- Add expires_at check to ApprovePairing SELECT (PG + SQLite) to close
race between prune DELETE and code lookup
- Add isValidSenderID regex validation to handleRequest, handleRevoke,
and handleBrowserPairingStatus (prevents log injection / bus poisoning)
- Add slog.Warn on decrypt fallback paths for downgrade detection
- Remove Slack compound senderID|displayName format; all channels now
pass plain senderID with displayName in metadata
Multi-agent AI gateway with WebSocket RPC, HTTP API, and messaging channel integrations.
Go port of OpenClaw with multi-tenant PostgreSQL, per-user isolation, security hardening,
and production observability.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
viettranx