Vincent Koc 5e78c8bc95 Webhooks: tighten pre-auth body handling (#46802) ...

* Webhooks: tighten pre-auth body handling

* Webhooks: clean up request body guards

2026-03-15 09:45:18 -07:00

..

account-id.ts

fix(channels): add optional defaultAccount routing

2026-03-02 04:03:46 +00:00

account-resolution.ts

refactor(plugin-sdk): share auth, routing, and stream/account helpers

2026-03-02 15:21:19 +00:00

acpx.ts

fix(acp): strip provider auth env for child ACP processes (openclaw#42250)

2026-03-10 16:50:10 -05:00

agent-media-payload.ts

refactor(plugin-sdk): add shared helper utilities

2026-02-15 19:37:40 +00:00

allow-from.test.ts

refactor: share allowFrom formatter scaffolding

2026-03-07 23:27:51 +00:00

allow-from.ts

refactor: share allowFrom formatter scaffolding

2026-03-07 23:27:51 +00:00

allowlist-resolution.test.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

allowlist-resolution.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

bluebubbles.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

boolean-param.ts

refactor(plugin-sdk): share boolean action param parsing

2026-03-02 14:36:41 +00:00

channel-config-helpers.test.ts

Plugin SDK: align allowFrom helper test input

2026-03-07 16:08:39 -08:00

channel-config-helpers.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

channel-lifecycle.test.ts

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

channel-lifecycle.ts

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

channel-plugin-common.ts

refactor(plugin-sdk): extract shared channel prelude exports

2026-03-07 17:05:23 +00:00

channel-send-result.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

command-auth.test.ts

fix: enforce explicit group auth boundaries across channels

2026-02-26 18:49:16 +01:00

command-auth.ts

refactor(plugin-sdk): share auth, routing, and stream/account helpers

2026-03-02 15:21:19 +00:00

compat.ts

Plugins: add root-alias shim and cache/docs updates

2026-03-04 01:20:48 -05:00

config-paths.ts

refactor(zalo): share outbound chunker

2026-02-15 01:15:43 +00:00

copilot-proxy.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

core.ts

refactor: share self hosted provider plugin helpers

2026-03-14 01:40:41 +00:00

device-pair.ts

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

diagnostics-otel.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

diffs.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

discord-send.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

discord.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

feishu.ts

feat(feishu): structured cards with identity header, note footer, and streaming enhancements (openclaw#29938)

2026-03-14 20:31:46 -05:00

fetch-auth.test.ts

refactor: unify typing dispatch lifecycle and policy boundaries

2026-02-26 17:36:16 +01:00

fetch-auth.ts

refactor: unify channel/plugin ssrf fetch policy and auth fallback

2026-02-26 16:44:13 +01:00

file-lock.ts

refactor: dedupe process-scoped lock maps

2026-02-17 00:45:02 +00:00

google-gemini-cli-auth.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

googlechat.ts

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

group-access.test.ts

refactor: share missing-sender matched allowlist evaluation

2026-03-08 00:05:24 +00:00

group-access.ts

refactor: share missing-sender matched allowlist evaluation

2026-03-08 00:05:24 +00:00

imessage.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

inbound-envelope.ts

refactor: dedupe channel and gateway surfaces

2026-03-02 19:57:33 +00:00

inbound-reply-dispatch.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

index.test.ts

test: cover plugin-sdk subpath imports

2026-03-13 22:09:06 +00:00

index.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

irc.ts

refactor: share delimited channel entry parsing

2026-03-14 01:41:16 +00:00

json-store.ts

fix: harden sandbox writes and centralize atomic file writes

2026-03-02 16:45:12 +00:00

keyed-async-queue.test.ts

test: fix tsgo baseline test compatibility

2026-03-03 01:24:20 +00:00

keyed-async-queue.ts

refactor: unify queueing and normalize telegram slack flows

2026-03-02 20:55:15 +00:00

line.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

llm-task.ts

feat(llm-task): add thinking override

2026-03-12 19:21:35 +11:00

lobster.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

matrix.ts

refactor: share allowlist wildcard matching

2026-03-14 01:41:17 +00:00

mattermost.ts

Webhooks: tighten pre-auth body handling (#46802)

2026-03-15 09:45:18 -07:00

memory-core.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

memory-lancedb.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

minimax-portal-auth.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

msteams.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

nextcloud-talk.ts

refactor: share onboarding secret prompt flows

2026-03-10 22:18:03 +00:00

nostr.ts

refactor: share dock config adapter helper scaffolding

2026-03-07 23:27:51 +00:00

oauth-utils.ts

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

onboarding.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

open-prose.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

outbound-media.test.ts

refactor: move WhatsApp channel implementation to extensions/ (#45725)

2026-03-14 02:44:55 -07:00

outbound-media.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

pairing-access.ts

refactor(extensions): use scoped pairing helper

2026-02-26 21:57:52 +01:00

persistent-dedupe.test.ts

fix(feishu): persist dedup cache across gateway restarts via warmup (openclaw#31605) thanks @Sid-Qin

2026-03-02 17:30:40 -06:00

persistent-dedupe.ts

fix(feishu): persist dedup cache across gateway restarts via warmup (openclaw#31605) thanks @Sid-Qin

2026-03-02 17:30:40 -06:00

phone-control.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

provider-auth-result.ts

refactor(plugin-sdk): add shared helper utilities

2026-02-15 19:37:40 +00:00

qwen-portal-auth.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

reply-payload.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

reply-payload.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

request-url.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

request-url.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

resolution-notes.ts

refactor(extensions): dedupe channel config, onboarding, and monitors

2026-03-02 08:54:20 +00:00

root-alias.cjs

fix(plugin-sdk): lazily load legacy root alias

2026-03-08 17:13:46 -04:00

root-alias.test.ts

fix(plugin-sdk): lazily load legacy root alias

2026-03-08 17:13:46 -04:00

run-command.ts

refactor: de-duplicate channel runtime and payload helpers

2026-02-23 21:25:28 +00:00

runtime-store.ts

refactor: dedupe plugin runtime stores

2026-03-08 23:38:24 +00:00

runtime.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

runtime.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

secret-input-schema.test.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

secret-input-schema.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

signal.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

slack-message-actions.test.ts

refactor(core): dedupe infra, media, pairing, and plugin helpers

2026-03-02 21:32:11 +00:00

slack-message-actions.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

slack.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

ssrf-policy.test.ts

refactor: unify channel/plugin ssrf fetch policy and auth fallback

2026-02-26 16:44:13 +01:00

ssrf-policy.ts

refactor: unify channel/plugin ssrf fetch policy and auth fallback

2026-02-26 16:44:13 +01:00

status-helpers.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

status-helpers.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

subpaths.test.ts

refactor: drop deprecated whatsapp mention pattern sdk helper

2026-03-15 08:50:31 -07:00

synology-chat.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

talk-voice.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

telegram.ts

refactor: remove channel shim directories, point all imports to extensions (#45967)

2026-03-14 03:43:07 -07:00

temp-path.test.ts

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

temp-path.ts

refactor(tmp): harden temp boundary guardrails

2026-02-24 23:51:10 +00:00

test-utils.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

text-chunking.test.ts

refactor(shared): reuse outbound text chunking core

2026-02-19 07:01:54 +00:00

text-chunking.ts

refactor(shared): reuse outbound text chunking core

2026-02-19 07:01:54 +00:00

thread-ownership.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

tlon.ts

refactor: share scoped account config patching

2026-03-10 22:18:03 +00:00

tool-send.ts

fix(routing): unify session delivery invariants for duplicate suppression (#33786)

2026-03-03 21:40:38 -06:00

twitch.ts

fix(plugin-sdk): remove remaining bundled plugin src imports (openclaw#39638)

2026-03-08 22:32:45 -05:00

voice-call.ts

fix(voice-call): add speed and instructions to OpenAI TTS config schema (#39226)

2026-03-11 23:15:48 +05:30

webhook-memory-guards.test.ts

refactor(security): unify webhook guardrails across channels

2026-03-02 00:31:42 +00:00

webhook-memory-guards.ts

refactor(security): unify webhook guardrails across channels

2026-03-02 00:31:42 +00:00

webhook-path.ts

refactor(plugin-sdk): add shared helper utilities

2026-02-15 19:37:40 +00:00

webhook-request-guards.test.ts

fix: harden webhook auth-before-body handling

2026-03-02 17:21:09 +00:00

webhook-request-guards.ts

refactor: split webhook ingress and policy guards

2026-03-02 18:02:21 +00:00

webhook-targets.test.ts

refactor: unify extension webhook request lifecycle scaffolding

2026-03-07 23:27:51 +00:00

webhook-targets.ts

refactor: unify extension webhook request lifecycle scaffolding

2026-03-07 23:27:51 +00:00

whatsapp.ts

refactor: drop deprecated whatsapp mention pattern sdk helper

2026-03-15 08:50:31 -07:00

windows-spawn.ts

fix(acpx): default strict windows wrapper policy on windows

2026-03-02 01:31:32 +00:00

zalo.ts

fix(zalo): use plugin-sdk export for webhook client IP resolution (openclaw#46549)

2026-03-14 18:37:56 -05:00

zalouser.ts

fix(zalouser): stop inheriting dm allowlist for groups (#46663)

2026-03-14 19:10:11 -05:00