Peter Steinberger 683aa09b55 refactor(media): harden localRoots bypass (#16739) ...

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 89dce69f5094bef7247b2510d27165e504cb820c
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete

2026-02-15 03:27:01 +01:00

..

format-time

Centralize date/time formatting utilities (#11831)

2026-02-08 04:53:31 -08:00

net

fix(security): block full-form IPv4-mapped IPv6 in SSRF guard

2026-02-14 22:58:38 +01:00

outbound

refactor(media): harden localRoots bypass (#16739)

2026-02-15 03:27:01 +01:00

tls

require TLS 1.3 as minimum

2026-02-01 15:14:11 -08:00

abort-pattern.test.ts

fix: use relayAbort helper for addEventListener to preserve AbortError reason

2026-02-13 18:13:18 +01:00

agent-events.test.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

agent-events.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

archive.test.ts

perf(test): speed up archive suite

2026-02-14 23:16:37 +00:00

archive.ts

refactor(archive): centralize limits and budgets

2026-02-14 15:43:44 +01:00

backoff.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

binaries.ts

chore: format to 2-space and bump changelog

2025-11-26 00:53:53 +01:00

bonjour-ciao.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

bonjour-discovery.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

bonjour-discovery.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

bonjour-errors.ts

refactor: centralize unhandled rejection setup

2026-01-07 20:59:49 +00:00

bonjour.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

bonjour.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

brew.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

brew.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

canvas-host-url.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

channel-activity.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

channel-summary.ts

refactor(channels): share account summary helpers

2026-02-14 15:39:46 +00:00

channels-status-issues.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

clipboard.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

control-ui-assets.test.ts

perf(test): speed up control-ui-assets suite

2026-02-14 21:20:15 +00:00

control-ui-assets.ts

fix: resolve symlinked argv1 for Control UI asset detection (#14919)

2026-02-12 14:45:31 -05:00

dedupe.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

device-auth-store.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

device-identity.state-dir.test.ts

perf(test): reduce module reload overhead in key suites

2026-02-13 15:45:19 +00:00

device-identity.ts

perf(test): reduce module reload overhead in key suites

2026-02-13 15:45:19 +00:00

device-pairing.test.ts

fix: harden device pairing token generation and verification (#16535)

2026-02-14 16:23:33 -05:00

device-pairing.ts

fix: harden device pairing token generation and verification (#16535)

2026-02-14 16:23:33 -05:00

diagnostic-events.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

diagnostic-flags.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

dotenv.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

dotenv.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

env-file.ts

refactor: consolidate duplicate utility functions (#12439)

2026-02-08 23:59:43 -08:00

env.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

env.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

errors.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

exec-approval-forwarder.test.ts

Exec approvals: render forwarded commands in monospace (#11937)

2026-02-08 10:48:52 -05:00

exec-approval-forwarder.ts

refactor(exec-approvals): share request event types

2026-02-14 15:39:46 +00:00

exec-approvals-allowlist.ts

refactor(security): refine safeBins hardening

2026-02-14 19:59:13 +01:00

exec-approvals-analysis.ts

refactor(security): refine safeBins hardening

2026-02-14 19:59:13 +01:00

exec-approvals.test.ts

fix(test): disable safeBins expectations on Windows

2026-02-15 01:37:38 +00:00

exec-approvals.ts

refactor: centralize exec approval timeout

2026-02-15 01:18:53 +01:00

exec-host.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

exec-safety.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

fetch.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

fetch.ts

fix: use relayAbort helper for addEventListener to preserve AbortError reason

2026-02-13 18:13:18 +01:00

file-lock.ts

refactor: share file lock via plugin-sdk

2026-02-15 00:26:46 +00:00

fs-safe.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

gateway-lock.test.ts

perf(test): remove gateway lock sleep waits

2026-02-15 01:26:25 +00:00

gateway-lock.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

git-commit.ts

fix: improve build-info resolution for commit/version

2026-02-03 17:31:51 -08:00

heartbeat-active-hours.test.ts

fix(heartbeat): honor heartbeat.model config for heartbeat turns (#14103)

2026-02-11 14:00:40 -05:00

heartbeat-active-hours.ts

fix(heartbeat): honor heartbeat.model config for heartbeat turns (#14103)

2026-02-11 14:00:40 -05:00

heartbeat-events-filter.ts

refactor(infra): split heartbeat event filters

2026-02-13 19:08:37 +00:00

heartbeat-events.ts

feat(heartbeat): add accountId config option for multi-agent routing (#8702)

2026-02-04 16:49:12 -05:00

heartbeat-runner.cron-system-event-filter.test.ts

fix: align cron prompt content with filtered reminder events

2026-02-12 16:14:27 -08:00

heartbeat-runner.ghost-reminder.test.ts

fix: align cron prompt content with filtered reminder events

2026-02-12 16:14:27 -08:00

heartbeat-runner.model-override.test.ts

fix(heartbeat): honor heartbeat.model config for heartbeat turns (#14103)

2026-02-11 14:00:40 -05:00

heartbeat-runner.respects-ackmaxchars-heartbeat-acks.test.ts

refactor(test): table telegram heartbeat account cases

2026-02-14 22:33:30 +00:00

heartbeat-runner.returns-default-unset.test.ts

fix(heartbeat): exempt wake and hook reasons from empty-heartbeat skip (openclaw#14532) thanks @arosstale

2026-02-13 19:05:02 -06:00

heartbeat-runner.scheduler.test.ts

fix: prevent heartbeat scheduler silent death from wake handler race (#15108)

2026-02-12 22:30:21 -05:00

heartbeat-runner.sender-prefers-delivery-target.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

heartbeat-runner.ts

fix(heartbeat): exempt wake and hook reasons from empty-heartbeat skip (openclaw#14532) thanks @arosstale

2026-02-13 19:05:02 -06:00

heartbeat-visibility.test.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

heartbeat-visibility.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

heartbeat-wake.test.ts

fix: reset stale execution state after SIGUSR1 in-process restart (#15195)

2026-02-13 15:30:09 -05:00

heartbeat-wake.ts

fix: reset stale execution state after SIGUSR1 in-process restart (#15195)

2026-02-13 15:30:09 -05:00

home-dir.test.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

home-dir.ts

fix(paths): structurally resolve home dir to prevent Windows path bugs (#12125)

2026-02-08 20:06:29 -05:00

http-body.test.ts

fix(infra): avoid req.destroy(err) in request body limiters

2026-02-15 03:19:27 +01:00

http-body.ts

fix(infra): avoid req.destroy(err) in request body limiters

2026-02-15 03:19:27 +01:00

infra-parsing.test.ts

refactor(test): consolidate infra unit tests

2026-02-12 17:16:42 +00:00

infra-runtime.test.ts

refactor: unify gateway restart deferral and dispatcher cleanup

2026-02-14 00:38:18 +01:00

infra-store.test.ts

refactor(test): consolidate infra unit tests

2026-02-12 17:16:42 +00:00

install-package-dir.ts

refactor(install): share package dir install

2026-02-14 15:39:46 +00:00

is-main.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

json-file.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

machine-name.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

node-pairing.test.ts

fix: harden device pairing token generation and verification (#16535)

2026-02-14 16:23:33 -05:00

node-pairing.ts

fix: harden device pairing token generation and verification (#16535)

2026-02-14 16:23:33 -05:00

node-shell.ts

fix: treat Windows platform labels as Windows for node shell (#1760)

2026-01-25 12:57:06 +00:00

npm-registry-spec.ts

fix(security): harden plugin/hook npm installs

2026-02-14 14:07:14 +01:00

openclaw-root.ts

fix: resolve symlinked argv1 for Control UI asset detection (#14919)

2026-02-12 14:45:31 -05:00

os-summary.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

pairing-files.ts

refactor(pairing): share json state helpers

2026-02-14 15:39:46 +00:00

pairing-token.ts

fix: harden device pairing token generation and verification (#16535)

2026-02-14 16:23:33 -05:00

path-env.test.ts

perf(test): reduce mkdir churn in path env suite

2026-02-15 00:45:10 +00:00

path-env.ts

fix: harden exec PATH handling

2026-02-14 19:53:04 +01:00

ports-format.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

ports-inspect.test.ts

fix: harden port listener detection

2026-01-21 18:52:55 +00:00

ports-inspect.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

ports-lsof.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

ports-types.ts

refactor: split port diagnostics helpers

2026-01-08 02:42:43 +01:00

ports.test.ts

perf(test): remove slow port inspection and reconnect sleeps

2026-02-14 04:57:28 +00:00

ports.ts

perf(test): reduce memory and port probe overhead

2026-02-13 23:22:30 +00:00

provider-usage.auth.normalizes-keys.test.ts

fix(configure): reject literal "undefined" and "null" gateway auth tokens (#13767)

2026-02-13 17:04:41 +01:00

provider-usage.auth.ts

fix(auth): strip line breaks from pasted keys

2026-02-09 11:26:27 -06:00

provider-usage.fetch.antigravity.test.ts

[AI Assisted] Usage: add Google Antigravity usage tracking (#1490)

2026-01-23 07:17:59 +00:00

provider-usage.fetch.antigravity.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.fetch.claude.ts

refactor(usage): share claude window builder

2026-02-15 01:46:51 +00:00

provider-usage.fetch.codex.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.fetch.copilot.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.fetch.gemini.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.fetch.minimax.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

provider-usage.fetch.shared.ts

perf: use .abort.bind() instead of arrow closures to prevent memory leaks (#7174)

2026-02-13 18:13:18 +01:00

provider-usage.fetch.ts

[AI Assisted] Usage: add Google Antigravity usage tracking (#1490)

2026-01-23 07:17:59 +00:00

provider-usage.fetch.zai.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.format.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.load.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.shared.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

provider-usage.test.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

provider-usage.ts

feat: sticky auth profile rotation + usage headers

2026-01-16 00:25:49 +00:00

provider-usage.types.ts

feat: support xiaomi/mimo-v2-flash

2026-01-29 17:15:51 +00:00

restart-sentinel.test.ts

fix: defer gateway restart until all replies are sent (#12970)

2026-02-14 00:29:29 +01:00

restart-sentinel.ts

fix: defer gateway restart until all replies are sent (#12970)

2026-02-14 00:29:29 +01:00

restart.ts

refactor: unify gateway restart deferral and dispatcher cleanup

2026-02-14 00:38:18 +01:00

retry-policy.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

retry.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

retry.ts

chore: We have a sleep at home. The sleep at home:

2026-02-02 21:44:02 +09:00

run-node.test.ts

refactor(scripts): make run-node main testable

2026-02-14 16:36:15 +00:00

runtime-guard.test.ts

fix(runtime): bump minimum Node.js version to 22.12.0 (#5370)

2026-02-05 13:42:52 -08:00

runtime-guard.ts

fix(runtime): bump minimum Node.js version to 22.12.0 (#5370)

2026-02-05 13:42:52 -08:00

session-cost-usage.test.ts

fix: land multi-agent session path fix + regressions (#15103) (#15448)

2026-02-13 14:17:24 +01:00

session-cost-usage.ts

refactor(infra): extract session cost usage types

2026-02-13 19:08:37 +00:00

session-cost-usage.types.ts

refactor(infra): extract session cost usage types

2026-02-13 19:08:37 +00:00

session-maintenance-warning.ts

fix: unify session maintenance and cron run pruning (#13083)

2026-02-09 20:42:35 -08:00

shell-env.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

shell-env.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

skills-remote.test.ts

Skills: clean up remote node cache on disconnect

2026-02-14 18:02:14 -08:00

skills-remote.ts

Skills: clean up remote node cache on disconnect

2026-02-14 18:02:14 -08:00

ssh-config.test.ts

fix(security): harden SSH target handling (#4001)

2026-01-29 16:33:36 +00:00

ssh-config.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

ssh-tunnel.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

state-migrations.fs.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

state-migrations.state-dir.test.ts

fix: support moltbot legacy state dir

2026-02-14 17:14:21 +00:00

state-migrations.ts

fix: unify session maintenance and cron run pruning (#13083)

2026-02-09 20:42:35 -08:00

system-events.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

system-events.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

system-presence.test.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

system-presence.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

system-run-command.test.ts

fix(node-host): enforce system.run rawCommand/argv consistency

2026-02-14 18:53:23 +01:00

system-run-command.ts

fix(node-host): enforce system.run rawCommand/argv consistency

2026-02-14 18:53:23 +01:00

tailnet.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

tailscale.test.ts

perf(test): optimize heavy suites and stabilize lock timing

2026-02-13 13:29:07 +00:00

tailscale.ts

perf(test): optimize heavy suites and stabilize lock timing

2026-02-13 13:29:07 +00:00

tmp-openclaw-dir.test.ts

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

tmp-openclaw-dir.ts

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

transport-ready.test.ts

perf(test): reduce hot-suite setup and duplicate test work

2026-02-13 23:30:41 +00:00

transport-ready.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

unhandled-rejections.fatal-detection.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

unhandled-rejections.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

unhandled-rejections.ts

Update contributing, deduplicate more functions

2026-02-09 19:21:33 -08:00

update-channels.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

update-check.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

update-check.ts

refactor: consolidate fetchWithTimeout into shared utility

2026-02-09 20:34:56 -08:00

update-global.ts

Deduplicate more

2026-02-09 18:56:58 -08:00

update-runner.test.ts

refactor(test): table npm global update cases

2026-02-14 22:35:16 +00:00

update-runner.ts

Update: harden control UI asset handling in update flow (#10146)

2026-02-06 01:14:00 -05:00

update-startup.test.ts

perf(test): avoid importing update-check in startup suite

2026-02-15 01:26:25 +00:00

update-startup.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

voicewake.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

warning-filter.test.ts

Memory/QMD: reuse default model cache and skip ENOENT warnings (#12114)

2026-02-08 23:43:08 -08:00

warning-filter.ts

chore: suppress warnings for node default output path

2026-02-08 05:32:58 -05:00

widearea-dns.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

widearea-dns.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

ws.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

wsl.ts

Update contributing, deduplicate more functions

2026-02-09 19:21:33 -08:00