929a3725d3
docs: canonicalize docs paths and align zh navigation ( #11428 )
...
* docs(navigation): canonicalize paths and align zh nav
* chore(docs): remove stray .DS_Store
* docs(scripts): add non-mint docs link audit
* docs(nav): fix zh source paths and preserve legacy redirects (#11428 ) (thanks @sebslight)
* chore(docs): satisfy lint for docs link audit script (#11428 ) (thanks @sebslight)
2026-02-07 15:40:35 -05:00
a13ff55bd9
Security: Prevent gateway credential exfiltration via URL override ( #9179 )
...
* Gateway: require explicit auth for url overrides
* Gateway: scope credential blocking to non-local URLs only
Address review feedback: the previous fix blocked credential fallback for
ALL URL overrides, which was overly strict and could break workflows that
use --url to switch between loopback/tailnet without passing credentials.
Now credential fallback is only blocked for non-local URLs (public IPs,
external hostnames). Local addresses (127.0.0.1, localhost, private IPs
like 192.168.x.x, 10.x.x.x, tailnet 100.x.x.x) still get credential
fallback as before.
This maintains the security fix (preventing credential exfiltration to
attacker-controlled URLs) while preserving backward compatibility for
legitimate local URL overrides.
* Security: require explicit credentials for gateway url overrides (#8113 ) (thanks @victormier)
* Gateway: reuse explicit auth helper for url overrides (#8113 ) (thanks @victormier)
* Tests: format gateway chat test (#8113 ) (thanks @victormier)
* Tests: require explicit auth for gateway url overrides (#8113 ) (thanks @victormier)
---------
Co-authored-by: Victor Mier <victormier@gmail.com>
2026-02-04 18:59:44 -05:00
d3ba57b7d7
feat: add configurable web_fetch maxChars cap
2026-02-03 18:03:53 -08:00
abcaa8c7a9
Docs: add nav titles across docs ( #5689 )
2026-01-31 15:04:03 -06:00
8cab78abbc
chore: Run `pnpm format:fix`.
2026-01-31 21:13:13 +09:00
9a7160786a
refactor: rename to openclaw
2026-01-30 03:16:21 +01:00
6d16a658e5
refactor: rename clawdbot to moltbot with legacy compat
2026-01-27 12:21:02 +00:00
e7fdccce39
refactor: route browser control via gateway/node
2026-01-27 03:24:54 +00:00
8e159ab0b7
fix: follow up config.patch restarts/docs/tests ( #1653 )
...
* fix: land config.patch restarts/docs/tests (#1624 ) (thanks @Glucksberg)
* docs: update changelog entry for config.patch follow-up (#1653 ) (thanks @Glucksberg)
2026-01-24 23:33:13 +00:00
b76cd6695d
feat: add beta googlechat channel
2026-01-24 23:30:45 +00:00
ab000398be
fix: resolve session ids in session tools
2026-01-24 11:09:11 +00:00
15620b1092
fix: guard tool allowlists with warnings
2026-01-24 07:38:42 +00:00
309fcc5321
fix: publish llm-task docs and harden tool
2026-01-24 01:44:51 +00:00
00fd57b8f5
fix: honor wildcard tool allowlists
2026-01-24 01:30:44 +00:00
ecfddb7807
docs: fix lobster links
2026-01-23 02:51:33 +00:00
bc4d8ce398
docs: link Lobster and OpenProse
2026-01-23 01:29:17 +00:00
0f7f7bb95f
fix: msteams attachments + plugin prompt hints
...
Co-authored-by: Christof <10854026+Evizero@users.noreply.github.com>
2026-01-22 03:37:29 +00:00
57f3d209de
docs: expand lobster guides
2026-01-22 03:25:13 +00:00
39e24c9937
docs: update node CLI references
2026-01-21 16:48:42 +00:00
d802844bd6
fix: gate gateway restarts and discord abort reconnects
2026-01-19 00:15:45 +00:00
ae0b4c4990
feat: add exec host routing + node daemon
2026-01-18 07:46:00 +00:00
efdb33c975
feat: add exec host approvals flow
2026-01-18 04:27:41 +00:00
0674f1fa3c
feat: add exec approvals allowlists
2026-01-18 01:34:31 +00:00
c4ea25a509
feat: add exec pty support
2026-01-17 04:57:11 +00:00
c54c665f97
feat: enhance web_fetch fallbacks
2026-01-17 00:00:49 +00:00
4275ed68a2
fix(browser): default to chrome extension takeover
2026-01-15 09:02:42 +00:00
042b65dfcc
feat: add web tools config to configure
2026-01-15 05:08:56 +00:00
f275cc180b
feat: add web tools
2026-01-15 04:07:40 +00:00
574b6ab5b1
docs: document provider tool policies
2026-01-15 03:55:20 +00:00
3eb48cbea7
docs: complete channels rename sweep
2026-01-13 08:40:39 +00:00
780a43711f
feat(tools): add tool profiles and group shorthands
2026-01-13 06:30:20 +00:00
ffc465394e
fix: enforce message context isolation
2026-01-13 01:19:14 +00:00
8ff09f8337
feat(image): auto-pair image model
2026-01-12 17:50:47 +00:00
d0a78da54f
docs: update browser snapshot refs
2026-01-12 08:55:02 +00:00
8b4bdaa8a4
feat: add apply_patch tool (exec-gated)
2026-01-12 03:42:56 +00:00
98337a14b3
fix: rename bash tool to exec ( #748 ) (thanks @myfunc)
2026-01-12 02:49:55 +00:00
cf0c72a557
feat: add plugin architecture
2026-01-11 12:11:12 +00:00
20b4e2b859
fix: stabilize live probes and docs
2026-01-11 02:26:39 +00:00
bd10f3d3f1
feat: allow session_status in sandbox
2026-01-09 23:41:57 +00:00
a25922a21f
fix: clarify sessions_send delivery semantics
2026-01-10 00:34:24 +01:00
5fa26bfec7
feat: add per-agent elevated controls
2026-01-09 20:42:19 +00:00
7b81d97ec2
feat: wire multi-agent config and routing
...
Co-authored-by: Mark Pors <1078320+pors@users.noreply.github.com>
2026-01-09 12:48:42 +00:00
721183e259
feat: unify message cli and tools
2026-01-09 08:30:24 +01:00
0a026fea1c
fix: disable restart by default
2026-01-09 05:49:30 +00:00
db22207014
feat: add message tool and CLI
2026-01-09 06:44:20 +01:00
3965c5b4d2
docs: naming sweep and platform wording
2026-01-08 23:25:51 +01:00
dc1992cbb5
docs: note elevated no-op when unsandboxed
2026-01-08 23:18:33 +01:00
d38a8d7076
docs: clarify elevated sandbox behavior
2026-01-08 23:18:33 +01:00
a6c309824e
docs: refresh and simplify docs
2026-01-08 23:07:20 +01:00
014667e00b
fix: tighten group elevated targeting
2026-01-08 22:57:18 +01:00
Seb Slight
Gustavo Madeira Santana
Peter Steinberger
Seb Slight
cpojer
iHildy