Mason 09016db731 fix: wrap untrusted file inputs (#60277) ...

Merged via squash.

Prepared head SHA: 56ce545786
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>
Co-authored-by: frankekn <4488090+frankekn@users.noreply.github.com>
Reviewed-by: @frankekn

2026-04-05 01:54:48 +08:00

..

protocol

fix(auth): hand off qr bootstrap to bounded device tokens

2026-04-04 15:57:38 +09:00

server

fix: bound bootstrap handoff token scopes

2026-04-04 22:29:52 +09:00

server-methods

refactor: share announce test runtime seams

2026-04-04 23:38:36 +09:00

agent-event-assistant-text.ts

refactor(gateway): dedupe assistant delta parsing

2026-02-15 19:08:47 +00:00

agent-list.ts

Status: split lightweight gateway agent list

2026-03-15 22:55:27 -07:00

agent-prompt.test.ts

fix: harden queue retry debounce and add regression tests

2026-02-24 03:52:49 +00:00

agent-prompt.ts

fix(gateway): safely extract text from content arrays in prompt builder (#24946)

2026-02-24 03:33:37 +00:00

android-node.capabilities.live.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-config.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-config.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-source.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-source.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

assistant-identity.test.ts

…

assistant-identity.ts

refactor(shared): centralize assistant identity and usage timeseries types

2026-03-02 14:36:41 +00:00

auth-config-utils.ts

refactor: unify gateway SecretRef auth resolution paths

2026-03-07 23:27:50 +00:00

auth-install-policy.ts

refactor: split durable service env helpers

2026-03-22 22:05:56 -07:00

auth-mode-policy.test.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

auth-mode-policy.ts

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

auth-rate-limit.test.ts

fix(plugin-sdk): unblock gateway test surfaces

2026-04-04 21:02:04 +09:00

auth-rate-limit.ts

fix(plugin-sdk): unblock gateway test surfaces

2026-04-04 21:02:04 +09:00

auth.test.ts

fix: serialize async auth rate-limit attempts

2026-04-04 21:55:09 +09:00

auth.ts

fix: serialize async auth rate-limit attempts

2026-04-04 21:55:09 +09:00

boot.test.ts

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

boot.ts

fix(gateway): enforce owner boundary for agent runs

2026-03-02 00:27:44 +00:00

call.runtime.ts

refactor: lazy load cron gateway cleanup

2026-04-03 16:03:10 +01:00

call.test.ts

test: add CLI handshake regression coverage (#50240) (thanks @xiwuqi)

2026-04-04 22:32:15 +09:00

call.ts

fix: improve WS handshake reliability on slow-startup environments (#60075)

2026-04-03 00:21:14 -05:00

canvas-capability.ts

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

channel-health-monitor.test.ts

feat(gateway): make health monitor stale threshold and max restarts configurable (openclaw#42107)

2026-03-14 21:21:56 -05:00

channel-health-monitor.ts

refactor(plugins): move channel behavior into plugins

2026-04-03 19:09:20 +01:00

channel-health-policy.test.ts

test: share channel health helpers

2026-03-14 00:30:14 +00:00

channel-health-policy.ts

refactor(plugins): move channel behavior into plugins

2026-04-03 19:09:20 +01:00

channel-status-patches.test.ts

fix(gateway): stop stale-socket restarts before first event (#38643)

2026-03-07 00:58:08 -06:00

channel-status-patches.ts

fix(gateway): stop stale-socket restarts before first event (#38643)

2026-03-07 00:58:08 -06:00

chat-abort.test.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

chat-abort.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

chat-attachments.test.ts

test(gateway): extract shared parse warning helper

2026-02-21 23:32:32 +00:00

chat-attachments.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

chat-sanitize.test.ts

fix(chat): preserve sender labels in dashboard history

2026-03-08 09:17:02 +05:30

chat-sanitize.ts

fix(chat): preserve sender labels in dashboard history

2026-03-08 09:17:02 +05:30

cli-session-history.claude.ts

refactor: split claude cli history import pipeline

2026-03-26 22:12:16 +00:00

cli-session-history.merge.ts

refactor: split claude cli history import pipeline

2026-03-26 22:12:16 +00:00

cli-session-history.test.ts

fix: unify claude cli imported tool messages

2026-03-26 22:02:26 +00:00

cli-session-history.ts

refactor: split claude cli history import pipeline

2026-03-26 22:12:16 +00:00

client-callsites.guard.test.ts

test(gateway): stabilize suite session-store config (#52193)

2026-03-22 19:18:44 +08:00

client.test.ts

refactor(gateway): simplify connect auth parsing

2026-04-04 22:23:09 +09:00

client.ts

refactor(gateway): simplify connect auth parsing

2026-04-04 22:23:09 +09:00

client.watchdog.test.ts

test: share gateway authz and watchdog fixtures

2026-03-26 16:36:03 +00:00

config-reload-plan.ts

test: audit heartbeat config honor

2026-04-03 09:55:51 -05:00

config-reload.test.ts

test: audit heartbeat config honor

2026-04-03 09:55:51 -05:00

config-reload.ts

fix: avoid startup gateway reload loop (#58678) (thanks @yelog)

2026-04-01 16:47:55 +09:00

connection-auth.test.ts

test: dedupe extension-owned coverage (#58554)

2026-03-31 15:18:29 -07:00

connection-auth.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

connection-details.ts

fix(ci): align skills api and trim status startup

2026-03-27 22:24:54 +00:00

control-plane-audit.ts

fix: harden gateway control-plane restart protections

2026-02-19 14:30:15 +01:00

control-plane-rate-limit.ts

fix(security): harden gateway command/audit guardrails

2026-02-22 08:45:48 +01:00

control-ui-contract.ts

gateway: trim control UI bootstrap payload (#57727)

2026-03-30 15:08:19 +01:00

control-ui-csp.test.ts

fix: hash inline scripts with data-src attributes

2026-03-23 21:14:55 -07:00

control-ui-csp.ts

refactor: simplify provider inference and zoned parsing helpers

2026-03-23 21:22:30 -07:00

control-ui-http-utils.ts

fix(gateway): let non-GET requests fall through controlUi routing when basePath is set

2026-03-03 00:11:13 +00:00

control-ui-links.ts

refactor(runtime): lazy-load control-ui and channel-config surfaces

2026-04-04 08:59:56 +01:00

control-ui-routing.test.ts

test: tighten gateway helper coverage

2026-03-13 17:45:21 +00:00

control-ui-routing.ts

fix(gateway): keep probe routes reachable with root-mounted control ui (#38199)

2026-03-06 12:13:20 -05:00

control-ui-shared.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

control-ui.auto-root.http.test.ts

test: trim gateway importActual mocks

2026-04-03 19:54:37 +01:00

control-ui.http.test.ts

gateway: trim control UI bootstrap payload (#57727)

2026-03-30 15:08:19 +01:00

control-ui.ts

gateway: trim control UI bootstrap payload (#57727)

2026-03-30 15:08:19 +01:00

credential-planner.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

credential-precedence.parity.test.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

credentials.test.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

credentials.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

device-auth.test.ts

test: refine gateway auth helper coverage

2026-03-13 17:58:28 +00:00

device-auth.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

device-authz.test-helpers.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

device-metadata-normalization.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

embeddings-http.test.ts

test: streamline runtime wrapper test reloads

2026-04-03 04:41:38 +01:00

embeddings-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

events.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

exec-approval-manager.ts

feat(hooks): add async requireApproval to before_tool_call (#55339)

2026-03-27 09:06:40 -07:00

gateway-acp-bind.live.test.ts

test: retry gateway acp bind warmup

2026-03-31 23:20:25 +01:00

gateway-cli-backend.live.test.ts

feat: stream Claude CLI JSONL output

2026-04-04 19:33:08 +09:00

gateway-config-prompts.shared.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

gateway-connection.test-mocks.ts

test: trim remaining mock drift

2026-04-04 04:04:12 +01:00

gateway-misc.test.ts

fix: tighten gateway shared-auth disconnects (#60387) (thanks @mappel-nv)

2026-04-04 02:20:22 +09:00

gateway-models.profiles.live.test.ts

docs(test): refresh stale model refs

2026-04-04 08:05:49 +01:00

gateway.test.ts

gateway: reuse session workspace for HTTP tool loading (#56101)

2026-03-27 23:01:43 -04:00

handshake-timeouts.test.ts

fix: improve WS handshake reliability on slow-startup environments (#60075)

2026-04-03 00:21:14 -05:00

handshake-timeouts.ts

fix: improve WS handshake reliability on slow-startup environments (#60075)

2026-04-03 00:21:14 -05:00

hooks-mapping.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

hooks-mapping.ts

fix(security): block hook transform symlink escapes

2026-02-22 10:18:05 +01:00

hooks-policy.ts

Security: trim audit policy import surfaces

2026-03-15 22:55:26 -07:00

hooks-test-helpers.ts

fix(gateway): honor trusted proxy hook auth rate limits

2026-03-12 21:35:57 +00:00

hooks.test.ts

test(plugins): finish moving contract coverage

2026-04-04 00:11:39 +01:00

hooks.ts

fix(ci): repair redundant channel union types

2026-04-04 05:08:02 +01:00

http-auth-helpers.test.ts

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

http-auth-helpers.ts

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

http-common.test.ts

feat(gateway): add Permissions-Policy header to default security headers (#30186)

2026-03-03 16:25:39 -08:00

http-common.ts

feat(gateway): add Permissions-Policy header to default security headers (#30186)

2026-03-03 16:25:39 -08:00

http-endpoint-helpers.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

http-endpoint-helpers.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

http-utils.authorize-request.test.ts

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

http-utils.model-override.test.ts

fix: preserve cli sessions across model changes

2026-03-26 20:25:20 +00:00

http-utils.request-context.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

http-utils.ts

fix(gateway): return default scopes when trusted HTTP request has no scope header (#58603)

2026-03-31 21:09:05 -04:00

input-allowlist.test.ts

docs(gateway): clarify URL allowlist semantics

2026-03-17 00:03:27 -07:00

input-allowlist.ts

docs(gateway): clarify URL allowlist semantics

2026-03-17 00:03:27 -07:00

live-image-probe.ts

…

live-tool-probe-utils.test.ts

fix: move Mistral compat into provider plugin

2026-03-28 04:08:37 +00:00

live-tool-probe-utils.ts

fix: move Mistral compat into provider plugin

2026-03-28 04:08:37 +00:00

mcp-http.handlers.ts

refactor(gateway): split MCP loopback transport helpers

2026-04-04 15:34:13 +09:00

mcp-http.protocol.ts

refactor(gateway): split MCP loopback transport helpers

2026-04-04 15:34:13 +09:00

mcp-http.request.ts

refactor(gateway): split MCP loopback transport helpers

2026-04-04 15:34:13 +09:00

mcp-http.runtime.ts

refactor(gateway): split MCP loopback transport helpers

2026-04-04 15:34:13 +09:00

mcp-http.schema.ts

refactor(gateway): split MCP loopback transport helpers

2026-04-04 15:34:13 +09:00

mcp-http.test.ts

fix: restore claude cli loopback mcp bridge (#35676) (thanks @mylukin)

2026-04-04 15:16:20 +09:00

mcp-http.ts

refactor(gateway): split MCP loopback transport helpers

2026-04-04 15:34:13 +09:00

method-scopes.test.ts

fix(gateway): include talk secrets in CLI pairing defaults (#56481) (thanks @maxpetrusenko)

2026-04-04 23:18:54 +09:00

method-scopes.ts

refactor: share announce test runtime seams

2026-04-04 23:38:36 +09:00

model-pricing-cache-state.ts

fix: restore xai pricing cache fallback

2026-03-28 11:43:12 +00:00

model-pricing-cache.test.ts

fix(gateway): guard openrouter auto pricing recursion (#53055)

2026-03-23 10:43:01 -07:00

model-pricing-cache.ts

fix: require doctor migration for legacy web search config

2026-04-01 04:22:41 +09:00

models-http.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

models-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

net.test.ts

Browser: normalize localhost absolute-form CDP hosts (#59236)

2026-04-02 13:34:55 +01:00

net.ts

Browser: normalize localhost absolute-form CDP hosts (#59236)

2026-04-02 13:34:55 +01:00

node-catalog.test.ts

fix(gateway): stop pinning node commands to pairing state

2026-04-01 18:27:06 +09:00

node-catalog.ts

fix(gateway): stop pinning node commands to pairing state

2026-04-01 18:27:06 +09:00

node-command-policy.test.ts

fix(gateway): stop pinning node commands to pairing state

2026-04-01 18:27:06 +09:00

node-command-policy.ts

fix(gateway): stop pinning node commands to pairing state

2026-04-01 18:27:06 +09:00

node-connect-reconcile.ts

fix(gateway): stop pinning node commands to pairing state

2026-04-01 18:27:06 +09:00

node-invoke-sanitize.ts

fix(gateway): bind node exec approvals to nodeId

2026-02-24 03:05:58 +00:00

node-invoke-system-run-approval-errors.ts

refactor(gateway): centralize system.run approval context and errors

2026-02-26 22:01:16 +01:00

node-invoke-system-run-approval-match.test.ts

fix(infra): align env key normalization in approval binding path (#59182)

2026-04-02 11:14:33 -06:00

node-invoke-system-run-approval-match.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

node-invoke-system-run-approval.test.ts

test: dedupe extension-owned coverage (#58554)

2026-03-31 15:18:29 -07:00

node-invoke-system-run-approval.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

node-pending-work.test.ts

fix(gateway): prune empty node-pending-work state entries to prevent memory leak (#58179)

2026-04-02 20:00:18 +08:00

node-pending-work.ts

fix(gateway): prune empty node-pending-work state entries to prevent memory leak (#58179)

2026-04-02 20:00:18 +08:00

node-registry.ts

fix: disambiguate legacy mac node identities

2026-03-29 22:47:15 +01:00

open-responses.schema.ts

fix(gateway): /v1/responses tool schema should use flat Responses API format (#57166)

2026-03-30 09:36:54 +09:00

openai-http.image-budget.test.ts

test: trim sandbox and gateway partial mocks

2026-04-03 20:40:27 +01:00

openai-http.message-channel.test.ts

gateway: ignore bearer-declared HTTP operator scopes (#57783)

2026-03-30 20:04:33 +01:00

openai-http.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

openai-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

openresponses-http.test.ts

fix: wrap untrusted file inputs (#60277)

2026-04-05 01:54:48 +08:00

openresponses-http.ts

fix: wrap untrusted file inputs (#60277)

2026-04-05 01:54:48 +08:00

openresponses-parity.test.ts

fix: wrap untrusted file inputs (#60277)

2026-04-05 01:54:48 +08:00

openresponses-prompt.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

operator-approvals-client.ts

refactor: share approval gateway client setup

2026-03-10 22:18:04 +00:00

operator-scopes.ts

refactor: share announce test runtime seams

2026-04-04 23:38:36 +09:00

origin-check.test.ts

test: tighten gateway helper coverage

2026-03-13 17:45:21 +00:00

origin-check.ts

fix(gateway): require local client for loopback origin fallback

2026-03-02 16:37:45 +00:00

probe-auth.test.ts

fix(gateway): pass process.env in status command probe auth to resolve SecretRef

2026-03-22 19:14:44 -07:00

probe-auth.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

probe.auth.integration.test.ts

fix: preserve loopback gateway scopes for local auth

2026-03-16 06:22:15 +00:00

probe.test.ts

fix(daemon): surface probe close reasons (#56282)

2026-03-28 10:04:56 +01:00

probe.ts

fix(daemon): surface probe close reasons (#56282)

2026-03-28 10:04:56 +01:00

rate-limit-attempt-serialization.ts

fix: serialize async auth rate-limit attempts

2026-04-04 21:55:09 +09:00

reconnect-gating.test.ts

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

resolve-configured-secret-input-string.test.ts

refactor: unify gateway SecretRef auth resolution paths

2026-03-07 23:27:50 +00:00

resolve-configured-secret-input-string.ts

Gateway Secrets: allowlist unresolved secret ref label

2026-03-07 16:27:00 -08:00

role-policy.test.ts

Gateway: add pending node work primitives (#41409)

2026-03-09 21:42:57 +01:00

role-policy.ts

refactor(gateway): extract connect and role policy logic

2026-02-21 19:47:22 +01:00

security-path.test.ts

fix(gateway): fail closed plugin auth path canonicalization

2026-03-02 15:55:32 +00:00

security-path.ts

fix(gateway): fail closed plugin auth path canonicalization

2026-03-02 15:55:32 +00:00

server-broadcast.ts

feat(hooks): add async requireApproval to before_tool_call (#55339)

2026-03-27 09:06:40 -07:00

server-channels.test.ts

refactor: share webhook channel status helpers

2026-03-29 02:11:22 +01:00

server-channels.ts

refactor: share webhook channel status helpers

2026-03-29 02:11:22 +01:00

server-chat.agent-events.test.ts

test: trim gateway and infra partial mocks

2026-04-03 21:03:54 +01:00

server-chat.load-gateway-session-row.runtime.ts

test: trim gateway and infra partial mocks

2026-04-03 21:03:54 +01:00

server-chat.persist-session-lifecycle.runtime.ts

test: trim gateway and infra partial mocks

2026-04-03 21:03:54 +01:00

server-chat.ts

test: trim gateway and infra partial mocks

2026-04-03 21:03:54 +01:00

server-close.test.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server-close.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server-constants.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

server-cron.test.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

server-cron.ts

fix(ci): drop stale browser runtime imports

2026-04-04 15:09:49 +01:00

server-discovery-runtime.ts

…

server-discovery.test.ts

test(core): continue mock reset reductions in auth, gateway, npm install

2026-02-22 08:28:50 +00:00

server-discovery.ts

…

server-http.hooks-request-timeout.test.ts

test: trim core partial mocks

2026-04-03 19:28:19 +01:00

server-http.probe.test.ts

feat(gateway): add channel-backed readiness probes (#38285)

2026-03-06 15:15:23 -05:00

server-http.stages.test.ts

test: assert console.error in async-rejection stage test

2026-04-01 16:09:36 +09:00

server-http.test-harness.ts

refactor(test): share hook request handler fixtures

2026-03-12 21:44:58 +00:00

server-http.ts

fix: narrow plugin route runtime scope fallback (#59815) (thanks @pgondhi987)

2026-04-04 16:57:44 +09:00

server-lanes.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-maintenance.test.ts

test: trim gateway importActual mocks

2026-04-03 19:54:37 +01:00

server-maintenance.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

server-methods-list.ts

[Feat] Add ClawHub skill search and detail in Control UI (#60134)

2026-04-03 19:30:44 +08:00

server-methods.control-plane-rate-limit.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server-methods.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server-mobile-nodes.ts

…

server-model-catalog.ts

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

server-node-events-types.ts

…

server-node-events.runtime.ts

test: narrow gateway and model status runtime seams

2026-04-03 16:03:32 +01:00

server-node-events.test.ts

test: narrow gateway and model status runtime seams

2026-04-03 16:03:32 +01:00

server-node-events.ts

test: narrow gateway and model status runtime seams

2026-04-03 16:03:32 +01:00

server-node-subscriptions.ts

…

server-plugin-bootstrap.browser-plugin.integration.test.ts

fix(ci): stabilize browser bundled integration tests

2026-03-28 08:34:18 +00:00

server-plugin-bootstrap.ts

refactor(plugins): split activation snapshot and compat flow

2026-04-04 00:42:11 +09:00

server-plugins.test.ts

refactor: move voice-call realtime providers into extensions

2026-04-04 12:07:23 +09:00

server-plugins.ts

fix: preserve allowlist guard for auto-enabled bundled channels (#60233) (thanks @dorukardahan)

2026-04-03 22:55:31 +09:00

server-reload-handlers.ts

Revert "refactor: move tasks behind plugin-sdk seam"

2026-04-01 01:30:22 +09:00

server-restart-deferral.test.ts

perf(test): cut gateway unit suite overhead

2026-02-16 00:18:26 +00:00

server-restart-sentinel.test.ts

test: trim gateway importActual mocks

2026-04-03 19:54:37 +01:00

server-restart-sentinel.ts

refactor(plugins): move channel behavior into plugins

2026-04-03 19:09:20 +01:00

server-runtime-config.test.ts

fix(gateway/auth): local trusted-proxy fallback to require token auth (#54536)

2026-03-29 17:05:00 +09:00

server-runtime-config.ts

fix(gateway/auth): local trusted-proxy fallback to require token auth (#54536)

2026-03-29 17:05:00 +09:00

server-runtime-state.ts

gateway: cap concurrent pre-auth websocket upgrades (#55294)

2026-03-27 09:55:27 +00:00

server-session-key.test.ts

Gateway: harden custom session-store discovery (#44176)

2026-03-12 16:44:46 +00:00

server-session-key.ts

Gateway: harden custom session-store discovery (#44176)

2026-03-12 16:44:46 +00:00

server-shared.ts

…

server-startup-log.test.ts

refactor: simplify gateway startup logs

2026-04-03 11:31:34 +01:00

server-startup-log.ts

refactor: simplify gateway startup logs

2026-04-03 11:31:34 +01:00

server-startup-memory.test.ts

refactor: route memory runtime through memory plugin

2026-03-26 22:30:47 +00:00

server-startup-memory.ts

refactor: route memory runtime through memory plugin

2026-03-26 22:30:47 +00:00

server-startup-session-migration.test.ts

fix: add orphaned session key migration (#57217)

2026-03-30 07:36:46 +05:30

server-startup-session-migration.ts

fix: add orphaned session key migration (#57217)

2026-03-30 07:36:46 +05:30

server-startup.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

server-startup.ts

hooks: default hooks.internal.enabled to true so bundled hooks load on fresh installs

2026-03-30 22:00:54 +05:30

server-tailscale.ts

…

server-utils.ts

…

server-wizard-sessions.ts

…

server-ws-runtime.ts

Gateway: refresh websocket auth after secrets reload (#60323)

2026-04-03 14:35:31 -06:00

server.agent.gateway-server-agent-a.test.ts

fix(exec): harden async approval followup delivery in webchat-only sessions (#57359)

2026-03-29 20:54:13 -05:00

server.agent.gateway-server-agent-b.test.ts

fix(types): align portable runtime helpers

2026-04-04 03:57:47 +09:00

server.agent.gateway-server-agent.mocks.ts

refactor(gateway): centralize discovery target handling

2026-03-23 00:38:31 -07:00

server.auth.browser-hardening.test.ts

fix(gateway): scope browser-origin auth throttling

2026-04-04 20:30:39 +09:00

server.auth.compat-baseline.test.ts

Limit connect snapshot metadata to admin-scoped clients (#58469)

2026-04-02 11:41:47 -06:00

server.auth.control-ui.suite.ts

fix: bound bootstrap handoff token scopes

2026-04-04 22:29:52 +09:00

server.auth.control-ui.test.ts

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

server.auth.default-token.suite.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

server.auth.default-token.test.ts

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

server.auth.modes.suite.ts

test: harden threaded shared-worker suites

2026-03-24 08:37:00 +00:00

server.auth.modes.test.ts

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

server.auth.shared.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.canvas-auth.test.ts

fix: tighten gateway shared-auth disconnects (#60387) (thanks @mappel-nv)

2026-04-04 02:20:22 +09:00

server.channels.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.chat.gateway-server-chat-b.test.ts

feat(gateway): make chat history max chars configurable (#58900)

2026-04-01 21:08:37 +11:00

server.chat.gateway-server-chat.test.ts

Gateway: align chat.send reset scope checks (#56009)

2026-03-27 20:36:31 +00:00

server.config-apply.test.ts

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044)

2026-03-30 23:55:03 -05:00

server.config-patch.test.ts

fix(gateway): skip restart when config.patch has no actual changes (#58502)

2026-03-31 21:09:23 -04:00

server.control-ui-root.test.ts

gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385)

2026-03-09 01:50:42 +01:00

server.cron.test.ts

fix(cron): notify user via primary delivery channel on job failure (#60622)

2026-04-04 20:24:16 +08:00

server.device-pair-approve-authz.test.ts

test: share gateway authz and watchdog fixtures

2026-03-26 16:36:03 +00:00

server.device-pair-approve-supersede.test.ts

test: harden no-isolate gateway auth and pairing

2026-03-22 15:15:50 -07:00

server.device-token-rotate-authz.test.ts

fix: harden paired-device management authz (#50627) (thanks @coygeek)

2026-04-04 23:27:05 +09:00

server.e2e-registry-helpers.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

server.e2e-ws-harness.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.health.test.ts

test(gateway): speed up slow e2e test setup

2026-02-24 00:59:52 +00:00

server.hooks.test.ts

fix(hooks): rebind hook agent session keys to the target agent (#58225)

2026-04-01 00:16:39 +09:00

server.impl.ts

fix: restore claude cli loopback mcp bridge (#35676) (thanks @mylukin)

2026-04-04 15:16:20 +09:00

server.ios-client-id.test.ts

test(gateway): speed up contract and polling suites

2026-02-24 00:31:58 +00:00

server.legacy-migration.test.ts

refactor(gateway): dedupe legacy migration validation assertions

2026-03-07 17:58:31 +00:00

server.minimal-channel-pin.test.ts

fix: keep minimal gateway channel registry live (#53944) (thanks @affsantos)

2026-03-24 21:33:04 -07:00

server.models-voicewake-misc.test.ts

fix(agents): align runtime with updated deps

2026-04-04 22:40:08 +09:00

server.node-invoke-approval-bypass.test.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.node-pairing-authz.test.ts

fix: enforce node pairing approval scopes end-to-end (#60461) (thanks @eleqtrizit)

2026-04-04 19:13:48 +09:00

server.openai-compatible-http-write-scope-bypass.poc.test.ts

fix(gateway): restore shared-secret HTTP tool invoke auth

2026-03-31 22:55:15 +09:00

server.plugin-http-auth.test.ts

fix: finalize issue changes

2026-04-04 16:57:44 +09:00

server.preauth-hardening.test.ts

gateway: cap concurrent pre-auth websocket upgrades (#55294)

2026-03-27 09:55:27 +00:00

server.reload.test.ts

style(auth): normalize auth choice formatting

2026-04-04 12:19:08 +01:00

server.roles-allowlist-update.test.ts

fix(gateway): stop pinning node commands to pairing state

2026-04-01 18:27:06 +09:00

server.sessions-send.test.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.sessions.gateway-server-sessions-a.test.ts

docs(test): refresh stale model refs

2026-04-04 08:05:49 +01:00

server.shared-auth-rotation.test.ts

refactor: share gateway config auth helpers

2026-04-04 02:29:29 +09:00

server.silent-scope-upgrade-reconnect.poc.test.ts

gateway: require pairing for backend scope upgrades (#55286)

2026-03-26 17:36:44 +00:00

server.skills-status.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

server.startup-matrix-migration.integration.test.ts

refactor(plugins): move channel behavior into plugins

2026-04-03 19:09:20 +01:00

server.talk-config.test.ts

fix(agents): align runtime with updated deps

2026-04-04 22:40:08 +09:00

server.tools-catalog.test.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

server.tools-effective.test.ts

feat: add /tools runtime availability view (#54088)

2026-03-24 21:09:51 -05:00

server.ts

…

session-archive.fs.ts

fix: enrich session_end lifecycle hooks (#59715)

2026-04-03 00:16:14 -07:00

session-archive.runtime.ts

fix: enrich session_end lifecycle hooks (#59715)

2026-04-03 00:16:14 -07:00

session-kill-http.test.ts

fix(gateway): enforce session kill HTTP scopes (#59128)

2026-04-02 05:56:17 -07:00

session-kill-http.ts

fix(gateway): enforce session kill HTTP scopes (#59128)

2026-04-02 05:56:17 -07:00

session-lifecycle-state.test.ts

Session management improvements and dashboard API (#50101)

2026-03-19 12:12:30 +09:00

session-lifecycle-state.ts

Session management improvements and dashboard API (#50101)

2026-03-19 12:12:30 +09:00

session-message-events.test.ts

fix(regression): preserve lifecycle session ownership metadata

2026-03-27 20:53:46 -05:00

session-preview.test-helpers.ts

refactor(gateway-test): share preview transcript fixture

2026-02-18 17:01:22 +00:00

session-reset-service.ts

fix(ci): restore contract-safe core imports

2026-04-04 15:09:48 +01:00

session-subagent-reactivation.runtime.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-subagent-reactivation.test.ts

test: trim more runtime partial mocks

2026-04-03 20:46:57 +01:00

session-subagent-reactivation.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-transcript-files.fs.ts

refactor: trim cron session cleanup imports

2026-04-04 01:07:28 +09:00

session-transcript-key.test.ts

fix: prefer freshest transcript session owners

2026-03-24 21:58:53 -05:00

session-transcript-key.ts

fix: prefer freshest transcript session owners

2026-03-24 21:58:53 -05:00

session-utils.fs.test.ts

test: dedupe gateway network and transcript suites

2026-03-28 00:26:55 +00:00

session-utils.fs.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

session-utils.test.ts

docs(test): refresh stale model refs

2026-04-04 08:05:49 +01:00

session-utils.ts

refactor: share session model resolution helpers

2026-04-03 19:37:56 +09:00

session-utils.types.ts

fix(regression): preserve subagent session ownership metadata

2026-03-27 20:24:15 -05:00

sessions-history-http.test.ts

gateway: ignore bearer-declared HTTP operator scopes (#57783)

2026-03-30 20:04:33 +01:00

sessions-history-http.ts

gateway: ignore bearer-declared HTTP operator scopes (#57783)

2026-03-30 20:04:33 +01:00

sessions-patch.test.ts

fix: scope live model switch pending state (#60266) (thanks @kiranvk-2011)

2026-04-04 19:45:53 +09:00

sessions-patch.ts

fix: scope live model switch pending state (#60266) (thanks @kiranvk-2011)

2026-04-04 19:45:53 +09:00

sessions-resolve.test.ts

refactor: dedupe gateway session resolve visibility

2026-03-26 18:56:55 +00:00

sessions-resolve.ts

refactor: dedupe gateway session resolve visibility

2026-03-26 18:56:55 +00:00

startup-auth.test.ts

test: trim core partial mocks

2026-04-03 19:28:19 +01:00

startup-auth.ts

refactor(config): use source snapshots for config mutations

2026-03-30 01:02:25 +01:00

startup-control-ui-origins.ts

fix: avoid startup gateway reload loop (#58678) (thanks @yelog)

2026-04-01 16:47:55 +09:00

system-run-approval-binding.contract.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

system-run-approval-binding.test.ts

test: dedupe extension-owned coverage (#58554)

2026-03-31 15:18:29 -07:00

test-helpers.agent-results.ts

test(gateway): dedupe agent payload and stream fixtures

2026-02-19 09:22:16 +00:00

test-helpers.e2e.ts

refactor(gateway): extract node pairing reconciliation

2026-04-01 18:02:31 +09:00

test-helpers.mocks.ts

refactor: move voice-call realtime providers into extensions

2026-04-04 12:07:23 +09:00

test-helpers.openai-mock.ts

test(gateway): reuse shared openai timeout e2e helpers

2026-02-22 07:44:57 +00:00

test-helpers.server.test.ts

fix(pairing): restore qr bootstrap onboarding handoff (#58382) (thanks @ngutman)

2026-03-31 21:11:35 +03:00

test-helpers.server.ts

fix(pairing): restore qr bootstrap onboarding handoff (#58382) (thanks @ngutman)

2026-03-31 21:11:35 +03:00

test-helpers.ts

…

test-http-response.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-openai-responses-model.ts

docs(test): refresh stale model refs

2026-04-04 08:05:49 +01:00

test-temp-config.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

test-with-server.ts

test: continue vitest threads migration

2026-03-24 08:37:00 +00:00

tool-resolution.ts

fix: restore claude cli loopback mcp bridge (#35676) (thanks @mylukin)

2026-04-04 15:16:20 +09:00

tools-invoke-http.cron-regression.test.ts

fix(gateway): restore shared-secret HTTP tool invoke auth

2026-03-31 22:55:15 +09:00

tools-invoke-http.test.ts

fix: restore claude cli loopback mcp bridge (#35676) (thanks @mylukin)

2026-04-04 15:16:20 +09:00

tools-invoke-http.ts

fix: restore claude cli loopback mcp bridge (#35676) (thanks @mylukin)

2026-04-04 15:16:20 +09:00

ws-log.test.ts

test: tighten gateway helper coverage

2026-03-13 17:45:21 +00:00

ws-log.ts

Plugin SDK: route reply payload through public subpath

2026-03-18 12:01:15 -07:00

ws-logging.ts

…