refactor: remove cloudflare-worker.js and rename workspace-sync.py to openclaw-sync.py

refactor: consolidate Telegram user ID configuration into TELEGRAM_ALLOWED_USERS environment variable

feat: replace UptimeRobot with an automated Cloudflare Worker for Space keep-alive functionality

refactor: update default allowed domains, unify domain filtering logic, and remove UptimeRobot setup UI from health server

feat: allow merging multiple origins into control UI allowed list instead of overwriting

refactor: optimize rate limiting, harden WebSocket parsing, update webhook payload formatting, and cleanup Docker assets

Harden config build, speed up startup, add healthcheck

Add proxy error cause logging, clean up startup logs

fix: proxy googleapis.com through Cloudflare and fix fetch duplex for POST streaming

fix: remove default path in upload_folder and restrict Cloudflare proxy domains to specific endpoints

feat: add query parameter support for proxy target/key and ensure unbuffered gateway logging

feat: add Telegram proxy support, improve fetch/undici header handling, and expand dispatcher patching

refactor: improve request patching logic in cloudflare-proxy and force IPv4 for Telegram configuration

refactor: simplify proxy logic by removing undici patching and add unauthenticated fallback for Telegram bot API paths

feat: expand Cloudflare proxy support to include Discord and Google services while streamlining configuration settings

fix: use native telegram apiRoot proxying

feat: enable global wildcard proxying and enhance cloudflare-proxy with undici and fetch support

feat: configure Cloudflare proxy environment variables and update Telegram plugin settings with custom network and retry parameters

feat: add ACP plugin configuration toggle and strip host header from proxy requests

refactor: rename CLOUDFLARE_API_TOKEN to CLOUDFLARE_WORKERS_TOKEN for proxy configuration

feat: replace DNS fix with automated Cloudflare outbound proxy provisioning for blocked network requests

feat: add BROWSER_PLUGIN_MODE configuration to control browser execution logic

feat: add configuration support for Telegram auto-select family, token, timeout, and retry settings

feat: add TELEGRAM_NATIVE_COMMANDS configuration and update telegram channel settings to use object merging

feat: deny lmstudio and xai plugins in configuration script

feat: conditionally configure logging and restrict enabled plugins when running on Hugging Face Spaces

feat: add configurable logging levels and disable Bonjour discovery in start script

fix: use default value expansion for environment variables to prevent unbound variable errors in start.sh

refactor: overhaul workspace sync to use robust huggingface_hub operations and local fingerprinting

feat: update startup banner to display bundled runtime version instead of tag

refactor: clean up iframe-fix.cjs code style and remove deprecated OpenClaw scope patch from start.sh

feat: add support for registering custom OpenAI-compatible providers via environment variables

feat: reduce default workspace sync interval to 180s and refactor sync logic into a dedicated function

refactor: generalize OpenClaw state persistence and add browser warm-up sequence

feat: trigger workspace state snapshot during graceful shutdown sequence

feat: integrate headless Chromium browser support with automated path detection and configuration

feat: implement state persistence for agents, memory, and extensions across workspace syncs

feat: relocate dashboard to root path and update routing logic for improved accessibility

refactor: route dashboard traffic to gateway port and add base path configuration

refactor: remove internal self-ping keep-alive in favor of dashboard-based UptimeRobot setup

feat: add optional WhatsApp integration with toggle and status monitoring

fix: patch OpenClaw scope-clearing bug and refactor WhatsApp session logout logic to error handler

feat: add support for optional verbose logging in OpenClaw gateway startup

refactor: delay workspace sync and guardian startup until after gateway initialization

feat: implement persistent WhatsApp session backup and restore via workspace sync and add automatic session invalidation on auth errors

feat: implement auth failure cooldowns, add loopback trusted proxies, and enhance health server status reporting

feat: migrate OPENCLAW_VERSION to build-time argument and hardcode health server ports

refactor: migrate dashboard to /dashboard and implement internal reverse proxy for gateway traffic

feat: enable iframe embedding by injecting a preload script to strip security headers and update CSP policies

feat: implement wa-guardian for automated WhatsApp pairing and add Control UI shortcut to dashboard