Nikolay Petrov a9f1188785 sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761) ...

Add inline file attachment support for sessions_spawn (subagent runtime only):

- Schema: attachments[] (name, content, encoding, mimeType) and attachAs.mountPath hint
- Materialization: files written to .openclaw/attachments/<uuid>/ with manifest.json
- Validation: strict base64 decode, filename checks, size limits, duplicate detection
- Transcript redaction: sanitizeToolCallInputs redacts attachment content from persisted transcripts
- Lifecycle cleanup: safeRemoveAttachmentsDir with symlink-safe path containment check
- Config: tools.sessions_spawn.attachments (enabled, maxFiles, maxFileBytes, maxTotalBytes, retainOnSessionKeep)
- Registry: attachmentsDir/attachmentsRootDir/retainAttachmentsOnKeep on SubagentRunRecord
- ACP rejection: attachments rejected for runtime=acp with clear error message
- Docs: updated tools/index.md, concepts/session-tool.md, configuration-reference.md
- Tests: 85 new/updated tests across 5 test files

Fixes:
- Guard fs.rm in materialization catch block with try/catch (review concern #1)
- Remove unreachable fallback in safeRemoveAttachmentsDir (review concern #7)
- Move attachment cleanup out of retry path to avoid timing issues with announce loop

Co-authored-by: Tyler Yust <TYTYYUST@YAHOO.COM>
Co-authored-by: napetrov <napetrov@users.noreply.github.com>

2026-03-01 21:33:51 -08:00

..

agent-step.test.ts

test(core): reduce mock reset overhead across unit and e2e specs

2026-02-22 08:22:58 +00:00

agent-step.ts

…

agents-list-tool.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

browser-tool.schema.ts

fix(browser): accept url alias for open and navigate (#29260)

2026-02-27 17:25:59 -08:00

browser-tool.test.ts

fix(browser): accept url alias for open and navigate (#29260)

2026-02-27 17:25:59 -08:00

browser-tool.ts

fix(browser): accept url alias for open and navigate (#29260)

2026-02-27 17:25:59 -08:00

canvas-tool.ts

Discord VC: voice channels, transcription, and TTS (#18774)

2026-02-20 16:06:07 -06:00

common.params.test.ts

fix(telegram): make reaction handling soft-fail and message-id resilient (#20236)

2026-02-23 10:25:14 -05:00

common.test.ts

feat(discord): support forum tag edits via channel-edit (#12070) (thanks @xiaoyaner0201)

2026-02-20 21:17:04 -06:00

common.ts

fix(telegram): make reaction handling soft-fail and message-id resilient (#20236)

2026-02-23 10:25:14 -05:00

cron-tool.flat-params.test.ts

test(core): reduce mock reset overhead across unit and e2e specs

2026-02-22 08:22:58 +00:00

cron-tool.test.ts

fix(cron): recover flat patch params for update action and fix schema (openclaw#23221) thanks @charojo

2026-03-01 19:50:51 -06:00

cron-tool.ts

fix(cron): recover flat patch params for update action and fix schema (openclaw#23221) thanks @charojo

2026-03-01 19:50:51 -06:00

discord-actions-guild.ts

feat(discord): support forum tag edits via channel-edit (#12070) (thanks @xiaoyaner0201)

2026-02-20 21:17:04 -06:00

discord-actions-messaging.ts

fix(discord): support applied_tags parameter for forum thread creation

2026-03-02 02:05:11 +00:00

discord-actions-moderation-shared.ts

refactor(security): centralize trusted sender checks for discord moderation

2026-02-19 15:39:56 +01:00

discord-actions-moderation.authz.test.ts

refactor(security): centralize trusted sender checks for discord moderation

2026-02-19 15:39:56 +01:00

discord-actions-moderation.ts

refactor(security): centralize trusted sender checks for discord moderation

2026-02-19 15:39:56 +01:00

discord-actions-presence.test.ts

test: move embedded and tool agent suites out of e2e

2026-02-22 11:17:47 +00:00

discord-actions-presence.ts

…

discord-actions.test.ts

fix(media): enforce agent media roots in plugin send actions

2026-02-22 22:24:27 +01:00

discord-actions.ts

fix(media): enforce agent media roots in plugin send actions

2026-02-22 22:24:27 +01:00

gateway-tool.ts

refactor(agents): migrate console.warn/error/info to subsystem logger (#22906)

2026-02-21 17:11:47 -05:00

gateway.test.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

gateway.ts

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

image-tool.helpers.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

image-tool.test.ts

refactor(agents): centralize sandbox media and fs policy helpers

2026-02-24 02:32:01 +00:00

image-tool.ts

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

memory-tool.citations.test.ts

refactor(test): dedupe agent and discord test fixtures

2026-02-22 20:04:51 +00:00

memory-tool.test.ts

test(memory): share memory-tool manager mock fixture

2026-02-22 07:44:57 +00:00

memory-tool.ts

Memory: surface explicit memory_search unavailable status

2026-02-20 20:30:52 -08:00

message-tool.test.ts

fix(agents): land #20840 cross-channel message-tool actions from @altaywtf

2026-03-01 23:37:55 +00:00

message-tool.ts

fix(discord): support applied_tags parameter for forum thread creation

2026-03-02 02:05:11 +00:00

nodes-tool.test.ts

fix(telegram): scope DM topic thread keys by chat id (#31064)

2026-03-02 02:54:45 +00:00

nodes-tool.ts

fix(nodes): cap screen_record duration to 5 minutes (land #31106 by @BlueBirdBack)

2026-03-02 01:53:20 +00:00

nodes-utils.test.ts

test: fix TS2783 in nodes-utils helper

2026-02-26 21:26:54 +00:00

nodes-utils.ts

refactor(nodes): share default selection and tighten node.list fallback

2026-02-26 22:18:57 +01:00

session-status-tool.ts

fix(tools): improve session_status cache-aware usage reporting

2026-02-23 19:19:45 +00:00

sessions-access.test.ts

chore: Fix types in tests 31/N.

2026-02-17 14:33:26 +09:00

sessions-access.ts

refactor(sessions): split access and resolution helpers

2026-02-16 03:56:49 +01:00

sessions-announce-target.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions-helpers.ts

refactor(agents): dedupe workspace and session tool flows

2026-02-22 21:19:09 +00:00

sessions-history-tool.ts

refactor(core): share JSON utf8 byte counting helper

2026-03-02 05:20:19 +00:00

sessions-list-tool.ts

fix(sessions): set transcriptPath to agent sessions directory (openclaw#24775) thanks @martinfrancois

2026-03-01 09:41:06 -06:00

sessions-resolution.test.ts

refactor(agents): dedupe workspace and session tool flows

2026-02-22 21:19:09 +00:00

sessions-resolution.ts

refactor(agents): dedupe workspace and session tool flows

2026-02-22 21:19:09 +00:00

sessions-send-helpers.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions-send-tool.a2a.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions-send-tool.ts

refactor(agents): dedupe workspace and session tool flows

2026-02-22 21:19:09 +00:00

sessions-spawn-tool.test.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

sessions-spawn-tool.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

sessions.test.ts

fix(sessions): set transcriptPath to agent sessions directory (openclaw#24775) thanks @martinfrancois

2026-03-01 09:41:06 -06:00

slack-actions.test.ts

fix(slack): scope download-file to channel and thread context

2026-03-02 02:23:22 +00:00

slack-actions.ts

fix(slack): scope download-file to channel and thread context

2026-03-02 02:23:22 +00:00

subagents-tool.ts

feat: thread-bound subagents on Discord (#21805)

2026-02-21 16:14:55 +01:00

telegram-actions.test.ts

fix(telegram): make reaction handling soft-fail and message-id resilient (#20236)

2026-02-23 10:25:14 -05:00

telegram-actions.ts

fix(telegram): make reaction handling soft-fail and message-id resilient (#20236)

2026-02-23 10:25:14 -05:00

tts-tool.test.ts

refactor(agents): use silent token constant in prompts

2026-02-16 08:20:24 -05:00

tts-tool.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

web-fetch-utils.ts

security(web_fetch): strip hidden content to prevent indirect prompt injection (#21074)

2026-02-22 18:10:26 -05:00

web-fetch-visibility.test.ts

security(web_fetch): strip hidden content to prevent indirect prompt injection (#21074)

2026-02-22 18:10:26 -05:00

web-fetch-visibility.ts

security(web_fetch): strip hidden content to prevent indirect prompt injection (#21074)

2026-02-22 18:10:26 -05:00

web-fetch.cf-markdown.test.ts

test: add fetch mock helper and reaction coverage

2026-02-17 09:02:39 -05:00

web-fetch.ssrf.test.ts

test: reclassify web fetch/readability suites as unit tests

2026-02-22 10:41:29 +00:00

web-fetch.test-harness.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

web-fetch.test-mocks.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

web-fetch.ts

refactor(web): unify proxy-guarded fetch path for web tools

2026-02-26 12:44:18 +01:00

web-guarded-fetch.test.ts

fix(web-tools): land #31176 allow RFC2544 trusted fetch range (@sunkinux)

2026-03-02 03:43:25 +00:00

web-guarded-fetch.ts

fix(web-tools): land #31176 allow RFC2544 trusted fetch range (@sunkinux)

2026-03-02 03:43:25 +00:00

web-search-citation-redirect.ts

refactor(web): split trusted and strict web tool fetch paths

2026-03-02 01:14:06 +00:00

web-search.redirect.test.ts

fix(security): block private-network web_search citation redirects

2026-03-02 01:05:20 +00:00

web-search.test.ts

fix(brave-search): clarify ui_lang and search_lang format requirements (#25130)

2026-02-25 04:59:38 +00:00

web-search.ts

refactor(web): split trusted and strict web tool fetch paths

2026-03-02 01:14:06 +00:00

web-shared.ts

revert(tools): undo accidental merge of PR #18584

2026-02-16 21:13:48 -05:00

web-tools.enabled-defaults.test.ts

refactor(web): unify proxy-guarded fetch path for web tools

2026-02-26 12:44:18 +01:00

web-tools.fetch.test.ts

fix: unify web tool proxy path (#27430) (thanks @kevinWangSheng)

2026-02-26 11:32:43 +00:00

web-tools.readability.test.ts

test: reclassify web fetch/readability suites as unit tests

2026-02-22 10:41:29 +00:00

web-tools.ts

…

whatsapp-actions.test.ts

test: move embedded and tool agent suites out of e2e

2026-02-22 11:17:47 +00:00

whatsapp-actions.ts

fix(security): centralize WhatsApp outbound auth and return 403 tool auth errors

2026-02-21 14:31:01 +01:00

whatsapp-target-auth.ts

fix(security): centralize WhatsApp outbound auth and return 403 tool auth errors

2026-02-21 14:31:01 +01:00