Peter Steinberger e0db04a50d fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

..

sessions

test: dedupe repeated validation and throw assertions

2026-02-21 23:28:07 +00:00

agent-dirs.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-dirs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-limits.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

backup-rotation.ts

…

cache-utils.ts

…

channel-capabilities.test.ts

test: dedupe shared setup in channel and doctor config tests

2026-02-18 04:04:14 +00:00

channel-capabilities.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

commands.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

commands.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config-misc.test.ts

fix(gateway): harden channel health monitor recovery

2026-02-17 03:26:26 +01:00

config-paths.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config.agent-concurrency-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.backup-rotation.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

config.compaction-settings.test.ts

Config: expose Pi compaction tuning values (openclaw#21568) thanks @Takhoffman

2026-02-19 21:41:09 -06:00

config.discord-presence.test.ts

…

config.discord.test.ts

Config: require Discord ID strings (#18220)

2026-02-16 12:22:58 -06:00

config.dm-policy-alias.test.ts

…

config.env-vars.test.ts

fix(security): harden shell env fallback

2026-02-21 20:01:08 +01:00

config.hooks-module-paths.test.ts

…

config.identity-avatar.test.ts

…

config.identity-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.irc.test.ts

chore: Fix types in tests 16/N.

2026-02-17 12:00:29 +09:00

config.legacy-config-detection.accepts-imessage-dmpolicy.e2e.test.ts

test: group remaining suite cleanups

2026-02-21 21:44:57 +00:00

config.legacy-config-detection.rejects-routing-allowfrom.e2e.test.ts

test: fix rebase-introduced tsgo regressions

2026-02-21 23:57:34 +01:00

config.msteams.test.ts

…

config.multi-agent-agentdir-validation.test.ts

…

config.nix-integration-u3-u5-u9.e2e.test.ts

…

config.plugin-validation.test.ts

…

config.pruning-defaults.test.ts

refactor(test): dedupe env setup in envelope and config tests

2026-02-21 19:13:47 +00:00

config.sandbox-docker.test.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config.schema-regressions.test.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

config.skills-entries-config.test.ts

…

config.talk-api-key-fallback.test.ts

…

config.telegram-custom-commands.test.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

config.tools-alsoAllow.test.ts

…

config.ts

…

defaults.ts

Models/Config: default missing Anthropic model api fields

2026-02-21 22:50:43 -08:00

discord-preview-streaming.ts

fix(config): add shared streaming resolver module

2026-02-21 19:53:42 +01:00

env-preserve-io.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-preserve.test.ts

…

env-preserve.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

env-substitution.test.ts

…

env-substitution.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-vars.ts

refactor(security): centralize host env policy and harden env ingestion

2026-02-21 13:04:39 +01:00

group-policy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

home-env.test-harness.ts

test: share temp home env harness

2026-02-19 15:08:14 +00:00

includes-scan.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

includes.test.ts

test: dedupe repeated validation and throw assertions

2026-02-21 23:28:07 +00:00

includes.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

io.compat.test.ts

test(config): dedupe io fixture wiring and cover legacy config-path override

2026-02-21 21:40:39 +00:00

io.ts

CLI/Config: keep explicitly unset keys removed

2026-02-21 21:08:04 -08:00

io.write-config.test.ts

CLI/Config: keep explicitly unset keys removed

2026-02-21 21:08:04 -08:00

legacy-migrate.test.ts

refactor(config): reuse default group entry migration helper

2026-02-19 00:33:21 +00:00

legacy-migrate.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

legacy.migrations.part-1.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

legacy.migrations.part-2.ts

refactor(config): reuse legacy audio transcription migration path

2026-02-19 00:29:00 +00:00

legacy.migrations.part-3.ts

…

legacy.migrations.ts

…

legacy.rules.ts

…

legacy.shared.test.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

legacy.shared.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

legacy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

logging.ts

…

markdown-tables.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

merge-config.ts

…

merge-patch.proto-pollution.test.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

merge-patch.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

merge-patch.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

model-alias-defaults.test.ts

Models/Config: default missing Anthropic model api fields

2026-02-21 22:50:43 -08:00

normalize-paths.test.ts

…

normalize-paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

paths.test.ts

test(config): dedupe temp roots and cover legacy state-dir fallback

2026-02-21 21:40:39 +00:00

paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugin-auto-enable.test.ts

…

plugin-auto-enable.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugins-allowlist.ts

refactor: centralize plugin allowlist mutation

2026-02-17 00:45:02 +00:00

plugins-runtime-boundary.test.ts

refactor(runtime): split runtime builders and stabilize cron tool seam

2026-02-19 16:09:56 +01:00

port-defaults.ts

…

prototype-keys.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

redact-snapshot.test.ts

refactor(test): stabilize case tables and readonly helper inputs

2026-02-22 00:10:07 +01:00

redact-snapshot.ts

refactor: dedupe redact snapshot restore prelude

2026-02-19 14:27:37 +00:00

runtime-overrides.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

runtime-overrides.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

schema.help.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00

schema.hints.test.ts

…

schema.hints.ts

…

schema.irc.ts

…

schema.labels.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

schema.test.ts

…

schema.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions.cache.test.ts

…

sessions.test.ts

test: table-drive status reactions and session key cases

2026-02-21 23:02:44 +00:00

sessions.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

slack-http-config.test.ts

…

slack-token-validation.test.ts

…

talk.ts

…

telegram-custom-commands.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

telegram-webhook-secret.test.ts

…

test-helpers.ts

…

types.agent-defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.agents.ts

…

types.approvals.ts

…

types.auth.ts

…

types.base.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

types.browser.ts

fix(browser): unify SSRF guard path for navigation

2026-02-19 13:44:01 +01:00

types.channels.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.cron.ts

cron: separate webhook POST delivery from announce (#17901)

2026-02-16 02:36:00 -08:00

types.discord.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.gateway.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

types.googlechat.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.hooks.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

types.imessage.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.irc.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.memory.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00

types.messages.ts

Add explicit ownerDisplaySecret for owner ID hash obfuscation (#22520)

2026-02-21 03:13:56 -05:00

types.models.ts

…

types.msteams.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.node-host.ts

…

types.openclaw.ts

…

types.plugins.ts

fix(security): restore trusted plugin runtime exec default

2026-02-19 16:01:29 +01:00

types.queue.ts

…

types.sandbox.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

types.signal.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.skills.ts

fix(skills): guard against skills prompt bloat

2026-02-17 00:01:34 +01:00

types.slack.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.telegram.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.tools.ts

refactor(config): share media provider request fields

2026-02-18 23:34:15 +00:00

types.ts

…

types.tts.ts

fix(tts): make model provider overrides opt-in

2026-02-21 13:16:07 +01:00

types.whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

validation.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

version.ts

…

zod-schema.agent-defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.agent-model.ts

…

zod-schema.agent-runtime.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

zod-schema.agents.ts

…

zod-schema.allowdeny.ts

…

zod-schema.approvals.ts

…

zod-schema.channels.ts

…

zod-schema.core.ts

refactor(core): dedupe browser route signatures and cli watchdog schema

2026-02-18 14:15:20 +00:00

zod-schema.hooks.ts

refactor(config): share install record schema shape

2026-02-18 18:25:25 +00:00

zod-schema.installs.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

zod-schema.providers-core.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

zod-schema.providers-whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

zod-schema.providers.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.sensitive.ts

…

zod-schema.session.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

zod-schema.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00