Peter Steinberger 40793e6f8b fix: bound pasted input and provider response bodies (#110627) ...

* refactor(runtime): centralize bounded I/O handling

* fix(runtime): finalize bounded I/O contracts

* chore(security): drop stale audit import

* docs(changelog): credit bounded I/O fixes

Co-authored-by: Pick-cat <huang.ting3@xydigit.com>

* fix(agents): keep provider HTTP options private

* fix(ai): traverse OpenAI schema maps by value

* fix(runtime): preserve absolute download deadlines

* ci(ui): stabilize compressed CSS budget

* fix(ai): traverse legacy schema applicators

---------

Co-authored-by: Pick-cat <huang.ting3@xydigit.com>

2026-07-18 13:54:56 +01:00

..

.boundary-stubs

…

src

refactor(extensions): trim small plugin exports (#107784)

2026-07-14 14:38:08 -07:00

api.test.ts

…

api.ts

…

code-execution-tool-shared.ts

…

code-execution.test.ts

…

code-execution.ts

…

doctor-contract-api.test.ts

…

doctor-contract-api.ts

…

image-generation-provider.test.ts

test: eliminate unchecked TypeScript casts (#105804)

2026-07-12 18:08:26 -07:00

image-generation-provider.ts

…

index.test.ts

feat(xai): add realtime voice provider (#106267)

2026-07-13 05:17:24 -07:00

index.ts

chore(plugins): gate deprecation hygiene in CI and purge internal deprecated usage (#108261)

2026-07-15 04:15:23 -07:00

model-compat.ts

…

model-definitions.ts

…

model-id.test.ts

…

model-id.ts

…

onboard.test.ts

…

onboard.ts

…

openclaw.plugin.json

feat(xai): add realtime voice provider (#106267)

2026-07-13 05:17:24 -07:00

openclaw.plugin.test.ts

…

package.json

feat(xai): add realtime voice provider (#106267)

2026-07-13 05:17:24 -07:00

provider-catalog.ts

…

provider-contract-api.ts

…

provider-discovery.ts

…

provider-id.ts

…

provider-models.ts

…

provider-policy-api.test.ts

…

provider-policy-api.ts

…

realtime-transcription-provider.test.ts

fix(xai): ignore blank audio env api key (#108953)

2026-07-16 17:24:35 -07:00

realtime-transcription-provider.ts

fix(xai): ignore blank audio env api key (#108953)

2026-07-16 17:24:35 -07:00

realtime-voice-bridge.ts

fix(xai): release realtime reconnect delay on close (#108252)

2026-07-16 09:40:49 -07:00

realtime-voice-config.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

realtime-voice-events.ts

feat(xai): add realtime voice provider (#106267)

2026-07-13 05:17:24 -07:00

realtime-voice-protocol.ts

feat(xai): add realtime voice provider (#106267)

2026-07-13 05:17:24 -07:00

realtime-voice-provider.test.ts

perf(test): poll xAI realtime state faster (#109762)

2026-07-17 00:28:13 -07:00

realtime-voice-provider.ts

feat(xai): add realtime voice provider (#106267)

2026-07-13 05:17:24 -07:00

runtime-model-compat.test.ts

…

runtime-model-compat.ts

…

setup-api.ts

…

speech-provider.test.ts

fix(tts): normalize sibling provider credentials (#109051)

2026-07-16 07:08:42 -07:00

speech-provider.ts

fix(tts): normalize sibling provider credentials (#109051)

2026-07-16 07:08:42 -07:00

stream.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

stream.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

stt.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

stt.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

test-api.ts

…

test-helpers.ts

…

tsconfig.json

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

tts.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

tts.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

video-generation-provider.test.ts

fix: bound pasted input and provider response bodies (#110627)

2026-07-18 13:54:56 +01:00

video-generation-provider.transport.test.ts

fix(xai): apply request policy to video generation requests (#104836)

2026-07-15 21:22:46 -04:00

video-generation-provider.ts

fix(xai): apply request policy to video generation requests (#104836)

2026-07-15 21:22:46 -04:00

video-generation-transport.ts

fix: bound pasted input and provider response bodies (#110627)

2026-07-18 13:54:56 +01:00

web-search-contract-api.ts

…

web-search-provider-shared.ts

…

web-search.test.ts

refactor(extensions): trim small plugin exports (#107784)

2026-07-14 14:38:08 -07:00

web-search.ts

…

x-search-tool-shared.ts

…

x-search.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

x-search.test.ts

…

x-search.ts

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

xai-oauth.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

xai-oauth.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

xai.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00