Peter Steinberger cfa44ea6b4 fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907) ...

* fix(channels): default allowFrom to id-only; add dangerous name opt-in

* docs(security): align channel allowFrom docs with id-only default

2026-02-24 01:01:51 +00:00

..

agent-components.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

allow-list.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

commands.test.ts

feat(discord): add configurable ephemeral option for slash commands

2026-02-20 21:19:21 -06:00

commands.ts

feat(discord): add configurable ephemeral option for slash commands

2026-02-20 21:19:21 -06:00

exec-approvals.test.ts

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

exec-approvals.ts

fix(security): harden regex compilation for filters and redaction

2026-02-23 23:54:50 +00:00

format.ts

feat(discord): faster reaction status state machine (watchdog + debounce) (#18248)

2026-02-16 13:38:39 -06:00

gateway-plugin.ts

Discord VC: voice channels, transcription, and TTS (#18774)

2026-02-20 16:06:07 -06:00

gateway-registry.ts

Address PR feedback

2026-02-04 04:02:38 +00:00

listeners.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

message-handler.inbound-contract.test.ts

test(inbound): share dispatch capture mock across channels

2026-02-22 07:44:57 +00:00

message-handler.preflight.test.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

message-handler.preflight.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

message-handler.preflight.types.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

message-handler.process.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

message-handler.process.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

message-handler.test-harness.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

message-handler.ts

refactor(channels): centralize runtime group policy handling

2026-02-22 12:35:41 +01:00

message-utils.test.ts

test(discord): use lightweight clears for media utility mocks

2026-02-22 07:35:54 +00:00

message-utils.ts

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

model-picker-preferences.test.ts

refactor(channels): dedupe hook and monitor execution paths

2026-02-22 21:19:09 +00:00

model-picker-preferences.ts

refactor(channels): dedupe hook and monitor execution paths

2026-02-22 21:19:09 +00:00

model-picker.test-utils.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

model-picker.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

model-picker.ts

fix: restore Discord model picker UX (#21458) (thanks @pejmanjohn)

2026-02-20 21:04:04 -06:00

monitor.test.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

native-command.model-picker.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

native-command.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

presence-cache.ts

fix: comprehensive BlueBubbles and channel cleanup (#11093)

2026-02-07 05:00:55 -08:00

presence.ts

Discord: refine presence config defaults (#10855) (thanks @h0tp-ftw)

2026-02-13 13:34:19 -06:00

provider.allowlist.test.ts

fix(discord): canonicalize resolved allowlists to ids

2026-02-21 19:53:29 +01:00

provider.allowlist.ts

refactor(discord): split allowlist resolution flow

2026-02-21 20:01:21 +01:00

provider.group-policy.test.ts

fix: fail closed missing provider group policy across message channels (#23367) (thanks @bmendonca3)

2026-02-22 12:21:04 +01:00

provider.lifecycle.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

provider.lifecycle.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

provider.proxy.test.ts

test(discord): trim proxy and reply-delivery setup resets

2026-02-22 07:35:54 +00:00

provider.rest-proxy.test.ts

test(discord): trim proxy and reply-delivery setup resets

2026-02-22 07:35:54 +00:00

provider.skill-dedupe.test.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

provider.test.ts

test(discord): use lightweight clears in provider setup

2026-02-22 07:35:54 +00:00

provider.ts

fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)

2026-02-24 01:01:51 +00:00

reply-context.ts

fix(discord): fix component parsing and modal field typing

2026-02-15 18:50:36 +00:00

reply-delivery.test.ts

refactor(channels): dedupe message routing and telegram helpers

2026-02-22 07:44:57 +00:00

reply-delivery.ts

refactor(discord): dedupe directory and media send paths

2026-02-22 17:54:51 +00:00

rest-fetch.ts

perf(test): cut slow monitor/subagent test overhead

2026-02-18 03:50:30 +00:00

sender-identity.ts

chore: Enable typescript/no-explicit-any rule.

2026-02-02 16:18:09 +09:00

system-events.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

thread-bindings.discord-api.test.ts

test(discord): use lightweight clear for thread binding rest mock

2026-02-22 07:35:54 +00:00

thread-bindings.discord-api.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

thread-bindings.lifecycle.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

thread-bindings.manager.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

thread-bindings.messages.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

thread-bindings.shared-state.test.ts

test: speed up thread-bindings shared-state loader test

2026-02-22 13:09:59 +00:00

thread-bindings.state.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

thread-bindings.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

thread-bindings.ttl.test.ts

test(discord): share thread binding sweep fixtures

2026-02-22 07:44:57 +00:00

thread-bindings.types.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

threading.auto-thread.test.ts

test(discord): cover auto-thread skip types

2026-02-17 09:19:04 -05:00

threading.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

typing.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00