Josh Avant 36d2ae2a22 SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 23:55:10 +00:00

..

commands-acp

refactor: centralize acp session resolution guards

2026-03-08 18:40:14 +00:00

commands-subagents

refactor: unify shared utility normalization helpers

2026-03-07 20:33:50 +00:00

exec

refactor(auto-reply): share directive arg parsing

2026-02-15 05:05:47 +00:00

export-html

fix: address markdown image review feedback

2026-03-07 19:46:41 +05:30

queue

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

test-fixtures

Refactor: split ACP dispatch delivery and settings

2026-03-01 20:39:24 +01:00

abort-cutoff.ts

refactor(reply): split abort cutoff and timeout policy modules

2026-02-26 14:00:35 +01:00

abort.test.ts

fix(telegram): route native topic commands to the active session (#38871)

2026-03-07 19:01:16 +05:30

abort.ts

fix(telegram): route native topic commands to the active session (#38871)

2026-03-07 19:01:16 +05:30

acp-projector.test.ts

refactor(tests): dedupe tool, projector, and delivery fixtures

2026-03-03 01:06:00 +00:00

acp-projector.ts

ACP: rename stream char limits to output/sessionUpdate

2026-03-01 20:39:24 +01:00

acp-reset-target.ts

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

acp-stream-settings.test.ts

ACP: rename stream char limits to output/sessionUpdate

2026-03-01 20:39:24 +01:00

acp-stream-settings.ts

refactor(commands): unify repeated ACP and routing flows

2026-03-02 05:20:19 +00:00

agent-runner-execution.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

agent-runner-helpers.test.ts

test(reply): replace heavy resets in media and runner helper specs

2026-02-22 08:15:28 +00:00

agent-runner-helpers.ts

refactor(reply): share verbose gate helpers

2026-02-18 18:25:25 +00:00

agent-runner-memory.ts

fix: protect bootstrap files during memory flush (#38574)

2026-03-10 12:44:33 +08:00

agent-runner-payloads.test.ts

fix: contain final reply media normalization failures

2026-03-07 10:52:16 +05:30

agent-runner-payloads.ts

fix: contain final reply media normalization failures

2026-03-07 10:52:16 +05:30

agent-runner-reminder-guard.ts

refactor(auto-reply,telegram,config): extract guard and forum helpers

2026-03-02 23:48:11 +00:00

agent-runner-utils.test.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

agent-runner-utils.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

agent-runner.media-paths.test.ts

fix: normalize reply media paths

2026-03-07 10:52:16 +05:30

agent-runner.misc.runreplyagent.test.ts

test: expand reminder guard fail-closed coverage (#32255) (thanks @scoootscooob)

2026-03-02 23:35:14 +00:00

agent-runner.runreplyagent.e2e.test.ts

Fix stale runtime model reuse on session reset (#41173)

2026-03-10 14:02:43 -07:00

agent-runner.ts

Fix stale runtime model reuse on session reset (#41173)

2026-03-10 14:02:43 -07:00

audio-tags.ts

refactor: consolidate reply/media helpers

2026-01-10 02:41:16 +01:00

bash-command.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

block-reply-coalescer.ts

fix: preserve off-mode semantics in auto reply threading (#14976) (thanks @Diaspar4u)

2026-02-13 05:22:14 +01:00

block-reply-pipeline.ts

fix(auto-reply): normalize block-reply callback to Promise for timeout path (#31200)

2026-03-01 19:23:38 -08:00

block-streaming.test.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

block-streaming.ts

refactor(commands): unify repeated ACP and routing flows

2026-03-02 05:20:19 +00:00

body.ts

fix(auto-reply): prevent sender spoofing in group prompts

2026-02-10 00:44:38 -06:00

channel-context.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

command-gates.ts

fix(gateway): require admin for chat config writes

2026-03-07 19:38:49 +00:00

commands-acp.test.ts

fix(acp): block sandboxed slash spawns

2026-03-08 00:23:07 +00:00

commands-acp.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

commands-allowlist.ts

refactor: share trimmed string entry normalization

2026-03-07 23:27:51 +00:00

commands-approve.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

commands-bash.ts

refactor(security): unify command gating and blocked-key guards

2026-02-21 13:04:37 +01:00

commands-compact.ts

fix: pass agentDir to /compact command for agent-specific auth (#24133)

2026-02-23 02:33:35 -05:00

commands-config.ts

fix(gateway): require admin for chat config writes

2026-03-07 19:38:49 +00:00

commands-context-report.test.ts

Agent: unify bootstrap truncation warning handling (#32769)

2026-03-03 16:28:38 -05:00

commands-context-report.ts

Agent: unify bootstrap truncation warning handling (#32769)

2026-03-03 16:28:38 -05:00

commands-context.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

commands-core.test.ts

fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875)

2026-03-08 19:07:28 +03:00

commands-core.ts

fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875)

2026-03-08 19:07:28 +03:00

commands-export-session.ts

refactor(session): centralize transcript path option resolution

2026-02-22 12:02:38 +01:00

commands-info.ts

Channels: add thread-aware model overrides

2026-02-20 19:26:25 -06:00

commands-models.ts

Mattermost: add interactive model picker (#38767)

2026-03-07 21:45:29 +05:30

commands-plugin.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

commands-session-abort.ts

fix(security): enforce auth for abort triggers and models

2026-03-01 21:30:07 +00:00

commands-session-lifecycle.test.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

commands-session-store.ts

refactor(reply): split abort cutoff and timeout policy modules

2026-02-26 14:00:35 +01:00

commands-session.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

commands-setunset-standard.ts

refactor(auto-reply): share standard set/unset slash parsing

2026-02-18 23:09:09 +00:00

commands-setunset.test.ts

test(messaging): dedupe parser/proxy/followup test scaffolding

2026-02-19 07:24:02 +00:00

commands-setunset.ts

refactor(auto-reply): share slash set/unset command parsing

2026-02-18 17:48:01 +00:00

commands-slash-parse.ts

refactor(auto-reply): share slash parsing for config/debug

2026-02-16 02:11:12 +00:00

commands-spawn.test-harness.ts

test(auto-reply): dedupe command spawn test harness

2026-02-17 00:11:02 +00:00

commands-status.ts

fix(agents): fall back to agents.defaults.model when agent has no model config (#24210)

2026-02-23 03:18:55 -05:00

commands-subagents-focus.test.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

commands-subagents-spawn.test.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

commands-subagents.test-mocks.ts

test: dedupe auto-reply web and signal flows

2026-02-22 17:11:54 +00:00

commands-subagents.ts

fix(subagents): announce delivery with descendant gating, frozen result refresh, and cron retry (#35080)

2026-03-05 19:20:24 -08:00

commands-system-prompt.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

commands-tts.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

commands-types.ts

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

commands.test-harness.ts

chore: Fix types in tests 1/N.

2026-02-17 10:26:49 +09:00

commands.test.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

commands.ts

refactor(auto-reply): split reply pipeline

2026-01-14 09:11:16 +00:00

config-commands.ts

refactor(auto-reply): share standard set/unset slash parsing

2026-02-18 23:09:09 +00:00

config-value.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

debug-commands.ts

refactor(auto-reply): share standard set/unset slash parsing

2026-02-18 23:09:09 +00:00

directive-handling.auth.test.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

directive-handling.auth.ts

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

directive-handling.fast-lane.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

directive-handling.impl.ts

fix(reasoning): persist off override for discord directives

2026-02-23 00:50:13 +01:00

directive-handling.levels.test.ts

fix(agents): prioritize per-model thinking defaults (#30439)

2026-03-02 04:00:02 +00:00

directive-handling.levels.ts

fix(agents): prioritize per-model thinking defaults (#30439)

2026-03-02 04:00:02 +00:00

directive-handling.model-picker.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

directive-handling.model.test.ts

fix(models): normalize trailing @profile parsing across resolver paths

2026-02-26 14:34:15 +01:00

directive-handling.model.ts

feat(auto-reply): add model fallback lifecycle visibility in status, verbose logs, and WebUI (#20704)

2026-02-19 14:33:02 -08:00

directive-handling.params.ts

refactor(auto-reply): share directive handling params

2026-02-15 05:25:55 +00:00

directive-handling.parse.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

directive-handling.persist.ts

fix(reasoning): persist off override for discord directives

2026-02-23 00:50:13 +01:00

directive-handling.queue-validation.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

directive-handling.shared.ts

feat: ACP thread-bound agents (#23580)

2026-02-26 11:00:09 +01:00

directive-handling.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

directive-parsing.ts

refactor(auto-reply): share directive arg parsing

2026-02-15 05:05:47 +00:00

directives.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

dispatch-acp-delivery.test.ts

test(agents): dedupe agent and cron test scaffolds

2026-03-02 07:13:10 +00:00

dispatch-acp-delivery.ts

ACP: start typing lifecycle at turn start and harden delivery

2026-03-01 20:39:24 +01:00

dispatch-acp.test.ts

acp: harden follow-up reliability and attachments (#41464)

2026-03-09 23:03:50 +01:00

dispatch-acp.ts

acp: harden follow-up reliability and attachments (#41464)

2026-03-09 23:03:50 +01:00

dispatch-from-config.test.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

dispatch-from-config.ts

Telegram: exec approvals for OpenCode/Codex (#37233)

2026-03-09 23:04:35 -04:00

dispatcher-registry.ts

fix: defer gateway restart until all replies are sent (#12970)

2026-02-14 00:29:29 +01:00

elevated-allowlist-matcher.ts

refactor(security): split elevated allowFrom matcher internals

2026-02-22 22:20:04 +01:00

elevated-unavailable.ts

refactor(auto-reply): share elevated unavailable message

2026-02-14 15:39:45 +00:00

exec.ts

feat: add /exec session overrides

2026-01-18 06:12:54 +00:00

followup-runner.test.ts

Agents: preserve bootstrap warning dedupe across followup runs

2026-03-03 18:56:11 -05:00

followup-runner.ts

Agents: add fallback error observations (#41337)

2026-03-10 01:12:10 +03:00

get-reply-directives-apply.ts

fix(agents): harden bash tool and reply directive handling

2026-02-22 11:29:31 +00:00

get-reply-directives-utils.ts

refactor(auto-reply): share cleared exec fields

2026-02-15 16:45:25 +00:00

get-reply-directives.ts

fix(agents): prioritize per-model thinking defaults (#30439)

2026-03-02 04:00:02 +00:00

get-reply-inline-actions.skip-when-config-empty.test.ts

fix(queue): harden drain/abort/timeout race handling

2026-02-26 13:43:39 +01:00

get-reply-inline-actions.ts

ACP: add persistent Discord channel and Telegram topic bindings (#34873)

2026-03-05 09:38:12 +01:00

get-reply-run.media-only.test.ts

fix: restore auto-reply system events timeline (#34794) (thanks @anisoptera) (#34794)

2026-03-05 07:56:14 +05:30

get-reply-run.ts

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

get-reply.message-hooks.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

get-reply.reset-hooks-fallback.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

get-reply.test-mocks.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

get-reply.ts

refactor: share trimmed string entry normalization

2026-03-07 23:27:51 +00:00

groups.ts

Fix/Complete LINE requireMention gating behavior (#35847)

2026-03-07 14:06:07 -06:00

history.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

inbound-context.ts

fix(security): harden spoofed system marker handling

2026-03-02 06:19:16 +00:00

inbound-dedupe.ts

fix: dedupe inbound Telegram DM replies per agent (#40519)

2026-03-09 09:31:05 +05:30

inbound-meta.test.ts

fix(whatsapp): restore direct inbound metadata for relay agents (#31969)

2026-03-02 18:40:04 +00:00

inbound-meta.ts

fix(whatsapp): restore direct inbound metadata for relay agents (#31969)

2026-03-02 18:40:04 +00:00

inbound-text.ts

fix(security): harden spoofed system marker handling

2026-03-02 06:19:16 +00:00

line-directives.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

memory-flush.test.ts

fix: protect bootstrap files during memory flush (#38574)

2026-03-10 12:44:33 +08:00

memory-flush.ts

fix: protect bootstrap files during memory flush (#38574)

2026-03-10 12:44:33 +08:00

mentions.test.ts

fix(slack): guard against undefined text in includes calls during mention handling

2026-03-02 19:00:08 +00:00

mentions.ts

perf(routing): cache route and mention regex resolution

2026-03-02 23:00:49 +00:00

message-preprocess-hooks.test.ts

refactor: unify message hook mapping and async dispatch

2026-03-02 22:51:28 +00:00

message-preprocess-hooks.ts

refactor: unify message hook mapping and async dispatch

2026-03-02 22:51:28 +00:00

model-selection.test.ts

refactor: dedupe agent and reply runtimes

2026-03-02 19:57:33 +00:00

model-selection.ts

Default reasoning to on when model has reasoning: true (fix #22456) (#22513)

2026-02-22 12:19:36 -05:00

normalize-reply.ts

fix(auto-reply): land #31080 from @scoootscooob

2026-03-02 01:17:42 +00:00

origin-routing.test.ts

refactor: centralize followup origin routing helpers

2026-02-24 23:28:58 +00:00

origin-routing.ts

refactor: centralize followup origin routing helpers

2026-02-24 23:28:58 +00:00

post-compaction-context.test.ts

feat(compaction): make post-compaction context sections configurable (#34556)

2026-03-06 14:57:15 -08:00

post-compaction-context.ts

feat(compaction): make post-compaction context sections configurable (#34556)

2026-03-06 14:57:15 -08:00

provider-dispatcher.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

queue-policy.test.ts

refactor: consolidate typing lifecycle and queue policy

2026-02-25 02:16:03 +00:00

queue-policy.ts

refactor: consolidate typing lifecycle and queue policy

2026-02-25 02:16:03 +00:00

queue.ts

fix(queue): land #33168 from @rylena

2026-03-08 00:51:11 +00:00

reply-delivery.ts

fix: normalize reply media paths

2026-03-07 10:52:16 +05:30

reply-directives.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

reply-dispatcher.ts

fix(discord): stop typing after silent runs

2026-03-03 10:22:27 -06:00

reply-elevated.test.ts

fix(security): tighten elevated allowFrom sender matching

2026-02-22 22:00:08 +01:00

reply-elevated.ts

refactor: share trimmed string entry normalization

2026-03-07 23:27:51 +00:00

reply-flow.test.ts

refactor(queue): use stable tuple key for recent message dedupe

2026-03-08 01:14:16 +00:00

reply-inline-whitespace.test.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

reply-inline-whitespace.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

reply-inline.test.ts

fix(auto-reply): preserve newlines in stripInlineStatus and extractInlineSimpleCommand

2026-03-02 22:43:10 +00:00

reply-inline.ts

refactor: extract shared sandbox and gateway plumbing

2026-03-02 23:16:47 +00:00

reply-media-paths.test.ts

fix: normalize reply media paths

2026-03-07 10:52:16 +05:30

reply-media-paths.ts

fix: normalize reply media paths

2026-03-07 10:52:16 +05:30

reply-payloads.test.ts

fix(routing): unify session delivery invariants for duplicate suppression (#33786)

2026-03-03 21:40:38 -06:00

reply-payloads.ts

fix(routing): unify session delivery invariants for duplicate suppression (#33786)

2026-03-03 21:40:38 -06:00

reply-plumbing.test.ts

fix(mattermost): pass payload.replyToId as root_id for threaded replies (#27744)

2026-03-08 14:13:13 +05:30

reply-reference.ts

fix: update replyToMode notes (#11062) (thanks @cordx56)

2026-02-12 18:50:36 -06:00

reply-state.test.ts

fix: protect bootstrap files during memory flush (#38574)

2026-03-10 12:44:33 +08:00

reply-tags.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

reply-threading.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

reply-utils.test.ts

refactor(tests): dedupe tool, projector, and delivery fixtures

2026-03-03 01:06:00 +00:00

response-prefix-template.ts

chore: apply local workspace updates (#9911)

2026-02-05 16:54:44 -05:00

route-reply.test.ts

fix: harden message hook session/group context and add integration coverage (#9859) (thanks @Drickon)

2026-03-02 22:34:43 +00:00

route-reply.ts

build: fix ineffective dynamic imports with lazy boundaries (#33690)

2026-03-03 20:14:41 -05:00

session-delivery.test.ts

fix(session): tighten direct-session webchat routing matching (#37867)

2026-03-06 08:53:16 -05:00

session-delivery.ts

fix(session): tighten direct-session webchat routing matching (#37867)

2026-03-06 08:53:16 -05:00

session-fork.ts

refactor: extract session init helpers

2026-03-03 02:37:23 +00:00

session-hooks-context.test.ts

refactor: modularize plugin runtime and test hooks

2026-03-03 02:06:58 +00:00

session-hooks.ts

refactor: extract session init helpers

2026-03-03 02:37:23 +00:00

session-reset-model.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

session-reset-prompt.test.ts

feat: append UTC time alongside local time in shared Current time lines (#32423)

2026-03-06 01:26:34 +03:00

session-reset-prompt.ts

fix: substitute YYYY-MM-DD at session startup and post-compaction (#32363) (#32381)

2026-03-03 06:21:26 -08:00

session-run-accounting.ts

fix(auth/session): preserve override reset behavior and repair oauth profile-id drift (openclaw#18820) thanks @Glucksberg

2026-02-19 21:16:26 -06:00

session-updates.ts

fix: restore auto-reply system events timeline (#34794) (thanks @anisoptera) (#34794)

2026-03-05 07:56:14 +05:30

session-usage.ts

fix(session): harden usage accounting and memory flush recovery

2026-03-02 00:07:29 +00:00

session.test.ts

fix(gateway): invalidate bootstrap cache on session rollover (openclaw#38535)

2026-03-06 23:46:02 -06:00

session.ts

fix(gateway): invalidate bootstrap cache on session rollover (openclaw#38535)

2026-03-06 23:46:02 -06:00

stage-sandbox-media.ts

refactor(security): split sandbox media staging and stream safe copies

2026-03-02 16:53:14 +00:00

streaming-directives.ts

fix(auto-reply): tighten silent token semantics and prefix streaming

2026-02-26 16:04:48 +05:30

strip-inbound-meta.test.ts

fix(chat): preserve sender labels in dashboard history

2026-03-08 09:17:02 +05:30

strip-inbound-meta.ts

fix(chat): preserve sender labels in dashboard history

2026-03-08 09:17:02 +05:30

subagents-utils.test.ts

refactor(subagents): share run target resolution

2026-02-18 18:25:25 +00:00

subagents-utils.ts

fix(subagents): announce delivery with descendant gating, frozen result refresh, and cron retry (#35080)

2026-03-05 19:20:24 -08:00

telegram-context.test.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

telegram-context.ts

feat(telegram/acp): Topic Binding, Pin Binding Message, Fix Spawn Param Parsing (#36683)

2026-03-06 02:17:50 +01:00

test-ctx.ts

style: oxfmt

2026-01-17 10:26:08 +00:00

test-helpers.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

typing-mode.ts

fix: harden typing lifecycle and cross-channel suppression

2026-02-26 17:01:09 +01:00

typing-persistence.test.ts

fix(typing): stop keepalive restarts after run completion (land #27413, thanks @widingmarcus-cyber)

2026-02-26 11:42:38 +00:00

typing-policy.test.ts

refactor: unify typing dispatch lifecycle and policy boundaries

2026-02-26 17:36:16 +01:00

typing-policy.ts

refactor: unify typing dispatch lifecycle and policy boundaries

2026-02-26 17:36:16 +01:00

typing.ts

refactor: unify typing dispatch lifecycle and policy boundaries

2026-02-26 17:36:16 +01:00

untrusted-context.ts

fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin)

2026-02-03 23:02:45 -08:00