David Rudduck e0aaf2d399 fix(security): block prototype-polluting keys in deepMerge (#20853) ...

Reject __proto__, prototype, and constructor keys during deep-merge
to prevent prototype pollution when merging untrusted config objects.

2026-02-19 03:47:48 -08:00

..

sessions

refactor(sessions): share session thread/topic parsing

2026-02-18 18:25:25 +00:00

agent-dirs.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-dirs.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

agent-limits.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

backup-rotation.ts

perf(test): speed up config tests

2026-02-14 14:25:54 +00:00

cache-utils.ts

fix: persist topic session files

2026-01-07 22:56:50 +00:00

channel-capabilities.test.ts

test: dedupe shared setup in channel and doctor config tests

2026-02-18 04:04:14 +00:00

channel-capabilities.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

commands.test.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

commands.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

config-misc.test.ts

fix(gateway): harden channel health monitor recovery

2026-02-17 03:26:26 +01:00

config-paths.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

config.agent-concurrency-defaults.test.ts

test: remove low-value concurrency passthrough unit case

2026-02-16 09:28:20 +00:00

config.backup-rotation.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

config.compaction-settings.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

config.discord-presence.test.ts

Discord: refine presence config defaults (#10855) (thanks @h0tp-ftw)

2026-02-13 13:34:19 -06:00

config.discord.test.ts

Config: require Discord ID strings (#18220)

2026-02-16 12:22:58 -06:00

config.dm-policy-alias.test.ts

refactor(config): add dmPolicy aliases for Slack/Discord

2026-02-14 21:04:27 +01:00

config.env-vars.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

config.hooks-module-paths.test.ts

fix(security): harden hooks module loading

2026-02-14 15:03:27 +01:00

config.identity-avatar.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

config.identity-defaults.test.ts

test: remove redundant identity emoji response-prefix case

2026-02-16 09:29:41 +00:00

config.irc.test.ts

chore: Fix types in tests 16/N.

2026-02-17 12:00:29 +09:00

config.legacy-config-detection.accepts-imessage-dmpolicy.e2e.test.ts

chore: Fix types in tests 39/N.

2026-02-17 15:50:07 +09:00

config.legacy-config-detection.rejects-routing-allowfrom.e2e.test.ts

chore: Fix types in tests 29/N.

2026-02-17 14:32:43 +09:00

config.msteams.test.ts

perf(test): reduce test startup overhead

2026-02-13 14:48:45 +00:00

config.multi-agent-agentdir-validation.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

config.nix-integration-u3-u5-u9.e2e.test.ts

fix(test): avoid inheriting process.env in nix config e2e

2026-02-15 23:14:42 +00:00

config.plugin-validation.test.ts

perf(test): cut setup/import overhead in hot suites

2026-02-13 21:23:50 +00:00

config.pruning-defaults.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

config.sandbox-docker.test.ts

fix(security): harden sandbox docker config validation

2026-02-16 03:04:06 +01:00

config.schema-regressions.test.ts

fix(security): harden imessage remote scp/ssh handling

2026-02-19 11:08:23 +01:00

config.skills-entries-config.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

config.talk-api-key-fallback.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

config.telegram-custom-commands.test.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

config.tools-alsoAllow.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

config.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

defaults.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

env-preserve-io.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-preserve.test.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

env-preserve.ts

fix: preserve ${VAR} env var references when writing config back to disk (#11560)

2026-02-14 01:53:17 +01:00

env-substitution.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

env-substitution.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

env-vars.ts

perf(test): speed up config tests

2026-02-14 14:25:54 +00:00

group-policy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

home-env.test-harness.ts

refactor(test): reuse env helper in temp home harness

2026-02-15 23:42:20 +00:00

includes-scan.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

includes.test.ts

fix(security): block prototype-polluting keys in deepMerge (#20853)

2026-02-19 03:47:48 -08:00

includes.ts

fix(security): block prototype-polluting keys in deepMerge (#20853)

2026-02-19 03:47:48 -08:00

io.compat.test.ts

fix(paths): respect OPENCLAW_HOME for all internal path resolution (#12091)

2026-02-08 16:20:13 -05:00

io.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

io.write-config.test.ts

test(config): dedupe io write config test setup

2026-02-18 12:20:56 +00:00

legacy-migrate.test.ts

refactor(config): reuse default group entry migration helper

2026-02-19 00:33:21 +00:00

legacy-migrate.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

legacy.migrations.part-1.ts

refactor(config): reuse default group entry migration helper

2026-02-19 00:33:21 +00:00

legacy.migrations.part-2.ts

refactor(config): reuse legacy audio transcription migration path

2026-02-19 00:29:00 +00:00

legacy.migrations.part-3.ts

Config: clarify memorySearch migration precedence

2026-02-10 00:21:27 -08:00

legacy.migrations.ts

refactor(config): split legacy handling

2026-01-14 05:39:51 +00:00

legacy.rules.ts

Config: migrate legacy top-level memorySearch

2026-02-10 00:21:27 -08:00

legacy.shared.ts

fix(macos): ensure exec approval prompt displays the command (#5042)

2026-02-13 15:49:06 +01:00

legacy.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

logging.ts

refactor: rename clawdbot to moltbot with legacy compat

2026-01-27 12:21:02 +00:00

markdown-tables.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

merge-config.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

merge-patch.test.ts

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

merge-patch.ts

fix(config): harden object-array merge-by-id fallback

2026-02-16 08:24:55 -05:00

model-alias-defaults.test.ts

test(config): dedupe model provider fixture setup

2026-02-19 08:25:12 +00:00

normalize-paths.test.ts

perf(test): trim module resets in config suites

2026-02-13 15:11:38 +00:00

normalize-paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

paths.test.ts

test(config): dedupe OPENCLAW_HOME path assertions

2026-02-19 08:25:12 +00:00

paths.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugin-auto-enable.test.ts

fix(config): auto-enable configured plugins

2026-02-14 01:56:12 +00:00

plugin-auto-enable.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugins-allowlist.ts

refactor: centralize plugin allowlist mutation

2026-02-17 00:45:02 +00:00

port-defaults.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

redact-snapshot.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

redact-snapshot.ts

refactor(config): dedupe redacted snapshot array/object restore paths

2026-02-19 07:01:54 +00:00

runtime-overrides.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

runtime-overrides.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

schema.help.ts

Security: add explicit opt-in for deprecated plugin runtime exec (#20874)

2026-02-19 11:30:36 +00:00

schema.hints.test.ts

fix: make sensitive field whitelist case-insensitive (#16148)

2026-02-15 10:31:48 -05:00

schema.hints.ts

fix: make sensitive field whitelist case-insensitive (#16148)

2026-02-15 10:31:48 -05:00

schema.irc.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

schema.labels.ts

Security: add explicit opt-in for deprecated plugin runtime exec (#20874)

2026-02-19 11:30:36 +00:00

schema.test.ts

fix(config): accept $schema key in root config (#15280)

2026-02-14 03:07:12 +01:00

schema.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

sessions.cache.test.ts

perf(test): speed up suites and reduce fs churn

2026-02-15 19:29:27 +00:00

sessions.test.ts

fix(test): use path.resolve for cross-platform Windows compatibility

2026-02-17 00:00:54 +01:00

sessions.ts

fix: defer gateway restart until all replies are sent (#12970)

2026-02-14 00:29:29 +01:00

slack-http-config.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

slack-token-validation.test.ts

test: tighten relay smoke + slack token validation

2026-02-16 02:45:00 +00:00

talk.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

telegram-custom-commands.ts

fix: sanitize native command names for Telegram API (#19257)

2026-02-17 23:20:36 +05:30

telegram-webhook-secret.test.ts

fix(ci): repair lint/build checks

2026-02-01 10:20:27 +00:00

test-helpers.ts

perf(test): stabilize e2e harness and reduce flaky gateway coverage

2026-02-13 17:32:14 +00:00

types.agent-defaults.ts

fix(telegram): cron and heartbeat messages land in wrong chat instead of target topic (#19367)

2026-02-18 15:31:01 +05:30

types.agents.ts

fix: add discord role allowlists (#10650) (thanks @Minidoracat)

2026-02-12 19:52:24 -06:00

types.approvals.ts

feat(discord): add exec approval forwarding to DMs (#1621)

2026-01-24 20:56:40 +00:00

types.auth.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

types.base.ts

fix(memory): prevent QMD scope deny bypass

2026-02-15 02:41:45 +00:00

types.browser.ts

feat(browser): add extraArgs config for custom Chrome launch arguments

2026-02-16 23:52:42 +01:00

types.channels.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.cron.ts

cron: separate webhook POST delivery from announce (#17901)

2026-02-16 02:36:00 -08:00

types.discord.ts

Config: require Discord ID strings (#18220)

2026-02-16 12:22:58 -06:00

types.gateway.ts

Security: default gateway auth bootstrap and explicit mode none (#20686)

2026-02-19 02:35:50 -05:00

types.googlechat.ts

feat: per-channel responsePrefix override (#9001)

2026-02-04 16:16:34 -05:00

types.hooks.ts

fix(security): harden hooks module loading

2026-02-14 15:03:27 +01:00

types.imessage.ts

fix(security): harden imessage remote scp/ssh handling

2026-02-19 11:08:23 +01:00

types.irc.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.memory.ts

Memory/QMD: add configurable search mode

2026-02-11 17:51:08 -08:00

types.messages.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

types.models.ts

feat(config): expose full pi-ai model compat fields in config schema (openclaw#11063) thanks @ikari-pl

2026-02-13 18:47:18 -06:00

types.msteams.ts

feat: per-channel responsePrefix override (#9001)

2026-02-04 16:16:34 -05:00

types.node-host.ts

feat: add node browser proxy routing

2026-01-24 04:21:47 +00:00

types.openclaw.ts

fix(config): add resolved field to ConfigFileSnapshot for pre-defaults config

2026-02-13 04:41:04 +01:00

types.plugins.ts

Security: add explicit opt-in for deprecated plugin runtime exec (#20874)

2026-02-19 11:30:36 +00:00

types.queue.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.sandbox.ts

feat(sandbox): separate bind mounts for browser containers (#16230)

2026-02-14 15:27:41 +01:00

types.signal.ts

feat: per-channel responsePrefix override (#9001)

2026-02-04 16:16:34 -05:00

types.skills.ts

fix(skills): guard against skills prompt bloat

2026-02-17 00:01:34 +01:00

types.slack.ts

Merge remote-tracking branch 'prhead/feat/slack-text-streaming'

2026-02-18 00:49:30 +01:00

types.telegram.ts

feat(telegram): add forum topic creation support (#17035)

2026-02-18 01:38:44 +01:00

types.tools.ts

refactor(config): share media provider request fields

2026-02-18 23:34:15 +00:00

types.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

types.tts.ts

TTS: gate auto audio on inbound voice notes (#1667)

2026-01-25 04:35:20 +00:00

types.whatsapp.ts

refactor(config): dedupe WhatsApp group + ack types

2026-02-15 07:01:18 +00:00

validation.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

version.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

zod-schema.agent-defaults.ts

fix(agents): make image sanitization dimension configurable

2026-02-18 00:54:20 +01:00

zod-schema.agent-model.ts

refactor(config): share agent model schema

2026-02-15 16:53:38 +00:00

zod-schema.agent-runtime.ts

revert(tools): undo accidental merge of PR #18584

2026-02-16 21:13:48 -05:00

zod-schema.agents.ts

fix: add missing role-based type definitions for RBAC routing

2026-02-12 19:52:24 -06:00

zod-schema.allowdeny.ts

fix(memory): prevent QMD scope deny bypass

2026-02-15 02:41:45 +00:00

zod-schema.approvals.ts

feat(discord): add exec approval forwarding to DMs (#1621)

2026-01-24 20:56:40 +00:00

zod-schema.channels.ts

feat(heartbeat): add configurable visibility for heartbeat responses

2026-01-24 09:07:03 +00:00

zod-schema.core.ts

refactor(core): dedupe browser route signatures and cli watchdog schema

2026-02-18 14:15:20 +00:00

zod-schema.hooks.ts

refactor(config): share install record schema shape

2026-02-18 18:25:25 +00:00

zod-schema.installs.ts

refactor(config): share install record schema shape

2026-02-18 18:25:25 +00:00

zod-schema.providers-core.ts

fix(security): harden imessage remote scp/ssh handling

2026-02-19 11:08:23 +01:00

zod-schema.providers-whatsapp.ts

refactor(config): share whatsapp zod schemas

2026-02-14 21:57:31 +00:00

zod-schema.providers.ts

feat: IRC — add first-class channel support

2026-02-10 17:33:57 -06:00

zod-schema.sensitive.ts

fix: Finish credential redaction that was merged unfinished (#13073)

2026-02-13 16:19:21 +01:00

zod-schema.session.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

zod-schema.ts

Security: add explicit opt-in for deprecated plugin runtime exec (#20874)

2026-02-19 11:30:36 +00:00