Peter Steinberger 3aa94afcfd

fix(security): harden archive extraction (#16203) ...

* fix(browser): confine upload paths for file chooser

* fix(browser): sanitize suggested download filenames

* chore(lint): avoid control regex in download sanitizer

* test(browser): cover absolute escape paths

* docs(browser): update upload example path

* refactor(browser): centralize upload path confinement

* fix(infra): harden tmp dir selection

* fix(security): harden archive extraction

* fix(infra): harden tar extraction filter

2026-02-14 14:42:08 +01:00

..

agent-step.ts

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

agents-list-tool.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-tool.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

browser-tool.schema.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-tool.ts

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

canvas-tool.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

common.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

common.ts

fix: classify /tools/invoke errors and sanitize 500s (#13185) (thanks @davidrudduck)

2026-02-13 16:58:30 +01:00

cron-tool.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

cron-tool.ts

refactor: centralize isPlainObject, isRecord, isErrno, isLoopbackHost utilities (#12926)

2026-02-09 17:02:55 -08:00

discord-actions-guild.ts

Discord: handle thread edit params

2026-02-12 16:31:06 -06:00

discord-actions-messaging.ts

Discord: refine voice message handling

2026-02-13 12:44:14 -06:00

discord-actions-moderation.ts

fix: honor accountId in message actions

2026-01-23 09:06:04 +00:00

discord-actions-presence.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

discord-actions-presence.ts

Address PR feedback

2026-02-04 04:02:38 +00:00

discord-actions.e2e.test.ts

Discord: refine voice message handling

2026-02-13 12:44:14 -06:00

discord-actions.ts

feat(discord): add set-presence action for bot activity and status

2026-02-04 04:02:38 +00:00

gateway-tool.ts

fix: defer gateway restart until all replies are sent (#12970)

2026-02-14 00:29:29 +01:00

gateway.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

gateway.ts

fix(cron): fix timeout, add timestamp validation, enable file sync

2026-02-04 01:03:59 -08:00

image-tool.e2e.test.ts

fix: increase image tool maxTokens from 512 to 4096 (#11770)

2026-02-13 17:52:27 +01:00

image-tool.helpers.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

image-tool.ts

fix: increase image tool maxTokens from 512 to 4096 (#11770)

2026-02-13 17:52:27 +01:00

memory-tool.citations.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

memory-tool.does-not-crash-on-errors.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

memory-tool.ts

chore: oxfmt

2026-02-02 23:45:05 -08:00

message-tool.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

message-tool.ts

fix: resolve message tool lint error (#13453) (thanks @liebertar)

2026-02-10 15:09:58 -05:00

nodes-tool.ts

fix(gateway): bind system.run approvals to exec approvals

2026-02-14 13:27:45 +01:00

nodes-utils.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

session-status-tool.ts

fix: land multi-agent session path fix + regressions (#15103) (#15448)

2026-02-13 14:17:24 +01:00

sessions-announce-target.e2e.test.ts

perf(test): eliminate resetModules via injectable seams

2026-02-13 16:20:37 +00:00

sessions-announce-target.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

sessions-helpers.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

sessions-helpers.ts

Agents: scope sanitizeUserFacingText rewrites to errorContext

2026-02-09 19:52:24 -06:00

sessions-history-tool.ts

Cap sessions_history payloads to prevent context overflow (#10000)

2026-02-05 17:50:57 -08:00

sessions-list-tool.gating.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

sessions-list-tool.ts

fix: harden session transcript path resolution

2026-02-13 01:28:17 +01:00

sessions-send-helpers.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

sessions-send-tool.a2a.ts

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

sessions-send-tool.gating.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

sessions-send-tool.ts

fix: preserve inter-session input provenance (thanks @anbecker)

2026-02-13 02:02:01 +01:00

sessions-spawn-tool.ts

fix: cron scheduler reliability, store hardening, and UX improvements (#10776)

2026-02-06 18:03:03 -08:00

slack-actions.e2e.test.ts

fix(slack): apply limit parameter to emoji-list action (#13421)

2026-02-13 18:20:41 +01:00

slack-actions.ts

fix(slack): apply limit parameter to emoji-list action (#13421)

2026-02-13 18:20:41 +01:00

telegram-actions.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

telegram-actions.ts

fix(telegram): surface REACTION_INVALID as non-fatal warning (#14340)

2026-02-12 00:28:47 -06:00

tts-tool.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

web-fetch-utils.ts

perf(web-fetch): memoize readability dependency loading

2026-02-14 01:29:45 +00:00

web-fetch.cf-markdown.test.ts

perf(test): cut setup/import overhead in hot suites

2026-02-13 21:23:50 +00:00

web-fetch.firecrawl-api-key-normalization.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

web-fetch.ssrf.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

web-fetch.ts

feat(web-fetch): support Cloudflare Markdown for Agents (#15376)

2026-02-13 15:46:20 +01:00

web-search.e2e.test.ts

feat: support freshness parameter for Perplexity web_search provider (#15343)

2026-02-13 22:18:16 -05:00

web-search.ts

feat: support freshness parameter for Perplexity web_search provider (#15343)

2026-02-13 22:18:16 -05:00

web-shared.ts

perf: use .abort.bind() instead of arrow closures to prevent memory leaks (#7174)

2026-02-13 18:13:18 +01:00

web-tools.enabled-defaults.e2e.test.ts

feat: support freshness parameter for Perplexity web_search provider (#15343)

2026-02-13 22:18:16 -05:00

web-tools.fetch.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

web-tools.readability.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

web-tools.ts

refactor: split web tools and docs

2026-01-18 01:42:54 +00:00

whatsapp-actions.e2e.test.ts

test: migrate suites to e2e coverage layout

2026-02-13 14:28:22 +00:00

whatsapp-actions.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00