Peter Steinberger 04c31f453c fix: reject oversized credential files in remaining readers (#109260) ...

* fix(security): bound remaining credential file reads

* fix(anthropic-vertex): keep ADC helper type private

2026-07-16 11:33:18 -07:00

..

src

refactor(extensions): trim small plugin exports (#107784)

2026-07-14 14:38:08 -07:00

api.test.ts

improve(google): identify OpenClaw Gemini API traffic (#101834)

2026-07-07 16:09:02 -06:00

api.ts

improve(google): identify OpenClaw Gemini API traffic (#101834)

2026-07-07 16:09:02 -06:00

cli-backend-auth.runtime.ts

…

cli-backend.ts

fix(onboarding): skip setup for configured gateways and require inference first (#102883)

2026-07-11 10:25:14 -07:00

default-model.test.ts

…

doctor-contract-api.ts

…

embedding-batch.test.ts

fix(memory): harden embedding batch workflows (#103472)

2026-07-11 16:43:58 -07:00

embedding-batch.ts

fix(memory): harden embedding batch workflows (#103472)

2026-07-11 16:43:58 -07:00

embedding-provider.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

embedding-provider.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

gemini-auth.ts

…

gemini-cli-auth-home.ts

…

gemini-cli-provider.ts

fix(onboarding): explain how to get provider tokens and revive logged-out CLI candidates (#108739)

2026-07-16 01:12:15 -07:00

generation-provider-metadata.ts

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

google-api-client-header.ts

improve(google): identify OpenClaw Gemini API traffic (#101834)

2026-07-07 16:09:02 -06:00

google-genai-runtime.test.ts

improve(google): identify OpenClaw Gemini API traffic (#101834)

2026-07-07 16:09:02 -06:00

google-genai-runtime.ts

improve(google): identify OpenClaw Gemini API traffic (#101834)

2026-07-07 16:09:02 -06:00

google-oauth.test-support.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

google.live.test.ts

…

image-generation-provider.test.ts

refactor(extensions): trim small plugin exports (#107784)

2026-07-14 14:38:08 -07:00

image-generation-provider.ts

…

index.test.ts

fix(talk): await realtime tool result delivery (#103268)

2026-07-09 20:11:20 -07:00

index.ts

fix(talk): await realtime tool result delivery (#103268)

2026-07-09 20:11:20 -07:00

manifest.test.ts

…

media-understanding-provider.ts

…

media-understanding-provider.video.test.ts

…

memory-embedding-adapter.test.ts

fix(google): exclude versioned Gemini client header from memory identity (#104759)

2026-07-11 17:06:21 -07:00

memory-embedding-adapter.ts

fix(google): exclude versioned Gemini client header from memory identity (#104759)

2026-07-11 17:06:21 -07:00

model-id.test.ts

…

model-id.ts

…

music-generation-provider.test.ts

fix(google): retry transient Lyria no-audio responses (#103326)

2026-07-10 06:18:37 +01:00

music-generation-provider.ts

fix(google): retry transient Lyria no-audio responses (#103326)

2026-07-10 06:18:37 +01:00

oauth-token-shared.test.ts

…

oauth-token-shared.ts

…

oauth.credentials.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

oauth.flow.ts

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

oauth.http.proxy.test.ts

…

oauth.http.test.ts

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

oauth.http.ts

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

oauth.local-login.test.ts

fix(ci): make owner-approved Testbox landing reliable (#104726)

2026-07-11 15:04:25 -07:00

oauth.project.ts

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

oauth.runtime.ts

…

oauth.settings.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

oauth.shared.ts

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

oauth.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

oauth.token.ts

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

oauth.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

onboard.ts

…

openclaw.plugin.json

fix(onboarding): explain how to get provider tokens and revive logged-out CLI candidates (#108739)

2026-07-16 01:12:15 -07:00

package.json

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

provider-catalog.test.ts

…

provider-catalog.ts

…

provider-contract-api.ts

fix(onboarding): explain how to get provider tokens and revive logged-out CLI candidates (#108739)

2026-07-16 01:12:15 -07:00

provider-discovery.ts

…

provider-hooks.test.ts

fix: classify provider code-only failover errors (#95729)

2026-07-15 04:07:51 -07:00

provider-hooks.ts

fix: classify provider code-only failover errors (#95729)

2026-07-15 04:07:51 -07:00

provider-models.test.ts

…

provider-models.ts

…

provider-policy-api.test.ts

…

provider-policy-api.ts

…

provider-policy.ts

…

provider-registration.test.ts

…

provider-registration.ts

fix(onboarding): explain how to get provider tokens and revive logged-out CLI candidates (#108739)

2026-07-16 01:12:15 -07:00

provider-runtime.contract.test.ts

…

realtime-voice-provider.test.ts

chore: enforce max-lines suppression ratchet (#107315)

2026-07-14 09:27:02 -07:00

realtime-voice-provider.ts

chore: enforce max-lines suppression ratchet (#107315)

2026-07-14 09:27:02 -07:00

runtime-api.ts

…

setup-api.test.ts

fix(onboarding): skip setup for configured gateways and require inference first (#102883)

2026-07-11 10:25:14 -07:00

setup-api.ts

…

speech-provider.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

speech-provider.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

test-api.ts

…

thinking-api.ts

…

thinking.test.ts

…

thinking.ts

…

transport-stream.test.ts

fix: reject oversized credential files in remaining readers (#109260)

2026-07-16 11:33:18 -07:00

transport-stream.ts

fix(ai): preserve tool-result text for payload-less media (#108697)

2026-07-16 00:42:36 -07:00

tsconfig.json

…

vertex-adc.ts

fix: reject oversized credential files in remaining readers (#109260)

2026-07-16 11:33:18 -07:00

vertex-multi-region-host.test.ts

refactor(deadcode): tighten Google and xAI extension roots (#108523)

2026-07-15 17:34:53 -07:00

video-generation-provider.test.ts

…

video-generation-provider.ts

improve(google): identify OpenClaw Gemini API traffic (#101834)

2026-07-07 16:09:02 -06:00

web-search-contract-api.ts

…

web-search-provider.test.ts

refactor(extensions): trim small plugin exports (#107784)

2026-07-14 14:38:08 -07:00

web-search-provider.ts

…