Vincent Koc 99170e2408 Hardening: normalize Unicode command obfuscation detection (#44091) ...

* Exec: cover unicode obfuscation cases

* Exec: normalize unicode obfuscation detection

* Changelog: note exec detection hardening

* Exec: strip unicode tag character obfuscation

* Exec: harden unicode suppression and length guards

* Exec: require path boundaries for safe URL suppressions

2026-03-12 10:57:49 -04:00

..

format-time

test: optimize gateway infra memory and security coverage

2026-02-21 21:44:50 +00:00

net

Fix env proxy bootstrap for model traffic (#43248)

2026-03-11 10:21:35 -05:00

outbound

fix: thread runtime config through Discord/Telegram sends (#42352) (thanks @joshavant) (#42352)

2026-03-10 13:30:57 -05:00

tls

perf(test): fold tls fingerprint normalization into ssrf suite

2026-02-16 02:44:59 +00:00

abort-pattern.test.ts

perf(test): fake abort timer and dedupe slack thread cases

2026-02-18 16:14:07 +00:00

abort-signal.test.ts

refactor: unify monitor abort lifecycle handling

2026-02-26 04:36:25 +01:00

abort-signal.ts

refactor: unify monitor abort lifecycle handling

2026-02-26 04:36:25 +01:00

agent-events.test.ts

Respect source channel for agent event surfacing (#36030)

2026-03-06 01:14:00 -05:00

agent-events.ts

Respect source channel for agent event surfacing (#36030)

2026-03-06 01:14:00 -05:00

archive-path.test.ts

refactor(archive): share archive path safety helpers

2026-02-18 16:48:35 +00:00

archive-path.ts

refactor(archive): share archive path safety helpers

2026-02-18 16:48:35 +00:00

archive-staging.ts

refactor: extract archive staging helpers

2026-03-10 23:52:31 +00:00

archive.test.ts

refactor: clarify archive staging intent

2026-03-10 23:54:12 +00:00

archive.ts

refactor: clarify archive staging intent

2026-03-10 23:54:12 +00:00

backoff.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

backup-create.ts

Infra: extract backup and plugin path helpers

2026-03-10 20:16:35 -04:00

binaries.ts

…

bonjour-ciao.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

bonjour-discovery.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

bonjour-discovery.ts

refactor(infra): share isTailnetIPv4 helper

2026-02-15 21:47:51 +00:00

bonjour-errors.ts

…

bonjour.test.ts

test(gateway): dedupe loopback cases and trim setup resets

2026-02-22 08:00:41 +00:00

bonjour.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

boundary-file-read.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

boundary-path.test.ts

test(perf): reduce boundary-path fuzz setup churn

2026-03-02 12:54:59 +00:00

boundary-path.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

brew.test.ts

test: make brew fallback assertion windows-safe

2026-02-21 23:57:34 +01:00

brew.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

canvas-host-url.ts

fix(canvas): port remaining iOS branch stability fixes (#18228)

2026-02-16 16:42:28 +00:00

channel-activity.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

channel-summary.test.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

channel-summary.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

channels-status-issues.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

cli-root-options.test.ts

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

cli-root-options.ts

CLI: dedupe config validate errors and expose allowed values

2026-03-02 20:05:12 -05:00

clipboard.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

control-ui-assets.test.ts

gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385)

2026-03-09 01:50:42 +01:00

control-ui-assets.ts

gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385)

2026-03-09 01:50:42 +01:00

dedupe.ts

refactor(plugin-sdk): unify channel dedupe primitives

2026-02-22 10:46:34 +01:00

detect-package-manager.ts

refactor(update): dedupe package manager detection

2026-02-15 04:34:39 +00:00

device-auth-store.ts

refactor(core): extract shared usage, auth, and display helpers

2026-03-02 08:54:20 +00:00

device-identity.state-dir.test.ts

refactor(test): centralize temporary state-dir env setup

2026-02-21 12:59:24 +00:00

device-identity.ts

perf(test): reduce module reload overhead in key suites

2026-02-13 15:45:19 +00:00

device-pairing.test.ts

Infra: fail closed without device scope baseline

2026-03-12 01:42:12 -04:00

device-pairing.ts

Infra: fail closed without device scope baseline

2026-03-12 01:42:12 -04:00

diagnostic-events.ts

fix(otel): complete diagnostics-otel OpenTelemetry v2 API migration (#12897)

2026-02-19 02:36:47 -08:00

diagnostic-flags.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

dotenv.test.ts

test(infra): dedupe dotenv fixture setup and cover fallback-only load

2026-02-21 21:40:39 +00:00

dotenv.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

env.test.ts

refactor(test): dedupe env setup in envelope and config tests

2026-02-21 19:13:47 +00:00

env.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

errors.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

exec-allowlist-pattern.test.ts

Tests: extend exec allowlist glob coverage

2026-03-12 04:01:49 -04:00

exec-allowlist-pattern.ts

Tests: extend exec allowlist glob coverage

2026-03-12 04:01:49 -04:00

exec-approval-command-display.ts

Security: escape invisible exec approval format chars (#43687)

2026-03-12 01:20:04 -04:00

exec-approval-forwarder.test.ts

Security: escape invisible exec approval format chars (#43687)

2026-03-12 01:20:04 -04:00

exec-approval-forwarder.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

exec-approval-reply.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

exec-approval-surface.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

exec-approvals-allow-always.test.ts

fix(exec-approvals): honor allow-always for bash script invocations

2026-03-08 00:39:54 +00:00

exec-approvals-allowlist.ts

fix(exec-approvals): honor allow-always for bash script invocations

2026-03-08 00:39:54 +00:00

exec-approvals-analysis.ts

fix(exec): honor shell comments in allow-always analysis

2026-03-07 23:31:25 +00:00

exec-approvals-config.test.ts

refactor(exec): unify wrapper resolution and split approvals tests

2026-02-22 23:20:09 +01:00

exec-approvals-parity.test.ts

refactor(exec): unify wrapper resolution and split approvals tests

2026-02-22 23:20:09 +01:00

exec-approvals-safe-bins.test.ts

fix(security): harden exec wrapper allowlist execution parity

2026-02-24 01:52:17 +00:00

exec-approvals-test-helpers.ts

refactor(exec): unify wrapper resolution and split approvals tests

2026-02-22 23:20:09 +01:00

exec-approvals.test.ts

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

exec-approvals.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

exec-command-resolution.ts

refactor: split inbound and reload pipelines into staged modules

2026-03-02 21:55:01 +00:00

exec-host.ts

refactor(infra): share jsonl socket requester

2026-02-15 13:56:50 +00:00

exec-obfuscation-detect.test.ts

Hardening: normalize Unicode command obfuscation detection (#44091)

2026-03-12 10:57:49 -04:00

exec-obfuscation-detect.ts

Hardening: normalize Unicode command obfuscation detection (#44091)

2026-03-12 10:57:49 -04:00

exec-safe-bin-policy-profiles.ts

refactor(exec): split safe-bin policy modules and dedupe allowlist flow

2026-02-24 03:05:03 +00:00

exec-safe-bin-policy-validator.ts

refactor(exec): split safe-bin policy modules and dedupe allowlist flow

2026-02-24 03:05:03 +00:00

exec-safe-bin-policy.test.ts

test(exec): add regressions for safe-bin metadata and chain semantics

2026-02-24 03:10:19 +00:00

exec-safe-bin-policy.ts

refactor(exec): split safe-bin policy modules and dedupe allowlist flow

2026-02-24 03:05:03 +00:00

exec-safe-bin-runtime-policy.test.ts

refactor: harden safe-bin trusted dir diagnostics

2026-02-24 23:29:44 +00:00

exec-safe-bin-runtime-policy.ts

refactor: harden safe-bin trusted dir diagnostics

2026-02-24 23:29:44 +00:00

exec-safe-bin-trust.test.ts

refactor: harden safe-bin trusted dir diagnostics

2026-02-24 23:29:44 +00:00

exec-safe-bin-trust.ts

refactor: harden safe-bin trusted dir diagnostics

2026-02-24 23:29:44 +00:00

exec-safety.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

exec-wrapper-resolution.test.ts

fix: normalize windows runtime shim executables

2026-03-09 07:01:42 +00:00

exec-wrapper-resolution.ts

fix: normalize windows runtime shim executables

2026-03-09 07:01:42 +00:00

executable-path.ts

refactor: dedupe runtime and helper flows

2026-03-02 12:55:47 +00:00

fetch.test.ts

test(fetch): table-drive sync throw cleanup coverage

2026-02-21 23:28:07 +00:00

fetch.ts

refactor(infra): make fetch wrapping idempotent

2026-02-16 08:24:55 -05:00

file-identity.test.ts

fix: align windows safe-open file identity checks

2026-02-25 00:42:04 +00:00

file-identity.ts

fix: align windows safe-open file identity checks

2026-02-25 00:42:04 +00:00

file-lock.ts

refactor: share file lock via plugin-sdk

2026-02-15 00:26:46 +00:00

fixed-window-rate-limit.test.ts

refactor(acp): split session tests and share rate limiter

2026-02-19 14:55:06 +01:00

fixed-window-rate-limit.ts

refactor(acp): split session tests and share rate limiter

2026-02-19 14:55:06 +01:00

fs-pinned-write-helper.test.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-pinned-write-helper.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-safe.test.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

fs-safe.ts

fix(security): pin staged writes and fs mutations

2026-03-11 02:38:00 +00:00

gateway-lock.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

gateway-lock.ts

refactor: share gateway argv parsing

2026-03-08 23:38:24 +00:00

gateway-process-argv.ts

refactor: share gateway argv parsing

2026-03-08 23:38:24 +00:00

gemini-auth.ts

fix: support OAuth for Gemini media understanding

2026-02-16 23:53:21 +01:00

git-commit.test.ts

chore: bump version to 2026.3.10

2026-03-11 23:29:53 +00:00

git-commit.ts

test: isolate git commit resolution fallbacks

2026-03-08 18:40:14 +00:00

git-root.test.ts

Infra: unify git root discovery

2026-02-18 00:45:43 -05:00

git-root.ts

Infra: unify git root discovery

2026-02-18 00:45:43 -05:00

hardlink-guards.ts

refactor(security): unify path alias guard policies

2026-02-26 03:59:17 +01:00

heartbeat-active-hours.test.ts

fix(heartbeat): return false for zero-width active-hours window (#21408)

2026-02-19 20:03:57 -05:00

heartbeat-active-hours.ts

fix(heartbeat): return false for zero-width active-hours window (#21408)

2026-02-19 20:03:57 -05:00

heartbeat-events-filter.test.ts

fix(heartbeat): default target none and internalize relay prompts

2026-02-25 01:28:47 +00:00

heartbeat-events-filter.ts

fix(heartbeat): default target none and internalize relay prompts

2026-02-25 01:28:47 +00:00

heartbeat-events.ts

feat(heartbeat): add accountId config option for multi-agent routing (#8702)

2026-02-04 16:49:12 -05:00

heartbeat-reason.test.ts

fix(acp): implicit streamToParent for mode=run without thread (#42404)

2026-03-10 21:42:15 +01:00

heartbeat-reason.ts

fix(acp): implicit streamToParent for mode=run without thread (#42404)

2026-03-10 21:42:15 +01:00

heartbeat-runner.ghost-reminder.test.ts

refactor(heartbeat): harden dm delivery classification

2026-02-25 02:13:07 +00:00

heartbeat-runner.model-override.test.ts

feat: lightweight bootstrap context mode for heartbeat/cron runs (openclaw#26064) thanks @jose-velez

2026-03-01 20:13:24 -06:00

heartbeat-runner.respects-ackmaxchars-heartbeat-acks.test.ts

test: fix CI failures in heartbeat and typing tests

2026-02-25 02:28:42 +00:00

heartbeat-runner.returns-default-unset.test.ts

fix(heartbeat): pin HEARTBEAT.md reads to workspace path

2026-03-05 18:52:39 -08:00

heartbeat-runner.scheduler.test.ts

fix(heartbeat): keep requests-in-flight retries from drifting schedule (#39182, thanks @MumuTW)

2026-03-07 22:10:51 +00:00

heartbeat-runner.sender-prefers-delivery-target.test.ts

test(heartbeat): use shared sandbox in sender target suite

2026-02-22 10:28:42 +00:00

heartbeat-runner.test-harness.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

heartbeat-runner.test-utils.ts

refactor(test): centralize trigger and cron test helpers

2026-02-22 20:04:51 +00:00

heartbeat-runner.transcript-prune.test.ts

refactor(test): centralize trigger and cron test helpers

2026-02-22 20:04:51 +00:00

heartbeat-runner.ts

fix(acp): implicit streamToParent for mode=run without thread (#42404)

2026-03-10 21:42:15 +01:00

heartbeat-visibility.test.ts

test: dedupe heartbeat and action-runner fixtures

2026-02-19 14:27:36 +00:00

heartbeat-visibility.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

heartbeat-wake.test.ts

chore: Fix types in tests 33/N.

2026-02-17 15:50:07 +09:00

heartbeat-wake.ts

fix(acp): implicit streamToParent for mode=run without thread (#42404)

2026-03-10 21:42:15 +01:00

home-dir.test.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

home-dir.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

host-env-security-policy.json

Infra: block GIT_EXEC_PATH in host env sanitizer (#43685)

2026-03-12 01:16:03 -04:00

host-env-security.policy-parity.test.ts

fix(exec): block dangerous override-only env pivots

2026-03-07 19:18:05 +00:00

host-env-security.test.ts

Tests: clean up temp git helper directory

2026-03-12 01:42:12 -04:00

host-env-security.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

http-body.test.ts

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

http-body.ts

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

infra-parsing.test.ts

refactor(gateway): simplify restart flow and expand lock tests

2026-02-22 10:44:47 +01:00

infra-runtime.test.ts

fix(agents): bound compaction retry wait and drain embedded runs on restart (#40324)

2026-03-09 08:27:29 -07:00

infra-store.test.ts

refactor(test): centralize trigger and cron test helpers

2026-02-22 20:04:51 +00:00

install-flow.test.ts

fix: make windows CI path handling deterministic

2026-02-22 22:34:49 +00:00

install-flow.ts

refactor: share install flows across hooks and plugins

2026-02-22 18:37:25 +00:00

install-from-npm-spec.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

install-mode-options.test.ts

test: cover shared installer flow helpers

2026-02-22 18:37:25 +00:00

install-mode-options.ts

refactor: share install flows across hooks and plugins

2026-02-22 18:37:25 +00:00

install-package-dir.test.ts

fix(ci): restore strip-ansi and typecheck fixtures (#39146)

2026-03-07 23:13:13 +03:00

install-package-dir.ts

fix(security): harden install base drift cleanup

2026-03-07 19:23:01 +00:00

install-safe-path.test.ts

fix(security): unify root-bound write hardening

2026-03-02 17:12:33 +00:00

install-safe-path.ts

fix(security): unify root-bound write hardening

2026-03-02 17:12:33 +00:00

install-source-utils.test.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

install-source-utils.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

install-target.ts

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

is-main.ts

refactor(gateway): simplify restart flow and expand lock tests

2026-02-22 10:44:47 +01:00

json-file.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

json-files.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

json-utf8-bytes.test.ts

refactor(core): share JSON utf8 byte counting helper

2026-03-02 05:20:19 +00:00

json-utf8-bytes.ts

refactor(core): share JSON utf8 byte counting helper

2026-03-02 05:20:19 +00:00

jsonl-socket.ts

refactor(infra): share jsonl socket requester

2026-02-15 13:56:50 +00:00

machine-name.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

map-size.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

node-commands.ts

refactor(gateway): share node command catalog

2026-02-26 22:01:06 +01:00

node-pairing.test.ts

refactor: dedupe pending pairing request flow and add reuse tests

2026-02-19 13:54:35 +00:00

node-pairing.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

node-shell.ts

fix: treat Windows platform labels as Windows for node shell (#1760)

2026-01-25 12:57:06 +00:00

npm-integrity.test.ts

refactor: share npm integrity drift handling

2026-02-19 15:08:14 +00:00

npm-integrity.ts

refactor: share npm integrity drift handling

2026-02-19 15:08:14 +00:00

npm-pack-install.test.ts

test: cover shared installer flow helpers

2026-02-22 18:37:25 +00:00

npm-pack-install.ts

Infra: require explicit opt-in for prerelease npm installs (#38117)

2026-03-06 11:13:30 -05:00

npm-registry-spec.test.ts

Infra: require explicit opt-in for prerelease npm installs (#38117)

2026-03-06 11:13:30 -05:00

npm-registry-spec.ts

Infra: require explicit opt-in for prerelease npm installs (#38117)

2026-03-06 11:13:30 -05:00

openclaw-exec-env.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

openclaw-root.test.ts

CLI: include commit hash in --version output (#39712)

2026-03-08 19:10:48 +03:00

openclaw-root.ts

CLI: include commit hash in --version output (#39712)

2026-03-08 19:10:48 +03:00

os-summary.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

package-json.ts

refactor(update): share package.json readers

2026-02-16 00:41:28 +00:00

package-tag.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

pairing-files.ts

refactor: dedupe pending pairing request flow and add reuse tests

2026-02-19 13:54:35 +00:00

pairing-pending.ts

refactor(daemon): share runtime and service probe helpers

2026-02-22 21:19:09 +00:00

pairing-token.ts

fix: harden device pairing token generation and verification (#16535)

2026-02-14 16:23:33 -05:00

parse-finite-number.test.ts

refactor: centralize strict numeric parsing

2026-03-08 03:02:25 +00:00

parse-finite-number.ts

refactor: centralize strict numeric parsing

2026-03-08 03:02:25 +00:00

path-alias-guards.test.ts

fix: block broken-symlink sandbox path escapes

2026-02-26 13:30:45 +01:00

path-alias-guards.ts

fix: harden workspace boundary path resolution

2026-02-26 13:19:59 +01:00

path-env.test.ts

perf(test): speed up suites and reduce fs churn

2026-02-15 19:29:27 +00:00

path-env.ts

fix: harden exec PATH handling

2026-02-14 19:53:04 +01:00

path-guards.ts

refactor(infra): share windows path normalization helper

2026-03-02 21:55:12 +00:00

path-prepend.ts

fix(exec): resolve PATH key case-insensitively for Windows pathPrepend (#25399) (#31879)

2026-03-02 10:14:38 -06:00

path-safety.test.ts

test(skills): split installer security coverage

2026-02-16 03:47:28 +01:00

path-safety.ts

refactor: dedupe core config and runtime helpers

2026-02-22 17:11:54 +00:00

plain-object.test.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

plain-object.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

plugin-install-path-warnings.test.ts

Infra: extract backup and plugin path helpers

2026-03-10 20:16:35 -04:00

plugin-install-path-warnings.ts

Infra: extract backup and plugin path helpers

2026-03-10 20:16:35 -04:00

ports-format.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

ports-inspect.ts

Fix gateway restart false timeouts on Debian/systemd (#34874)

2026-03-04 10:52:33 -08:00

ports-lsof.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

ports-probe.ts

refactor(daemon): share runtime and service probe helpers

2026-02-22 21:19:09 +00:00

ports-types.ts

CLI: fix gateway restart health ownership for child listener pids (#24696)

2026-02-23 13:53:10 -05:00

ports.test.ts

Fix gateway restart false timeouts on Debian/systemd (#34874)

2026-03-04 10:52:33 -08:00

ports.ts

refactor(daemon): share runtime and service probe helpers

2026-02-22 21:19:09 +00:00

process-respawn.test.ts

fix(daemon): replace bootout with kickstart -k for launchd restarts on macOS

2026-03-12 01:16:49 +01:00

process-respawn.ts

fix(daemon): replace bootout with kickstart -k for launchd restarts on macOS

2026-03-12 01:16:49 +01:00

prototype-keys.ts

fix(security): harden account-key handling against prototype pollution

2026-02-24 01:09:31 +00:00

provider-usage.auth.normalizes-keys.test.ts

refactor: dedupe minimax provider auth test setup

2026-03-07 19:02:01 +00:00

provider-usage.auth.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

provider-usage.fetch.claude.test.ts

test: harden claude usage fallback assertions

2026-02-22 12:18:10 +00:00

provider-usage.fetch.claude.ts

fix(stability): patch regex retries and timeout abort handling

2026-02-22 10:59:34 +01:00

provider-usage.fetch.codex.test.ts

fix(models): infer codex weekly usage labels from reset cadence

2026-03-02 20:35:45 +00:00

provider-usage.fetch.codex.ts

fix(models): infer codex weekly usage labels from reset cadence

2026-03-02 20:35:45 +00:00

provider-usage.fetch.copilot.test.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.copilot.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.gemini.test.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.gemini.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.minimax.test.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.minimax.ts

refactor: dedupe provider usage auth/fetch logic and expand coverage

2026-02-19 13:28:18 +00:00

provider-usage.fetch.shared.test.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.shared.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

provider-usage.fetch.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

provider-usage.fetch.zai.test.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.fetch.zai.ts

refactor: dedupe provider usage fetch logic and tests

2026-02-19 12:51:30 +00:00

provider-usage.format.test.ts

test: dedupe provider usage tests and expand coverage

2026-02-19 13:08:01 +00:00

provider-usage.format.ts

refactor: dedupe provider usage auth/fetch logic and expand coverage

2026-02-19 13:28:18 +00:00

provider-usage.load.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

provider-usage.shared.test.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

provider-usage.shared.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

provider-usage.test.ts

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

provider-usage.ts

…

provider-usage.types.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

push-apns.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

push-apns.ts

refactor: dedupe APNs push send flow and add wake default test

2026-02-19 13:45:34 +00:00

restart-sentinel.test.ts

fix(restart): deduplicate reason line in restart sentinel message

2026-03-03 00:30:34 +00:00

restart-sentinel.ts

fix(restart): deduplicate reason line in restart sentinel message

2026-03-03 00:30:34 +00:00

restart-stale-pids.test.ts

fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831)

2026-03-03 21:31:12 -06:00

restart-stale-pids.ts

fix(gateway): harden service-mode stale process cleanup (#38463, thanks @spirittechie)

2026-03-07 21:36:24 +00:00

restart.test.ts

fix(gateway): harden service-mode stale process cleanup (#38463, thanks @spirittechie)

2026-03-07 21:36:24 +00:00

restart.ts

fix(agents): bound compaction retry wait and drain embedded runs on restart (#40324)

2026-03-09 08:27:29 -07:00

retry-policy.test.ts

fix(telegram): land #34238 from @hal-crackbot

2026-03-08 00:56:58 +00:00

retry-policy.ts

refactor(retry): simplify telegram shouldRetry composition

2026-03-08 01:14:16 +00:00

retry.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

retry.ts

chore: We have a sleep at home. The sleep at home:

2026-02-02 21:44:02 +09:00

run-node.test.ts

test: fix flaky run-node spawn side-effects

2026-02-19 08:24:55 +00:00

runtime-guard.test.ts

build: raise Node 22 compatibility floor to 22.16

2026-03-12 20:07:44 +05:30

runtime-guard.ts

build: raise Node 22 compatibility floor to 22.16

2026-03-12 20:07:44 +05:30

runtime-status.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

safe-open-sync.test.ts

fix: tighten sandbox mkdirp boundary checks (#30610) (thanks @glitch418x)

2026-03-01 21:41:47 +00:00

safe-open-sync.ts

fix: tighten sandbox mkdirp boundary checks (#30610) (thanks @glitch418x)

2026-03-01 21:41:47 +00:00

scp-host.test.ts

fix(security): harden imessage remote scp/ssh handling

2026-02-19 11:08:23 +01:00

scp-host.ts

fix(security): harden imessage remote scp/ssh handling

2026-02-19 11:08:23 +01:00

scripts-modules.d.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

secret-file.test.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

secret-file.ts

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

secure-random.test.ts

fix(security): harden channel token and id generation

2026-02-22 10:16:02 +01:00

secure-random.ts

fix(security): harden channel token and id generation

2026-02-22 10:16:02 +01:00

session-cost-usage.test.ts

refactor(test): dedupe env setup across suites

2026-02-21 19:13:46 +00:00

session-cost-usage.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

session-cost-usage.types.ts

refactor(shared): centralize assistant identity and usage timeseries types

2026-03-02 14:36:41 +00:00

session-maintenance-warning.test.ts

refactor: unify outbound session context wiring

2026-02-26 21:03:28 +01:00

session-maintenance-warning.ts

build: fix ineffective dynamic imports with lazy boundaries (#33690)

2026-03-03 20:14:41 -05:00

shell-env.test.ts

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

shell-env.ts

refactor(security): dedupe shell env probe and add path regression test

2026-02-24 03:11:33 +00:00

shell-inline-command.ts

fix(exec): recognize PowerShell encoded commands

2026-03-07 23:15:46 +00:00

skills-remote.test.ts

Skills: clean up remote node cache on disconnect

2026-02-14 18:02:14 -08:00

skills-remote.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

ssh-config.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

ssh-config.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

ssh-tunnel.ts

fix(security): harden imessage remote scp/ssh handling

2026-02-19 11:08:23 +01:00

stable-node-path.ts

refactor: split slack/discord/session maintenance helpers

2026-03-02 23:07:20 +00:00

state-migrations.fs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

state-migrations.state-dir.test.ts

fix: support moltbot legacy state dir

2026-02-14 17:14:21 +00:00

state-migrations.ts

refactor(doctor): model legacy file copies as plans

2026-03-08 02:16:03 +00:00

supervisor-markers.ts

refactor: flatten supervisor marker hints

2026-03-09 06:19:30 +00:00

system-events.test.ts

fix: restore auto-reply system events timeline (#34794) (thanks @anisoptera) (#34794)

2026-03-05 07:56:14 +05:30

system-events.ts

fix(gateway): skip heartbeat wake on deduped notifications

2026-02-28 11:18:01 +05:30

system-message.test.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

system-message.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

system-presence.test.ts

refactor: centralize presence routing and version precedence coverage (#19609)

2026-02-18 00:02:51 -05:00

system-presence.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00

system-presence.version.test.ts

Gateway: fix stale self version in status output (#32655)

2026-03-03 02:41:52 -05:00

system-run-approval-binding.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

system-run-approval-context.test.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

system-run-approval-context.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

system-run-approval-mismatch.contract.test.ts

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

system-run-command.contract.test.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

system-run-command.test.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

system-run-command.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

system-run-normalize.ts

refactor: share allowFrom stringification helpers

2026-03-07 23:27:51 +00:00

tailnet.ts

refactor(security): unify local-host and tailnet CIDR checks

2026-02-22 17:20:27 +01:00

tailscale.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

tailscale.ts

perf(test): optimize heavy suites and stabilize lock timing

2026-02-13 13:29:07 +00:00

tmp-openclaw-dir.test.ts

refactor: dedupe gateway config and infra flows

2026-03-03 00:15:14 +00:00

tmp-openclaw-dir.ts

fix: harden temp dir perms for umask 0002 (landed from #27860 by @stakeswky)

2026-02-26 21:59:55 +00:00

transport-ready.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

transport-ready.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

unhandled-rejections.fatal-detection.test.ts

fix(gateway): classify wrapped "fetch failed" messages as transient network errors (openclaw#38530)

2026-03-06 21:47:32 -06:00

unhandled-rejections.test.ts

fix(gateway): classify wrapped "fetch failed" messages as transient network errors (openclaw#38530)

2026-03-06 21:47:32 -06:00

unhandled-rejections.ts

fix(gateway): classify wrapped "fetch failed" messages as transient network errors (openclaw#38530)

2026-03-06 21:47:32 -06:00

update-channels.test.ts

fix: support legacy and beta prerelease version formats

2026-02-24 02:05:37 +00:00

update-channels.ts

fix: support legacy and beta prerelease version formats

2026-02-24 02:05:37 +00:00

update-check.test.ts

fix: support legacy and beta prerelease version formats

2026-02-24 02:05:37 +00:00

update-check.ts

fix: support legacy and beta prerelease version formats

2026-02-24 02:05:37 +00:00

update-global.ts

fix(update): fallback to --omit=optional when global npm update fails (#24896)

2026-02-26 21:35:13 -05:00

update-runner.test.ts

refactor: split slack/discord/session maintenance helpers

2026-03-02 23:07:20 +00:00

update-runner.ts

refactor: split slack/discord/session maintenance helpers

2026-03-02 23:07:20 +00:00

update-startup.test.ts

fix(ci): tighten type signatures in gateway params validation

2026-03-03 03:04:13 +00:00

update-startup.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

voicewake.ts

refactor(infra): extract json file + async lock helpers

2026-02-15 21:46:08 +00:00

warning-filter.test.ts

Memory/QMD: reuse default model cache and skip ENOENT warnings (#12114)

2026-02-08 23:43:08 -08:00

warning-filter.ts

chore: suppress warnings for node default output path

2026-02-08 05:32:58 -05:00

watch-node.test.ts

refactor(core): dedupe gateway runtime and config tests

2026-02-22 07:44:57 +00:00

widearea-dns.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

widearea-dns.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

windows-task-restart.test.ts

fix: restart Windows gateway via Scheduled Task (#38825) (#38825)

2026-03-07 18:00:38 +05:30

windows-task-restart.ts

fix: restart Windows gateway via Scheduled Task (#38825) (#38825)

2026-03-07 18:00:38 +05:30

ws.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

wsl.test.ts

Daemon: harden WSL2 systemctl install checks (#39294)

2026-03-07 16:43:19 -08:00

wsl.ts

Daemon: harden WSL2 systemctl install checks (#39294)

2026-03-07 16:43:19 -08:00