Peter Steinberger 40793e6f8b fix: bound pasted input and provider response bodies (#110627) ...

* refactor(runtime): centralize bounded I/O handling

* fix(runtime): finalize bounded I/O contracts

* chore(security): drop stale audit import

* docs(changelog): credit bounded I/O fixes

Co-authored-by: Pick-cat <huang.ting3@xydigit.com>

* fix(agents): keep provider HTTP options private

* fix(ai): traverse OpenAI schema maps by value

* fix(runtime): preserve absolute download deadlines

* ci(ui): stabilize compressed CSS budget

* fix(ai): traverse legacy schema applicators

---------

Co-authored-by: Pick-cat <huang.ting3@xydigit.com>

2026-07-18 13:54:56 +01:00

..

test-support

feat(openai): default new setups to GPT-5.6 (#103581)

2026-07-10 10:22:58 +01:00

api.ts

…

auth-choice-copy.ts

refactor(core): remove unused helper exports

2026-06-18 10:54:40 +08:00

base-url.test.ts

fix(openai): align auth availability with effective routes (#104685)

2026-07-11 15:26:48 -07:00

base-url.ts

fix(openai): align auth availability with effective routes (#104685)

2026-07-11 15:26:48 -07:00

default-models.test.ts

feat(openai): default new setups to GPT-5.6 (#103581)

2026-07-10 10:22:58 +01:00

default-models.ts

feat(openai): default new setups to GPT-5.6 (#103581)

2026-07-10 10:22:58 +01:00

embedding-batch.test.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

embedding-batch.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

embedding-provider.test.ts

fix(openai-embedding): preserve openai/ prefix for non-native base URLs (#92135)

2026-06-18 14:03:41 -04:00

embedding-provider.ts

fix(openai-embedding): preserve openai/ prefix for non-native base URLs (#92135)

2026-06-18 14:03:41 -04:00

image-generation-provider.test.ts

chore: enforce max-lines suppression ratchet (#107315)

2026-07-14 09:27:02 -07:00

image-generation-provider.ts

chore: enforce max-lines suppression ratchet (#107315)

2026-07-14 09:27:02 -07:00

index.test.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

index.ts

…

media-understanding-provider.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

media-understanding-provider.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

memory-embedding-adapter.test.ts

…

memory-embedding-adapter.ts

fix #88009: [Feature]: batched memory embedding should batch over files (#89138)

2026-06-09 06:38:30 -04:00

model-route-contract.test.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

model-route-contract.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

native-web-search.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-auth-identity.test.ts

…

openai-chatgpt-auth-identity.ts

feat(tooling): enforce noUncheckedIndexedAccess in the extensions lane (NUIA phase 4) (#105132)

2026-07-12 09:17:31 +01:00

openai-chatgpt-catalog.ts

…

openai-chatgpt-device-code.test.ts

fix(openai): prevent device-code login hangs on stalled requests (#109494)

2026-07-16 22:26:56 -07:00

openai-chatgpt-device-code.ts

fix(openai): prevent device-code login hangs on stalled requests (#109494)

2026-07-16 22:26:56 -07:00

openai-chatgpt-oauth-abort.runtime.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-oauth-authorization.runtime.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-oauth-flow.runtime.test.ts

fix(openai): allow fake-IP OAuth token exchange (#110096)

2026-07-17 23:14:15 +01:00

openai-chatgpt-oauth-flow.runtime.ts

fix(openai): close OAuth callback prompts cleanly (#89491)

2026-07-16 23:58:41 -07:00

openai-chatgpt-oauth-page.runtime.ts

…

openai-chatgpt-oauth-preflight.runtime.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-oauth-token.runtime.ts

fix(openai): allow fake-IP OAuth token exchange (#110096)

2026-07-17 23:14:15 +01:00

openai-chatgpt-oauth-types.runtime.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-oauth.runtime.test.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-oauth.runtime.ts

fix(openai): close OAuth callback prompts cleanly (#89491)

2026-07-16 23:58:41 -07:00

openai-chatgpt-pkce.runtime.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-provider-runtime.factory.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-provider.runtime.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

openai-chatgpt-provider.test.ts

test(openai): align prerelease contracts (#105256)

2026-07-12 10:49:48 +01:00

openai-chatgpt-provider.ts

refactor(codex)!: fold the codex text provider into openai with a doctor migration

2026-07-16 03:06:43 +01:00

openai-chatgpt-shared.ts

…

openai-provider-missing-auth.test.ts

feat(openai): default new setups to GPT-5.6 (#103581)

2026-07-10 10:22:58 +01:00

openai-provider.live.test.ts

…

openai-provider.test.ts

fix(openai): harden codex catalog, routing opt-out, and WHAM half-open reprobe (#108683)

2026-07-16 01:48:54 -07:00

openai-provider.ts

fix(release): align Codex discovery and Telegram traces

2026-07-16 21:54:11 +01:00

openai-tts.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

openai.live.test.ts

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

openclaw.plugin.json

feat(onboarding): add provider sign-in (#104502)

2026-07-11 13:00:17 -07:00

openclaw.plugin.test.ts

chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)

2026-07-11 06:30:57 -07:00

package.json

chore(release): set version to 2026.7.2

2026-07-11 04:00:49 +01:00

prompt-overlay.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

provider-auth.contract.test.ts

test(openai): align auth contract with provider default (#103760)

2026-07-10 16:28:07 +01:00

provider-catalog.contract.test.ts

…

provider-contract-api.ts

…

provider-policy-api.test.ts

fix(openai): default Sol reasoning to medium

2026-07-16 07:00:37 +01:00

provider-policy-api.ts

refactor(codex)!: fold the codex text provider into openai with a doctor migration

2026-07-16 03:06:43 +01:00

provider-runtime.contract.test.ts

…

realtime-provider-shared.test.ts

fix(openai): add timeout to realtime client-secret requests (#102860)

2026-07-11 00:54:06 -07:00

realtime-provider-shared.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

realtime-quicksilver.test.ts

feat(openai): recognize GPT-Live realtime models and fail closed with guidance (#104695)

2026-07-11 13:53:45 -07:00

realtime-quicksilver.ts

feat(openai): recognize GPT-Live realtime models and fail closed with guidance (#104695)

2026-07-11 13:53:45 -07:00

realtime-transcription-provider.test.ts

fix(openai): treat blank env API key as unconfigured in speech provider (#108212)

2026-07-15 09:43:42 -07:00

realtime-transcription-provider.ts

fix(openai): treat blank env API key as unconfigured in speech provider (#108212)

2026-07-15 09:43:42 -07:00

realtime-voice-provider.test.ts

feat(android): add Wear real-time Talk controls (#109483)

2026-07-17 13:46:05 +01:00

realtime-voice-provider.ts

feat(android): add Wear real-time Talk controls (#109483)

2026-07-17 13:46:05 +01:00

replay-policy.ts

…

setup-api.test.ts

…

setup-api.ts

…

shared.ts

chore(plugins): gate deprecation hygiene in CI and purge internal deprecated usage (#108261)

2026-07-15 04:15:23 -07:00

speech-provider.test.ts

fix(openai): treat blank env API key as unconfigured in speech provider (#108212)

2026-07-15 09:43:42 -07:00

speech-provider.ts

fix(openai): treat blank env API key as unconfigured in speech provider (#108212)

2026-07-15 09:43:42 -07:00

test-api.ts

…

thinking-policy.test.ts

refactor(codex)!: fold the codex text provider into openai with a doctor migration

2026-07-16 03:06:43 +01:00

thinking-policy.ts

fix(openai): default Sol reasoning to medium

2026-07-16 07:00:37 +01:00

transport-policy.test.ts

…

transport-policy.ts

…

tsconfig.json

…

tts.test.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

tts.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

usage.test.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

usage.ts

fix: provider dead exports no longer block changed checks (#108592)

2026-07-15 22:33:54 -07:00

video-generation-provider.test.ts

fix(openai): bound video create-submit response reads

2026-06-28 21:10:55 -07:00

video-generation-provider.ts

fix: bound pasted input and provider response bodies (#110627)

2026-07-18 13:54:56 +01:00