Pavan Kumar Gondhi 9497629c1e fix(msteams): pin attachment fetch DNS ...

Route Microsoft Teams attachment downloads through the shared SSRF guarded fetch path so DNS validation is pinned into the dispatcher used for the actual request.

Keep Teams auth fallback and allowlisted HTTPS Authorization redirect behavior while failing closed for custom fetch hooks that cannot accept dispatcher injection.

Verification:
- CI=1 OPENCLAW_VITEST_MAX_WORKERS=1 timeout 300 node scripts/run-vitest.mjs run extensions/msteams/src/attachments/shared.test.ts extensions/msteams/src/attachments/bot-framework.test.ts src/infra/net/fetch-guard.ssrf.test.ts
- gh pr checks 87567 --repo openclaw/openclaw --watch=false

PR: #87567

2026-05-29 09:03:50 +01:00

..

protocol-generated/json

build(codex): update Codex CLI to 0.134.0

2026-05-27 04:42:12 +01:00

sandbox-exec-server

fix(codex): bound sandbox http stream lines

2026-05-28 16:36:12 +02:00

app-inventory-cache.test.ts

fix(codex): guard against stale codex app snapshots leading to plugin invocation failure (#83807)

2026-05-18 18:57:48 -07:00

app-inventory-cache.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

app-server-policy.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

app-server-policy.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

approval-bridge.test.ts

fix(codex): defer report-mode plugin approvals

2026-05-29 00:09:23 +01:00

approval-bridge.ts

fix(codex): defer report-mode plugin approvals

2026-05-29 00:09:23 +01:00

attempt-client-cleanup.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-client-cleanup.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-context.test.ts

fix(codex): route workspace memory through tools (#87383)

2026-05-27 20:55:27 +01:00

attempt-context.ts

fix(codex): route workspace memory through tools (#87383)

2026-05-27 20:55:27 +01:00

attempt-diagnostics.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-diagnostics.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-notification-state.ts

refactor(codex): extract app-server notification state

2026-05-27 18:31:06 +01:00

attempt-notifications.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-results.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-results.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-startup.test.ts

test: speed up slow test suite (#87611)

2026-05-28 13:20:19 +01:00

attempt-startup.ts

Fix sub-agent cwd/workspace separation (#87218)

2026-05-27 23:55:24 +02:00

attempt-steering.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-steering.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-timeouts.test.ts

fix(codex): default non-finite app-server timeouts

2026-05-28 22:58:14 -04:00

attempt-timeouts.ts

fix(codex): default non-finite app-server timeouts

2026-05-28 22:58:14 -04:00

attempt-turn-watches.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

attempt-turn-watches.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

auth-bridge.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

auth-bridge.ts

perf(gateway): reuse prepared auth stores

2026-05-27 04:51:43 +01:00

auth-profile-runtime-contract.test.ts

fix(codex): inject app-server client factories

2026-05-15 05:03:28 +01:00

capabilities.ts

…

client-factory.ts

fix(codex): bound app-server timeout fallout

2026-05-26 22:41:02 +01:00

client.test.ts

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

client.ts

fix(plugins): fail stalled runtime operations

2026-05-24 03:55:49 +01:00

compact.test.ts

fix(codex): avoid native compaction on budget triggers (#86772)

2026-05-27 05:04:35 +01:00

compact.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

computer-use.test.ts

test: bar codex computer use setup calls

2026-05-12 21:17:56 +01:00

computer-use.ts

…

config.test.ts

fix: parse codex computer use timeout env strictly

2026-05-28 13:49:38 -04:00

config.ts

fix: parse codex computer use timeout env strictly

2026-05-28 13:49:38 -04:00

context-engine-projection.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

context-engine-projection.ts

Fix context pressure preflight for tool-heavy sessions (#85541)

2026-05-22 18:39:37 -07:00

delivery-no-reply-runtime-contract.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

dynamic-tool-build.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

dynamic-tool-build.ts

Fix sub-agent cwd/workspace separation (#87218)

2026-05-27 23:55:24 +02:00

dynamic-tool-diagnostics.ts

fix(codex): complete dynamic tool diagnostics

2026-05-18 15:37:24 +01:00

dynamic-tool-execution.test.ts

fix: reject partial numeric parsing

2026-05-28 10:51:32 -04:00

dynamic-tool-execution.ts

fix: reject partial numeric parsing

2026-05-28 10:51:32 -04:00

dynamic-tool-profile.ts

fix(qa): expose codex tools for runtime parity

2026-05-17 17:20:12 +08:00

dynamic-tools.test.ts

fix(codex): report quarantined dynamic tools

2026-05-28 00:56:30 +02:00

dynamic-tools.ts

fix(codex): report quarantined dynamic tools

2026-05-28 00:56:30 +02:00

elicitation-bridge.test.ts

fix(codex): await computer use elicitation bridge (#85117)

2026-05-21 17:17:46 -07:00

elicitation-bridge.ts

fix(codex): await computer use elicitation bridge (#85117)

2026-05-21 17:17:46 -07:00

event-projector.test.ts

fix(codex): preserve reasoning stream snapshots

2026-05-29 01:48:51 +01:00

event-projector.ts

fix(codex): preserve reasoning stream snapshots

2026-05-29 01:48:51 +01:00

image-payload-sanitizer.test.ts

fix: sanitize Codex image payload replay (#82931)

2026-05-17 06:42:21 +01:00

image-payload-sanitizer.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

local-runtime-attribution.ts

fix: limit Codex attribution to local transcripts

2026-05-16 12:45:11 +01:00

managed-binary.test.ts

fix: isolate npm plugin installs per package (#87647)

2026-05-28 21:16:07 +01:00

managed-binary.ts

fix: isolate npm plugin installs per package (#87647)

2026-05-28 21:16:07 +01:00

models.test.ts

test: fix current suite drift

2026-05-26 16:40:08 -04:00

models.ts

fix(codex): bound app-server timeout fallout

2026-05-26 22:41:02 +01:00

native-execution-policy.test.ts

fix(codex): honor node exec policy for native surfaces (#85534)

2026-05-22 20:01:29 -07:00

native-execution-policy.ts

fix(codex): honor node exec policy for native surfaces (#85534)

2026-05-22 20:01:29 -07:00

native-hook-relay.test.ts

fix(codex): share native hook relay registry (#73950)

2026-05-26 15:02:03 -07:00

native-hook-relay.ts

fix(codex): preserve native hook relay across restarts

2026-05-27 19:55:19 +01:00

native-subagent-monitor.test.ts

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

native-subagent-monitor.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

native-subagent-notification.test.ts

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

native-subagent-notification.ts

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

native-subagent-task-ids.ts

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

native-subagent-task-mirror.test.ts

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

native-subagent-task-mirror.ts

fix(codex): deliver native subagent completions

2026-05-22 15:28:46 +01:00

notification-correlation.ts

Handle Codex turns missing completion (#85107)

2026-05-21 15:02:17 -07:00

openclaw-owned-tool-runtime-contract.test.ts

…

outcome-fallback-runtime-contract.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

plugin-activation.test.ts

test: box codex activation diagnostics

2026-05-12 20:11:54 +01:00

plugin-activation.ts

fix(release): unblock full validation

2026-05-15 06:55:03 +01:00

plugin-app-cache-key.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

plugin-app-cache-key.ts

fix(codex): gate migration on app readiness (#80815)

2026-05-12 13:01:22 -07:00

plugin-approval-roundtrip.ts

…

plugin-inventory.test.ts

…

plugin-inventory.ts

fix(codex): guard against stale codex app snapshots leading to plugin invocation failure (#83807)

2026-05-18 18:57:48 -07:00

plugin-thread-config.test.ts

fix(codex): guard against stale codex app snapshots leading to plugin invocation failure (#83807)

2026-05-18 18:57:48 -07:00

plugin-thread-config.ts

fix(codex): guard against stale codex app snapshots leading to plugin invocation failure (#83807)

2026-05-18 18:57:48 -07:00

profiler-flag.test.ts

fix(codex): gate profiler timing and startup setup

2026-05-26 20:51:00 +01:00

profiler-flag.ts

fix(codex): gate profiler timing and startup setup

2026-05-26 20:51:00 +01:00

protocol-validators.test.ts

refactor: migrate validators to TypeBox (#86639)

2026-05-26 08:45:28 +01:00

protocol-validators.ts

refactor: migrate validators to TypeBox (#86639)

2026-05-26 08:45:28 +01:00

protocol.ts

fix(codex): format skills command output (#87400)

2026-05-27 15:43:05 -07:00

rate-limit-cache.ts

…

rate-limits.test.ts

fix codex usage-limit recovery copy (#86305)

2026-05-25 15:53:40 +10:00

rate-limits.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

request.test.ts

fix(codex): bound app-server timeout fallout

2026-05-26 22:41:02 +01:00

request.ts

fix(codex): bound app-server timeout fallout

2026-05-26 22:41:02 +01:00

run-attempt-test-harness.ts

fix(codex): preserve native hook relay across restarts

2026-05-27 19:55:19 +01:00

run-attempt-thread-cleanup.test.ts

fix(codex): unsubscribe app-server thread after runs (#84969)

2026-05-22 04:39:35 +01:00

run-attempt.context-engine.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

run-attempt.dynamic-tools.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

run-attempt.hooks.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

run-attempt.native-hook-relay.test.ts

fix(codex): narrow legacy hook generation grace (#87386)

2026-05-27 13:01:44 -07:00

run-attempt.steering.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

run-attempt.test.ts

fix(msteams): pin attachment fetch DNS

2026-05-29 09:03:50 +01:00

run-attempt.ts

Fix sub-agent cwd/workspace separation (#87218)

2026-05-27 23:55:24 +02:00

run-attempt.turn-watches.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

run-attempt.usage-limits.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

run-attempt.vision-tools.test.ts

…

sandbox-exec-server.fs.test.ts

fix: harden codex sandbox execution

2026-05-21 23:47:32 +01:00

sandbox-exec-server.http.test.ts

fix(codex): bound sandbox http stream lines

2026-05-28 16:36:12 +02:00

sandbox-exec-server.test-helpers.ts

perf(gateway): cache stable plugin index fingerprints

2026-05-27 11:03:50 +01:00

sandbox-exec-server.test.ts

perf(gateway): cache stable plugin index fingerprints

2026-05-27 11:03:50 +01:00

sandbox-exec-server.ts

fix: harden codex sandbox execution

2026-05-21 23:47:32 +01:00

sandbox-guard.ts

fix(codex): honor node exec policy for native surfaces (#85534)

2026-05-22 20:01:29 -07:00

schema-normalization-runtime-contract.test.ts

fix(codex): keep dynamic tools available in code mode (#83583)

2026-05-18 13:13:30 +01:00

session-binding.test.ts

fix(codex): preserve native hook relay across restarts

2026-05-27 19:55:19 +01:00

session-binding.ts

fix(codex): preserve native hook relay across restarts

2026-05-27 19:55:19 +01:00

session-history.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

shared-client.test.ts

fix(codex): bound app-server timeout fallout

2026-05-26 22:41:02 +01:00

shared-client.ts

fix(codex): bound app-server timeout fallout

2026-05-26 22:41:02 +01:00

side-question.test.ts

fix(codex): raise dynamic tool timeout

2026-05-27 01:25:48 +01:00

side-question.ts

fix(codex): raise dynamic tool timeout

2026-05-27 01:25:48 +01:00

startup-binding.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

startup-binding.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

test-support.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

thread-lifecycle.binding.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

thread-lifecycle.test.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

thread-lifecycle.ts

fix(codex): preserve shared app-server when spawned helper run fails logically (#72574) (#87375)

2026-05-27 20:48:18 +01:00

thread-lifecycle.user-mcp-servers.test.ts

fix(codex): keep dynamic tools available in code mode (#83583)

2026-05-18 13:13:30 +01:00

timeout.ts

…

tool-progress-normalization.ts

…

trajectory.test.ts

fix: limit Codex attribution to local transcripts

2026-05-16 12:45:11 +01:00

trajectory.ts

fix(codex): record native tool trajectories

2026-05-17 07:43:28 +01:00

transcript-mirror.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

transcript-mirror.ts

Fix sub-agent cwd/workspace separation (#87218)

2026-05-27 23:55:24 +02:00

transcript-repair-runtime-contract.test.ts

…

transport-stdio.test.ts

Validate Codex app-server command overrides (#84417)

2026-05-22 05:39:02 +00:00

transport-stdio.ts

…

transport-websocket.test.ts

…

transport-websocket.ts

…

transport.ts

…

usage-limit-error.ts

refactor(codex): split app-server attempt seams

2026-05-27 18:11:16 +01:00

user-input-bridge.test.ts

test: dedupe codex user input mock read

2026-05-13 10:58:25 +01:00

user-input-bridge.ts

…

version.ts

build(codex): update Codex CLI to 0.134.0

2026-05-27 04:42:12 +01:00

vision-tools.ts

…