Commit graph

695 commits

Author SHA1 Message Date
Brad Groux
398d6024af
Add sandbox policy presets (#727) 2026-06-18 14:44:27 -05:00
dependabot[bot]
8d7d0b7fc2
build(deps): bump production dependencies
Update the production-dependencies group.
2026-06-18 13:35:26 -05:00
Brad Groux
ac0687ac72
Prepare v5.0.1 patch release
Bump Veritas Kanban to v5.0.1, update release docs, and fix the local macOS packaging smoke check.
2026-06-12 03:19:52 -05:00
Brad Groux
98f4b25991
Complete v5 release evidence gates
Some checks failed
CI / Lint & Type Check (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Build (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
Backfill v5.0.0 evidence, fix Scheduled QA SQLite full-profile coverage, and stabilize mobile/PWA release gates.
2026-06-09 07:33:46 -05:00
dependabot[bot]
2bd5e6fd65
build(deps): bump production dependencies
---
updated-dependencies:
- dependency-name: "@mantine/core"
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@mantine/form"
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@mantine/hooks"
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@mantine/modals"
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@mantine/notifications"
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@openai/codex-sdk"
  dependency-version: 0.138.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.9.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron-builder
  dependency-version: 26.15.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: electron-updater
  dependency-version: 6.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: hono
  dependency-version: 4.12.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com>
2026-06-09 06:18:27 -05:00
dependabot[bot]
31359ebebf
build(deps): bump @eslint/js to 10.0.1
* build(deps-dev): bump @eslint/js from 9.38.0 to 10.0.1

Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.38.0 to 10.0.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Resolve eslint js 10 lint failures

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brad Groux <3053586+BradGroux@users.noreply.github.com>
2026-06-09 06:16:16 -05:00
Brad Groux
aa062d79b2
feat(tasks): soft-delete tasks into archive
* feat(tasks): soft-delete tasks into archive

* Harden soft-delete restore behavior

* Avoid async task directory setup race

---------

Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-06-09 06:01:57 -05:00
dependabot[bot]
261a591680
build(deps): bump eslint to 10.4.1
Bumps [eslint](https://github.com/eslint/eslint) from 9.38.0 to 10.4.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v9.38.0...v10.4.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.4.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 05:55:27 -05:00
Brad Groux
9a9fe0b162
Allow current agent attempt payloads (#699) 2026-06-07 00:57:18 -05:00
Brad Groux
f82741fde4
Add local LLM agent providers (#695)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
2026-06-06 15:26:12 -05:00
Brad Groux
1c7853cf99 Fix desktop clean install startup and layout 2026-06-06 00:59:23 -05:00
Brad Groux
29630c7e4b Prepare v5.0.0 release 2026-06-05 18:16:43 -05:00
Brad Groux
13864ab2f1
Prove debug bundle redaction coverage
Prove debug bundle redaction coverage
2026-06-05 15:16:38 -05:00
Brad Groux
bd6d74e1d4
Reject newer SQLite schema versions
Reject newer SQLite schema versions
2026-06-05 15:05:16 -05:00
Brad Groux
1c96a326aa
Enforce v5 password-session boundary
Limit password-session cookies to local-owner loopback clients and document device/session-token requirements for remote and multi-user v5 GA access.
2026-06-05 14:53:17 -05:00
Brad Groux
446def7e8d
Add configurable board columns
Adds configurable board columns and dynamic task statuses across the board, server validation, summaries, CLI, MCP, and docs.

Closes #640.
2026-06-05 11:44:10 -05:00
Brad Groux
d796c3df27
Add session template recommendations (#638) 2026-06-05 10:53:40 -05:00
Brad Groux
d8af5b56ed
Add OpenClaw posture health panel (#637) 2026-06-05 10:27:08 -05:00
Brad Groux
c3716c1a85
Add agent host routing health (#636) 2026-06-05 10:06:17 -05:00
Brad Groux
0b33699684
Add editable time breakdown exports (#635) 2026-06-05 09:43:04 -05:00
Brad Groux
f6f0bd31ca
Add source-backed evidence timeline (#634) 2026-06-05 09:24:54 -05:00
Brad Groux
835611fdb5
Add scheduled deliverables due runner (#633) 2026-06-05 09:00:24 -05:00
Brad Groux
f7d442595b
Add operations digest UI and filters (#632) 2026-06-05 08:45:15 -05:00
Brad Groux
00ba51f252
Restrict work product source link schemes (#628) 2026-06-05 00:14:46 -07:00
Brad Groux
aa38562373
Enforce webhook response body limits while streaming (#627) 2026-06-04 23:55:33 -07:00
Brad Groux
59f8b6155b
Separate OpenClaw localhost and private IP policy (#626) 2026-06-04 23:22:34 -07:00
Brad Groux
12f6f56e8e
Pin outbound requests to validated DNS answers (#625)
* Pin outbound requests to validated addresses

* Update Clawdbot webhook transport tests
2026-06-04 23:08:48 -07:00
Brad Groux
7bb416b23e
Fail closed for Prometheus metrics exposure (#624) 2026-06-04 22:47:13 -07:00
Brad Groux
b93adbcb9f
Redact settings webhook URLs (#623)
* Redact settings webhook URLs

* Use full settings fixtures in route coverage
2026-06-04 22:35:50 -07:00
Brad Groux
772385d374
Harden docs path containment (#622) 2026-06-04 22:14:13 -07:00
Brad Groux
933e4145f9
Allowlist Codex workflow commands (#621) 2026-06-04 21:59:14 -07:00
Brad Groux
777a760e4d
Sanitize generated report HTML (#620) 2026-06-04 21:42:44 -07:00
Brad Groux
0a0e751a38
Enforce local agent control capability (#619) 2026-06-04 21:28:58 -07:00
Brad Groux
973be6bcf3
Require execute permission for Codex review (#618) 2026-06-04 21:15:56 -07:00
Brad Groux
1be11c3d6a
Pass minimal env to Codex sessions (#617) 2026-06-04 21:03:35 -07:00
Brad Groux
61f54a53b1
Protect workflow run context keys
Reject caller overrides for server-owned workflow run context. Closes #599.
2026-06-04 20:49:04 -07:00
Brad Groux
e3e089bc7e
Enforce Codex workflow tool policies
Block Codex workflow steps when role tool policies cannot be enforced. Closes #598.
2026-06-04 20:25:13 -07:00
Brad Groux
49745bee0d
Fix session JWT revocation
Add session version revocation for password changes and recovery resets. Closes #597.
2026-06-04 20:15:16 -07:00
Brad Groux
c8d66be719
Add context provider health shell
Refs #579
Refs #594
2026-06-04 18:24:45 -07:00
Brad Groux
3e75ad034c
Add agent event search timeline targets
Closes #587
2026-06-04 18:07:47 -07:00
Brad Groux
bff924f4a7
Add agent operations digest API (#593) 2026-06-04 17:42:41 -07:00
Brad Groux
854b6429ed
Add agent health classifier (#592) 2026-06-04 17:27:54 -07:00
Brad Groux
438301dd1e
Add watcher continuation policy gates (#591)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Workspace Unit Tests (push) Waiting to run
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
2026-06-04 16:01:16 -07:00
Cob-AI
f1366996ec
Fix squad chat lifecycle enforcement (#393) 2026-06-04 15:44:26 -07:00
Cob-AI
092abae3d1
Fix content-disposition v2 import (#391) 2026-06-04 15:44:14 -07:00
Brad Groux
93b8eec64a
Stabilize Playwright E2E isolation
Merged Playwright E2E isolation fixes for issue #568 after local and CI verification.
2026-06-04 15:21:06 -07:00
Brad Groux
a439791abb
Protect Prometheus metrics in production (#576) 2026-06-04 14:11:59 -07:00
Brad Groux
14cb4b9339
Resolve dependency audit advisories (#575) 2026-06-04 14:01:45 -07:00
dependabot[bot]
c8c7f6b046
Bump the production-dependencies group across 1 directory with 26 updates (#534)
---
updated-dependencies:
- dependency-name: "@mantine/core"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@mantine/form"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@mantine/hooks"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@mantine/modals"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@mantine/notifications"
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@openai/codex-sdk"
  dependency-version: 0.136.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@types/react"
  dependency-version: 19.2.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.60.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.60.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: content-disposition
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: express-rate-limit
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: helmet
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: hono
  dependency-version: 4.12.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lint-staged
  dependency-version: 17.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: swagger-jsdoc
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: tsx
  dependency-version: 4.22.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-04 13:43:47 -07:00
Brad Groux
2cd7fe2ad2 Add prompt template import command 2026-06-04 01:01:14 -07:00