YuzuruS d6552998e9 fix: handle outside-workspace error in media store ...

Address Greptile review: add explicit "outside-workspace" case to
toSaveMediaSourceError so it returns "Media path is outside workspace
root" instead of the generic "Media path is not safe to read".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-28 18:08:10 +05:30

..

acp

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

agents

fix: distinguish outside-workspace errors from not-found in fs-safe

2026-02-28 18:08:10 +05:30

auto-reply

fix(security): remove post-compaction audit injection message (#28507)

2026-02-27 17:15:59 -08:00

browser

fix: distinguish outside-workspace errors from not-found in fs-safe

2026-02-28 18:08:10 +05:30

canvas-host

…

channels

Discord: thread bindings idle + max-age lifecycle (#27845) (thanks @osolmaz)

2026-02-27 10:02:39 +01:00

cli

fix(cli): allow Ollama apiKey config set without predeclared provider (#29299)

2026-02-27 23:35:57 -08:00

commands

fix: harden azure custom-provider verification coverage (#29421) (thanks @kunalk16)

2026-02-28 15:58:20 +05:30

compat

…

config

fix(ollama): unify context window handling across discovery, merge, and OpenAI-compat transport (#29205)

2026-02-27 17:20:47 -08:00

cron

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

daemon

fix: stabilize launchd CA env tests (#27915) (thanks @Lukavyi)

2026-02-27 08:11:16 +05:30

discord

Discord: thread bindings idle + max-age lifecycle (#27845) (thanks @osolmaz)

2026-02-27 10:02:39 +01:00

docs

…

gateway

fix(gateway): allow required Google Fonts origins in Control UI CSP (#29279)

2026-02-27 23:58:51 -08:00

hooks

refactor: unify boundary hardening for file reads

2026-02-26 13:04:37 +01:00

imessage

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

infra

fix: distinguish outside-workspace errors from not-found in fs-safe

2026-02-28 18:08:10 +05:30

line

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

link-understanding

…

logging

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105)

2026-02-25 04:54:51 +00:00

media

fix: handle outside-workspace error in media store

2026-02-28 18:08:10 +05:30

media-understanding

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

memory

fix(memory): readonly sync recovery (openclaw#25799) thanks @rodrigouroz

2026-02-27 12:26:43 -06:00

node-host

refactor(gateway): share node command catalog

2026-02-26 22:01:06 +01:00

pairing

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

plugin-sdk

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

plugins

test: align compaction hook usage expectation

2026-02-26 22:03:26 +00:00

process

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

providers

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

routing

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

scripts

…

secrets

fix: restore dm command and self-chat auth behavior

2026-02-26 18:49:16 +01:00

security

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

sessions

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

shared

fix(ssrf): unify ipv6 special-use blocking

2026-02-26 03:43:42 +01:00

signal

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

slack

fix(slack): land #29032 /agentstatus alias from @maloqab

2026-02-27 19:09:38 +00:00

telegram

fix: preserve whitespace in telegram html retry chunking

2026-02-28 08:13:59 +05:30

terminal

…

test-helpers

refactor: dedupe media and request-body test scaffolding

2026-02-22 18:37:25 +00:00

test-utils

Fix npm-spec plugin installs when npm pack output is empty (#21039)

2026-02-26 22:00:24 -05:00

tts

fix(tts): use opus format and enable voice bubbles for feishu and whatsapp (#27366)

2026-02-27 23:41:22 -06:00

tui

refactor(tui): simplify stream boundary-drop modes

2026-02-26 20:54:29 +01:00

types

…

utils

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570)

2026-02-26 18:39:13 -05:00

web

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

whatsapp

WhatsApp: enforce allowFrom for explicit outbound sends (#20921)

2026-02-22 18:13:23 -05:00

wizard

feat(secrets): expand onboarding secret-ref flows and custom-provider parity

2026-02-26 14:47:22 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

dockerfile.test.ts

fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)

2026-02-26 04:46:18 +00:00

entry.ts

fix(secrets): make apply idempotent and keep audit read-only

2026-02-26 14:47:22 +00:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

utils.ts

fix(utils): guard resolveUserPath for missing workspace input

2026-02-22 13:19:25 +01:00

version.test.ts

test(core): increase coverage for sessions, auth choice, and model listing

2026-02-22 14:08:51 +00:00

version.ts

…