Bob ac11f0af73 Security: enforce ACP sandbox inheritance for sessions_spawn (#32254) ...

* Security: enforce ACP sandbox inheritance in sessions_spawn

* fix: add changelog attribution for ACP sandbox inheritance (#32254) (thanks @dutifulbob)

---------

Co-authored-by: Onur <2453968+osolmaz@users.noreply.github.com>

2026-03-02 23:50:38 +01:00

..

auth-profiles

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

cli-runner

refactor: unify queueing and normalize telegram slack flows

2026-03-02 20:55:15 +00:00

pi-embedded-helpers

fix(agents): cap openai-completions tool call ids to provider-safe format (#31947)

2026-03-02 18:08:20 +00:00

pi-embedded-runner

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-extensions

refactor(agents): dedupe model and tool test helpers

2026-03-02 21:31:36 +00:00

sandbox

fix(sandbox): prevent Windows PATH from poisoning docker exec (#13873)

2026-03-02 16:17:33 -06:00

schema

fix(tools): strip xAI-unsupported JSON Schema keywords from tool definitions

2026-03-02 20:37:07 +00:00

skills

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

test-helpers

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

tools

Security: enforce ACP sandbox inheritance for sessions_spawn (#32254)

2026-03-02 23:50:38 +01:00

acp-binding-architecture.guardrail.test.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

acp-spawn.test.ts

Security: enforce ACP sandbox inheritance for sessions_spawn (#32254)

2026-03-02 23:50:38 +01:00

acp-spawn.ts

Security: enforce ACP sandbox inheritance for sessions_spawn (#32254)

2026-03-02 23:50:38 +01:00

agent-paths.test.ts

…

agent-paths.ts

…

agent-scope.test.ts

refactor(agents): centralize model fallback resolution

2026-02-25 04:32:31 +00:00

agent-scope.ts

refactor(agents): centralize model fallback resolution

2026-02-25 04:32:31 +00:00

announce-idempotency.ts

…

anthropic-payload-log.ts

…

anthropic.setup-token.live.test.ts

…

api-key-rotation.ts

…

apply-patch-update.ts

…

apply-patch.test.ts

fix(test): use NTFS junctions and platform guards for symlink tests on Windows (openclaw#28747) thanks @arosstale

2026-03-02 10:45:19 -06:00

apply-patch.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00

auth-health.test.ts

…

auth-health.ts

…

auth-profiles.chutes.test.ts

…

auth-profiles.cooldown-auto-expiry.test.ts

…

auth-profiles.ensureauthprofilestore.test.ts

refactor(auth-profiles): unify coercion and add rejected-entry diagnostics

2026-02-26 14:42:11 +01:00

auth-profiles.getsoonestcooldownexpiry.test.ts

…

auth-profiles.markauthprofilefailure.test.ts

fix(auth): distinguish revoked API keys from transient auth errors (#25754)

2026-02-25 19:47:16 -05:00

auth-profiles.readonly-sync.test.ts

Secrets: keep read-only runtime sync in-memory

2026-02-26 14:47:22 +00:00

auth-profiles.resolve-auth-profile-order.does-not-prioritize-lastgood-round-robin-ordering.test.ts

Tests: preserve OpenRouter explicit auth order under cooldown fields

2026-02-24 19:12:08 -05:00

auth-profiles.resolve-auth-profile-order.fixtures.ts

…

auth-profiles.resolve-auth-profile-order.normalizes-z-ai-aliases-auth-order.test.ts

…

auth-profiles.resolve-auth-profile-order.orders-by-lastused-no-explicit-order-exists.test.ts

…

auth-profiles.resolve-auth-profile-order.uses-stored-profiles-no-config-exists.test.ts

…

auth-profiles.runtime-snapshot-save.test.ts

feat(security): add provider-based external secrets management

2026-02-26 14:47:22 +00:00

auth-profiles.store.save.test.ts

feat(security): add provider-based external secrets management

2026-02-26 14:47:22 +00:00

auth-profiles.ts

Secrets: make runtime activation auth loads read-only

2026-02-26 14:47:22 +00:00

bash-process-registry.test-helpers.ts

…

bash-process-registry.test.ts

…

bash-process-registry.ts

…

bash-tools.build-docker-exec-args.test.ts

fix(sandbox): prevent Windows PATH from poisoning docker exec (#13873)

2026-03-02 16:17:33 -06:00

bash-tools.exec-approval-request.test.ts

fix(security): harden channel auth path checks and exec approval routing

2026-02-26 12:46:05 +01:00

bash-tools.exec-approval-request.ts

refactor(plugin-sdk): share auth, routing, and stream/account helpers

2026-03-02 15:21:19 +00:00

bash-tools.exec-host-gateway.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

bash-tools.exec-host-node.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

bash-tools.exec-host-shared.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

bash-tools.exec-runtime.ts

fix(exec): resolve PATH key case-insensitively for Windows pathPrepend (#25399) (#31879)

2026-03-02 10:14:38 -06:00

bash-tools.exec-types.ts

fix(security): harden channel auth path checks and exec approval routing

2026-02-26 12:46:05 +01:00

bash-tools.exec.approval-id.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

bash-tools.exec.background-abort.test.ts

test: prune redundant abort case and speed stream cap test

2026-02-23 05:06:34 +00:00

bash-tools.exec.path.test.ts

Exec/ACP: inject OPENCLAW_SHELL into child shell env (#31271)

2026-03-01 20:31:06 -08:00

bash-tools.exec.pty-cleanup.test.ts

…

bash-tools.exec.pty-fallback-failure.test.ts

…

bash-tools.exec.pty-fallback.test.ts

…

bash-tools.exec.pty.test.ts

Exec/ACP: inject OPENCLAW_SHELL into child shell env (#31271)

2026-03-01 20:31:06 -08:00

bash-tools.exec.script-preflight.test.ts

…

bash-tools.exec.ts

fix(security): harden channel auth path checks and exec approval routing

2026-02-26 12:46:05 +01:00

bash-tools.process.poll-timeout.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

bash-tools.process.send-keys.test.ts

test(gate): stabilize env- and timing-sensitive process/web-search checks

2026-02-23 19:19:58 +00:00

bash-tools.process.supervisor.test.ts

…

bash-tools.process.ts

fix: clamp poll sleep duration to non-negative in bash-tools process (#24889)

2026-02-24 03:22:58 +00:00

bash-tools.shared.test.ts

fix(agents): map sandbox workdir from container path

2026-03-02 19:56:18 +00:00

bash-tools.shared.ts

fix(sandbox): prevent Windows PATH from poisoning docker exec (#13873)

2026-03-02 16:17:33 -06:00

bash-tools.test.ts

fix(exec): resolve PATH key case-insensitively for Windows pathPrepend (#25399) (#31879)

2026-03-02 10:14:38 -06:00

bash-tools.ts

…

bedrock-discovery.test.ts

…

bedrock-discovery.ts

…

bootstrap-cache.test.ts

fix(agents): cache bootstrap snapshots per session key

2026-02-23 19:19:45 +00:00

bootstrap-cache.ts

fix(agents): cache bootstrap snapshots per session key

2026-02-23 19:19:45 +00:00

bootstrap-files.test.ts

feat: lightweight bootstrap context mode for heartbeat/cron runs (openclaw#26064) thanks @jose-velez

2026-03-01 20:13:24 -06:00

bootstrap-files.ts

feat: lightweight bootstrap context mode for heartbeat/cron runs (openclaw#26064) thanks @jose-velez

2026-03-01 20:13:24 -06:00

bootstrap-hooks.test.ts

…

bootstrap-hooks.ts

…

byteplus-models.ts

…

byteplus.live.test.ts

…

cache-trace.test.ts

…

cache-trace.ts

…

channel-tools.test.ts

…

channel-tools.ts

…

chutes-oauth.flow.test.ts

…

chutes-oauth.test.ts

…

chutes-oauth.ts

…

claude-cli-runner.test.ts

…

claude-cli-runner.ts

…

cli-backends.test.ts

…

cli-backends.ts

…

cli-credentials.test.ts

…

cli-credentials.ts

…

cli-runner.test.ts

fix: handle CLI session expired errors gracefully instead of crashing gateway (#31090)

2026-03-02 01:11:05 +00:00

cli-runner.ts

fix: handle CLI session expired errors gracefully instead of crashing gateway (#31090)

2026-03-02 01:11:05 +00:00

cli-session.ts

…

cli-watchdog-defaults.ts

…

cloudflare-ai-gateway.ts

…

command-poll-backoff.test.ts

…

command-poll-backoff.ts

…

compaction.identifier-policy.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

compaction.identifier-preservation.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

compaction.retry.test.ts

…

compaction.test.ts

…

compaction.token-sanitize.test.ts

Compaction: sanitize token split accounting (#24058)

2026-02-22 20:13:21 -06:00

compaction.tool-result-details.test.ts

Compaction: ignore tool result details in oversized checks (#24057)

2026-02-22 20:13:59 -06:00

compaction.ts

Compaction: preserve opaque identifiers in summaries (openclaw#25553) thanks @rodrigouroz

2026-02-27 08:14:05 -06:00

content-blocks.test.ts

…

content-blocks.ts

…

context-window-guard.test.ts

…

context-window-guard.ts

…

context.test.ts

docs: clarify Anthropic context1m long-context requirements

2026-03-01 22:35:26 +00:00

context.ts

Providers: skip context1m beta for Anthropic OAuth tokens (#24620)

2026-02-23 12:29:09 -05:00

current-time.ts

…

date-time.ts

…

defaults.ts

…

docs-path.ts

…

doubao-models.ts

…

failover-error.test.ts

fix: handle HTTP 529 (Anthropic overloaded) in failover error classification

2026-03-02 18:59:10 +00:00

failover-error.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

glob-pattern.ts

…

google-gemini-switch.live.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

huggingface-models.test.ts

…

huggingface-models.ts

…

identity-avatar.test.ts

…

identity-avatar.ts

…

identity-file.test.ts

…

identity-file.ts

…

identity.human-delay.test.ts

…

identity.per-channel-prefix.test.ts

…

identity.test.ts

…

identity.ts

…

image-sanitization.test.ts

…

image-sanitization.ts

…

internal-events.ts

feat(agents): use structured internal completion events

2026-03-01 23:11:48 +00:00

lanes.ts

…

live-auth-keys.ts

…

live-model-filter.ts

refactor!: remove google-antigravity provider support

2026-02-23 05:20:14 +01:00

memory-search.test.ts

test: tighten mistral media and onboarding coverage

2026-02-23 00:19:05 +00:00

memory-search.ts

feat: Provider/Mistral full support for Mistral on OpenClaw 🇫🇷 (#23845)

2026-02-23 00:03:56 +00:00

minimax-vlm.normalizes-api-key.test.ts

…

minimax-vlm.ts

…

minimax.live.test.ts

…

model-alias-lines.ts

…

model-auth-label.test.ts

feat(security): add provider-based external secrets management

2026-02-26 14:47:22 +00:00

model-auth-label.ts

feat(secrets): finalize external secrets runtime and migration hardening

2026-02-26 14:47:22 +00:00

model-auth.profiles.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

model-auth.test.ts

fix: normalize "bedrock" provider ID to "amazon-bedrock"

2026-02-24 23:57:11 +00:00

model-auth.ts

feat: Add Kilo Gateway provider (#20212)

2026-02-23 23:29:27 +00:00

model-catalog.test-harness.ts

Agents: inject pi auth storage from runtime profiles

2026-02-26 14:47:22 +00:00

model-catalog.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

model-catalog.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

model-compat.test.ts

fix: tolerate missing pi-coding-agent backend export

2026-02-26 16:11:37 +01:00

model-compat.ts

fix(providers): strip trailing /v1 from Anthropic baseUrl to prevent double-path

2026-02-24 04:20:30 +00:00

model-fallback.probe.test.ts

fix(agents): comprehensive quota fallback fixes - session overrides + surgical cooldown logic (#23816)

2026-02-25 20:35:40 -05:00

model-fallback.test.ts

fix(agents): unblock gpt-5.3-codex API-key routing and replay (#31083)

2026-03-02 03:45:12 +00:00

model-fallback.ts

refactor(agents): dedupe model and tool test helpers

2026-03-02 21:31:36 +00:00

model-forward-compat.ts

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570)

2026-02-26 18:39:13 -05:00

model-ref-profile.test.ts

fix(model): land #30932 auth-profile @ parsing for /model (@haosenwang1018)

2026-03-02 03:05:03 +00:00

model-ref-profile.ts

fix(model): land #30932 auth-profile @ parsing for /model (@haosenwang1018)

2026-03-02 03:05:03 +00:00

model-scan.test.ts

…

model-scan.ts

…

model-selection.test.ts

fix(agents): scope volcengine-plan/byteplus-plan auth lookup to profile resolution

2026-03-02 19:22:19 +00:00

model-selection.ts

fix(agents): scope volcengine-plan/byteplus-plan auth lookup to profile resolution

2026-03-02 19:22:19 +00:00

models-config.auto-injects-github-copilot-provider-token-is.test.ts

…

models-config.e2e-harness.ts

…

models-config.falls-back-default-baseurl-token-exchange-fails.test.ts

fix(test): prevent env leak causing models.json CI flake

2026-02-22 22:00:44 +00:00

models-config.fills-missing-provider-apikey-from-env-var.test.ts

[AI-assisted] test: fix typing and test fixture issues (#31444)

2026-03-02 00:41:21 -08:00

models-config.normalizes-gemini-3-ids-preview-google-providers.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

models-config.preserves-explicit-reasoning-override.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

models-config.providers.google-antigravity.test.ts

fix(provider): normalize bare gemini-3 Pro model IDs for google-antigravity (#24145)

2026-02-26 18:53:46 -05:00

models-config.providers.kilocode.test.ts

Config: expand Kilo catalog and persist selected Kilo models (#24921)

2026-02-23 21:17:37 -05:00

models-config.providers.kimi-coding.test.ts

…

models-config.providers.normalize-keys.test.ts

fix(models): land #31202 normalize custom provider keys (@stakeswky)

2026-03-02 03:11:55 +00:00

models-config.providers.nvidia.test.ts

fix: set authHeader: true by default for MiniMax API provider (#27622)

2026-02-26 15:53:51 +00:00

models-config.providers.ollama-autodiscovery.test.ts

test: fix fetch mock typing casts

2026-03-01 22:44:28 +00:00

models-config.providers.ollama.test.ts

fix(agents): land #20840 cross-channel message-tool actions from @altaywtf

2026-03-01 23:37:55 +00:00

models-config.providers.qianfan.test.ts

…

models-config.providers.ts

fix(models): land #31202 normalize custom provider keys (@stakeswky)

2026-03-02 03:11:55 +00:00

models-config.providers.volcengine-byteplus.test.ts

fix(secrets): harden plan target paths and ref-only auth profiles

2026-02-26 14:47:22 +00:00

models-config.skips-writing-models-json-no-env-token.test.ts

…

models-config.test-utils.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

models-config.ts

fix(ollama): unify context window handling across discovery, merge, and OpenAI-compat transport (#29205)

2026-02-27 17:20:47 -08:00

models-config.uses-first-github-copilot-profile-env-tokens.test.ts

refactor(agents): dedupe model and tool test helpers

2026-03-02 21:31:36 +00:00

models.profiles.live.test.ts

test: stabilize docker live model suites

2026-02-27 01:21:45 +01:00

moonshot.live.test.ts

test(agents): add comprehensive kimi regressions

2026-02-23 18:27:36 +00:00

ollama-stream.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

ollama-stream.ts

refactor(plugin-sdk): share auth, routing, and stream/account helpers

2026-03-02 15:21:19 +00:00

openai-responses.reasoning-replay.test.ts

…

openai-ws-connection.test.ts

test(agents): port OpenAI websocket coverage from #24911

2026-03-01 22:38:56 +00:00

openai-ws-connection.ts

feat(agents): make openai responses websocket-first with fallback

2026-03-01 22:32:37 +00:00

openai-ws-stream.e2e.test.ts

test(agents): port OpenAI websocket coverage from #24911

2026-03-01 22:38:56 +00:00

openai-ws-stream.test.ts

feat(openai): add websocket warm-up with configurable toggle

2026-03-01 22:45:03 +00:00

openai-ws-stream.ts

refactor(plugin-sdk): share auth, routing, and stream/account helpers

2026-03-02 15:21:19 +00:00

openclaw-gateway-tool.test.ts

…

openclaw-tools.agents.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

openclaw-tools.camera.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

openclaw-tools.pdf-registration.test.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

openclaw-tools.plugin-context.test.ts

fix: resolve i18n merge conflict and test hoist failure

2026-03-02 04:36:11 +00:00

openclaw-tools.session-status.test.ts

…

openclaw-tools.sessions-visibility.test.ts

…

openclaw-tools.sessions.test.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

openclaw-tools.subagents.sessions-spawn-applies-thinking-default.test.ts

chore(tsgo/lint): fix CI errors

2026-03-02 03:03:11 -05:00

openclaw-tools.subagents.sessions-spawn-default-timeout-absent.test.ts

chore(tsgo/lint): fix CI errors

2026-03-02 03:03:11 -05:00

openclaw-tools.subagents.sessions-spawn-default-timeout.test.ts

chore(tsgo/lint): fix CI errors

2026-03-02 03:03:11 -05:00

openclaw-tools.subagents.sessions-spawn-depth-limits.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

openclaw-tools.subagents.sessions-spawn.allowlist.test.ts

refactor(agents): dedupe model and tool test helpers

2026-03-02 21:31:36 +00:00

openclaw-tools.subagents.sessions-spawn.cron-note.test.ts

fix: use canonical cron session detection for spawn note

2026-02-26 17:54:27 +05:30

openclaw-tools.subagents.sessions-spawn.lifecycle.test.ts

Tests/Typing: stabilize subagent completion routing changes

2026-02-24 04:12:25 +00:00

openclaw-tools.subagents.sessions-spawn.model.test.ts

…

openclaw-tools.subagents.sessions-spawn.test-harness.ts

chore(tsgo/lint): fix CI errors

2026-03-02 03:03:11 -05:00

openclaw-tools.subagents.steer-failure-clears-suppression.test.ts

…

openclaw-tools.subagents.test-harness.ts

…

openclaw-tools.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

opencode-zen-models.test.ts

…

opencode-zen-models.ts

…

owner-display.test.ts

…

owner-display.ts

…

path-policy.test.ts

fix(agents): normalize windows workspace path boundary checks (#30766)

2026-03-02 15:47:02 -06:00

path-policy.ts

refactor(infra): share windows path normalization helper

2026-03-02 21:55:12 +00:00

pi-auth-credentials.ts

Auth labels: handle token refs and share Pi credential conversion

2026-02-26 14:47:22 +00:00

pi-auth-json.test.ts

…

pi-auth-json.ts

Auth labels: handle token refs and share Pi credential conversion

2026-02-26 14:47:22 +00:00

pi-embedded-block-chunker.test.ts

…

pi-embedded-block-chunker.ts

…

pi-embedded-helpers.buildbootstrapcontextfiles.test.ts

…

pi-embedded-helpers.formatassistanterrortext.test.ts

fix(agents): avoid classifying reasoning-required errors as context overflow (#24593)

2026-02-23 10:38:49 -05:00

pi-embedded-helpers.isbillingerrormessage.test.ts

fix(agents): land #31007 from @HOYALIM

2026-03-02 01:06:00 +00:00

pi-embedded-helpers.sanitize-session-messages-images.removes-empty-assistant-text-blocks-but-preserves.test.ts

fix(agents): cap openai-completions tool call ids to provider-safe format (#31947)

2026-03-02 18:08:20 +00:00

pi-embedded-helpers.sanitizeuserfacingtext.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

pi-embedded-helpers.ts

fix(agents): unblock gpt-5.3-codex API-key routing and replay (#31083)

2026-03-02 03:45:12 +00:00

pi-embedded-helpers.validate-turns.test.ts

…

pi-embedded-messaging.ts

…

pi-embedded-payloads.ts

fix: align reasoning payload typing for #24991 (thanks @stakeswky)

2026-02-24 04:34:49 +00:00

pi-embedded-runner-extraparams.live.test.ts

test: fix CI failures in heartbeat and typing tests

2026-02-25 02:28:42 +00:00

pi-embedded-runner-extraparams.test.ts

fix(openrouter): skip reasoning.effort injection for x-ai/grok models

2026-03-02 19:20:11 +00:00

pi-embedded-runner.applygoogleturnorderingfix.test.ts

…

pi-embedded-runner.buildembeddedsandboxinfo.test.ts

…

pi-embedded-runner.compaction-safety-timeout.test.ts

…

pi-embedded-runner.createsystempromptoverride.test.ts

…

pi-embedded-runner.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

pi-embedded-runner.get-dm-history-limit-from-session-key.falls-back-provider-default-per-dm-not.test.ts

…

pi-embedded-runner.get-dm-history-limit-from-session-key.returns-undefined-sessionkey-is-undefined.test.ts

…

pi-embedded-runner.guard.test.ts

…

pi-embedded-runner.guard.waitforidle-before-flush.test.ts

…

pi-embedded-runner.history-limit-from-session-key.test.ts

…

pi-embedded-runner.limithistoryturns.test.ts

…

pi-embedded-runner.openai-tool-id-preservation.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

pi-embedded-runner.resolvesessionagentids.test.ts

fix(exec): apply per-agent exec defaults for opaque session keys

2026-02-22 23:33:14 +01:00

pi-embedded-runner.run-embedded-pi-agent.auth-profile-rotation.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

pi-embedded-runner.sanitize-session-history.policy.test.ts

…

pi-embedded-runner.sanitize-session-history.test-harness.ts

…

pi-embedded-runner.sanitize-session-history.test.ts

fix(agents): cap openai-completions tool call ids to provider-safe format (#31947)

2026-03-02 18:08:20 +00:00

pi-embedded-runner.splitsdktools.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pi-embedded-runner.ts

…

pi-embedded-subscribe.code-span-awareness.test.ts

…

pi-embedded-subscribe.e2e-harness.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pi-embedded-subscribe.handlers.compaction.ts

fix: preserve assistant usage snapshots during compaction cleanup

2026-02-26 21:35:26 +00:00

pi-embedded-subscribe.handlers.lifecycle.test.ts

…

pi-embedded-subscribe.handlers.lifecycle.ts

…

pi-embedded-subscribe.handlers.messages.test.ts

…

pi-embedded-subscribe.handlers.messages.ts

fix: prevent reasoning text leak through handleMessageEnd fallback

2026-03-02 20:32:01 +00:00

pi-embedded-subscribe.handlers.tools.media.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

pi-embedded-subscribe.handlers.tools.test.ts

fix(agents): await block-reply flush before tool execution starts

2026-02-24 14:11:40 +00:00

pi-embedded-subscribe.handlers.tools.ts

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-embedded-subscribe.handlers.ts

…

pi-embedded-subscribe.handlers.types.ts

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-embedded-subscribe.lifecycle-billing-error.test.ts

…

pi-embedded-subscribe.raw-stream.ts

…

pi-embedded-subscribe.reply-tags.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.calls-onblockreplyflush-before-tool-execution-start-preserve.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.does-not-append-text-end-content-is.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.does-not-call-onblockreplyflush-callback-is-not.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.does-not-duplicate-text-end-repeats-full.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.does-not-emit-duplicate-block-replies-text.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.emits-block-replies-text-end-does-not.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.emits-reasoning-as-separate-message-enabled.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pi-embedded-subscribe.subscribe-embedded-pi-session.filters-final-suppresses-output-without-start-tag.test.ts

fix: prevent reasoning text leak through handleMessageEnd fallback

2026-03-02 20:32:01 +00:00

pi-embedded-subscribe.subscribe-embedded-pi-session.includes-canvas-action-metadata-tool-summaries.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.keeps-assistanttexts-final-answer-block-replies-are.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pi-embedded-subscribe.subscribe-embedded-pi-session.keeps-indented-fenced-blocks-intact.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.reopens-fenced-blocks-splitting-inside-them.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.splits-long-single-line-fenced-blocks-reopen.test.ts

fix: preserve assistant usage snapshots during compaction cleanup

2026-02-26 21:35:26 +00:00

pi-embedded-subscribe.subscribe-embedded-pi-session.streams-soft-chunks-paragraph-preference.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.subscribeembeddedpisession.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

pi-embedded-subscribe.subscribe-embedded-pi-session.suppresses-message-end-block-replies-message-tool.test.ts

…

pi-embedded-subscribe.subscribe-embedded-pi-session.waits-multiple-compaction-retries-before-resolving.test.ts

Compaction: count only completed auto-compactions (#24056)

2026-02-22 20:16:45 -06:00

pi-embedded-subscribe.tools.extract.test.ts

fix: harden iMessage echo dedupe and reasoning suppression (#25897)

2026-02-25 00:46:56 +00:00

pi-embedded-subscribe.tools.media.test.ts

…

pi-embedded-subscribe.tools.test.ts

…

pi-embedded-subscribe.tools.ts

refactor: extract iMessage echo cache and unify suppression guards

2026-02-25 00:53:39 +00:00

pi-embedded-subscribe.ts

refactor: extract shared dedupe helpers for runtime paths

2026-02-23 05:43:43 +00:00

pi-embedded-subscribe.types.ts

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-embedded-utils.test.ts

…

pi-embedded-utils.ts

…

pi-embedded.ts

…

pi-model-discovery.auth.test.ts

refactor(agents): dedupe model and tool test helpers

2026-03-02 21:31:36 +00:00

pi-model-discovery.compat.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

pi-model-discovery.ts

fix: tolerate missing pi-coding-agent backend export

2026-02-26 16:11:37 +01:00

pi-project-settings.test.ts

fix(agents): harden embedded pi project settings loading

2026-02-26 21:46:39 +01:00

pi-project-settings.ts

fix(agents): harden embedded pi project settings loading

2026-02-26 21:46:39 +01:00

pi-settings.test.ts

…

pi-settings.ts

…

pi-tool-definition-adapter.after-tool-call.fires-once.test.ts

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-tool-definition-adapter.after-tool-call.test.ts

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-tool-definition-adapter.test.ts

fix(agents): normalize malformed tool results in adapter (#27007)

2026-02-26 04:11:44 +01:00

pi-tool-definition-adapter.ts

fix(hooks): consolidate after_tool_call context + single-fire behavior (#32201)

2026-03-02 14:33:37 -08:00

pi-tools-agent-config.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

pi-tools.abort.ts

…

pi-tools.before-tool-call.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

pi-tools.before-tool-call.integration.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

pi-tools.before-tool-call.ts

…

pi-tools.create-openclaw-coding-tools.adds-claude-style-aliases-schemas-without-dropping-b.test.ts

test: consolidate pi-tools gating assertions

2026-02-23 20:00:11 +00:00

pi-tools.create-openclaw-coding-tools.adds-claude-style-aliases-schemas-without-dropping-d.test.ts

test: consolidate pi-tools gating assertions

2026-02-23 20:00:11 +00:00

pi-tools.create-openclaw-coding-tools.adds-claude-style-aliases-schemas-without-dropping-f.test.ts

…

pi-tools.create-openclaw-coding-tools.adds-claude-style-aliases-schemas-without-dropping.test.ts

refactor: centralize message-provider tool filtering

2026-02-26 04:22:49 +01:00

pi-tools.message-provider-policy.test.ts

refactor: centralize message-provider tool filtering

2026-02-26 04:22:49 +01:00

pi-tools.policy.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pi-tools.policy.ts

fix(exec): apply per-agent exec defaults for opaque session keys

2026-02-22 23:33:14 +01:00

pi-tools.read.host-edit-access.test.ts

fix(tools): land #31015 from @haosenwang1018

2026-03-02 01:01:02 +00:00

pi-tools.read.ts

refactor: centralize delivery/path/media/version lifecycle

2026-03-02 04:04:36 +00:00

pi-tools.read.workspace-root-guard.test.ts

fix(sandbox): block @-prefixed workspace path bypass

2026-02-24 17:23:14 +00:00

pi-tools.safe-bins.test.ts

…

pi-tools.sandbox-mounted-paths.workspace-only.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

pi-tools.schema.ts

fix(tools): strip xAI-unsupported JSON Schema keywords from tool definitions

2026-03-02 20:37:07 +00:00

pi-tools.ts

fix(tools): strip xAI-unsupported JSON Schema keywords from tool definitions

2026-03-02 20:37:07 +00:00

pi-tools.types.ts

…

pi-tools.whatsapp-login-gating.test.ts

…

pi-tools.workspace-only-false.test.ts

refactor(commands): dedupe session target resolution and fs tool test setup

2026-03-02 14:36:41 +00:00

pi-tools.workspace-paths.test.ts

fix(security): block workspace hardlink alias escapes

2026-02-26 03:42:54 +01:00

pty-dsr.ts

…

pty-keys.test.ts

…

pty-keys.ts

…

queued-file-writer.ts

…

sandbox-agent-config.agent-specific-sandbox-config.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

sandbox-create-args.test.ts

feat(sandbox): block container namespace joins by default

2026-02-24 23:20:34 +00:00

sandbox-explain.test.ts

test(sandbox): use focused modules in lightweight suites

2026-02-24 01:46:12 +00:00

sandbox-media-paths.test.ts

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

sandbox-media-paths.ts

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

sandbox-merge.test.ts

test(sandbox): use focused modules in lightweight suites

2026-02-24 01:46:12 +00:00

sandbox-paths.test.ts

fix: harden workspace boundary path resolution

2026-02-26 13:19:59 +01:00

sandbox-paths.ts

fix: harden workspace boundary path resolution

2026-02-26 13:19:59 +01:00

sandbox-skills.test.ts

test(sandbox): use focused modules in lightweight suites

2026-02-24 01:46:12 +00:00

sandbox-tool-policy.ts

…

sandbox.resolveSandboxContext.test.ts

test(sandbox): use focused modules in lightweight suites

2026-02-24 01:46:12 +00:00

sandbox.ts

…

sanitize-for-prompt.test.ts

…

sanitize-for-prompt.ts

…

session-dirs.ts

…

session-file-repair.test.ts

…

session-file-repair.ts

…

session-slug.test.ts

…

session-slug.ts

…

session-tool-result-guard-wrapper.ts

…

session-tool-result-guard.test.ts

fix: clear pending tool-call state across provider modes (#32120) (thanks @jnMetaCode)

2026-03-02 21:28:02 +00:00

session-tool-result-guard.tool-result-persist-hook.test.ts

…

session-tool-result-guard.ts

refactor: split inbound and reload pipelines into staged modules

2026-03-02 21:55:01 +00:00

session-tool-result-state.ts

refactor: split inbound and reload pipelines into staged modules

2026-03-02 21:55:01 +00:00

session-transcript-repair.attachments.test.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

session-transcript-repair.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

session-transcript-repair.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

session-write-lock.test.ts

refactor(agents): dedupe model and tool test helpers

2026-03-02 21:31:36 +00:00

session-write-lock.ts

sessions: reclaim orphan self-pid lock files

2026-03-02 19:53:41 +00:00

sessions-spawn-hooks.test.ts

…

sessions-spawn-threadid.test.ts

…

shell-utils.test.ts

fix(shell): prefer PowerShell 7 on Windows with tested fallbacks (#25684)

2026-02-25 01:49:33 +00:00

shell-utils.ts

fix(shell): prefer PowerShell 7 on Windows with tested fallbacks (#25684)

2026-02-25 01:49:33 +00:00

skills-install-download.ts

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

skills-install-extract.ts

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

skills-install-fallback.test.ts

test: dedupe fixtures and test harness setup

2026-02-23 05:45:54 +00:00

skills-install-output.ts

…

skills-install-tar-verbose.ts

refactor(security): unify hardened install and fs write flows

2026-03-02 17:23:29 +00:00

skills-install.download-test-utils.ts

…

skills-install.download.test.ts

fix(security): harden tar archive extraction parity

2026-03-02 16:36:56 +00:00

skills-install.test-mocks.ts

…

skills-install.test.ts

test: speed up heavy suites with shared fixtures

2026-03-02 21:58:35 +00:00

skills-install.ts

…

skills-status.test.ts

…

skills-status.ts

refactor: extract shared dedupe helpers for runtime paths

2026-02-23 05:43:43 +00:00

skills.agents-skills-directory.test.ts

…

skills.build-workspace-skills-prompt.applies-bundled-allowlist-without-affecting-workspace-skills.test.ts

…

skills.build-workspace-skills-prompt.prefers-workspace-skills-managed-skills.test.ts

test: normalize skill prompt path assertions on windows

2026-02-23 21:17:29 +00:00

skills.build-workspace-skills-prompt.syncs-merged-skills-into-target-workspace.test.ts

test: micro-optimize heavy gateway/browser/telegram suites

2026-03-02 22:29:04 +00:00

skills.buildworkspaceskillsnapshot.test.ts

test: micro-optimize heavy gateway/browser/telegram suites

2026-03-02 22:29:04 +00:00

skills.buildworkspaceskillstatus.test.ts

test: speed up skills test suites

2026-02-23 21:02:13 +00:00

skills.compact-skill-paths.test.ts

…

skills.e2e-test-helpers.test.ts

…

skills.e2e-test-helpers.ts

…

skills.loadworkspaceskillentries.test.ts

…

skills.resolveskillspromptforrun.test.ts

…

skills.sherpa-onnx-tts-bin.test.ts

skills: make sherpa-onnx-tts bin ESM-compatible

2026-03-02 18:30:42 +00:00

skills.summarize-skill-description.test.ts

…

skills.test-helpers.ts

…

skills.test.ts

test: speed up heavy suites with shared fixtures

2026-03-02 21:58:35 +00:00

skills.ts

…

stable-stringify.ts

…

stream-message-shared.ts

refactor(plugin-sdk): share auth, routing, and stream/account helpers

2026-03-02 15:21:19 +00:00

subagent-announce-dispatch.test.ts

refactor(agents): unify subagent announce delivery pipeline

2026-02-26 00:30:44 +00:00

subagent-announce-dispatch.ts

refactor(agents): unify subagent announce delivery pipeline

2026-02-26 00:30:44 +00:00

subagent-announce-queue.test.ts

fix: harden queue retry debounce and add regression tests

2026-02-24 03:52:49 +00:00

subagent-announce-queue.ts

feat(agents): use structured internal completion events

2026-03-01 23:11:48 +00:00

subagent-announce.format.e2e.test.ts

test(subagent-announce): fix flaky Windows-only test failure (#31298) (openclaw#31370) thanks @zwffff

2026-03-02 10:33:07 -06:00

subagent-announce.timeout.test.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-announce.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-depth.test.ts

…

subagent-depth.ts

…

subagent-lifecycle-events.ts

…

subagent-registry-cleanup.test.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-registry-cleanup.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-registry-completion.test.ts

…

subagent-registry-completion.ts

…

subagent-registry-queries.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

subagent-registry-state.ts

…

subagent-registry.announce-loop-guard.test.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-registry.archive.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

subagent-registry.lifecycle-retry-grace.e2e.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

subagent-registry.mocks.shared.ts

…

subagent-registry.nested.e2e.test.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-registry.persistence.test.ts

chore(status): clarify bootstrap file semantics

2026-02-24 04:17:56 +00:00

subagent-registry.steer-restart.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

subagent-registry.store.ts

…

subagent-registry.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

subagent-registry.types.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

subagent-spawn.attachments.test.ts

sessions_spawn: inline attachments with redaction, lifecycle cleanup, and docs (#16761)

2026-03-01 21:33:51 -08:00

subagent-spawn.ts

Security: enforce ACP sandbox inheritance for sessions_spawn (#32254)

2026-03-02 23:50:38 +01:00

synthetic-models.ts

fix(models): refresh Moonshot Kimi vision capabilities

2026-02-23 12:44:23 +00:00

system-prompt-params.test.ts

…

system-prompt-params.ts

…

system-prompt-report.test.ts

…

system-prompt-report.ts

…

system-prompt-stability.test.ts

…

system-prompt.test.ts

Security: enforce ACP sandbox inheritance for sessions_spawn (#32254)

2026-03-02 23:50:38 +01:00

system-prompt.ts

Security: enforce ACP sandbox inheritance for sessions_spawn (#32254)

2026-03-02 23:50:38 +01:00

timeout.ts

…

together-models.ts

…

tool-call-id.test.ts

…

tool-call-id.ts

…

tool-catalog.ts

fix(automation): harden announce delivery + cron coding profile (#25813 #25821 #25822)

2026-02-24 23:49:34 +00:00

tool-display-common.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

tool-display-overrides.json

refactor(agents): centralize tool display definitions

2026-03-02 12:13:45 +00:00

tool-display.test.ts

…

tool-display.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

tool-fs-policy.test.ts

refactor: unify tools.fs workspaceOnly resolution

2026-02-24 15:14:05 +00:00

tool-fs-policy.ts

refactor: unify tools.fs workspaceOnly resolution

2026-02-24 15:14:05 +00:00

tool-images.log.test.ts

…

tool-images.test.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

tool-images.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

tool-loop-detection.test.ts

…

tool-loop-detection.ts

…

tool-mutation.test.ts

…

tool-mutation.ts

…

tool-policy-pipeline.test.ts

…

tool-policy-pipeline.ts

…

tool-policy-shared.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

tool-policy.conformance.ts

…

tool-policy.plugin-only-allowlist.test.ts

…

tool-policy.test.ts

fix(automation): harden announce delivery + cron coding profile (#25813 #25821 #25822)

2026-02-24 23:49:34 +00:00

tool-policy.ts

…

tool-summaries.ts

…

transcript-policy.policy.test.ts

…

transcript-policy.test.ts

fix(agents): cap openai-completions tool call ids to provider-safe format (#31947)

2026-03-02 18:08:20 +00:00

transcript-policy.ts

fix(agents): cap openai-completions tool call ids to provider-safe format (#31947)

2026-03-02 18:08:20 +00:00

usage.normalization.test.ts

…

usage.test.ts

test(usage): cover negative prompt_tokens alias clamp

2026-03-02 03:31:47 +00:00

usage.ts

fix(usage): clamp negative input token counts to zero

2026-03-02 03:31:47 +00:00

venice-models.ts

…

volc-models.shared.ts

…

workspace-dir.ts

…

workspace-dirs.ts

…

workspace-run.test.ts

…

workspace-run.ts

…

workspace-templates.test.ts

…

workspace-templates.ts

…

workspace.bootstrap-cache.test.ts

refactor: unify boundary-safe reads for bootstrap and includes

2026-02-26 12:42:14 +01:00

workspace.defaults.test.ts

…

workspace.load-extra-bootstrap-files.test.ts

refactor: unify boundary-safe reads for bootstrap and includes

2026-02-26 12:42:14 +01:00

workspace.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

workspace.ts

test(agents): add compaction and workspace reset regressions

2026-02-26 17:41:25 +01:00

zai.live.test.ts

…