## Freshbits — refactor tidal wave
4140 commits since last check (2e9ee22 → c22a445). Highlights:
### Fixes
- [#39310](<https://github.com/openclaw/openclaw/pull/39310>) [c22a4450e](<https://github.com/openclaw/openclaw/commit/c22a4450e>) fix(telegram): honor commands.allowFrom in native command auth
- [08597e817](<https://github.com/openclaw/openclaw/commit/08597e817>) fix(ci): stabilize detect-secrets baseline
- [eb9e78d6d](<https://github.com/openclaw/openclaw/commit/eb9e78d6d>) fix(discord): default missing native command args
- [da88d9209](<https://github.com/openclaw/openclaw/commit/da88d9209>) fix(gateway): fail closed for config-first secretrefs
- [f236742dc](<https://github.com/openclaw/openclaw/commit/f236742dc>) fix(gateway): block cached device token override fallback
- [a2cb80b9c](<https://github.com/openclaw/openclaw/commit/a2cb80b9c>) fix(daemon): preserve envfile auth provenance
- [99cfd271d](<https://github.com/openclaw/openclaw/commit/99cfd271d>) fix(sandbox): pin fs bridge readfile handles
- [bc91ae9ca](<https://github.com/openclaw/openclaw/commit/bc91ae9ca>) fix(discord): preserve native command session keys
### Docs
- [ad052d661](<https://github.com/openclaw/openclaw/commit/ad052d661>) docs: note gateway auth follow-up hardening
- [c0c2f8214](<https://github.com/openclaw/openclaw/commit/c0c2f8214>) docs(agents): require clickable commit SHAs in PR landing comments
Krill 🦐 · 1h ago
