Xinhua Gu ae0b110e44 fix(security): set 0o600 on remaining session file write paths ...

Follow-up to #18066 — three session file write sites were missed:

- auto-reply/reply/session.ts: forked session transcript header
- pi-embedded-runner/session-manager-init.ts: session file reset
- gateway/server-methods/sessions.ts: compacted transcript rewrite

All now use mode 0o600 consistent with transcript.ts and chat.ts.

2026-02-16 23:53:28 +01:00

..

reply

fix(security): set 0o600 on remaining session file write paths

2026-02-16 23:53:28 +01:00

chunk.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

chunk.ts

refactor(auto-reply): dedupe chunk early returns

2026-02-15 18:55:01 +00:00

command-auth.ts

fix (commands): keep webchat auth on internal provider

2026-02-16 11:30:49 -08:00

command-control.test.ts

fix (commands): keep webchat auth on internal provider

2026-02-16 11:30:49 -08:00

command-detection.ts

…

commands-args.test.ts

test(auto-reply): cover command args formatters

2026-02-15 04:17:02 +00:00

commands-args.ts

Discord: add native exec options

2026-02-16 14:18:17 -06:00

commands-registry.data.ts

Discord: add native exec options

2026-02-16 14:18:17 -06:00

commands-registry.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

commands-registry.ts

…

commands-registry.types.ts

…

dispatch.test.ts

…

dispatch.ts

…

envelope.test.ts

…

envelope.ts

…

group-activation.ts

…

heartbeat-reply-payload.ts

refactor(heartbeat): share reply payload picker

2026-02-15 04:37:52 +00:00

heartbeat.test.ts

Ignore up to 4 non-word characters when stripping HEARTBEAT_OK token … (#15847)

2026-02-14 01:36:04 +01:00

heartbeat.ts

Ignore up to 4 non-word characters when stripping HEARTBEAT_OK token … (#15847)

2026-02-14 01:36:04 +01:00

inbound-debounce.ts

…

inbound.test.ts

refactor(media): normalize inbound media type defaults (#16228)

2026-02-14 15:06:13 +01:00

media-note.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

media-note.ts

…

media-understanding.test-fixtures.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

model.test.ts

…

model.ts

…

reply.block-streaming.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.accepts-thinking-xhigh-codex-models.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.applies-inline-reasoning-mixed-messages-acks-immediately.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.defaults-think-low-reasoning-capable-models-no.e2e.test.ts

refactor(test): reuse think directive fixtures

2026-02-14 23:51:42 +00:00

reply.directive.directive-behavior.e2e-harness.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.e2e-mocks.ts

refactor(test): dedupe directive behavior e2e setup

2026-02-14 19:55:10 +00:00

reply.directive.directive-behavior.ignores-inline-model-uses-default-model.e2e.test.ts

refactor(test): dedupe directive behavior e2e setup

2026-02-14 19:55:10 +00:00

reply.directive.directive-behavior.lists-allowlisted-models-model-list.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.prefers-alias-matches-fuzzy-selection-is-ambiguous.e2e.test.ts

refactor(test): dedupe directive behavior e2e setup

2026-02-14 19:55:10 +00:00

reply.directive.directive-behavior.requires-per-agent-allowlist-addition-global.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.returns-status-alongside-directive-only-acks.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.shows-current-elevated-level-as-off-after.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.shows-current-verbose-level-verbose-has-no.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.supports-fuzzy-model-matches-model-directive.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.directive-behavior.updates-tool-verbose-during-flight-run-toggle.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.directive.parse.test.ts

…

reply.heartbeat-typing.test.ts

refactor(test): share auto-reply temp home harness

2026-02-14 23:51:41 +00:00

reply.media-note.test.ts

…

reply.raw-body.test.ts

refactor(test): share auto-reply temp home harness

2026-02-14 23:51:41 +00:00

reply.test-harness.ts

refactor(test): share auto-reply temp home harness

2026-02-14 23:51:41 +00:00

reply.triggers.group-intro-prompts.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.allows-activation-from-allowfrom-groups.e2e.test.ts

refactor(test): dedupe trigger greeting prompt cases

2026-02-15 00:26:46 +00:00

reply.triggers.trigger-handling.allows-approved-sender-toggle-elevated-mode.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.allows-elevated-off-groups-without-mention.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.filters-usage-summary-current-model-provider.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.handles-inline-commands-strips-it-before-agent.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.ignores-inline-elevated-directive-unapproved-sender.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.includes-error-cause-embedded-agent-throws.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.keeps-inline-status-unauthorized-senders.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.reports-active-auth-profile-key-snippet-status.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.runs-compact-as-gated-command.e2e.test.ts

test(auto-reply): import reply after harness mocks

2026-02-14 22:01:54 +01:00

reply.triggers.trigger-handling.runs-greeting-prompt-bare-reset.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.shows-endpoint-default-model-status-not-configured.e2e.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.shows-quick-model-picker-grouped-by-model.e2e.test.ts

refactor(test): dedupe trigger model command fixtures

2026-02-16 18:25:04 +00:00

reply.triggers.trigger-handling.stages-inbound-media-into-sandbox-workspace.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.triggers.trigger-handling.targets-active-session-native-stop.e2e.test.ts

test(auto-reply): import reply after harness mocks

2026-02-14 22:01:54 +01:00

reply.triggers.trigger-handling.test-harness.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

reply.ts

…

send-policy.ts

…

skill-commands.test.ts

perf(test): remove fs skill scanning from skill-commands tests

2026-02-14 16:36:15 +00:00

skill-commands.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

stage-sandbox-media.test-harness.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

status.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

status.transcript.test.ts

feat: show transcript file size in session status

2026-02-16 23:50:21 +01:00

status.ts

feat: show transcript file size in session status

2026-02-16 23:50:21 +01:00

templating.ts

…

thinking.test.ts

…

thinking.ts

refactor(auto-reply): dedupe on/off/full normalization

2026-02-15 14:07:28 +00:00

tokens.ts

…

tool-meta.test.ts

…

tool-meta.ts

…

types.ts

feat(discord): faster reaction status state machine (watchdog + debounce) (#18248)

2026-02-16 13:38:39 -06:00