Peter Steinberger e578521ef4 fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

..

commands-subagents

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

exec

…

export-html

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

queue

fix(slack): preserve string thread context in queue + DM route (#23804)

2026-02-22 13:26:31 -05:00

abort.test.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

abort.ts

refactor(auto-reply): reuse abort session-entry resolver

2026-02-18 23:09:09 +00:00

agent-runner-execution.ts

Agent runner: align compaction floor guidance (#24059)

2026-02-22 20:13:43 -06:00

agent-runner-helpers.test.ts

test(reply): replace heavy resets in media and runner helper specs

2026-02-22 08:15:28 +00:00

agent-runner-helpers.ts

…

agent-runner-memory.ts

…

agent-runner-payloads.test.ts

fix(replies): keep finals for cross-target messaging sends

2026-02-22 19:34:30 +01:00

agent-runner-payloads.ts

fix(replies): keep finals for cross-target messaging sends

2026-02-22 19:34:30 +01:00

agent-runner-utils.test.ts

test(core): use lightweight clears in command and dispatch setup

2026-02-22 08:06:06 +00:00

agent-runner-utils.ts

fix(telegram): make reaction handling soft-fail and message-id resilient (#20236)

2026-02-23 10:25:14 -05:00

agent-runner.misc.runreplyagent.test.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

agent-runner.runreplyagent.test.ts

test: remove fixed waits from tool-result ordering tests

2026-02-22 12:29:08 +00:00

agent-runner.ts

refactor(session): centralize transcript path option resolution

2026-02-22 12:02:38 +01:00

audio-tags.ts

…

bash-command.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

block-reply-coalescer.ts

…

block-reply-pipeline.ts

…

block-streaming.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

body.ts

…

command-gates.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

commands-allowlist.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

commands-approve.ts

…

commands-bash.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

commands-compact.ts

fix: pass agentDir to /compact command for agent-specific auth (#24133)

2026-02-23 02:33:35 -05:00

commands-config.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

commands-context-report.test.ts

…

commands-context-report.ts

…

commands-context.ts

…

commands-core.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

commands-export-session.ts

refactor(session): centralize transcript path option resolution

2026-02-22 12:02:38 +01:00

commands-info.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

commands-models.ts

fix(auth/session): preserve override reset behavior and repair oauth profile-id drift (openclaw#18820) thanks @Glucksberg

2026-02-19 21:16:26 -06:00

commands-plugin.ts

…

commands-session-ttl.test.ts

test(core): use lightweight clears in command and dispatch setup

2026-02-22 08:06:06 +00:00

commands-session.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

commands-setunset-standard.ts

refactor(auto-reply): share standard set/unset slash parsing

2026-02-18 23:09:09 +00:00

commands-setunset.test.ts

test(messaging): dedupe parser/proxy/followup test scaffolding

2026-02-19 07:24:02 +00:00

commands-setunset.ts

…

commands-slash-parse.ts

…

commands-spawn.test-harness.ts

…

commands-status.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

commands-subagents-focus.test.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

commands-subagents-spawn.test.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

commands-subagents.test-mocks.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

commands-subagents.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

commands-system-prompt.ts

fix(exec): apply per-agent exec defaults for opaque session keys

2026-02-22 23:33:14 +01:00

commands-tts.ts

…

commands-types.ts

fix: pass agentDir to /compact command for agent-specific auth (#24133)

2026-02-23 02:33:35 -05:00

commands.test-harness.ts

…

commands.test.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

commands.ts

…

config-commands.ts

refactor(auto-reply): share standard set/unset slash parsing

2026-02-18 23:09:09 +00:00

config-value.ts

…

debug-commands.ts

refactor(auto-reply): share standard set/unset slash parsing

2026-02-18 23:09:09 +00:00

directive-handling.auth.ts

refactor(auth): share remaining-time formatter

2026-02-19 00:17:31 +00:00

directive-handling.fast-lane.ts

…

directive-handling.impl.ts

fix(reasoning): persist off override for discord directives

2026-02-23 00:50:13 +01:00

directive-handling.levels.ts

…

directive-handling.model-picker.ts

…

directive-handling.model.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

directive-handling.model.ts

feat(auto-reply): add model fallback lifecycle visibility in status, verbose logs, and WebUI (#20704)

2026-02-19 14:33:02 -08:00

directive-handling.params.ts

…

directive-handling.parse.ts

…

directive-handling.persist.ts

fix(reasoning): persist off override for discord directives

2026-02-23 00:50:13 +01:00

directive-handling.queue-validation.ts

…

directive-handling.shared.ts

…

directive-handling.ts

…

directive-parsing.ts

…

directives.ts

…

dispatch-from-config.test.ts

test(auto-reply): use lightweight clears in dispatch setup

2026-02-22 08:01:16 +00:00

dispatch-from-config.ts

…

dispatcher-registry.ts

…

elevated-allowlist-matcher.ts

refactor(security): split elevated allowFrom matcher internals

2026-02-22 22:20:04 +01:00

elevated-unavailable.ts

…

exec.ts

…

followup-runner.test.ts

fix(cron): pass agentDir into embedded follow-up runs

2026-02-22 22:11:52 +01:00

followup-runner.ts

fix(cron): pass agentDir into embedded follow-up runs

2026-02-22 22:11:52 +01:00

get-reply-directives-apply.ts

fix(agents): harden bash tool and reply directive handling

2026-02-22 11:29:31 +00:00

get-reply-directives-utils.ts

…

get-reply-directives.ts

fix(agents): gate auto reasoning by effective thinking level (openclaw#24335) thanks @Kay-051

2026-02-23 15:38:08 +02:00

get-reply-inline-actions.skip-when-config-empty.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

get-reply-inline-actions.ts

fix: pass agentDir to /compact command for agent-specific auth (#24133)

2026-02-23 02:33:35 -05:00

get-reply-run.media-only.test.ts

refactor(cron): extract delivery dispatch + harden reset notices

2026-02-23 19:25:22 +00:00

get-reply-run.ts

refactor: harden reset notice + cron delivery target flow

2026-02-23 19:01:02 +00:00

get-reply.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

groups.ts

…

history.ts

…

inbound-context.ts

…

inbound-dedupe.ts

…

inbound-meta.test.ts

fix(auto-reply): move volatile inbound flags out of system metadata

2026-02-23 19:19:45 +00:00

inbound-meta.ts

fix(auto-reply): move volatile inbound flags out of system metadata

2026-02-23 19:19:45 +00:00

inbound-text.ts

…

line-directives.ts

…

memory-flush.test.ts

…

memory-flush.ts

…

mentions.ts

…

model-selection.test.ts

Default reasoning to on when model has reasoning: true (fix #22456) (#22513)

2026-02-22 12:19:36 -05:00

model-selection.ts

Default reasoning to on when model has reasoning: true (fix #22456) (#22513)

2026-02-22 12:19:36 -05:00

normalize-reply.ts

…

post-compaction-audit.test.ts

…

post-compaction-audit.ts

…

post-compaction-context.test.ts

…

post-compaction-context.ts

…

provider-dispatcher.ts

…

queue.ts

…

reply-delivery.ts

…

reply-directives.ts

…

reply-dispatcher.ts

…

reply-elevated.test.ts

fix(security): tighten elevated allowFrom sender matching

2026-02-22 22:00:08 +01:00

reply-elevated.ts

refactor(security): split elevated allowFrom matcher internals

2026-02-22 22:20:04 +01:00

reply-flow.test.ts

test: fix readonly typing regressions in check baseline

2026-02-21 23:57:34 +01:00

reply-inline.ts

…

reply-payloads.test.ts

fix(replies): normalize media path variants for dedupe

2026-02-22 19:34:30 +01:00

reply-payloads.ts

fix(replies): normalize media path variants for dedupe

2026-02-22 19:34:30 +01:00

reply-plumbing.test.ts

fix(slack): finalize replyToMode off threading behavior (#23799)

2026-02-22 13:27:50 -05:00

reply-reference.ts

…

reply-state.test.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

reply-tags.ts

…

reply-threading.ts

…

reply-utils.test.ts

test: streamline auto-reply and tts suites

2026-02-21 21:44:01 +00:00

response-prefix-template.ts

…

route-reply.test.ts

…

route-reply.ts

…

session-reset-model.ts

…

session-reset-prompt.ts

Session: enforce startup sequence on bare reset greeting

2026-02-20 20:38:56 -08:00

session-run-accounting.ts

fix(auth/session): preserve override reset behavior and repair oauth profile-id drift (openclaw#18820) thanks @Glucksberg

2026-02-19 21:16:26 -06:00

session-updates.ts

feat: surface cached token counts in /status output (openclaw#21248) thanks @vishaltandale00

2026-02-19 21:06:13 -06:00

session-usage.ts

Sessions: persist prompt-token totals without usage

2026-02-21 23:37:42 -08:00

session.test.ts

test: simplify session reset and rawbody coverage

2026-02-23 18:19:23 +00:00

session.ts

refactor(webchat): extract shared chat state helpers

2026-02-22 21:37:19 +01:00

stage-sandbox-media.ts

style: format files and fix safe-bins e2e typing

2026-02-19 14:26:12 +01:00

streaming-directives.ts

…

strip-inbound-meta.test.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

strip-inbound-meta.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

subagents-utils.test.ts

…

subagents-utils.ts

…

test-ctx.ts

…

test-helpers.ts

…

typing-mode.ts

…

typing.ts

…

untrusted-context.ts

…