feat(tasks): persist implementation target metadata for deterministic routing (#297)

security(csp): remove unsafe-inline with nonce-based CSP (#288)

feat(refactor): ready for manual QA after main sync (#274)

fix(security): enforce server-side actor identity (#224)

feat(costs): add task-level token attribution and task-cost rollups

chore: resolve merge conflict with main for PR #180

fix(agents): enforce attribution scope and add e2e coverage

chore: resolve merge conflict with main for PR #177

fix(agents): enforce diagnostics self-scope and validation

feat: provision full OpenClaw workspaces from agent creation

feat(#159): add Agent-Level Identity & Attribution

feat(#163): add Agent Self-Diagnostics API endpoint

Merge pull request #155 from builderz-labs/feat/issues-146-143-145

fix: unify agent config save across mission control and gateway

merge: resolve PR conflicts and add OpenClaw offline E2E harness

feat: add workspace discoverability and multi-project task support

feat: phase 1 workspace isolation across auth and core APIs (#112)

feat: enrich agent config with workspace identity and tools

fix: sync agent SOUL content with workspace files (#91) (#95)

feat: audit hardening, webhook retry, and local Claude session tracking (#68)

feat: add direct CLI integration for gateway-free tool connections

feat: v1.2.0 — validation hardening, unit tests, quality improvements

Merge remote-tracking branch 'origin/main' into feat/medium-priority-v1.1

feat: error boundaries, pino logger, a11y, HSTS, zod validation, export limits

feat: add Docker support, session controls, model catalog, API rate limiting

chore: CODE_OF_CONDUCT, issue templates, DELETE patterns, limit caps, CSRF origin check

fix: strict mode, test stubs, pagination counts, N+1 queries, CSP hardening

fix: add auth checks on all GET endpoints, timing-safe comparisons, and XSS sanitization

feat: initial open-source release