NullClaw Files

What's Changed

• v2026.3.15 by @DonPrus in https://github.com/nullclaw/nullclaw/pull/582
• Add runtime observability wiring and OTLP support by @DonPrus in https://github.com/nullclaw/nullclaw/pull/600
• feat(channels): add hardened external channel plugins by @DonPrus in https://github.com/nullclaw/nullclaw/pull/604
• feat: per-agent workspace isolation by @DNature in https://github.com/nullclaw/nullclaw/pull/275
• refactor(interactions): move command and callback rules into shared core / 重构(interactions): 将命令与回调规则移入共享核心 by @manelsen in https://github.com/nullclaw/nullclaw/pull/294
• feat(session): claim-gated per-peer auto-provision with isolated runtimes / 特性(session): 带身份验证的按对等端自动配置与隔离运行时 by @manelsen in https://github.com/nullclaw/nullclaw/pull/297
• fix(security): harden browser read URL handling / 修复(security): 加固浏览器读取工具的 URL 处理 by @manelsen in https://github.com/nullclaw/nullclaw/pull/532
• fix(matrix): handle invites and sync policy by @manelsen in https://github.com/nullclaw/nullclaw/pull/610
• feat(email): email channel with IMAP IDLE and community example by @sanderdewijs in https://github.com/nullclaw/nullclaw/pull/451
• fix(providers): fall back to non-streaming on CurlWaitError for… by @brunojuliao in https://github.com/nullclaw/nullclaw/pull/608
• fix(security): block yolo autonomy on non-loopback gateway / 修复(security): 在非 loopback 网关上阻止 yolo 自主模式 by @manelsen in https://github.com/nullclaw/nullclaw/pull/534
• fix(security): implement secret key rotation / 修复(security): 实现机密密钥轮换 by @manelsen in https://github.com/nullclaw/nullclaw/pull/538
• fix(config): encrypt persisted api keys in config.json by @manelsen in https://github.com/nullclaw/nullclaw/pull/609
• fix(security): stop logging pairing code secrets / 修复(security): 停止记录 pairing code 秘钥 by @manelsen in https://github.com/nullclaw/nullclaw/pull/535
• feat(service): add OpenRC support on Linux / feat(service): 支持 Linux OpenRC 服务管理 by @manelsen in https://github.com/nullclaw/nullclaw/pull/605
• fix(tools): honor http_timeout_secs in http_request / 修复(tools): 在 http_request 中遵循 http_timeout_secs by @manelsen in https://github.com/nullclaw/nullclaw/pull/541
• fix(security): warn on wildcard allowlist usage / 修复(security): 使用通配符白名单时发出警告 by @manelsen in https://github.com/nullclaw/nullclaw/pull/539
• feat(channels): extend external plugin message actions by @DonPrus in https://github.com/nullclaw/nullclaw/pull/611
• fix(cron): improve diagnostics when cron tasks are not running (fixes [#592]) by @yassinebkr in https://github.com/nullclaw/nullclaw/pull/598

Full Changelog: https://github.com/nullclaw/nullclaw/compare/v2026.3.15...v2026.3.17