: vatsalgargg <vatsalg80@gmail.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>

2026-08-14 13:11:03 +05:30

..

acpx

fix(sessions): hide unowned host catalogs on multi-user gateways (#123421)

2026-08-13 19:28:22 -07:00

active-memory

refactor: consolidate coercion ownership (#122692)

2026-08-12 09:25:28 -07:00

admin-http-rpc

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

alibaba

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

amazon-bedrock

test(bedrock): remove stream inspection bridge (#122059)

2026-08-11 07:39:51 -07:00

amazon-bedrock-mantle

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

anthropic

feat(anthropic): opt-in server-side compaction (compact-2026-01-12) (#123402)

2026-08-13 21:28:19 -07:00

anthropic-vertex

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

arcee

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

azure-speech

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

baseten

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

beam

fix: isolated gateways list and open the operator's HOME Claude/Codex/OpenCode/Pi sessions (#122983)

2026-08-13 01:12:03 -07:00

bonjour

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

brave

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

browser

feat: cookie sync from Mac to a remote Gateway browser profile (#123494)

2026-08-13 23:47:26 -07:00

buzz

test(buzz): add opt-in thread QA coverage (#116081)

2026-08-13 12:54:36 +08:00

byteplus

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

canvas

refactor: consolidate remaining coercion helpers (#122020)

2026-08-11 10:22:01 -07:00

cerebras

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

chutes

test: remove low-value implementation assertions (#121085)

2026-08-09 08:48:48 -07:00

clawrouter

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

clickclack

fix: keep background work scoped to its selected agent (#123257)

2026-08-13 11:29:31 -07:00

cloudflare-ai-gateway

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

codex

fix: bind steering authority to model route

2026-08-13 23:28:53 -07:00

cohere

refactor(cohere): flatten stream payload wrapper

2026-08-12 08:36:33 -07:00

comfy

refactor(plugins): remove media test globals (#122636)

2026-08-12 07:07:19 -07:00

copilot

fix: preserve pending input across authority changes

2026-08-13 23:28:53 -07:00

copilot-proxy

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

crabbox

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

cua-computer

refactor(computer-use): one canonical wire contract + node-host provider seam (#123509)

2026-08-13 23:32:32 -07:00

deepgram

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

deepinfra

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

deepseek

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

device-pair

feat(ui): open bare pair command without a chat turn (#120855)

2026-08-12 21:09:13 -07:00

diagnostics-otel

refactor(diagnostics-otel): unify event attribute projection (#122559)

2026-08-12 18:06:08 +08:00

diagnostics-prometheus

refactor: consolidate coercion contracts (#122458)

2026-08-11 23:26:37 -07:00

diffs

fix(docker): harden runtime images against CVE surface (#123282)

2026-08-13 14:02:39 -07:00

diffs-language-pack

refactor(scripts): migrate JavaScript tools to TypeScript (#121005)

2026-08-09 07:21:35 -07:00

discord

fix: keep global channel events agent-scoped (#123316)

2026-08-13 14:45:19 -07:00

document-extract

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

duckduckgo

test(duckduckgo): move regressions to search boundary (#123188)

2026-08-13 15:07:09 -07:00

elevenlabs

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

exa

test(web): trim duplicate provider test surfaces (#121727)

2026-08-10 15:44:54 -07:00

fal

refactor(plugins): remove media test globals (#122636)

2026-08-12 07:07:19 -07:00

featherless

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

feishu

fix: keep background work scoped to its selected agent (#123257)

2026-08-13 11:29:31 -07:00

file-transfer

refactor: consolidate coercion contracts (#122458)

2026-08-11 23:26:37 -07:00

firecrawl

test(web): trim duplicate provider test surfaces (#121727)

2026-08-10 15:44:54 -07:00

fireworks

refactor(fireworks): flatten Kimi stream wrapper

2026-08-12 08:36:33 -07:00

fish-audio-speech

refactor: consolidate coercion contracts (#122458)

2026-08-11 23:26:37 -07:00

github-copilot

refactor(plugin-sdk): remove retired Copilot login chain (#122988)

2026-08-12 22:07:33 -07:00

gmi

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

google

feat(google): add Gemini 3.7 Flash with LOW thinking floor (#123366)

2026-08-13 16:34:13 -07:00

google-meet

refactor(extensions): remove orphan test exports (#122784)

2026-08-12 12:45:33 -07:00

googlechat

fix(googlechat): preserve partial delivery evidence (#122760)

2026-08-12 11:34:59 -07:00

gradium

refactor(gradium): consolidate speech requests

2026-08-12 07:58:43 -07:00

groq

refactor(plugins): remove orphan test API barrels (#121761)

2026-08-10 16:42:34 -07:00

huggingface

test: remove low-value implementation assertions (#121085)

2026-08-09 08:48:48 -07:00

image-generation-core

refactor(media): remove orphan generation facades (#122874)

2026-08-12 17:19:22 -07:00

imessage

test: remove residual duplicate assertions (#123134)

2026-08-13 04:41:37 -07:00

inworld

refactor(inworld): consolidate speech requests

2026-08-12 07:58:43 -07:00

irc

fix(channels): fail-fast headless channel setup with plugin-declared env contracts (#122530)

2026-08-12 17:12:15 +00:00

kilocode

refactor(test): remove residual test-only seams (#123168)

2026-08-13 17:16:55 -07:00

kimi-coding

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

line

test(extensions): remove shared helper replays (#122773)

2026-08-12 12:19:38 -07:00

linux-canvas

refactor: consolidate remaining coercion helpers (#122020)

2026-08-11 10:22:01 -07:00

linux-node

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

litellm

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

llama-cpp

feat(codex): pass explicit skill selections as structured turn input (#123441)

2026-08-13 20:37:47 -07:00

llm-task

perf(doctor): delete the heavy doctor barrel and finish slimming enumeration (#120882)

2026-08-08 22:01:44 -07:00

lmstudio

refactor(providers): consolidate contract fixtures (#114424)

2026-08-09 07:07:47 -07:00

lobster

refactor: consolidate remaining coercion helpers (#122020)

2026-08-11 10:22:01 -07:00

logbook

refactor: consolidate coercion contracts (#122458)

2026-08-11 23:26:37 -07:00

longcat

fix(longcat): correct cache pricing and add provider icon (#121369)

2026-08-10 20:15:18 -07:00

matrix

fix(approvals): prevent cross-channel exec approval leak (#122517)

2026-08-14 13:11:03 +05:30

mattermost

fix(tests): respect plugin helper boundary

2026-08-13 01:34:05 -05:00

media-understanding-core

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

memory-core

test: delete final plugin and UI duplicates (#123214)

2026-08-14 00:20:09 -07:00

memory-lancedb

refactor(memory-core): strengthen dreaming boundaries (#123138)

2026-08-13 11:32:25 -07:00

memory-wiki

fix(memory-wiki): guard malformed wiki_apply input (#123050)

2026-08-13 09:26:21 -05:00

meta

refactor(meta): inline response payload patching

2026-08-12 08:36:33 -07:00

microsoft

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

microsoft-foundry

test(microsoft-foundry): remove global test bridge (#122881)

2026-08-12 18:53:44 -07:00

migrate-claude

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

migrate-hermes

refactor: consolidate remaining coercion helpers (#122020)

2026-08-11 10:22:01 -07:00

minimax

test(plugins): remove stale test plumbing (#122175)

2026-08-11 11:01:05 -07:00

mistral

refactor(plugins): remove orphan test API barrels (#121761)

2026-08-10 16:42:34 -07:00

moonshot

test: remove residual duplicate assertions (#123134)

2026-08-13 04:41:37 -07:00

msteams

fix(tests): respect plugin helper boundary

2026-08-13 01:34:05 -05:00

mxc

fix(mxc): agent tools fail in Windows workspace subdirectories (#115399)

2026-08-11 11:38:34 +08:00

nextcloud-talk

fix(channels): fail-fast headless channel setup with plugin-declared env contracts (#122530)

2026-08-12 17:12:15 +00:00

nostr

test: delete final plugin and UI duplicates (#123214)

2026-08-14 00:20:09 -07:00

novita

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

nvidia

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

oc-path

test: delete final plugin and UI duplicates (#123214)

2026-08-14 00:20:09 -07:00

ollama

fix(ollama): use guided model selection in CLI setup (#123382)

2026-08-13 17:27:36 -07:00

onepassword

fix(deps): bump @openclaw/fs-safe to 0.5.5 for win32 zero-inode identity (#122427)

2026-08-11 21:46:22 -07:00

open-prose

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

openai

test: remove residual duplicate assertions (#123134)

2026-08-13 04:41:37 -07:00

opencode

fix(sessions): hide unowned host catalogs on multi-user gateways (#123421)

2026-08-13 19:28:22 -07:00

opencode-go

refactor(opencode-go): compose provider stream wrappers (#122749)

2026-08-12 10:53:53 -07:00

openrouter

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

openshell

refactor: finish shared test helper migrations (#120996)

2026-08-09 06:00:06 -07:00

parallel

refactor: consolidate coercion ownership (#122692)

2026-08-12 09:25:28 -07:00

perplexity

test(web): trim duplicate provider test surfaces (#121727)

2026-08-10 15:44:54 -07:00

pixverse

refactor(auth): dedupe profile upserts and approval resolvers (#120831)

2026-08-08 21:14:16 -07:00

policy

test(extensions): repair stale full-config extension tests (#122978)

2026-08-12 21:09:42 -07:00

qa-channel

refactor(agents): render failover user copy from one reason-keyed module (#121717)

2026-08-10 16:43:51 -07:00

qa-lab

fix(ci): balance QA smoke profile parts (#123434)

2026-08-13 20:08:51 -07:00

qianfan

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

qwen

refactor: consolidate coercion ownership (#122692)

2026-08-12 09:25:28 -07:00

raft

fix(raft): report missing CLI in channel status (#123140)

2026-08-13 04:21:13 -07:00

reef

fix(reef): diagnose relay protocol skew (#123498)

2026-08-13 22:47:53 -07:00

runway

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

searxng

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

senseaudio

refactor(plugins): remove orphan test API barrels (#121761)

2026-08-10 16:42:34 -07:00

sglang

test: remove residual duplicate assertions (#123134)

2026-08-13 04:41:37 -07:00

signal

test: delete final plugin and UI duplicates (#123214)

2026-08-14 00:20:09 -07:00

slack

fix(slack): keep cached monitor identity and allowlists live (#123403)

2026-08-13 19:15:38 -07:00

sms

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

stepfun

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

synology-chat

fix(channels): fail-fast headless channel setup with plugin-declared env contracts (#122530)

2026-08-12 17:12:15 +00:00

synthetic

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

talk-voice

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

tavily

test(web): trim duplicate provider test surfaces (#121727)

2026-08-10 15:44:54 -07:00

teams-meetings

test(extensions): repair stale full-config extension tests (#122978)

2026-08-12 21:09:42 -07:00

telegram

fix(approvals): prevent cross-channel exec approval leak (#122517)

2026-08-14 13:11:03 +05:30

tencent

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

test-support

…

tlon

fix(tlon): report unavailable inbound images (#122783)

2026-08-12 12:40:03 -07:00

together

refactor: consolidate coercion contracts (#122458)

2026-08-11 23:26:37 -07:00

tokenjuice

test: remove low-value implementation assertions (#121085)

2026-08-09 08:48:48 -07:00

tts-local-cli

refactor(tts-local-cli): flatten audio conversion

2026-08-12 07:58:43 -07:00

twitch

test: delete final plugin and UI duplicates (#123214)

2026-08-14 00:20:09 -07:00

vault

refactor: consolidate remaining coercion helpers (#122020)

2026-08-11 10:22:01 -07:00

venice

test: remove low-value implementation assertions (#121085)

2026-08-09 08:48:48 -07:00

vercel-ai-gateway

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

vllm

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

voice-call

refactor(state): retire commitments schema (#122176)

2026-08-12 14:21:34 -07:00

volcengine

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

voyage

test(voyage): move bounded reads to public runner (#121957)

2026-08-11 01:45:51 -07:00

vydra

test(extensions): remove shared helper replays (#122773)

2026-08-12 12:19:38 -07:00

web-readability

chore(release): prepare 2026.8.1 (#120375)

2026-08-07 18:44:12 -07:00

webhooks

feat(secrets): add SQLite-backed secret store (#121559)

2026-08-10 07:08:40 -07:00

whatsapp

fix(whatsapp): keep distinct-id repeated messages (#122785)

2026-08-12 13:07:22 -07:00

workboard

refactor: consolidate coercion ownership (#122299)

2026-08-11 17:14:53 -07:00

xai

fix(codex): retain direct-child hook policy after parent yield (#122503)

2026-08-13 22:51:34 -04:00

xiaomi

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

zai

feat(providers): add GLM 5.3 support (#123523)

2026-08-13 23:34:50 -07:00

zalo

fix(zalo): keep packaged setup wizard loadable (#122902)

2026-08-12 18:49:41 -07:00

zalouser

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

zoom-meetings

test(extensions): repair stale full-config extension tests (#122978)

2026-08-12 21:09:42 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

…

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

fix(codex): retain direct-child hook policy after parent yield (#122503)

2026-08-13 22:51:34 -04:00

video-generation-providers.live.test.ts

…