feat: Security, WhatsApp gateway, Hands, API hardening (23 commits)#251

Open

devatsecure wants to merge 30 commits intoRightNow-AI:mainfrom

devatsecure:main

Commits on Mar 3, 2026

Fix clippy warnings and WhatsApp gateway Node 25 compatibility

devatsecure
and
claude
committed
Fix provider test and wizard agent creation bugs

devatsecure
and
claude
committed
Fix hands active state display and WhatsApp gateway reliability

devatsecure
and
claude
committed
Add getMessage handler for Baileys 6.x message decryption

devatsecure
and
claude
committed
Add WhatsApp gateway sender context, number allowlist, and timeout increase

devatsecure
and
claude
committed
Auto-reconnect WhatsApp gateway on any non-logout disconnect

devatsecure
and
claude
committed
Fix WhatsApp gateway critical issues: allowlist, memory leak, socket cleanup

devatsecure
and
claude
committed
Strip <thinking> tags from LLM responses and persist agent config to SQLite

devatsecure
and
claude
committed
Fix critical unsafe blocks and security vulnerabilities

devatsecure
and
claude
committed
Fix hand registry reconciliation and sandbox env var passthrough

devatsecure
and
claude
committed
Add OAuth 1.0a credentials to Twitter Hand for tweet posting

devatsecure
and
claude
committed
Add WhatsApp gateway self-healing and kernel health monitor

devatsecure
and
claude
committed
Harden API security: error sanitization, CORS, HSTS, SSRF prevention

devatsecure
and
claude
committed
Wire up CredentialVault for encrypted secret storage (S2 fix)

devatsecure
and
claude
committed
Add read_only mode to email adapter to prevent unwanted auto-replies

devatsecure
and
claude
committed
Add workflow persistence and DELETE endpoint

devatsecure
and
claude
committed
Fix Total Cost showing $0.00 on dashboard overview

devatsecure
and
claude
committed
Apply approval policy shorthands at boot

devatsecure
and
claude
committed
Fix WhatsApp gateway reconnect instability

devatsecure
and
claude
committed
Shared HTTP client, per-agent rate limiting, and auth whitelist tightening

devatsecure
and
claude
committed
Add arxiv-researcher bundled skill and daily tweet cron job

devatsecure
and
claude
committed
Fix dashboard skills page showing empty list

devatsecure
and
claude
committed
fix(api): pass HTTP client to ClawHubClient in clawhub_skill_code
devatsecure
committed
Post-rebase cleanup: WhatsApp auto-connect, lockfiles, research docs, gitignore

devatsecure
and
claude
committed
Add claude-code-proxy provider for local Agent SDK proxy

devatsecure
and
claude
committed
Handle proxy queue responses (429/408) with Retry-After in Anthropic driver

devatsecure
and
claude
committed
Increase HTTP client timeout from 30s to 120s for LLM requests

devatsecure
and
claude
committed
Fix WhatsApp gateway crash loop with self-healing recovery

devatsecure
and
claude
committed

Commits on Mar 4, 2026

Add 6 new bundled hands: reddit, linkedin, strategist, apitester, devops, analytics

devatsecure
and
claude
committed

Commits on Mar 5, 2026

Add CronAction::Workflow to enable cron-triggered multi-agent pipelines

devatsecure
and
claude
committed