Peter Steinberger 710004e011 fix(security): harden root-scoped writes against symlink races

2026-03-02 01:27:46 +00:00

..

protocol

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

server

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

server-methods

fix(security): harden root-scoped writes against symlink races

2026-03-02 01:27:46 +00:00

agent-event-assistant-text.ts

…

agent-prompt.test.ts

fix: harden queue retry debounce and add regression tests

2026-02-24 03:52:49 +00:00

agent-prompt.ts

fix(gateway): safely extract text from content arrays in prompt builder (#24946)

2026-02-24 03:33:37 +00:00

android-node.capabilities.live.test.ts

test(gateway): add live android capability integration suite

2026-02-27 12:16:36 +05:30

assistant-identity.test.ts

…

assistant-identity.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

auth-rate-limit.test.ts

fix(security): normalize hook auth rate-limit client keys

2026-02-22 08:40:49 +01:00

auth-rate-limit.ts

refactor(security): unify hook rate-limit and hook module loading

2026-02-22 08:57:01 +01:00

auth.test.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

auth.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

boot.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

boot.ts

fix(gateway): enforce owner boundary for agent runs

2026-03-02 00:27:44 +00:00

call.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

call.ts

refactor(gateway): unify auth credential resolution

2026-02-22 18:23:13 +01:00

canvas-capability.ts

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

channel-health-monitor.test.ts

feat: detect stale Slack sockets and auto-restart (#30153)

2026-03-01 10:58:21 -06:00

channel-health-monitor.ts

feat: detect stale Slack sockets and auto-restart (#30153)

2026-03-01 10:58:21 -06:00

chat-abort.test.ts

Gateway tests: cover exact do not do that stop matching

2026-02-24 18:50:53 -05:00

chat-abort.ts

Auto-reply: normalize stop matching and add multilingual triggers (#25103)

2026-02-24 01:07:25 -05:00

chat-attachments.test.ts

test(gateway): extract shared parse warning helper

2026-02-21 23:32:32 +00:00

chat-attachments.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

chat-sanitize.test.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

chat-sanitize.ts

fix: hide synthetic untrusted metadata in chat history

2026-02-21 19:26:04 +01:00

client.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

client.ts

fix(gateway): pin paired reconnect metadata for node policy

2026-02-26 14:11:04 +01:00

client.watchdog.test.ts

test: move gateway client watchdog suite out of e2e

2026-02-22 11:34:50 +00:00

config-reload.test.ts

refactor(diagnostics): hot-reload stuck warning threshold

2026-03-02 00:32:33 +00:00

config-reload.ts

refactor(diagnostics): hot-reload stuck warning threshold

2026-03-02 00:32:33 +00:00

control-plane-audit.ts

fix: harden gateway control-plane restart protections

2026-02-19 14:30:15 +01:00

control-plane-rate-limit.ts

fix(security): harden gateway command/audit guardrails

2026-02-22 08:45:48 +01:00

control-ui-contract.ts

…

control-ui-csp.test.ts

fix(gateway): allow required Google Fonts origins in Control UI CSP (#29279)

2026-02-27 23:58:51 -08:00

control-ui-csp.ts

fix(gateway): allow required Google Fonts origins in Control UI CSP (#29279)

2026-02-27 23:58:51 -08:00

control-ui-shared.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

control-ui.http.test.ts

fix(gateway): prevent /api/* routes from returning SPA HTML when basePath is empty (#30333)

2026-03-01 22:23:54 +01:00

control-ui.ts

fix(gateway): prevent /api/* routes from returning SPA HTML when basePath is empty (#30333)

2026-03-01 22:23:54 +01:00

credential-precedence.parity.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

credentials.test.ts

fix(gateway): allow cron commands to use gateway.remote.token (#27286)

2026-02-26 14:17:30 +00:00

credentials.ts

fix(gateway): allow cron commands to use gateway.remote.token (#27286)

2026-02-26 14:17:30 +00:00

device-auth.test.ts

refactor(gateway): unify v3 auth payload builders and vectors

2026-02-26 15:08:50 +01:00

device-auth.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

device-metadata-normalization.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

events.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

exec-approval-manager.ts

refactor(security): unify exec approval request matching

2026-02-26 03:54:37 +01:00

gateway-cli-backend.live.test.ts

test(gateway): dedupe agent payload and stream fixtures

2026-02-19 09:22:16 +00:00

gateway-config-prompts.shared.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

gateway-connection.test-mocks.ts

fix(gateway): annotate connection test mocks

2026-02-23 11:47:27 +05:30

gateway-misc.test.ts

fix(gateway): harden node metadata policy classification

2026-03-02 00:15:34 +00:00

gateway-models.profiles.live.test.ts

test: stabilize docker live model suites

2026-02-27 01:21:45 +01:00

gateway.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

hooks-mapping.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

hooks-mapping.ts

fix(security): block hook transform symlink escapes

2026-02-22 10:18:05 +01:00

hooks.test.ts

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

hooks.ts

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

http-auth-helpers.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

http-auth-helpers.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

http-common.ts

fix(gateway): add HSTS header hardening and docs

2026-02-23 19:47:29 +00:00

http-endpoint-helpers.test.ts

…

http-endpoint-helpers.ts

refactor(gateway): harden proxy client ip resolution

2026-02-21 13:36:23 +01:00

http-utils.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

live-image-probe.ts

…

live-tool-probe-utils.test.ts

test: tighten mistral media and onboarding coverage

2026-02-23 00:19:05 +00:00

live-tool-probe-utils.ts

feat: Provider/Mistral full support for Mistral on OpenClaw 🇫🇷 (#23845)

2026-02-23 00:03:56 +00:00

method-scopes.test.ts

fix(security): centralize owner-only tool gating and scope maps

2026-02-19 15:29:23 +01:00

method-scopes.ts

feat(gateway): add node canvas capability refresh flow

2026-02-27 12:16:36 +05:30

net.test.ts

refactor(security): unify local-host and tailnet CIDR checks

2026-02-22 17:20:27 +01:00

net.ts

refactor(security): unify local-host and tailnet CIDR checks

2026-02-22 17:20:27 +01:00

node-command-policy.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

node-invoke-sanitize.ts

fix(gateway): bind node exec approvals to nodeId

2026-02-24 03:05:58 +00:00

node-invoke-system-run-approval-errors.ts

refactor(gateway): centralize system.run approval context and errors

2026-02-26 22:01:16 +01:00

node-invoke-system-run-approval-match.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

node-invoke-system-run-approval-match.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

node-invoke-system-run-approval.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

node-invoke-system-run-approval.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

node-registry.ts

…

open-responses.schema.ts

…

openai-http.test.ts

test: tighten slow test timeouts and cleanup

2026-02-24 01:16:53 +00:00

openai-http.ts

fix(gateway): tighten openai-http edge handling

2026-02-22 11:29:31 +00:00

openresponses-http.test.ts

test: tighten slow test timeouts and cleanup

2026-02-24 01:16:53 +00:00

openresponses-http.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

openresponses-parity.test.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

openresponses-prompt.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

origin-check.test.ts

fix(gateway): support wildcard in controlUi.allowedOrigins for remote access (#31088)

2026-03-02 01:11:24 +00:00

origin-check.ts

fix(gateway): support wildcard in controlUi.allowedOrigins for remote access (#31088)

2026-03-02 01:11:24 +00:00

probe-auth.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

probe.test.ts

Gateway: align pairing scope checks for read access

2026-02-20 05:12:05 +00:00

probe.ts

Gateway: align pairing scope checks for read access

2026-02-20 05:12:05 +00:00

role-policy.test.ts

refactor(gateway): extract connect and role policy logic

2026-02-21 19:47:22 +01:00

role-policy.ts

refactor(gateway): extract connect and role policy logic

2026-02-21 19:47:22 +01:00

security-path.test.ts

refactor: share gateway security path canonicalization

2026-02-26 17:23:46 +01:00

security-path.ts

refactor: share gateway security path canonicalization

2026-02-26 17:23:46 +01:00

server-broadcast.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-browser.ts

fix(gateway): start browser HTTP control server module

2026-02-24 04:06:03 +00:00

server-channels.test.ts

perf(test): tighten fake timer windows in channel restart tests

2026-02-18 22:11:56 +00:00

server-channels.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-chat.agent-events.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

server-chat.ts

fix(gateway): strip inline directive tags from displayed text

2026-02-21 20:08:55 +01:00

server-close.ts

feat(update): add core auto-updater and dry-run preview

2026-02-22 17:11:36 +01:00

server-constants.ts

fix(canvas): port remaining iOS branch stability fixes (#18228)

2026-02-16 16:42:28 +00:00

server-cron.test.ts

Cron: preserve session scope for main-target reminders

2026-02-28 14:53:19 -08:00

server-cron.ts

feat(cron): configurable failure alerts for repeated job errors (openclaw#24789) thanks @0xbrak

2026-03-01 08:18:15 -06:00

server-discovery-runtime.ts

…

server-discovery.test.ts

test(core): continue mock reset reductions in auth, gateway, npm install

2026-02-22 08:28:50 +00:00

server-discovery.ts

…

server-http.hooks-request-timeout.test.ts

fix(gateway): harden hooks URL parsing (#26864)

2026-02-26 00:47:35 +00:00

server-http.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

server-lanes.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-maintenance.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-methods-list.ts

feat(gateway): add node canvas capability refresh flow

2026-02-27 12:16:36 +05:30

server-methods.control-plane-rate-limit.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server-methods.ts

fix(doctor): use gateway health status for memory search key check (#22327)

2026-02-23 14:07:16 -05:00

server-mobile-nodes.ts

…

server-model-catalog.ts

…

server-node-events-types.ts

…

server-node-events.test.ts

fix(gateway): skip heartbeat wake on deduped notifications

2026-02-28 11:18:01 +05:30

server-node-events.ts

fix(gateway): enforce owner boundary for agent runs

2026-03-02 00:27:44 +00:00

server-node-subscriptions.ts

…

server-plugins.test.ts

chore: Fix types in tests 38/N.

2026-02-17 15:50:07 +09:00

server-plugins.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-reload-handlers.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

server-restart-deferral.test.ts

…

server-restart-sentinel.test.ts

refactor: unify outbound session context wiring

2026-02-26 21:03:28 +01:00

server-restart-sentinel.ts

refactor: unify outbound session context wiring

2026-02-26 21:03:28 +01:00

server-runtime-config.test.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

server-runtime-config.ts

feat(gateway)!: require explicit non-loopback control-ui origins

2026-02-24 01:57:11 +00:00

server-runtime-state.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

server-session-key.ts

…

server-shared.ts

…

server-startup-log.test.ts

fix(gateway): unify listen startup log across bind hosts

2026-02-22 13:17:25 +01:00

server-startup-log.ts

fix(gateway): unify listen startup log across bind hosts

2026-02-22 13:17:25 +01:00

server-startup-memory.test.ts

refactor: deduplicate shared helpers and test setup

2026-02-23 20:40:44 +00:00

server-startup-memory.ts

Memory/QMD: harden multi-collection search and embed scheduling

2026-02-20 19:41:51 -08:00

server-startup.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

server-tailscale.ts

…

server-utils.ts

…

server-wizard-sessions.ts

…

server-ws-runtime.ts

fix(gateway): harden browser websocket auth chain

2026-02-26 01:22:49 +01:00

server.agent.gateway-server-agent-a.test.ts

test(gateway): speed up slow e2e test setup

2026-02-24 00:59:52 +00:00

server.agent.gateway-server-agent-b.test.ts

test: tighten slow test timeouts and cleanup

2026-02-24 01:16:53 +00:00

server.agent.gateway-server-agent.mocks.ts

refactor: extract shared dedupe helpers for runtime paths

2026-02-23 05:43:43 +00:00

server.auth.browser-hardening.test.ts

refactor(gateway): split browser auth hardening paths

2026-02-26 01:37:00 +01:00

server.auth.test.ts

Gateway: improve device-auth v2 migration diagnostics (#28305)

2026-02-26 21:05:43 -08:00

server.canvas-auth.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.channels.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.chat.gateway-server-chat-b.test.ts

test(gateway): speed up contract and polling suites

2026-02-24 00:31:58 +00:00

server.chat.gateway-server-chat.test.ts

test(gateway): speed up contract and polling suites

2026-02-24 00:31:58 +00:00

server.config-apply.test.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.config-patch.test.ts

fix(gateway): land access/auth/config migration cluster

2026-03-02 00:10:51 +00:00

server.cron.test.ts

test: tighten slow test timeouts and cleanup

2026-02-24 01:16:53 +00:00

server.e2e-registry-helpers.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

server.e2e-ws-harness.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.health.test.ts

test(gateway): speed up slow e2e test setup

2026-02-24 00:59:52 +00:00

server.hooks.test.ts

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

server.impl.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

server.ios-client-id.test.ts

test(gateway): speed up contract and polling suites

2026-02-24 00:31:58 +00:00

server.models-voicewake-misc.test.ts

Gateway tests: include synthetic allowlist models in models.list

2026-02-24 19:16:02 -05:00

server.node-invoke-approval-bypass.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

server.plugin-http-auth.test.ts

fix(gateway): land access/auth/config migration cluster

2026-03-02 00:10:51 +00:00

server.reload.test.ts

feat(security): add provider-based external secrets management

2026-02-26 14:47:22 +00:00

server.roles-allowlist-update.test.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

server.sessions-send.test.ts

test(gateway): move sessions_send error paths to unit tests

2026-02-24 01:16:53 +00:00

server.sessions.gateway-server-sessions-a.test.ts

TUI: sync /model status immediately

2026-02-28 14:02:56 -08:00

server.skills-status.test.ts

test: move gateway rpc/local suites out of e2e

2026-02-22 11:31:42 +00:00

server.talk-config.test.ts

feat(talk): add provider-agnostic config with legacy compatibility

2026-02-24 15:02:52 +00:00

server.tools-catalog.test.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

server.ts

…

session-preview.test-helpers.ts

refactor(gateway-test): share preview transcript fixture

2026-02-18 17:01:22 +00:00

session-utils.fs.test.ts

test(gateway): dedupe transcript seed fixtures in fs session tests

2026-02-22 07:44:57 +00:00

session-utils.fs.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

session-utils.test.ts

fix(tui): resolve wrong provider prefix when session has model without modelProvider (#25874)

2026-02-25 00:36:27 -05:00

session-utils.ts

fix(security): harden root file guards and host writes

2026-02-26 13:32:58 +01:00

session-utils.types.ts

…

sessions-patch.test.ts

Gateway tests: accept allowlisted refs absent from catalog

2026-02-24 19:16:02 -05:00

sessions-patch.ts

fix: persist reasoningLevel 'off' instead of deleting it (#24406) (#24559)

2026-02-24 03:33:30 +00:00

sessions-resolve.ts

…

startup-auth.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

startup-auth.ts

fix: enforce hooks token separation from gateway auth (#20813)

2026-02-19 02:48:08 -08:00

startup-control-ui-origins.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

system-run-approval-binding.contract.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

system-run-approval-binding.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

test-helpers.agent-results.ts

test(gateway): dedupe agent payload and stream fixtures

2026-02-19 09:22:16 +00:00

test-helpers.e2e.ts

fix(gateway): pin paired reconnect metadata for node policy

2026-02-26 14:11:04 +01:00

test-helpers.mocks.ts

fix: remove hardcoded disableBlockStreaming to honor agent config for TUI (#19693)

2026-02-18 16:25:59 -05:00

test-helpers.openai-mock.ts

test(gateway): reuse shared openai timeout e2e helpers

2026-02-22 07:44:57 +00:00

test-helpers.server.ts

fix(gateway): pin paired reconnect metadata for node policy

2026-02-26 14:11:04 +01:00

test-helpers.ts

…

test-http-response.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-openai-responses-model.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-temp-config.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-with-server.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

tools-invoke-http.cron-regression.test.ts

fix(automation): harden announce delivery + cron coding profile (#25813 #25821 #25822)

2026-02-24 23:49:34 +00:00

tools-invoke-http.test.ts

Tests: verify tools invoke propagates route headers for subagent spawn context

2026-02-24 04:12:25 +00:00

tools-invoke-http.ts

Gateway: propagate message target and thread headers into tools invoke context

2026-02-24 04:12:25 +00:00

ws-log.test.ts

…

ws-log.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

ws-logging.ts

…