3 people aba5b42e3a fix: skip sender allowlist check for group messages in HandleMessage (#101) ...

HandleMessage() always checked IsAllowed(senderID), which re-gates
individual senders against the allowlist even after the channel-specific
group policy (checkGroupPolicy) already approved access.

This caused group members who weren't individually listed in AllowFrom
to be silently blocked — even when GroupPolicy was set to "open" or the
group ID was in the allowlist.

Affected channels: Zalo Personal, Slack (any channel using HandleMessage
with peerKind "group"). Telegram was unaffected because it publishes
directly to the bus.

Now HandleMessage only enforces the allowlist for DMs. Group access
control is fully delegated to each channel's checkGroupPolicy.

Co-authored-by: Luvu182 <208665161+Luvu182@users.noreply.github.com>

2026-03-09 18:55:56 +07:00

..

agent

feat(agent): improve system prompt structure for better LLM adherence

2026-03-09 18:33:12 +07:00

bootstrap

feat(metadata): add JSONB metadata to sessions, profiles, and pairing

2026-03-08 15:42:44 +07:00

bus

feat(media): persistent media storage, read_document tool, and pipeline refactor

2026-03-08 14:00:34 +07:00

cache

feat(cache): add build-tag-gated Redis cache backend

2026-03-07 19:27:24 +07:00

channels

fix: skip sender allowlist check for group messages in HandleMessage (#101)

2026-03-09 18:55:56 +07:00

config

fix: use platform type instead of instance name in system prompt + Zalo group routing (#90)

2026-03-09 08:30:45 +07:00

cron

fix(cron): route jobs through scheduler for concurrency control and parallel execution

2026-02-28 16:53:15 +07:00

crypto

Initial commit: GoClaw AI agent gateway

2026-02-22 14:58:07 +07:00

gateway

feat(kg): add knowledge graph with LLM extraction, traversal, and graph visualization

2026-03-09 17:11:20 +07:00

hooks

feat: Implement agent delegation, quality gates, and a new hooks evaluation system.

2026-02-26 10:15:07 +07:00

http

feat(kg): add knowledge graph with LLM extraction, traversal, and graph visualization

2026-03-09 17:11:20 +07:00

knowledgegraph

feat(kg): add knowledge graph with LLM extraction, traversal, and graph visualization

2026-03-09 17:11:20 +07:00

mcp

feat(agent): improve system prompt structure for better LLM adherence

2026-03-09 18:33:12 +07:00

media

feat(media): persistent media storage, read_document tool, and pipeline refactor

2026-03-08 14:00:34 +07:00

memory

refactor: remove standalone mode, consolidate to managed-only (PostgreSQL) (#70)

2026-03-06 18:51:11 +07:00

oauth

refactor(lint): apply Go best practices across codebase

2026-03-07 20:51:39 +07:00

permissions

feat: Introduce agent teams, agent linking, and advanced agent orchestration features.

2026-02-25 23:24:52 +07:00

providers

fix(claude-cli): check scanner.Err() and increase stream buffer to 10MB (#96)

2026-03-09 15:49:25 +07:00

sandbox

fix(sandbox): rename from openclaw to goclaw for project name consistency (#35)

2026-03-02 07:38:23 +07:00

scheduler

feat: enhance filesystem security with symlink/hardlink protection, implement typing indicators, and improve scheduler queue management for stale requests.

2026-02-26 22:47:59 +07:00

sessions

refactor: remove standalone mode, consolidate to managed-only (PostgreSQL) (#70)

2026-03-06 18:51:11 +07:00

skills

feat(skills): add edit modal, drag-and-drop upload, fix frontmatter stripping

2026-03-08 00:16:33 +07:00

store

feat(kg): add knowledge graph with LLM extraction, traversal, and graph visualization

2026-03-09 17:11:20 +07:00

tools

fix(kg): improve search tool UX and graph layout

2026-03-09 17:21:13 +07:00

tracing

feat(media): persistent media storage, read_document tool, and pipeline refactor

2026-03-08 14:00:34 +07:00

tts

Initial commit: GoClaw AI agent gateway

2026-02-22 14:58:07 +07:00

upgrade

feat(kg): add knowledge graph with LLM extraction, traversal, and graph visualization

2026-03-09 17:11:20 +07:00