From 13b6e4102f943b8444ef64f9c449f9933d24b9f1 Mon Sep 17 00:00:00 2001 From: ronitchidara Date: Tue, 27 Jan 2026 14:43:01 +0530 Subject: [PATCH] docs: add changelog entries for security and architecture work Phase 1 Security: - Prompt injection defense system - Command execution blocklist - Cross-platform secrets manager - Gateway rate limiting and warnings - Pairing hardening with nonces - Doctor credential security check Phase 2 Architecture: - Split session-utils.ts into focused modules - Centralized error utilities Phase 2.5 Memory: - Extract EmbeddingService from manager.ts Co-Authored-By: Claude Opus 4.5 --- CHANGELOG.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5909c9899..f17001146 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,17 @@ Status: beta. ### Changes - Rebrand: rename the npm package/CLI to `moltbot`, add a `moltbot` compatibility shim, and move extensions to the `@moltbot/*` scope. +- Security: add prompt injection defense system with severity classification and sanitization. +- Security: add command execution blocklist for dangerous shell commands. +- Security: add cross-platform secrets manager (macOS Keychain, Windows Credential Manager, Linux Secret Service). +- Security: integrate secrets-manager with all token stores for secure credential storage. +- Security: add gateway rate limiting and security warnings for suspicious patterns. +- Security: add pairing hardening with exec approval nonces. +- Security: add doctor credential security check for plaintext secrets. +- Refactor: split session-utils.ts into focused modules (avatar, agents, store, fs). +- Refactor: add centralized error utilities with MoltbotError base class. +- Refactor: extract EmbeddingService from memory manager (reduces manager.ts by 25%). +- Docs: add large file analysis for refactoring opportunities. - Commands: group /help and /commands output with Telegram paging. (#2504) Thanks @hougangdev. - macOS: limit project-local `node_modules/.bin` PATH preference to debug builds (reduce PATH hijacking risk). - macOS: finish Moltbot app rename for macOS sources, bundle identifiers, and shared kit paths. (#2844) Thanks @fal3.