Vatsal Garg d8a1ebbb49 fix(approvals): prevent cross-channel exec approval leak (#122517) ...

Reject unbound foreign-channel fallback at shared approval-account selection while preserving recorded bindings and explicit forwarding targets. Cover Telegram and Matrix routing contracts.

Co-authored-by: vatsalgargg <vatsalg80@gmail.com>
Co-authored-by: Ayaan Zaidi <hi@obviy.us>

2026-08-14 13:11:03 +05:30

..

__traces__

fix: keep background work scoped to its selected agent (#123257)

2026-08-13 11:29:31 -07:00

matrix

fix: keep background work scoped to its selected agent (#123257)

2026-08-13 11:29:31 -07:00

test-support

…

account-selection.test.ts

…

account-selection.ts

refactor: consolidate coercion ownership (#122692)

2026-08-12 09:25:28 -07:00

actions.account-propagation.test.ts

fix(matrix): require owner access for verification actions (#121532)

2026-08-10 15:15:50 +05:30

actions.test.ts

fix(matrix): require owner access for verification actions (#121532)

2026-08-10 15:15:50 +05:30

actions.ts

fix(matrix): require owner access for verification actions (#121532)

2026-08-10 15:15:50 +05:30

approval-auth.test.ts

…

approval-auth.ts

…

approval-handler.runtime.test.ts

…

approval-handler.runtime.ts

…

approval-ids.ts

…

approval-native.test.ts

…

approval-native.ts

…

approval-reaction-auth.ts

…

approval-reactions.test.ts

…

approval-reactions.ts

refactor(channels): share persistent state error reporting (#117813)

2026-08-01 22:06:25 -07:00

auth-precedence.ts

…

channel-account-paths.ts

refactor(errors): consolidate message formatting (#117818)

2026-08-01 22:05:49 -07:00

channel-message-adapter.ts

fix(matrix): reconcile durable sends after response loss

2026-08-01 02:45:12 -05:00

channel.account-paths.test.ts

…

channel.directory.test.ts

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

channel.message-adapter.test.ts

fix(matrix): preserve complete multi-event delivery receipts (#118128)

2026-08-02 12:04:05 -07:00

channel.resolve.test.ts

…

channel.runtime.ts

fix(matrix): reconcile durable sends after response loss

2026-08-01 02:45:12 -05:00

channel.setup.test.ts

refactor(channels): move single-account promotion keys to plugin declarations (#112293)

2026-07-21 06:48:30 -07:00

channel.setup.ts

refactor(channels): unify setup ownership across bundled channels (#117188)

2026-07-31 20:33:20 -07:00

channel.threading.test.ts

fix(matrix): preserve message-tool room thread routing (#116802)

2026-07-31 05:05:16 -07:00

channel.ts

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

cli-account.ts

refactor(errors): consolidate message formatting (#117818)

2026-08-01 22:05:49 -07:00

cli-devices.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

cli-direct.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

cli-encryption.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

cli-metadata.ts

…

cli-profile.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

cli-shared.ts

refactor(errors): consolidate message formatting (#117818)

2026-08-01 22:05:49 -07:00

cli-verification-backup.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

cli-verification.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

cli.test.ts

test(matrix): deduplicate CLI fixtures (#117651)

2026-08-01 15:05:02 -07:00

cli.ts

refactor(matrix): split CLI command groups (#113664)

2026-07-25 06:37:08 -07:00

config-adapter.ts

…

config-schema.test.ts

fix(matrix): accept documented automatic approval mode (#115676)

2026-07-29 03:37:19 -04:00

config-schema.ts

fix(channels): config validation rejects documented channels.<id>.configWrites on 13 channels (#117206)

2026-08-01 15:33:16 +08:00

config-ui-hints.ts

…

delivery-trace.test.ts

fix: keep background work scoped to its selected agent (#123257)

2026-08-13 11:29:31 -07:00

directory-live.test.ts

…

directory-live.ts

…

doctor-contract.ts

refactor: consolidate coercion ownership (#122692)

2026-08-12 09:25:28 -07:00

doctor.test.ts

…

doctor.ts

perf(doctor): delete the heavy doctor barrel and finish slimming enumeration (#120882)

2026-08-08 22:01:44 -07:00

env-vars.test.ts

fix(matrix): ignore out-of-range hex escapes in env account tokens (#120428)

2026-08-08 12:24:41 -07:00

env-vars.ts

fix(matrix): ignore out-of-range hex escapes in env account tokens (#120428)

2026-08-08 12:24:41 -07:00

exec-approvals.test.ts

fix(approvals): prevent cross-channel exec approval leak (#122517)

2026-08-14 13:11:03 +05:30

exec-approvals.ts

fix(approvals): bind native requests to channel accounts (#121673)

2026-08-11 01:42:41 +05:30

group-mentions.test.ts

…

group-mentions.ts

…

onboarding.resolve.test.ts

…

onboarding.test-harness.ts

…

onboarding.test.ts

fix(onboarding): label and mask wizard inputs (#112233)

2026-07-21 02:46:35 -07:00

onboarding.ts

refactor: remove 3,543 lines of redundant runtime and tests (#115961)

2026-07-29 11:43:41 -04:00

outbound.test.ts

fix(matrix): preserve payload delivery ownership (#121006)

2026-08-10 16:30:11 +08:00

outbound.ts

refactor: consolidate coercion helpers (#121366)

2026-08-11 00:02:18 -07:00

plugin-entry.runtime.js

refactor: consolidate coercion contracts (#122458)

2026-08-11 23:26:37 -07:00

plugin-entry.runtime.test.ts

refactor: remove expired plugin compatibility surfaces (#111451)

2026-07-19 11:04:48 -07:00

plugin-entry.runtime.ts

refactor(errors): consolidate message formatting (#117818)

2026-08-01 22:05:49 -07:00

profile-update.ts

…

resolve-targets.test.ts

…

resolve-targets.ts

…

resolver.runtime.ts

…

resolver.ts

…

runtime-api.ts

refactor(channels): move inbound turn execution into core (#110095)

2026-07-18 00:55:46 +01:00

runtime.ts

…

secret-contract.ts

fix: keep healthy channel accounts running when one credential fails (#109766)

2026-07-17 01:12:18 -07:00

session-route.test.ts

fix(matrix): preserve message-tool room thread routing (#116802)

2026-07-31 05:05:16 -07:00

session-route.ts

fix(matrix): preserve message-tool room thread routing (#116802)

2026-07-31 05:05:16 -07:00

setup-bootstrap.ts

refactor(errors): consolidate message formatting (#117818)

2026-08-01 22:05:49 -07:00

setup-config.ts

refactor(channels): shrink ChannelSetupInput to a generic envelope with a deprecated compatibility tier (#112319)

2026-07-21 22:17:03 -07:00

setup-contract.ts

refactor(channels): move single-account promotion keys to plugin declarations (#112293)

2026-07-21 06:48:30 -07:00

setup-core.test.ts

refactor(channels): trim deprecated setup-input fields and legacy promotion keys to published readers (#112587)

2026-07-22 01:15:58 -07:00

setup-core.ts

refactor: remove 3,543 lines of redundant runtime and tests (#115961)

2026-07-29 11:43:41 -04:00

setup-dm-policy.ts

refactor: remove 3,543 lines of redundant runtime and tests (#115961)

2026-07-29 11:43:41 -04:00

setup-surface.ts

…

storage-paths.ts

…

test-runtime.test.ts

test(matrix): isolate runtime state (#118892)

2026-08-03 12:28:49 -07:00

test-runtime.ts

test(matrix): isolate runtime state (#118892)

2026-08-03 12:28:49 -07:00

thread-binding-api.test.ts

…

thread-binding-api.ts

…

tool-actions.runtime.ts

…

tool-actions.test.ts

fix(matrix): preserve indented code without triggering mentions (#118497)

2026-08-02 23:13:11 -07:00

tool-actions.ts

fix(matrix): preserve indented code without triggering mentions (#118497)

2026-08-02 23:13:11 -07:00

types.ts

fix(matrix): accept documented automatic approval mode (#115676)

2026-07-29 03:37:19 -04:00