Peter Steinberger c39abcecda fix(security): report DM isolation from effective routing (#121741) ...

* fix(security): audit effective DM session ownership

Resolve admitted DM principals through canonical route, account, identity-link, and channel-owned session policy before reporting shared-session risk. Doctor now renders the structured channel security owner instead of duplicating the global-only default-account heuristic.\n\nCloses #121711

* chore(plugin-sdk): refresh API contract baseline

* fix(telegram): preserve direct peer SDK export

* fix(telegram): preserve direct peer resolver signature

* fix(ci): use supported DM audit grouping

* fix(protocol): refresh approval reviewer Swift models

2026-08-10 15:34:37 -07:00

..

reference

fix(microsoft-foundry): write canonical image model config (#121370)

2026-08-09 20:40:11 -07:00

adding-capabilities.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

admin-http-rpc.md

fix(gateway): admit plugin HTTP work during suspension (#104112)

2026-07-10 22:34:57 -07:00

agent-tools.md

…

architecture-internals.md

fix(plugins): unify HTTP route conflict handling (#118203)

2026-08-04 02:15:00 +08:00

architecture.md

refactor(gateway): remove deferred channel load flag; 503 plugin routes until runtime ready (#117852)

2026-08-02 00:36:21 -07:00

beam.md

fix(beam): open uploads at canonical catalog URLs (#120927)

2026-08-09 02:09:01 -07:00

building-extensions.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

building-plugins.md

docs(plugins): link setup-input deprecations to the migration pattern and document reader sweeps (#112692)

2026-07-22 11:04:19 -07:00

bundles.md

feat(plugins): read the ai.openclaw Agent Plugins extension namespace (#120214)

2026-08-07 03:49:12 -07:00

cli-backend-plugins.md

fix(agents): gate Claude live session protocol

2026-08-04 02:08:23 -05:00

codex-computer-use.md

fix(codex): support app-server 0.147.0 (#120594)

2026-08-08 23:07:05 +08:00

codex-harness-reference.md

docs: clarify OpenAI fast mode precedence (#120682)

2026-08-08 13:14:10 -07:00

codex-harness-runtime.md

fix(codex): restore connected apps for token-authenticated runs (#115075)

2026-07-29 06:21:25 -04:00

codex-harness.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

codex-native-plugins.md

fix(codex): support app-server 0.147.0 (#120594)

2026-08-08 23:07:05 +08:00

codex-supervision.md

improve: stream native sessions as hosts finish (#110211)

2026-07-17 23:59:57 +01:00

community.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

compatibility.md

fix(doctor): enforce deprecation registry deadlines (#120868)

2026-08-08 21:19:04 -07:00

copilot.md

refactor: one code path behind doctor legacy-state migrations (#120716)

2026-08-08 18:23:15 -07:00

dependency-resolution.md

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

google-meet.md

feat(meetings): enable Linux Chrome talk-back (#118451)

2026-08-09 02:13:17 -07:00

hooks.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

install-overrides.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

llama-cpp.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

logbook.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

manage-plugins.md

fix(plugins): keep bulk updates on the beta channel (#115083)

2026-07-29 12:04:38 +08:00

manifest.md

fix(workers): skip shared-host quiescence sweeps (#120969)

2026-08-09 04:34:39 -07:00

meeting-plugins.md

feat(meetings): enable Linux Chrome talk-back (#118451)

2026-08-09 02:13:17 -07:00

memory-lancedb.md

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

memory-wiki.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

message-presentation.md

feat(status): render /status as a native rich card and declutter the plain body (#120167)

2026-08-07 20:46:52 +05:30

oc-path.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

onepassword.md

fix(onepassword): make SecretRef setup production-safe

2026-07-25 06:03:30 -05:00

plugin-inventory.md

fix(plugins): surface manifest-only bundled capabilities (#121354)

2026-08-09 19:43:49 -07:00

plugin-permission-requests.md

fix(plugins): enforce hook security invariants (#115701)

2026-07-29 16:10:34 +08:00

reference.md

fix(plugins): surface manifest-only bundled capabilities (#121354)

2026-08-09 19:43:49 -07:00

sdk-agent-harness.md

feat(docs-ci): validate docs config examples against the schema (#121336)

2026-08-10 07:57:56 -07:00

sdk-channel-inbound.md

refactor(whatsapp): keep inbound boundary transport-private

2026-07-29 20:34:55 -05:00

sdk-channel-ingress.md

feat(channels): add unified implicit mention policy (#108829)

2026-07-16 17:16:01 -07:00

sdk-channel-message.md

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

sdk-channel-outbound.md

fix(matrix): reconcile durable sends after response loss

2026-08-01 02:45:12 -05:00

sdk-channel-plugins.md

fix(security): report DM isolation from effective routing (#121741)

2026-08-10 15:34:37 -07:00

sdk-channel-turn.md

…

sdk-entrypoints.md

feat(gateway): session-catalog terminal start plans behind cliAgents gate (#121020)

2026-08-09 08:13:39 -07:00

sdk-migration.md

refactor(gateway): remove dead rpc surfaces (#121387)

2026-08-10 02:41:57 -07:00

sdk-overview.md

feat(gateway): live Desktop observer for cloud workers (Labs) (#120727)

2026-08-09 09:37:01 -07:00

sdk-provider-plugins.md

feat(talk): broker realtime sideband control (#121054)

2026-08-09 05:14:20 -07:00

sdk-runtime.md

fix: bound bot loop retry state

2026-08-09 20:33:03 +01:00

sdk-setup.md

refactor(gateway): remove deferred channel load flag; 503 plugin routes until runtime ready (#117852)

2026-08-02 00:36:21 -07:00

sdk-subpaths.md

refactor(channels): flatten channel-turn dispatch naming layers (#121308)

2026-08-09 22:22:46 -07:00

sdk-testing.md

test(plugin-sdk): remove repo-local test helper fossils (#121190)

2026-08-09 11:44:18 -07:00

teams-meetings.md

feat(meetings): enable Linux Chrome talk-back (#118451)

2026-08-09 02:13:17 -07:00

tool-plugins.md

docs(plugins): link setup-input deprecations to the migration pattern and document reader sweeps (#112692)

2026-07-22 11:04:19 -07:00

vault.md

Add Vault SecretRef plugin (#89255)

2026-07-09 05:30:12 -05:00

voice-call.md

fix(voice-call): prevent unrelated session recall in fast context (#118498)

2026-08-03 03:38:02 -07:00

webhooks.md

feat(secrets): add SQLite-backed secret store (#121559)

2026-08-10 07:08:40 -07:00

workboard.md

fix(workboard): diagnose archived cards still in an active status (#116359) (#117290)

2026-08-02 07:30:52 -07:00

zalouser.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

zoom-meetings.md

feat(meetings): enable Linux Chrome talk-back (#118451)

2026-08-09 02:13:17 -07:00