Glucksberg 6bd6ae41b1 fix: address code review findings for plugin commands ...

- Add registry lock during command execution to prevent race conditions
- Add input sanitization for command arguments (defense in depth)
- Validate handler is a function during registration
- Remove redundant case-insensitive regex flag
- Add success logging for command execution
- Simplify handler return type (always returns result now)
- Remove dead code branch in commands-plugin.ts

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-24 06:28:22 +00:00

..

exec

chore(gate): fix lint and protocol

2026-01-18 06:31:02 +00:00

queue

Channels: add per-group tool policies

2026-01-24 05:49:39 +00:00

abort.test.ts

refactor(security): harden CommandAuthorized plumbing

2026-01-17 10:19:34 +00:00

abort.ts

refactor(security): harden CommandAuthorized plumbing

2026-01-17 10:19:34 +00:00

agent-runner-execution.ts

Channels: add per-group tool policies

2026-01-24 05:49:39 +00:00

agent-runner-helpers.ts

fix(slack): respect verbose setting and preserve thread context for tool notifications

2026-01-21 06:29:36 +00:00

agent-runner-memory.ts

fix: preserve subagent thread routing (#1241)

2026-01-20 17:22:07 +00:00

agent-runner-payloads.ts

fix: send text between tool calls to channel immediately

2026-01-15 20:55:52 -08:00

agent-runner-utils.test.ts

refactor: unify threading contexts

2026-01-21 20:35:12 +00:00

agent-runner-utils.ts

fix: msteams attachments + plugin prompt hints

2026-01-22 03:37:29 +00:00

agent-runner.authprofileid-fallback.test.ts

test(auto-reply): drop auth profile on provider fallback

2026-01-20 23:07:33 -04:00

agent-runner.block-streaming.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.claude-cli.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.heartbeat-typing.runreplyagent-typing-heartbeat.resets-corrupted-gemini-sessions-deletes-transcripts.test.ts

fix: sanitize user-facing errors and strip final tags

2026-01-16 03:01:23 +00:00

agent-runner.heartbeat-typing.runreplyagent-typing-heartbeat.retries-after-compaction-failure-by-resetting-session.test.ts

fix: stabilize ci checks

2026-01-19 00:34:26 +00:00

agent-runner.heartbeat-typing.runreplyagent-typing-heartbeat.signals-typing-block-replies.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.heartbeat-typing.runreplyagent-typing-heartbeat.signals-typing-normal-runs.test.ts

test: align NO_REPLY typing expectations

2026-01-21 17:12:50 +00:00

agent-runner.heartbeat-typing.runreplyagent-typing-heartbeat.still-replies-even-if-session-reset-fails.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.memory-flush.runreplyagent-memory-flush.increments-compaction-count-flush-compaction-completes.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.memory-flush.runreplyagent-memory-flush.runs-memory-flush-turn-updates-session-metadata.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.memory-flush.runreplyagent-memory-flush.skips-memory-flush-cli-providers.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.memory-flush.runreplyagent-memory-flush.skips-memory-flush-sandbox-workspace-is-read.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.memory-flush.runreplyagent-memory-flush.uses-configured-prompts-memory-flush-runs.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.messaging-tools.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.reasoning-tags.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

agent-runner.response-usage-footer.test.ts

test(usage): cover modes and full footer

2026-01-18 06:01:25 +00:00

agent-runner.ts

feat(slack): add dm-specific replyToMode configuration (#1442)

2026-01-23 05:13:23 +00:00

audio-tags.ts

refactor: consolidate reply/media helpers

2026-01-10 02:41:16 +01:00

bash-command.ts

refactor: normalize cli command hints

2026-01-20 07:43:00 +00:00

block-reply-coalescer.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

block-reply-pipeline.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

block-streaming.ts

feat: load channel plugins

2026-01-15 02:42:44 +00:00

body.ts

refactor: harden session store updates

2026-01-15 23:41:34 +00:00

commands-allowlist.ts

feat: add /allowlist command

2026-01-21 05:34:53 +00:00

commands-bash.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

commands-compact.ts

fix: enforce group tool policy inheritance for subagents (#1557) (thanks @adam91holt)

2026-01-24 05:49:39 +00:00

commands-config.ts

fix: enforce plugin config schemas (#1272) (thanks @thewilloftheshadow)

2026-01-20 11:03:17 +00:00

commands-context-report.ts

fix: enforce group tool policy inheritance for subagents (#1557) (thanks @adam91holt)

2026-01-24 05:49:39 +00:00

commands-context.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

commands-core.ts

feat: add plugin command API for LLM-free auto-reply commands

2026-01-24 06:28:22 +00:00

commands-info.ts

refactor: extend media understanding

2026-01-17 07:17:13 +00:00

commands-models.ts

fix: finish model list alias + heartbeat session (#1256) (thanks @zknicker)

2026-01-22 01:36:58 +00:00

commands-parsing.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

commands-plugin.ts

fix: address code review findings for plugin commands

2026-01-24 06:28:22 +00:00

commands-policy.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

commands-session.ts

Usage: add cost summaries to /usage + mac menu

2026-01-19 00:05:06 +00:00

commands-status.ts

fix: hide empty status rows

2026-01-21 03:32:16 +00:00

commands-subagents.ts

fix: sanitize assistant session text (#1456) (thanks @zerone0x)

2026-01-23 07:05:31 +00:00

commands-types.ts

feat: add internal hooks system

2026-01-17 01:31:57 +00:00

commands.test.ts

fix: stabilize tests and sync protocol models

2026-01-24 00:25:58 +00:00

commands.ts

refactor(auto-reply): split reply pipeline

2026-01-14 09:11:16 +00:00

config-commands.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

config-value.ts

style: fix biome formatting

2026-01-10 02:11:43 +00:00

debug-commands.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

directive-handling.auth.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

directive-handling.fast-lane.ts

refactor: require session state for directive handling

2026-01-22 22:42:46 +00:00

directive-handling.impl.ts

refactor: require session state for directive handling

2026-01-22 22:42:46 +00:00

directive-handling.model-picker.ts

fix(model-picker): list each provider/model combo separately (#970)

2026-01-15 22:20:11 +00:00

directive-handling.model.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

directive-handling.model.ts

fix: finish model list alias + heartbeat session (#1256) (thanks @zknicker)

2026-01-22 01:36:58 +00:00

directive-handling.parse.ts

feat: add /exec session overrides

2026-01-18 06:12:54 +00:00

directive-handling.persist.ts

fix: normalize model override auth handling

2026-01-21 06:00:21 +00:00

directive-handling.queue-validation.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

directive-handling.shared.ts

feat: add elevated ask/full modes

2026-01-22 05:41:11 +00:00

directive-handling.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

directives.ts

feat: add /exec session overrides

2026-01-18 06:12:54 +00:00

dispatch-from-config.test.ts

fix: emit diagnostics across channels

2026-01-21 00:30:34 +00:00

dispatch-from-config.ts

fix: emit diagnostics across channels

2026-01-21 00:30:34 +00:00

exec.ts

feat: add /exec session overrides

2026-01-18 06:12:54 +00:00

followup-runner.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

followup-runner.ts

Channels: add per-group tool policies

2026-01-24 05:49:39 +00:00

formatting.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

get-reply-directives-apply.ts

refactor: require session state for directive handling

2026-01-22 22:42:46 +00:00

get-reply-directives-utils.ts

feat: add /exec session overrides

2026-01-18 06:12:54 +00:00

get-reply-directives.ts

refactor: require session state for directive handling

2026-01-22 22:42:46 +00:00

get-reply-inline-actions.ts

fix: preserve subagent thread routing (#1241)

2026-01-20 17:22:07 +00:00

get-reply-run.ts

Channels: add per-group tool policies

2026-01-24 05:49:39 +00:00

get-reply.ts

test: speed up default test env

2026-01-23 18:34:33 +00:00

groups.ts

refactor: prune legacy group prefixes

2026-01-17 08:47:25 +00:00

history.test.ts

test: cover typing and history helpers

2026-01-23 23:34:30 +00:00

history.ts

refactor: unify pending history helpers

2026-01-23 23:33:32 +00:00

inbound-context.ts

refactor(security): harden CommandAuthorized plumbing

2026-01-17 10:19:34 +00:00

inbound-dedupe.ts

feat: add matrix channel plugin

2026-01-15 08:40:37 +00:00

inbound-sender-meta.ts

fix: tidy iMessage/Signal sender envelopes (#1080) - thanks @tyler6204

2026-01-17 08:29:54 +00:00

inbound-text.ts

fix: finalize inbound contexts

2026-01-17 05:06:39 +00:00

memory-flush.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

memory-flush.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

mentions.ts

feat: load channel plugins

2026-01-15 02:42:44 +00:00

model-selection.inherit-parent.test.ts

fix: inherit model overrides for thread sessions

2026-01-22 06:03:23 +00:00

model-selection.ts

fix: inherit model overrides for thread sessions

2026-01-22 06:03:23 +00:00

normalize-reply.ts

fix: sanitize user-facing errors and strip final tags

2026-01-16 03:01:23 +00:00

provider-dispatcher.ts

fix: unify inbound dispatch pipeline

2026-01-23 22:58:54 +00:00

queue.collect-routing.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

queue.ts

fix: hard-abort clears queues on /stop

2026-01-16 21:15:25 +00:00

reply-directives.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

reply-dispatcher.ts

chore: format reply dispatcher

2026-01-15 05:31:03 +00:00

reply-elevated.ts

refactor: normalize cli command hints

2026-01-20 07:43:00 +00:00

reply-inline.ts

feat(slash-commands): usage footer modes

2026-01-18 05:35:35 +00:00

reply-payloads.ts

refactor: centralize target normalization

2026-01-17 06:45:11 +00:00

reply-reference.ts

fix: align reply threading refs

2026-01-12 23:41:40 +00:00

reply-routing.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

reply-tags.ts

refactor: unify inline directives and media fetch

2026-01-10 03:01:04 +01:00

reply-threading.ts

feat(slack): add dm-specific replyToMode configuration (#1442)

2026-01-23 05:13:23 +00:00

response-prefix-template.test.ts

feat: add dynamic template variables to messages.responsePrefix (#923)

2026-01-14 23:05:08 -05:00

response-prefix-template.ts

feat: add dynamic template variables to messages.responsePrefix (#923)

2026-01-14 23:05:08 -05:00

route-reply.test.ts

fix(slack): respect verbose setting and preserve thread context for tool notifications

2026-01-21 06:29:36 +00:00

route-reply.ts

fix: preserve subagent thread routing (#1241)

2026-01-20 17:22:07 +00:00

session-reset-model.ts

fix: normalize model override auth handling

2026-01-21 06:00:21 +00:00

session-resets.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

session-updates.ts

style: fix formatting

2026-01-22 17:47:52 +00:00

session.test.ts

feat(sessions): add channelIdleMinutes config for per-channel session idle durations (#1353)

2026-01-21 19:10:31 +00:00

session.ts

feat(sessions): add channelIdleMinutes config for per-channel session idle durations (#1353)

2026-01-21 19:10:31 +00:00

stage-sandbox-media.ts

fix: browser remote tab ops harden (#1057) (thanks @mukhtharcm)

2026-01-17 00:57:35 +00:00

streaming-directives.ts

fix: carry reply tags across streamed chunks

2026-01-22 08:01:34 +00:00

subagents-utils.test.ts

feat(slash-commands): usage footer modes

2026-01-18 05:35:35 +00:00

subagents-utils.ts

feat(slash-commands): usage footer modes

2026-01-18 05:35:35 +00:00

test-ctx.ts

style: oxfmt

2026-01-17 10:26:08 +00:00

test-helpers.ts

fix(typing): keep tool-start ttl mode-safe (#452, thanks @thesash)

2026-01-08 06:18:35 +00:00

typing-mode.ts

feat: implement short ID mapping for BlueBubbles messages and enhance reply context caching

2026-01-21 00:45:01 -08:00

typing.test.ts

test: consolidate auto-reply unit coverage

2026-01-23 18:34:33 +00:00

typing.ts

feat: enhance BlueBubbles functionality by implementing macOS version checks for message editing and improving server info caching

2026-01-20 12:07:54 +00:00