Peter Steinberger 49d8cfd393 fix(security): prevent blocked SearXNG refs from using ambient URLs (#126214) ...

* fix(security): honor blocked SearXNG secret refs

* docs(searxng): clarify blocked SecretRef policy

* test(codex): route attempt tools coverage

2026-08-19 00:02:58 -07:00

..

.generated

feat(ui): proxy opt-in link favicons through gateway (#121906)

2026-08-18 17:44:57 -07:00

.i18n

docs: consolidate setup and plugin references (#126132)

2026-08-18 20:00:05 -07:00

announcements

feat(plugins): externalize iMessage channel (#117101)

2026-08-01 08:01:18 +08:00

assets

docs(readme): trim banner whitespace for a more compact hero

2026-07-09 14:53:52 -07:00

automation

fix(cron): required delivery failures no longer report success (#126164)

2026-08-18 22:44:33 -07:00

channels

fix(matrix): keep user ID authorization case-sensitive (#125432)

2026-08-17 18:08:25 -07:00

clawhub

fix(skills): provide safe workspace-specific malicious skill remediation (#118969)

2026-08-03 14:39:02 -07:00

cli

feat(secrets): add explicit protected and agent-readable access (#126088)

2026-08-18 22:51:15 -07:00

concepts

feat(qa): add a standalone Telegram Desktop recorder with a prebaked desktop image (#125186)

2026-08-19 11:23:48 +05:30

debug

chore(scripts): remove resolved investigation tools and orphans (#113532)

2026-07-25 02:47:40 -07:00

diagnostics

docs: retire config keys that strict validation rejects (#113956)

2026-07-25 18:24:02 -07:00

gateway

feat(secrets): add explicit protected and agent-readable access (#126088)

2026-08-18 22:51:15 -07:00

help

fix(exec): isolate interactive shell env imports (#125624)

2026-08-18 10:06:19 -07:00

images

…

install

fix(install): avoid success after incomplete lifecycle changes (#125992)

2026-08-18 20:50:15 -07:00

maturity

refactor(commitments): remove inferred follow-up subsystem

2026-08-10 13:48:32 +05:30

nodes

fix: surface paired-device runtime requirements (#126067)

2026-08-18 19:10:41 -07:00

plan

feat(cli): prepare session-host onboarding (#125879)

2026-08-18 16:08:48 -07:00

platforms

feat(canvas): present widgets on native device panels (#125818)

2026-08-18 11:05:41 -07:00

plugins

feat(secrets): add explicit protected and agent-readable access (#126088)

2026-08-18 22:51:15 -07:00

providers

feat(agents): unify agent status into a durable progress_card (#125125)

2026-08-17 09:44:04 -07:00

refactor

feat: add A2UI widgets to session boards (#125803)

2026-08-18 09:08:45 -07:00

reference

docs: consolidate setup and plugin references (#126132)

2026-08-18 20:00:05 -07:00

releases

docs: repair spellcheck and anchor drift (#122960)

2026-08-12 20:50:56 -07:00

security

feat(cron): enable automation triggers by default (#125025)

2026-08-17 01:12:10 -07:00

snippets/plugin-publish

…

specs

improve: stream native sessions as hosts finish (#110211)

2026-07-17 23:59:57 +01:00

start

docs: consolidate setup and plugin references (#126132)

2026-08-18 20:00:05 -07:00

tools

fix(security): prevent blocked SearXNG refs from using ambient URLs (#126214)

2026-08-19 00:02:58 -07:00

web

feat(ui): enable link favicons by default (#126109)

2026-08-18 18:41:54 -07:00

agent-runtime-architecture.md

refactor: own model discovery by runtime lifecycle (#111173)

2026-07-19 05:30:54 -07:00

AGENTS.md

feat(docs-ci): validate docs config examples against the schema (#121336)

2026-08-10 07:57:56 -07:00

auth-credential-semantics.md

feat(doctor): relocate shared auth store into state DB (#123349)

2026-08-13 17:44:02 -07:00

brave-search.md

…

ci.md

fix(install): avoid success after incomplete lifecycle changes (#125992)

2026-08-18 20:50:15 -07:00

CLAUDE.md

…

date-time.md

docs: correct timezone configuration contract (#116102)

2026-07-30 06:23:50 +08:00

docs_map.md

docs: generate docs map at publish time (#117398)

2026-08-01 07:01:43 -07:00

docs.json

docs: consolidate setup and plugin references (#126132)

2026-08-18 20:00:05 -07:00

index.md

fix(update): support npm before lifecycle allowlists (#125452)

2026-08-17 17:01:23 -07:00

logging.md

fix(code-mode): show the final tool surface in debug logs (#124934)

2026-08-17 17:32:14 -07:00

nav-tabs-underline.js

…

network.md

…

openclaw-agent-runtime.md

refactor: flip sessions and transcripts to sqlite storage (#98236)

2026-07-11 14:50:37 -07:00

perplexity.md

…

prose.md

…

style.css

fix(docs): expose generated taxonomy links

2026-07-15 07:28:58 -04:00

tts.md

…

vps.md

docs: add Daytona hosting guide (#116411)

2026-08-03 07:17:18 +01:00

whatsapp-openclaw.jpg

…