Qin Haojie
ff258768c2
feat(memory): 引入 User/Peer 记忆隔离模型 ( #2236 )
...
* feat(memory): introduce user and peer memory isolation
Unify agent-scoped memory behavior into user-owned memory spaces, add peer_id compatibility for session and retrieval paths, and wire memory_policy through session commit flows.
* feat(memory): align session identity around peer IDs
* feat(search): pass peer id through retrieval
* refactor(memory): remove agent identity from integrations
* fix(memory): isolate peer identity from self extraction
* fix(tau2): provision benchmark user configs
* fix(auth): allow admin keys to access data APIs
* fix(openclaw): enable peer memory policy for peer roles
* fix(openclaw): resolve sender for peer recall
* refactor(session): simplify memory extraction routing
* refactor(ov-cli): reduce formatting-only diff
* refactor(message): remove unused message helpers
* refactor(retrieval): simplify peer target resolution
* refactor(namespace): remove deprecated agent namespace policy
* fix(agent): propagate peer id through integrations
* fix(auth): align integration clients with api-key mode
2026-06-05 10:55:48 +08:00
Qin Haojie
38c324bc97
fix(security): clean up code scanning and runtime findings ( #1596 )
...
* fix(security): clean up code scanning and runtime findings
Harden path and logging boundaries, remove noisy cleanup issues,
and keep observability failures from breaking runtime flows.
* fix(security): close werewolf and feishu validation gaps
Block the remaining path traversal bypass in the werewolf demo,
and validate Feishu hosts on the main parse() entry point.
2026-04-21 10:06:46 +08:00
Qin Haojie