Agustin Rivera c949af9fab fix(media): honor sender policy for host media reads (#64459) ...

* fix(media): honor sender policy for host media reads

* fix(media): clarify host read group policy gating

* fix(media): forward sender identity for outbound reads

* fix(media): propagate non-id sender fields through outbound session for e164/username/name policy matching

* fix(media): preserve requester provider for host read policy

* fix(media): forward full sender identity through followup and core send paths

* fix(media): forward requester session/account context through core send fallback

* fix(media): preserve account policy fallback for requester-scoped host reads

* chore(changelog): add outbound media sender-policy entry

* fix(media): align test call shape with production — omit messageProvider when sessionKey is set

Addresses P2 review: production call sites pass messageProvider: undefined
when sessionKey is present; tests should mirror that so regressions in
the precedence order are caught.

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>

2026-04-10 13:07:56 -06:00

..

audio-tags.ts

chore(tts): rename VOICE_BUBBLE identifiers to OPUS and update docs

2026-03-25 10:49:21 +05:30

audio.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

audio.ts

refactor: dedupe media readers

2026-04-07 06:42:34 +01:00

base64.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

base64.ts

…

channel-inbound-roots.contract.test.ts

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

channel-inbound-roots.ts

refactor: dedupe lowercase string helpers

2026-04-07 10:37:39 +01:00

constants.ts

…

fetch.test.ts

test: streamline runtime wrapper test reloads

2026-04-03 04:41:38 +01:00

fetch.ts

fix(media): bound remote error-body snippet reads

2026-03-22 22:43:42 -07:00

ffmpeg-exec.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

ffmpeg-exec.ts

refactor: dedupe media and discord lowercase helpers

2026-04-07 13:44:41 +01:00

ffmpeg-limits.ts

…

file-context.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

file-context.ts

refactor: dedupe gateway memory trimmed readers

2026-04-08 01:36:39 +01:00

host.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

host.ts

…

image-ops.helpers.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

image-ops.input-guard.test.ts

fix(media): reject oversized image inputs before decode (#58226)

2026-03-31 22:52:55 +09:00

image-ops.tempdir.test.ts

test: streamline runtime wrapper test reloads

2026-04-03 04:41:38 +01:00

image-ops.ts

fix(media): reject oversized image inputs before decode (#58226)

2026-03-31 22:52:55 +09:00

inbound-path-policy.test.ts

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

inbound-path-policy.ts

refactor(plugins): move extension seams into extensions

2026-04-04 00:10:16 +01:00

input-files.fetch-guard.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

input-files.ts

refactor: dedupe reply lowercase helpers

2026-04-07 10:37:39 +01:00

load-options.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

load-options.ts

fix(media): resolve relative MEDIA paths against agent workspace (#58624)

2026-03-31 21:09:28 -04:00

local-media-access.ts

refactor(media): share local file access guards

2026-03-23 00:58:23 -07:00

local-roots.test.ts

fix: keep inbound images readable on upgraded installs (#59971) (thanks @neeravmakwana)

2026-04-03 08:24:29 +05:30

local-roots.ts

refactor: dedupe media readers

2026-04-07 06:42:34 +01:00

mime.test.ts

fix(whatsapp): add HTML/XML/CSS to MIME map + fallback for unknown media types (#51562)

2026-04-02 00:25:12 -03:00

mime.ts

refactor: dedupe media and discord lowercase helpers

2026-04-07 13:44:41 +01:00

outbound-attachment.ts

refactor(media): centralize outbound access plumbing

2026-04-01 00:32:53 +09:00

parse.test.ts

test: repair focused unit lane drift

2026-03-28 11:41:06 +00:00

parse.ts

fix: reject path traversal and home-dir patterns in media parse layer (#54642)

2026-03-25 13:35:16 -06:00

pdf-extract.ts

…

png-encode.ts

…

prompt-image-order.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

qr-image.ts

refactor: dedupe test and runtime seams

2026-03-24 23:33:30 +00:00

read-capability.test.ts

fix(media): honor sender policy for host media reads (#64459)

2026-04-10 13:07:56 -06:00

read-capability.ts

fix(media): honor sender policy for host media reads (#64459)

2026-04-10 13:07:56 -06:00

read-response-with-limit.test.ts

test: dedupe media utility suites

2026-03-28 07:31:40 +00:00

read-response-with-limit.ts

refactor: share matrix and telegram dedupe helpers

2026-03-26 15:08:45 +00:00

server.outside-workspace.test.ts

test(media): reuse suite temp root tracker in outside-workspace media tests

2026-04-06 10:54:48 +01:00

server.runtime.ts

test: narrow media fs-safe test seams

2026-04-03 14:22:12 +01:00

server.test.ts

test(media): reuse suite temp root tracker in media server tests

2026-04-06 10:53:31 +01:00

server.ts

test: narrow media fs-safe test seams

2026-04-03 14:22:12 +01:00

sniff-mime-from-base64.ts

…

store.outside-workspace.test.ts

test: narrow media fs-safe test seams

2026-04-03 14:22:12 +01:00

store.redirect.test.ts

test(media): reuse suite temp root tracker in media redirect tests

2026-04-06 10:55:46 +01:00

store.runtime.ts

test: narrow media fs-safe test seams

2026-04-03 14:22:12 +01:00

store.test.ts

test: reduce import wrapper reload churn

2026-04-03 07:14:58 +01:00

store.ts

refactor: dedupe media readers

2026-04-07 06:42:34 +01:00

temp-files.ts

…

test-helpers.ts

fix(media): reject oversized image inputs before decode (#58226)

2026-03-31 22:52:55 +09:00

web-media.test.ts

fix: openclaw allows normal reply text to carry media (#345) (#62136)

2026-04-06 16:08:33 -06:00

web-media.ts

refactor: dedupe media and discord lowercase helpers

2026-04-07 13:44:41 +01:00