Peter Steinberger e0db04a50d fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

..

sessions

test: dedupe repeated validation and throw assertions

2026-02-21 23:28:07 +00:00

agent-dirs.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-dirs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-limits.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

backup-rotation.ts

perf(test): speed up config tests

2026-02-14 14:25:54 +00:00

cache-utils.ts

fix: persist topic session files

2026-01-07 22:56:50 +00:00

channel-capabilities.test.ts

test: dedupe shared setup in channel and doctor config tests

2026-02-18 04:04:14 +00:00

channel-capabilities.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

commands.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

commands.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config-misc.test.ts

fix(gateway): harden channel health monitor recovery

2026-02-17 03:26:26 +01:00

config-paths.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config.agent-concurrency-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.backup-rotation.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

config.compaction-settings.test.ts

Config: expose Pi compaction tuning values (openclaw#21568) thanks @Takhoffman

2026-02-19 21:41:09 -06:00

config.discord-presence.test.ts

Discord: refine presence config defaults (#10855) (thanks @h0tp-ftw)

2026-02-13 13:34:19 -06:00

config.discord.test.ts

Config: require Discord ID strings (#18220)

2026-02-16 12:22:58 -06:00

config.dm-policy-alias.test.ts

refactor(config): add dmPolicy aliases for Slack/Discord

2026-02-14 21:04:27 +01:00

config.env-vars.test.ts

fix(security): harden shell env fallback

2026-02-21 20:01:08 +01:00

config.hooks-module-paths.test.ts

fix(security): harden hooks module loading

2026-02-14 15:03:27 +01:00

config.identity-avatar.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

config.identity-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.irc.test.ts

chore: Fix types in tests 16/N.

2026-02-17 12:00:29 +09:00

config.legacy-config-detection.accepts-imessage-dmpolicy.e2e.test.ts

test: group remaining suite cleanups

2026-02-21 21:44:57 +00:00

config.legacy-config-detection.rejects-routing-allowfrom.e2e.test.ts

test: fix rebase-introduced tsgo regressions

2026-02-21 23:57:34 +01:00

config.msteams.test.ts

perf(test): reduce test startup overhead

2026-02-13 14:48:45 +00:00

config.multi-agent-agentdir-validation.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

config.nix-integration-u3-u5-u9.e2e.test.ts

fix(test): avoid inheriting process.env in nix config e2e

2026-02-15 23:14:42 +00:00

config.plugin-validation.test.ts

perf(test): cut setup/import overhead in hot suites

2026-02-13 21:23:50 +00:00

config.pruning-defaults.test.ts

refactor(test): dedupe env setup in envelope and config tests

2026-02-21 19:13:47 +00:00

config.sandbox-docker.test.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config.schema-regressions.test.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

config.skills-entries-config.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

config.talk-api-key-fallback.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

config.telegram-custom-commands.test.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

config.tools-alsoAllow.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

config.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

defaults.ts

Models/Config: default missing Anthropic model api fields

2026-02-21 22:50:43 -08:00

discord-preview-streaming.ts

fix(config): add shared streaming resolver module

2026-02-21 19:53:42 +01:00

env-preserve-io.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-preserve.test.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

env-preserve.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

env-substitution.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

env-substitution.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-vars.ts

refactor(security): centralize host env policy and harden env ingestion

2026-02-21 13:04:39 +01:00

group-policy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

home-env.test-harness.ts

test: share temp home env harness

2026-02-19 15:08:14 +00:00

includes-scan.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

includes.test.ts

test: dedupe repeated validation and throw assertions

2026-02-21 23:28:07 +00:00

includes.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

io.compat.test.ts

test(config): dedupe io fixture wiring and cover legacy config-path override

2026-02-21 21:40:39 +00:00

io.ts

CLI/Config: keep explicitly unset keys removed

2026-02-21 21:08:04 -08:00

io.write-config.test.ts

CLI/Config: keep explicitly unset keys removed

2026-02-21 21:08:04 -08:00

legacy-migrate.test.ts

refactor(config): reuse default group entry migration helper

2026-02-19 00:33:21 +00:00

legacy-migrate.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

legacy.migrations.part-1.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

legacy.migrations.part-2.ts

refactor(config): reuse legacy audio transcription migration path

2026-02-19 00:29:00 +00:00

legacy.migrations.part-3.ts

Config: clarify memorySearch migration precedence

2026-02-10 00:21:27 -08:00

legacy.migrations.ts

refactor(config): split legacy handling

2026-01-14 05:39:51 +00:00

legacy.rules.ts

Config: migrate legacy top-level memorySearch

2026-02-10 00:21:27 -08:00

legacy.shared.test.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

legacy.shared.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

legacy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

logging.ts

refactor: rename clawdbot to moltbot with legacy compat

2026-01-27 12:21:02 +00:00

markdown-tables.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

merge-config.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

merge-patch.proto-pollution.test.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

merge-patch.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

merge-patch.ts

fix: harden config prototype-key guards (#22968) (thanks @Clawborn)

2026-02-22 00:25:22 +01:00

model-alias-defaults.test.ts

Models/Config: default missing Anthropic model api fields

2026-02-21 22:50:43 -08:00

normalize-paths.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

normalize-paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

paths.test.ts

test(config): dedupe temp roots and cover legacy state-dir fallback

2026-02-21 21:40:39 +00:00

paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugin-auto-enable.test.ts

fix(config): auto-enable configured plugins

2026-02-14 01:56:12 +00:00

plugin-auto-enable.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugins-allowlist.ts

refactor: centralize plugin allowlist mutation

2026-02-17 00:45:02 +00:00

plugins-runtime-boundary.test.ts

refactor(runtime): split runtime builders and stabilize cron tool seam

2026-02-19 16:09:56 +01:00

port-defaults.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

prototype-keys.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

redact-snapshot.test.ts

refactor(test): stabilize case tables and readonly helper inputs

2026-02-22 00:10:07 +01:00

redact-snapshot.ts

refactor: dedupe redact snapshot restore prelude

2026-02-19 14:27:37 +00:00

runtime-overrides.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

runtime-overrides.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

schema.help.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00

schema.hints.test.ts

fix: make sensitive field whitelist case-insensitive (#16148)

2026-02-15 10:31:48 -05:00

schema.hints.ts

fix: make sensitive field whitelist case-insensitive (#16148)

2026-02-15 10:31:48 -05:00

schema.irc.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

schema.labels.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

schema.test.ts

fix(config): accept $schema key in root config (#15280)

2026-02-14 03:07:12 +01:00

schema.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions.cache.test.ts

perf(test): speed up suites and reduce fs churn

2026-02-15 19:29:27 +00:00

sessions.test.ts

test: table-drive status reactions and session key cases

2026-02-21 23:02:44 +00:00

sessions.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

slack-http-config.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

slack-token-validation.test.ts

test: tighten relay smoke + slack token validation

2026-02-16 02:45:00 +00:00

talk.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

telegram-custom-commands.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

telegram-webhook-secret.test.ts

fix(ci): repair lint/build checks

2026-02-01 10:20:27 +00:00

test-helpers.ts

perf(test): stabilize e2e harness and reduce flaky gateway coverage

2026-02-13 17:32:14 +00:00

types.agent-defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.agents.ts

fix: add discord role allowlists (#10650) (thanks @Minidoracat)

2026-02-12 19:52:24 -06:00

types.approvals.ts

feat(discord): add exec approval forwarding to DMs (#1621)

2026-01-24 20:56:40 +00:00

types.auth.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

types.base.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

types.browser.ts

fix(browser): unify SSRF guard path for navigation

2026-02-19 13:44:01 +01:00

types.channels.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.cron.ts

cron: separate webhook POST delivery from announce (#17901)

2026-02-16 02:36:00 -08:00

types.discord.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.gateway.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

types.googlechat.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.hooks.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

types.imessage.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.irc.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.memory.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00

types.messages.ts

Add explicit ownerDisplaySecret for owner ID hash obfuscation (#22520)

2026-02-21 03:13:56 -05:00

types.models.ts

feat(config): expose full pi-ai model compat fields in config schema (openclaw#11063) thanks @ikari-pl

2026-02-13 18:47:18 -06:00

types.msteams.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.node-host.ts

feat: add node browser proxy routing

2026-01-24 04:21:47 +00:00

types.openclaw.ts

fix(config): add resolved field to ConfigFileSnapshot for pre-defaults config

2026-02-13 04:41:04 +01:00

types.plugins.ts

fix(security): restore trusted plugin runtime exec default

2026-02-19 16:01:29 +01:00

types.queue.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.sandbox.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

types.signal.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.skills.ts

fix(skills): guard against skills prompt bloat

2026-02-17 00:01:34 +01:00

types.slack.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.telegram.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.tools.ts

refactor(config): share media provider request fields

2026-02-18 23:34:15 +00:00

types.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.tts.ts

fix(tts): make model provider overrides opt-in

2026-02-21 13:16:07 +01:00

types.whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

validation.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

version.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

zod-schema.agent-defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.agent-model.ts

refactor(config): share agent model schema

2026-02-15 16:53:38 +00:00

zod-schema.agent-runtime.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

zod-schema.agents.ts

fix: add missing role-based type definitions for RBAC routing

2026-02-12 19:52:24 -06:00

zod-schema.allowdeny.ts

fix(memory): prevent QMD scope deny bypass

2026-02-15 02:41:45 +00:00

zod-schema.approvals.ts

feat(discord): add exec approval forwarding to DMs (#1621)

2026-01-24 20:56:40 +00:00

zod-schema.channels.ts

feat(heartbeat): add configurable visibility for heartbeat responses

2026-01-24 09:07:03 +00:00

zod-schema.core.ts

refactor(core): dedupe browser route signatures and cli watchdog schema

2026-02-18 14:15:20 +00:00

zod-schema.hooks.ts

refactor(config): share install record schema shape

2026-02-18 18:25:25 +00:00

zod-schema.installs.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

zod-schema.providers-core.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

zod-schema.providers-whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

zod-schema.providers.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.sensitive.ts

fix: Finish credential redaction that was merged unfinished (#13073)

2026-02-13 16:19:21 +01:00

zod-schema.session.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

zod-schema.ts

feat(memory): allow QMD searches via mcporter keep-alive (openclaw#19617) thanks @vignesh07

2026-02-21 18:54:33 -06:00