Peter Steinberger 25e89cc863 fix(security): harden shell env fallback

2026-02-21 20:01:08 +01:00

..

sessions

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

agent-dirs.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-dirs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-limits.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

backup-rotation.ts

perf(test): speed up config tests

2026-02-14 14:25:54 +00:00

cache-utils.ts

…

channel-capabilities.test.ts

test: dedupe shared setup in channel and doctor config tests

2026-02-18 04:04:14 +00:00

channel-capabilities.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

commands.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

commands.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config-misc.test.ts

fix(gateway): harden channel health monitor recovery

2026-02-17 03:26:26 +01:00

config-paths.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

config.agent-concurrency-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.backup-rotation.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

config.compaction-settings.test.ts

Config: expose Pi compaction tuning values (openclaw#21568) thanks @Takhoffman

2026-02-19 21:41:09 -06:00

config.discord-presence.test.ts

Discord: refine presence config defaults (#10855) (thanks @h0tp-ftw)

2026-02-13 13:34:19 -06:00

config.discord.test.ts

Config: require Discord ID strings (#18220)

2026-02-16 12:22:58 -06:00

config.dm-policy-alias.test.ts

refactor(config): add dmPolicy aliases for Slack/Discord

2026-02-14 21:04:27 +01:00

config.env-vars.test.ts

fix(security): harden shell env fallback

2026-02-21 20:01:08 +01:00

config.hooks-module-paths.test.ts

fix(security): harden hooks module loading

2026-02-14 15:03:27 +01:00

config.identity-avatar.test.ts

…

config.identity-defaults.test.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

config.irc.test.ts

chore: Fix types in tests 16/N.

2026-02-17 12:00:29 +09:00

config.legacy-config-detection.accepts-imessage-dmpolicy.e2e.test.ts

chore: Fix types in tests 39/N.

2026-02-17 15:50:07 +09:00

config.legacy-config-detection.rejects-routing-allowfrom.e2e.test.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

config.msteams.test.ts

…

config.multi-agent-agentdir-validation.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

config.nix-integration-u3-u5-u9.e2e.test.ts

fix(test): avoid inheriting process.env in nix config e2e

2026-02-15 23:14:42 +00:00

config.plugin-validation.test.ts

perf(test): cut setup/import overhead in hot suites

2026-02-13 21:23:50 +00:00

config.pruning-defaults.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

config.sandbox-docker.test.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

config.schema-regressions.test.ts

fix: enforce inbound attachment root policy across pipelines

2026-02-19 14:15:51 +01:00

config.skills-entries-config.test.ts

…

config.talk-api-key-fallback.test.ts

…

config.telegram-custom-commands.test.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

config.tools-alsoAllow.test.ts

…

config.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

discord-preview-streaming.ts

fix(config): add shared streaming resolver module

2026-02-21 19:53:42 +01:00

env-preserve-io.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-preserve.test.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

env-preserve.ts

refactor: share plain object guard across config and utils

2026-02-19 14:27:36 +00:00

env-substitution.test.ts

…

env-substitution.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-vars.ts

refactor(security): centralize host env policy and harden env ingestion

2026-02-21 13:04:39 +01:00

group-policy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

home-env.test-harness.ts

test: share temp home env harness

2026-02-19 15:08:14 +00:00

includes-scan.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

includes.test.ts

fix(security): block prototype-polluting keys in deepMerge (#20853)

2026-02-19 03:47:48 -08:00

includes.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

io.compat.test.ts

…

io.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

io.write-config.test.ts

test(config): dedupe io write config test setup

2026-02-18 12:20:56 +00:00

legacy-migrate.test.ts

refactor(config): reuse default group entry migration helper

2026-02-19 00:33:21 +00:00

legacy-migrate.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

legacy.migrations.part-1.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

legacy.migrations.part-2.ts

refactor(config): reuse legacy audio transcription migration path

2026-02-19 00:29:00 +00:00

legacy.migrations.part-3.ts

…

legacy.migrations.ts

…

legacy.rules.ts

…

legacy.shared.ts

fix(macos): ensure exec approval prompt displays the command (#5042)

2026-02-13 15:49:06 +01:00

legacy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

logging.ts

…

markdown-tables.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

merge-config.ts

…

merge-patch.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

merge-patch.ts

fix(config): harden object-array merge-by-id fallback

2026-02-16 08:24:55 -05:00

model-alias-defaults.test.ts

test(config): dedupe model provider fixture setup

2026-02-19 08:25:12 +00:00

normalize-paths.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

normalize-paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

paths.test.ts

test(config): dedupe OPENCLAW_HOME path assertions

2026-02-19 08:25:12 +00:00

paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugin-auto-enable.test.ts

fix(config): auto-enable configured plugins

2026-02-14 01:56:12 +00:00

plugin-auto-enable.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugins-allowlist.ts

refactor: centralize plugin allowlist mutation

2026-02-17 00:45:02 +00:00

plugins-runtime-boundary.test.ts

refactor(runtime): split runtime builders and stabilize cron tool seam

2026-02-19 16:09:56 +01:00

port-defaults.ts

…

prototype-keys.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

redact-snapshot.test.ts

refactor: dedupe redact snapshot restore prelude

2026-02-19 14:27:37 +00:00

redact-snapshot.ts

refactor: dedupe redact snapshot restore prelude

2026-02-19 14:27:37 +00:00

runtime-overrides.test.ts

fix(security): harden runtime command override gating

2026-02-21 12:49:57 +01:00

runtime-overrides.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

schema.help.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

schema.hints.test.ts

fix: make sensitive field whitelist case-insensitive (#16148)

2026-02-15 10:31:48 -05:00

schema.hints.ts

fix: make sensitive field whitelist case-insensitive (#16148)

2026-02-15 10:31:48 -05:00

schema.irc.ts

…

schema.labels.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

schema.test.ts

fix(config): accept $schema key in root config (#15280)

2026-02-14 03:07:12 +01:00

schema.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions.cache.test.ts

perf(test): speed up suites and reduce fs churn

2026-02-15 19:29:27 +00:00

sessions.test.ts

fix(test): use path.resolve for cross-platform Windows compatibility

2026-02-17 00:00:54 +01:00

sessions.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

slack-http-config.test.ts

…

slack-token-validation.test.ts

test: tighten relay smoke + slack token validation

2026-02-16 02:45:00 +00:00

talk.ts

…

telegram-custom-commands.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

telegram-webhook-secret.test.ts

…

test-helpers.ts

perf(test): stabilize e2e harness and reduce flaky gateway coverage

2026-02-13 17:32:14 +00:00

types.agent-defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.agents.ts

…

types.approvals.ts

…

types.auth.ts

…

types.base.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

types.browser.ts

fix(browser): unify SSRF guard path for navigation

2026-02-19 13:44:01 +01:00

types.channels.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

types.cron.ts

cron: separate webhook POST delivery from announce (#17901)

2026-02-16 02:36:00 -08:00

types.discord.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.gateway.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

types.googlechat.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.hooks.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

types.imessage.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.irc.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.memory.ts

…

types.messages.ts

Add explicit ownerDisplaySecret for owner ID hash obfuscation (#22520)

2026-02-21 03:13:56 -05:00

types.models.ts

feat(config): expose full pi-ai model compat fields in config schema (openclaw#11063) thanks @ikari-pl

2026-02-13 18:47:18 -06:00

types.msteams.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.node-host.ts

…

types.openclaw.ts

…

types.plugins.ts

fix(security): restore trusted plugin runtime exec default

2026-02-19 16:01:29 +01:00

types.queue.ts

…

types.sandbox.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

types.signal.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

types.skills.ts

fix(skills): guard against skills prompt bloat

2026-02-17 00:01:34 +01:00

types.slack.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.telegram.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

types.tools.ts

refactor(config): share media provider request fields

2026-02-18 23:34:15 +00:00

types.ts

…

types.tts.ts

fix(tts): make model provider overrides opt-in

2026-02-21 13:16:07 +01:00

types.whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

validation.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

version.ts

…

zod-schema.agent-defaults.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.agent-model.ts

refactor(config): share agent model schema

2026-02-15 16:53:38 +00:00

zod-schema.agent-runtime.ts

fix(security): harden sandbox browser network defaults

2026-02-21 14:02:53 +01:00

zod-schema.agents.ts

…

zod-schema.allowdeny.ts

fix(memory): prevent QMD scope deny bypass

2026-02-15 02:41:45 +00:00

zod-schema.approvals.ts

…

zod-schema.channels.ts

…

zod-schema.core.ts

refactor(core): dedupe browser route signatures and cli watchdog schema

2026-02-18 14:15:20 +00:00

zod-schema.hooks.ts

refactor(config): share install record schema shape

2026-02-18 18:25:25 +00:00

zod-schema.installs.ts

fix(security): harden npm plugin and hook install integrity flow

2026-02-19 15:11:25 +01:00

zod-schema.providers-core.ts

refactor(config): unify streaming config across channels

2026-02-21 19:53:42 +01:00

zod-schema.providers-whatsapp.ts

Feature/default messenger delivery target (openclaw#16985) thanks @KirillShchetinin

2026-02-19 22:37:19 -06:00

zod-schema.providers.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

zod-schema.sensitive.ts

fix: Finish credential redaction that was merged unfinished (#13073)

2026-02-13 16:19:21 +01:00

zod-schema.session.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

zod-schema.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00