Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

japer-technology / github-openclaw Public template

forked from openclaw/openclaw

Notifications You must be signed in to change notification settings
Fork 0
Star 2

Code
Issues 2
Pull requests 3
Actions
Projects
Security
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Cool!#26

Merged

japertechnology merged 1889 commits intojaper-technology:mainjaper-technology/github-openclaw:mainfrom

openclaw:mainopenclaw/openclaw:mainCopy head branch name to clipboard

Feb 26, 2026

Conversation Commits1889 (1889)Checks Files changed

Merged

Cool!#26
japertechnology merged 1889 commits intojaper-technology:mainfrom
openclaw:main

Commits

This pull request is big! We're only showing the most recent 250 commits

Commits on Feb 26, 2026

fix(podman): default run-openclaw-podman bind to loopback (land #27491, thanks @robbyczgw-cla)

steipete
and
robbyczgw-cla
committed
refactor(feishu): unify account-aware tool routing and message body
steipete
committed
chore(pr): guard against dropped changelog refs
steipete
committed
fix: harden workspace boundary path resolution
steipete
committed
fix: suppress SUBAGENT_SPAWN_ACCEPTED_NOTE for cron isolated sessions

Lukavyi
authored and
obviyus
committed
fix: use canonical cron session detection for spawn note
obviyus
committed
feat(cron): add --session-key option to cron add/edit CLI commands

authored and
steipete
committed
fix(cron): prevent isolated hook session-key double-prefixing (land #27333, @MaheshBhushan)

steipete
and
MaheshBhushan
committed
fix: block broken-symlink sandbox path escapes
steipete
committed
docs: add changelog note for sandbox alias fix
steipete
committed
fix(security): harden root file guards and host writes
steipete
committed
fix(core): unify session-key normalization and plugin boundary checks
steipete
committed
fix: harden boundary-path canonical alias handling
steipete
committed
fix(queue): harden drain/abort/timeout race handling

committed
chore: Fix broken build protocol:check

huntharo
authored and
obviyus
committed
refactor(reply): split abort cutoff and timeout policy modules
steipete
committed
refactor: dedupe boundary-path canonical checks
steipete
committed
fix(plugins): fallback bundled channel specs when npm install returns 404 (#12849)
vincentkoc
authored
fix(gateway): pin paired reconnect metadata for node policy
steipete
committed
fix(auto-reply): gate inline directives on resolved auth (#27248)

steipete
and
shenghui kevin
committed
fix(apps): sign gateway device auth with v3 payload
steipete
committed
fix(ios): remove talk voice directive hint
ngutman
committed
fix: record ios talk voice directive hint removal (#27543) (thanks @ngutman)
ngutman
committed
fix(auth-profiles): accept mode/apiKey aliases to prevent silent credential loss

byungsker
authored and
steipete
committed
docs(changelog): note auth-profile alias normalization (#26950) (thanks @byungsker)
steipete
committed
fix(models): normalize trailing @profile parsing across resolver paths

committed
fix(typing): force cleanup when dispatch idle is never received

Sid-Qin
authored and
steipete
committed
fix(telegram): degrade command sync on BOT_COMMANDS_TOO_MUCH

Sid-Qin
authored and
steipete
committed
fix(config): warn and ignore unknown plugin entry keys

Sid-Qin
authored and
steipete
committed
fix(sessions): add fix-missing cleanup path for orphaned store entries

Sid-Qin
authored and
steipete
committed
fix: enable store=true for Azure OpenAI Responses API

authored and
steipete
committed
fix: preserve operator scopes for shared auth connections

Kevin Shenghui
authored and
steipete
committed
fix(slack): suppress NO_REPLY before Slack API call

Sid-Qin
authored and
steipete
committed
fix: land NO_REPLY announce suppression and auth scope assertions

steipete
and
kevinWangSheng
committed
refactor(auth-profiles): unify coercion and add rejected-entry diagnostics
steipete
committed
refactor(gateway): unify v3 auth payload builders and vectors
steipete
committed
fix(browser): land PR #23962 extension relay CORS fix

steipete
and
miloudbelarebia
committed
fix(gateway): allow cron commands to use gateway.remote.token (#27286)

zhangzhefang-github
and
steipete
authored
fix(browser): land PR #26015 query-token auth for /json relay routes

steipete
and
Sid-Qin
committed
fix(browser): land PR #24142 flush relay pending timers on stop

steipete
and
kevinWangSheng
committed
fix(browser): land PR #22571 with safe extension handshake handling

steipete
and
pandego
committed
fix(browser): land PR #21277 dedupe concurrent relay init

steipete
and
HOYALIM
committed
Telegram: improve webhook config guidance and startup fallback

huntharo
authored and
obviyus
committed
fix(telegram): Log bound port if ephemeral (0) is configured

huntharo
authored and
obviyus
committed
fix(telegram): Allow ephemeral webhookPort

huntharo
authored and
obviyus
committed
fix: add changelog entry for telegram webhook updates (#25732) (thanks @huntharo)
obviyus
committed
core(protocol): pnpm protocol:check

huntharo
authored and
obviyus
committed
fix(browser): land PR #11880 decodeURIComponent guardrails

steipete
and
Yida-Dev
committed
Gemini OAuth: resolve npm global shim install layouts (#27585)
vincentkoc
authored
Config: add secret ref schema and redaction foundations

joshavant
authored and
steipete
committed
Config: enforce source-specific SecretRef id validation

joshavant
authored and
steipete
committed
Config: remove unused extension path helper

joshavant
authored and
steipete
committed
Gateway: add eager secrets runtime snapshot activation

joshavant
authored and
steipete
committed
Gateway: avoid double secrets activation at startup

joshavant
authored and
steipete
committed
Secrets: preserve runtime snapshot source refs on write

joshavant
authored and
steipete
committed
Secrets runtime: include sourceConfig in prepared snapshot type

joshavant
authored and
steipete
committed
Gateway: emit one-shot operator events for secrets degraded/recovered

joshavant
authored and
steipete
committed
Gateway: mark restart callback promise as intentionally detached

joshavant
authored and
steipete
committed
Gateway tests: handle async restart callback path

joshavant
authored and
steipete
committed
Secrets: make runtime activation auth loads read-only

joshavant
authored and
steipete
committed
Secrets: keep read-only runtime sync in-memory

joshavant
authored and
steipete
committed
Agents: inject pi auth storage from runtime profiles

joshavant
authored and
steipete
committed
Auth profiles: never persist plaintext when refs are present

joshavant
authored and
steipete
committed
Auth labels: handle token refs and share Pi credential conversion

joshavant
authored and
steipete
committed
Tests: stub discoverAuthStorage in model catalog mocks

joshavant
authored and
steipete
committed
Auth profiles: resolve keyRef/tokenRef outside gateway

joshavant
authored and
steipete
committed
Agents: inject pi auth storage from runtime profiles

joshavant
authored and
steipete
committed
Gateway: add manual secrets reload command

joshavant
authored and
steipete
committed
Gateway: serialize secrets activation across reload paths

joshavant
authored and
steipete
committed
Secrets: add migrate rollback and skill ref support

joshavant
authored and
steipete
committed
Secrets migrate: share helpers and narrow env scrub scope

joshavant
authored and
steipete
committed
Secrets migrate: ensure unique backup ids per write

joshavant
authored and
steipete
committed
Agents: restore auth.json static scrub during pi auth discovery

joshavant
authored and
steipete
committed
Secrets migrate: split plan/apply/backup modules

joshavant
authored and
steipete
committed
Onboard: persist env-backed API keys as secret refs

joshavant
authored and
steipete
committed
Onboard auth: use shared secret-ref helpers

joshavant
authored and
steipete
committed
Auth choice tests: assert env-backed keyRef persistence

joshavant
authored and
steipete
committed
Auth choice tests: expect env-backed key refs

joshavant
authored and
steipete
committed
Onboard: require explicit mode for env secret refs

joshavant
authored and
steipete
committed
Tests: align auth-choice helper expectations with secret mode

joshavant
authored and
steipete
committed
Tests: update onboard credential expectations for explicit ref mode

joshavant
authored and
steipete
committed
Onboard: store OpenAI auth in profiles instead of .env

joshavant
authored and
steipete
committed
Tests: narrow OpenAI default model assertion typing

joshavant
authored and
steipete
committed
Onboard auth: remove leftover merge marker

joshavant
authored and
steipete
committed
Onboard OpenAI: explicit secret-input-mode behavior

joshavant
authored and
steipete
committed
Onboard: move volcengine/byteplus auth from .env to profiles

joshavant
authored and
steipete
committed
Onboard non-interactive: avoid rewriting profile-backed keys

joshavant
authored and
steipete
committed
Secrets: keep read-only runtime sync in-memory

joshavant
authored and
steipete
committed
Onboard: require explicit mode for env secret refs

joshavant
authored and
steipete
committed
Docs: document secrets refs runtime and migration

joshavant
authored and
steipete
committed
Docs: add secrets and CLI secrets reference pages

joshavant
authored and
steipete
committed
Docs: address review feedback on secrets docs

joshavant
authored and
steipete
committed
feat(secrets): finalize external secrets runtime and migration hardening

joshavant
authored and
steipete
committed
fix(secrets): harden sops migration sops rule matching

joshavant
authored and
steipete
committed
feat(secrets): expand onboarding secret-ref flows and custom-provider parity

joshavant
authored and
steipete
committed
test: sops invocation assertion

joshavant
authored and
steipete
committed
feat(security): add provider-based external secrets management

joshavant
authored and
steipete
committed
docs(secrets): align provider model and add exec resolver coverage

joshavant
authored and
steipete
committed
test(secrets): skip strict file-permission resolver tests on windows

joshavant
authored and
steipete
committed
test(secrets): skip windows ACL-sensitive file-provider runtime tests

joshavant
authored and
steipete
committed
test(session): normalize parent fork parentSession path assertion

joshavant
authored and
steipete
committed
fix(secrets): enforce file provider read timeouts

joshavant
authored and
steipete
committed
fix(secrets): align ref contracts and non-interactive ref persistence

joshavant
authored and
steipete
committed
feat(secrets): replace migrate flow with audit/configure/apply

joshavant
authored and
steipete
committed
fix(secrets): make apply idempotent and keep audit read-only

joshavant
authored and
steipete
committed
feat(secrets): finalize mode rename and validated exec docs

joshavant
authored and
steipete
committed
feat(secrets): allow opt-in symlink exec command paths

joshavant
authored and
steipete
committed
docs(secrets): add direct 1password exec example

joshavant
authored and
steipete
committed
fix(secrets): harden apply and audit plan handling

joshavant
authored and
steipete
committed
test(secrets): cover skill migration and symlinked exec command flow

joshavant
authored and
steipete
committed
docs(secrets): clarify partial migration guidance

joshavant
authored and
steipete
committed
fix(test): skip exec-backed audit batching assertion on windows

joshavant
authored and
steipete
committed
fix(secrets): harden plan target paths and ref-only auth profiles
steipete
committed
docs(secrets): add dedicated apply plan contract page
steipete
committed
fix: stabilize secrets land + docs note (#26155) (thanks @joshavant)
steipete
committed
docs(gateway): clarify remote token local fallback semantics
steipete
committed
docs(changelog): highlight external secrets management (#26155)
steipete
committed
docs(changelog): reorder unreleased changes by user interest
steipete
committed
docs(changelog): reorder all unreleased entries by user impact
steipete
committed
fix(browser): land PR #27617 relay reconnect resilience
steipete
committed
fix(ci): sync protocol models and acpx version
steipete
committed
fix: tolerate missing pi-coding-agent backend export
steipete
committed
fix: detect OpenClaw-managed launchd/systemd services in process respawn

taw0002
authored and
steipete
committed
fix: clean stale gateway PIDs before triggerOpenClawRestart calls launchctl/systemctl

Sid-Qin
authored and
steipete
committed
feat(agents): default codex transport to websocket-first
steipete
committed
chore(deps): refresh grammy and @types/node
steipete
committed
fix(gateway): add ThrottleInterval to launchd plist to prevent restart loop

Kevin Shenghui
authored and
steipete
committed
docs(changelog): unify gateway restart-loop fixes
steipete
committed
fix(security): centralize dm/group allowlist auth composition
steipete
committed
fix(telegram): split stop-created preview finalization path

steipete
and
obviyus
committed
fix(security): bind node system.run approvals to env
steipete
committed
fix(pi): stop history image reinjection token blowup
steipete
committed
refactor(restart): extract stale pid cleanup and supervisor markers
steipete
committed
fix(bluebubbles): allow configured host for attachment SSRF guard

steipete
and
lailoo
committed
fix(msteams): Send invokeResponse immediately to prevent Teams timeout (#27632)

AI Assistant
authored and
steipete
committed
fix(msteams): Fix test timing for async file upload handling

AI Assistant
authored and
steipete
committed
fix(msteams): Fix code formatting

AI Assistant
authored and
steipete
committed
fix: finalize teams file-consent timeout landing (#27641) (thanks @scz2011)
steipete
committed
refactor: unify channel/plugin ssrf fetch policy and auth fallback
steipete
committed
refactor(pi): extract history image prune helpers
steipete
committed
docs: add unreleased security note for msteams ssrf hardening
steipete
committed
refactor(pi): simplify image reference detection
steipete
committed
fix: set authHeader: true by default for MiniMax API provider (#27622)

authored
feat(android): add device invoke protocol commands
obviyus
committed
feat(android): add device status and info handler
obviyus
committed
feat(android): wire device commands into runtime
obviyus
committed
refactor(android): remove dead thermal sdk branch
obviyus
committed
fix(android): require validated network for device status
obviyus
committed
docs: add changelog for android device node commands (#27664) (thanks @obviyus)
obviyus
committed
refactor(exec-approvals): unify system.run binding and generate host env policy
steipete
committed
fix: harden typing lifecycle and cross-channel suppression
steipete
committed
fix: harden plugin route auth path canonicalization
steipete
committed
test(exec-approvals): cover v1 binding precedence and mismatch mapping
steipete
committed
Mattermost: avoid raw fetch in monitor media download
shakkernerd
committed
protocol: regenerate Swift models for exec env field
shakkernerd
committed
refactor: share gateway security path canonicalization
steipete
committed
fix(gateway): preserve turn-origin messageChannel in agent runs
steipete
committed
refactor: unify typing dispatch lifecycle and policy boundaries
steipete
committed
fix(agents): harden compaction and reset safety

committed
test(agents): add compaction and workspace reset regressions
steipete
committed
refactor: unify dm policy store reads and reason codes
steipete
committed
fix(discord): avoid invalid /acp native option payload
steipete
committed
docs(acp): expand /acp operator playbook
steipete
committed
add me to Maintainers list
joshavant
committed
docs(security): scope obfuscation parity reports as hardening
steipete
committed
docs(security): clarify Teams fileConsent uploadUrl report scope
steipete
committed
refactor(security): enforce v1 node exec approval binding
steipete
committed
feat(auto-reply): make agent time-aware with message timestamps

liuy
authored and
shakkernerd
committed
test(auto-reply): cover inbound timestamp guard
shakkernerd
committed
docs(changelog): add PR #17017 entry
shakkernerd
committed
fix: enforce explicit group auth boundaries across channels
steipete
committed
fix: restore dm command and self-chat auth behavior
steipete
committed
style: format auth boundary updates
steipete
committed
fix(cli): gateway status probe with TLS when bind=lan

liuy
authored and
shakkernerd
committed
fix(cli): add TLS daemon-status probe regression coverage
shakkernerd
committed
fix(cli): scope daemon status TLS fingerprint to local probes
shakkernerd
committed
test(cli): tighten daemon status TLS mock typings
shakkernerd
committed
fix(cli): list all supported auth modes in gateway run --auth help

s1korrrr
authored and
steipete
committed
fix: align gateway run auth modes (#27469) (thanks @s1korrrr)
steipete
committed
Add contributor Jonathan Taylor to CONTRIBUTING.md
visionik
authored
fix: add nimrod gutman maintainer profile (#27840) (thanks @ngutman)
ngutman
committed
fix: harden dm command authorization in open mode
steipete
committed
fix(windows): normalize namespaced path containment checks
shakkernerd
committed
refactor(cli): dedupe gateway run mode parsing
steipete
committed
fix(config): add openai-codex-responses to ModelApiSchema

AytuncYildizli
authored and
steipete
committed
fix: align codex model api schema/type coverage (#27501) (thanks @AytuncYildizli)
steipete
committed
refactor(config): dedupe model api definitions
steipete
committed
CI: add maintainer ping auto-response
thewilloftheshadow
committed
fix(tui): preserve streamed text during tool call transitions

AI Assistant
authored and
steipete
committed
fix: narrow finalize boundary-drop guard (#27711) (thanks @scz2011)
steipete
committed
refactor(tui): simplify stream boundary-drop modes
steipete
committed
Changelog: add entries for PR #12849 and #27585 (#27887)
vincentkoc
authored
fix(browser): stop wrapping application errors with Can't reach message

TarasShyn
authored and
steipete
committed
fix: pass sessionKey to deliverOutboundPayloads for message:sent hook dispatch

Lucas Teixeira Campos Araujo
authored and
steipete
committed
fix: complete sessionKey forwarding for message:sent hook (#27584) (thanks @qualiobra)
steipete
committed
fix(matrix): preserve sender labels in Matrix BodyForAgent
steipete
committed
refactor(matrix): dedupe sender label resolution for inbound bodies
steipete
committed
refactor: unify outbound session context wiring
steipete
committed
fix(gemini-oauth): align OAuth project discovery metadata and endpoint fallbacks (#16684)
vincentkoc
authored
chore(onboarding): add explicit account-risk warning for Gemini CLI OAuth and docs (#16683)
vincentkoc
authored
fix(voice-call): bind webhook dedupe to verified request identity
steipete
committed
feat(config): add embedded pi project settings policy
steipete
committed
fix(agents): harden embedded pi project settings loading
steipete
committed
fix(security): harden node exec approvals against symlink rebind
steipete
committed
refactor(voice-call): share header and guarded api helpers
steipete
committed
refactor(voice-call): enforce verified webhook key contract
steipete
committed
test(voice-call): cover verification key and header helpers
steipete
committed
docs: enforce repo-relative file refs in AGENTS
steipete
committed
refactor(extensions): use scoped pairing helper
steipete
committed
refactor(security): enforce account-scoped pairing APIs
steipete
committed
refactor(node-host): split system.run plan and allowlist internals
steipete
committed
refactor(gateway): share node command catalog
steipete
committed
refactor(gateway): centralize system.run approval context and errors
steipete
committed
refactor(cli): decompose nodes run approval flow
steipete
committed
fix(nodes): resolve default node when multiple canvas-capable nodes are connected

authored and
steipete
committed
fix: add nodes default-node regression test (#27444) (thanks @carbaj03)
steipete
committed
fix(agent): forward resolved outbound session context for delivery
steipete
committed
fix(browser): accept fill fields without explicit type

Rick
authored and
steipete
committed
fix: browser fill default type parity (#27662) (thanks @Uface11)
steipete
committed
test(gateway): align outbound session assertion shape
steipete
committed
docs(changelog): credit reporter for pairing isolation fix
steipete
committed
refactor(browser): unify fill field normalization
steipete
committed
fix: forward resolved session key in agent delivery (follow-up #27584 by @qualiobra)

steipete
and
Lucas Teixeira Campos Araujo
committed
refactor(nodes): share default selection and tighten node.list fallback
steipete
committed
test: fix pairing/daemon assertion drift
steipete
committed
test: fix TS2783 in nodes-utils helper
steipete
committed
docs: reorder unreleased 2026.2.26 changelog entries
steipete
committed
fix(cli): accept node24 executable names in argv reparse
steipete
committed
fix: preserve assistant usage snapshots during compaction cleanup
steipete
committed
refactor(channels): unify dm pairing policy flows
steipete
committed
fix(models): extend gpt-5.3-codex forward compat to github-copilot

Sid-Qin
authored and
steipete
committed
fix(delivery-queue): change break to continue to prevent head-of-line blocking

Jimmy-xuzimo
authored and
steipete
committed
fix: harden delivery recovery backoff eligibility and tests (#27710) (thanks @Jimmy-xuzimo)
steipete
committed
docs(security): clarify parity-only command-risk reports
steipete
committed
refactor(daemon): unify runtime binary detection
steipete
committed
refactor(outbound): split recovery counters and normalize legacy retry entries
steipete
committed
chore: silence onboard warning noise
steipete
committed
fix(googlechat): keep startAccount pending until abort to prevent restart loop

junsuwhy
authored and
steipete
committed
fix: add googlechat lifecycle regression test (#27384) (thanks @junsuwhy)
steipete
committed
fix: harden temp dir perms for umask 0002 (landed from #27860 by @stakeswky)

steipete
and
stakeswky
committed
fix(nextcloud-talk): keep startAccount pending until abort (#27897)
steipete
committed
test: align compaction hook usage expectation
steipete
committed
fix(cli): make gateway --force resilient to lsof EACCES
steipete
committed
test: align compaction hook usage expectation
steipete
committed
fix: reject dmPolicy="allowlist" with empty allowFrom across all channels

widingmarcus-cyber
authored and
steipete
committed
fix: skip allowFrom validation at account level (inherits from parent)

widingmarcus-cyber
authored and
steipete
committed
fix: enforce dm allowFrom inheritance across account channels (#27936) (thanks @widingmarcus-cyber)
steipete
committed
Protocol: regenerate Swift models for systemRunPlanV2
philipp-spiess
committed
docs(changelog): reorder docker gateway fix by user impact
steipete
committed
chore(release): cut 2026.2.26-beta.1
steipete
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.