Peter Steinberger c070be1bc4 fix(sandbox): harden fs bridge path checks and bind mount policy

2026-02-24 02:21:43 +00:00

..

sessions

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

agent-dirs.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-dirs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-limits.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

backup-rotation.ts

perf(test): speed up config tests

2026-02-14 14:25:54 +00:00

cache-utils.ts

…

channel-capabilities.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

channel-capabilities.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

commands.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

commands.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config-misc.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

config-paths.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config.agent-concurrency-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.backup-rotation.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

config.compaction-settings.test.ts

refactor: dedupe core config and runtime helpers

2026-02-22 17:11:54 +00:00

config.discord-presence.test.ts

Discord: refine presence config defaults (#10855) (thanks @h0tp-ftw)

2026-02-13 13:34:19 -06:00

config.discord.test.ts

refactor: dedupe core config and runtime helpers

2026-02-22 17:11:54 +00:00

config.dm-policy-alias.test.ts

refactor(config): add dmPolicy aliases for Slack/Discord

2026-02-14 21:04:27 +01:00

config.env-vars.test.ts

fix(security): harden shell env fallback startup env handling

2026-02-22 16:06:27 +01:00

config.hooks-module-paths.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

config.identity-avatar.test.ts

…

config.identity-defaults.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

config.irc.test.ts

chore: Fix types in tests 16/N.

2026-02-17 12:00:29 +09:00

config.legacy-config-detection.accepts-imessage-dmpolicy.test.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

config.legacy-config-detection.rejects-routing-allowfrom.test.ts

test: reclassify config and channel monitor behavior suites

2026-02-22 11:04:58 +00:00

config.msteams.test.ts

perf(test): reduce test startup overhead

2026-02-13 14:48:45 +00:00

config.multi-agent-agentdir-validation.test.ts

refactor: dedupe core config and runtime helpers

2026-02-22 17:11:54 +00:00

config.nix-integration-u3-u5-u9.test.ts

refactor: dedupe core config and runtime helpers

2026-02-22 17:11:54 +00:00

config.plugin-validation.test.ts

fix: cover channels.modelByChannel validation/auto-enable

2026-02-22 10:41:40 +01:00

config.pruning-defaults.test.ts

fix(providers): support Bedrock Anthropic cacheRetention defaults/pass-through (#22303) (thanks @snese)

2026-02-23 18:46:40 +00:00

config.sandbox-docker.test.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config.schema-regressions.test.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

config.skills-entries-config.test.ts

…

config.talk-api-key-fallback.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

config.telegram-custom-commands.test.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

config.tools-alsoAllow.test.ts

…

config.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

config.web-search-provider.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

dangerous-name-matching.ts

refactor(security): unify dangerous name matching handling

2026-02-24 01:33:08 +00:00

defaults.ts

fix(config): tighten bedrock cache-retention type narrowing

2026-02-23 18:46:40 +00:00

discord-preview-streaming.ts

fix(config): add shared streaming resolver module

2026-02-21 19:53:42 +01:00

env-preserve-io.test.ts

refactor: dedupe core config and runtime helpers

2026-02-22 17:11:54 +00:00

env-preserve.test.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

env-preserve.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

env-substitution.test.ts

test(config): consolidate env/include scenario coverage

2026-02-23 22:16:30 +00:00

env-substitution.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-vars.ts

fix(security): harden shell env fallback startup env handling

2026-02-22 16:06:27 +01:00

group-policy.test.ts

fix(security): harden toolsBySender sender-key matching

2026-02-22 21:04:37 +01:00

group-policy.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

home-env.test-harness.ts

test: share temp home env harness

2026-02-19 15:08:14 +00:00

includes-scan.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

includes.test.ts

test(config): consolidate env/include scenario coverage

2026-02-23 22:16:30 +00:00

includes.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

io.compat.test.ts

fix(exec): harden safe-bin trust and add explicit trusted dirs

2026-02-22 22:43:18 +01:00

io.owner-display-secret.test.ts

test(core): trim redundant setup and tighten waits

2026-02-24 00:31:58 +00:00

io.ts

feat: Add Kilo Gateway provider (#20212)

2026-02-23 23:29:27 +00:00

io.write-config.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

legacy-migrate.test.ts

refactor(config): reuse default group entry migration helper

2026-02-19 00:33:21 +00:00

legacy-migrate.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

legacy.migrations.part-1.ts

refactor(config): dedupe legacy stream-mode migration paths

2026-02-22 07:44:57 +00:00

legacy.migrations.part-2.ts

refactor(config): reuse legacy audio transcription migration path

2026-02-19 00:29:00 +00:00

legacy.migrations.part-3.ts

Config: clarify memorySearch migration precedence

2026-02-10 00:21:27 -08:00

legacy.migrations.ts

…

legacy.rules.ts

Config: migrate legacy top-level memorySearch

2026-02-10 00:21:27 -08:00

legacy.shared.test.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

legacy.shared.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

legacy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

logging-max-file-bytes.test.ts

fix(logging): cap file logs with configurable maxFileBytes

2026-02-22 17:58:51 +01:00

logging.ts

…

markdown-tables.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

merge-config.ts

…

merge-patch.proto-pollution.test.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

merge-patch.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

merge-patch.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

model-alias-defaults.test.ts

test(core): increase coverage for sessions, auth choice, and model listing

2026-02-22 14:08:51 +00:00

model-input.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

normalize-exec-safe-bin.ts

refactor(exec): split command resolution and trusted-dir normalization

2026-02-22 23:00:33 +01:00

normalize-paths.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

normalize-paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

paths.test.ts

test(config): dedupe temp roots and cover legacy state-dir fallback

2026-02-21 21:40:39 +00:00

paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugin-auto-enable.test.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

plugin-auto-enable.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

plugins-allowlist.ts

refactor: centralize plugin allowlist mutation

2026-02-17 00:45:02 +00:00

plugins-runtime-boundary.test.ts

refactor(runtime): split runtime builders and stabilize cron tool seam

2026-02-19 16:09:56 +01:00

port-defaults.ts

…

prototype-keys.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

redact-snapshot.test.ts

refactor(config): harden catchall hint mapping and array fallback

2026-02-24 00:59:44 +00:00

redact-snapshot.ts

refactor(config): harden catchall hint mapping and array fallback

2026-02-24 00:59:44 +00:00

runtime-group-policy-provider.ts

refactor(runtime): consolidate followup, gateway, and provider dedupe paths

2026-02-22 14:08:51 +00:00

runtime-group-policy.test.ts

refactor(channels): reuse runtime group policy helpers

2026-02-22 12:44:23 +01:00

runtime-group-policy.ts

refactor(channels): reuse runtime group policy helpers

2026-02-22 12:44:23 +01:00

runtime-overrides.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

runtime-overrides.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

schema.help.quality.test.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

schema.help.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

schema.hints.test.ts

refactor(config): harden catchall hint mapping and array fallback

2026-02-24 00:59:44 +00:00

schema.hints.ts

refactor(config): harden catchall hint mapping and array fallback

2026-02-24 00:59:44 +00:00

schema.irc.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

schema.labels.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

schema.tags.test.ts

Config UI: tag filters and complete schema help/labels coverage (#23796)

2026-02-22 15:17:07 -06:00

schema.tags.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

schema.test.ts

fix(config): accept $schema key in root config (#15280)

2026-02-14 03:07:12 +01:00

schema.ts

Config UI: tag filters and complete schema help/labels coverage (#23796)

2026-02-22 15:17:07 -06:00

sessions.cache.test.ts

refactor: dedupe shared config type definitions

2026-02-22 18:37:25 +00:00

sessions.test.ts

Sessions: consolidate path hardening and fallback resilience (#24657)

2026-02-23 12:36:01 -05:00

sessions.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

slack-http-config.test.ts

…

slack-token-validation.test.ts

test: tighten relay smoke + slack token validation

2026-02-16 02:45:00 +00:00

talk.ts

…

telegram-custom-commands.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

telegram-webhook-port.test.ts

fix(telegram): wire webhookPort through config and startup

2026-02-22 17:54:16 +01:00

telegram-webhook-secret.test.ts

…

test-helpers.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

types.agent-defaults.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

types.agents-shared.ts

refactor: dedupe shared config type definitions

2026-02-22 18:37:25 +00:00

types.agents.ts

feat(agents): add per-agent stream params overrides for cache tuning (#17470) (thanks @rrenamed)

2026-02-23 18:46:40 +00:00

types.approvals.ts

…

types.auth.ts

…

types.base.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

types.browser.ts

fix(security): harden browser SSRF defaults and migrate legacy key

2026-02-24 01:52:01 +00:00

types.channel-messaging-common.ts

refactor: dedupe shared config type definitions

2026-02-22 18:37:25 +00:00

types.channels.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.cron.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

types.discord.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

types.gateway.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

types.googlechat.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

types.hooks.ts

refactor(config): dedupe install and typing schema definitions

2026-02-22 21:19:09 +00:00

types.imessage.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.installs.ts

refactor(config): dedupe install and typing schema definitions

2026-02-22 21:19:09 +00:00

types.irc.ts

refactor: dedupe shared config type definitions

2026-02-22 18:37:25 +00:00

types.memory.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00

types.messages.ts

Add explicit ownerDisplaySecret for owner ID hash obfuscation (#22520)

2026-02-21 03:13:56 -05:00

types.models.ts

feat(config): expose full pi-ai model compat fields in config schema (openclaw#11063) thanks @ikari-pl

2026-02-13 18:47:18 -06:00

types.msteams.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

types.node-host.ts

…

types.openclaw.ts

feat(update): add core auto-updater and dry-run preview

2026-02-22 17:11:36 +01:00

types.plugins.ts

refactor(config): dedupe install and typing schema definitions

2026-02-22 21:19:09 +00:00

types.queue.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.sandbox.ts

fix(sandbox): harden fs bridge path checks and bind mount policy

2026-02-24 02:21:43 +00:00

types.signal.ts

refactor: dedupe shared config type definitions

2026-02-22 18:37:25 +00:00

types.skills.ts

fix(skills): guard against skills prompt bloat

2026-02-17 00:01:34 +01:00

types.slack.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

types.telegram.ts

fix(telegram): wire webhookPort through config and startup

2026-02-22 17:54:16 +01:00

types.tools.ts

feat(tools): add kimi web_search provider

2026-02-23 18:27:37 +00:00

types.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.tts.ts

fix(tts): make model provider overrides opt-in

2026-02-21 13:16:07 +01:00

types.whatsapp.ts

refactor(agents): dedupe config and truncation guards

2026-02-22 17:54:51 +00:00

validation.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

version.ts

…

zod-schema.agent-defaults.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

zod-schema.agent-model.ts

refactor(config): share agent model schema

2026-02-15 16:53:38 +00:00

zod-schema.agent-runtime.ts

fix(sandbox): harden fs bridge path checks and bind mount policy

2026-02-24 02:21:43 +00:00

zod-schema.agents.ts

fix(config): add missing comment field to BindingsSchema

2026-02-22 11:47:11 +01:00

zod-schema.allowdeny.ts

fix(memory): prevent QMD scope deny bypass

2026-02-15 02:41:45 +00:00

zod-schema.approvals.ts

…

zod-schema.channels.ts

…

zod-schema.core.ts

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

zod-schema.cron-retention.test.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

zod-schema.hooks.ts

refactor(config): share install record schema shape

2026-02-18 18:25:25 +00:00

zod-schema.installs.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

zod-schema.logging-levels.test.ts

refactor(config): dedupe install and typing schema definitions

2026-02-22 21:19:09 +00:00

zod-schema.providers-core.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

zod-schema.providers-whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

zod-schema.providers.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.sensitive.ts

fix: Finish credential redaction that was merged unfinished (#13073)

2026-02-13 16:19:21 +01:00

zod-schema.session-maintenance-extensions.test.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

zod-schema.session.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

zod-schema.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

zod-schema.typing-mode.test.ts

refactor(config): dedupe install and typing schema definitions

2026-02-22 21:19:09 +00:00