Vatsal Garg d8a1ebbb49 fix(approvals): prevent cross-channel exec approval leak (#122517) ...

Reject unbound foreign-channel fallback at shared approval-account selection while preserving recorded bindings and explicit forwarding targets. Cover Telegram and Matrix routing contracts.

Co-authored-by: vatsalgargg <vatsalg80@gmail.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>

2026-08-14 13:11:03 +05:30

..

src

fix(approvals): prevent cross-channel exec approval leak (#122517)

2026-08-14 13:11:03 +05:30

account-inspect-api.ts

…

AGENTS.md

…

allow-from.ts

…

api.test.ts

…

api.ts

fix(security): report DM isolation from effective routing (#121741)

2026-08-10 15:34:37 -07:00

channel-config-api.test.ts

…

channel-config-api.ts

…

channel-plugin-api.ts

…

CLAUDE.md

…

config-api.ts

refactor: move Telegram and iMessage config schemas to plugins (#112850)

2026-07-22 23:01:47 -04:00

contract-api.ts

…

directory-contract-api.ts

…

doctor-contract-api.ts

refactor: one code path behind doctor legacy-state migrations (#120716)

2026-08-08 18:23:15 -07:00

index.ts

…

miniapp-api.ts

fix(telegram): bind Mini App auth to dashboard launches

2026-08-05 20:24:34 +05:30

openclaw.plugin.json

refactor: one code path behind doctor legacy-state migrations (#120716)

2026-08-08 18:23:15 -07:00

package.json

fix(channels): fail-fast headless channel setup with plugin-declared env contracts (#122530)

2026-08-12 17:12:15 +00:00

runtime-api.ts

…

runtime-setter-api.ts

…

secret-contract-api.ts

…

security-audit-contract-api.ts

…

session-binding-contract-api.ts

…

session-key-api.ts

…

setup-entry.ts

refactor: one code path behind doctor legacy-state migrations (#120716)

2026-08-08 18:23:15 -07:00

setup-plugin-api.ts

…

tsconfig.json

refactor(plugins): inherit shared package boundary settings (#117474)

2026-08-01 09:11:09 -07:00

update-offset-runtime-api.ts

…