Teknium 72d53e14ae fix(compaction): redact credential-like values from summary pipeline ... Port from openclaw/openclaw#67801. The context compressor's summarizer prompt instructs the model to preserve specific values (file paths, commands, error messages, etc.) so it can produce concrete handoffs. That instruction also caused API keys, bearer tokens, and env-var assignments surfaced through tool output (terminal, read_file, curl -v) to be copied verbatim into the persistent summary and re-injected on every subsequent compaction. Apply agent.redact.redact_sensitive_text at three points: - serializer output (primary defense) - previous-summary re-injection on iterative compaction - LLM-returned summary before storage in _previous_summary agent/redact.py already had the full pattern set; it was wired only to log formatters and cron scrubbing, never to compression. Tests: 6 regression cases covering API-key prefixes, env assignments, authorization headers, JSON token fields, non-secret content preservation, and summarizer-echo defense. Refs: openclaw/openclaw#67801		2026-04-19 17:13:42 -07:00
..
acp	fix(acp): improve zed integration	2026-04-17 13:29:26 -07:00
agent	fix(compaction): redact credential-like values from summary pipeline	2026-04-19 17:13:42 -07:00
cli	fix(cli): sanitize interactive command output	2026-04-19 01:16:34 -07:00
cron	feat(skills): consolidate find-nearby into maps as a single location skill	2026-04-19 05:19:22 -07:00
e2e	refactor: extract shared helpers to deduplicate repeated code patterns (#7917)	2026-04-11 13:59:52 -07:00
environments/benchmarks	fix(security): consolidated security hardening — SSRF, timing attack, tar traversal, credential leakage (#5944)	2026-04-07 17:28:37 -07:00
fakes	fix: streaming tool call parsing, error handling, and fake HA state mutation	2026-03-14 14:27:20 +03:00
gateway	fix(feishu): hydrate bot open_id for manual-setup users	2026-04-19 11:36:04 -07:00
hermes_cli	fix(gemini): tighten native routing and streaming replay	2026-04-19 12:40:08 -07:00
honcho_plugin	feat(honcho): wizard cadence default 2, surface reasoning level, backwards-compat fallback	2026-04-18 22:50:55 -07:00
integration	fix(discord): strip RTP padding before DAVE/Opus decode (#11267)	2026-04-16 16:50:15 -07:00
plugins	test: speed up slow tests (backoff + subprocess + IMDS network) (#11797)	2026-04-17 14:21:22 -07:00
run_agent	fix(tests): unstick CI — sweep stale tests from recent merges (#12670)	2026-04-19 12:39:58 -07:00
skills	fix(google-workspace): normalize authorized user token writes	2026-04-16 04:22:16 -07:00
tools	fix(terminal): rewrite A && B & to A && { B & } to prevent subshell leak	2026-04-19 16:53:11 -07:00
tui_gateway	fix(tui-gateway): dispatch slow RPC handlers on a thread pool (#12546)	2026-04-19 07:47:15 -05:00
__init__.py
conftest.py	Support browser CDP URL from config	2026-04-17 16:05:04 -07:00
run_interrupt_test.py	fix: thread safety for concurrent subagent delegation (#1672)	2026-03-17 02:53:33 -07:00
test_batch_runner_checkpoint.py	fix: sanitize chat payloads and provider precedence	2026-03-13 23:59:12 -07:00
test_cli_file_drop.py	fix(gateway): reject file paths in get_command() + file-drop tests (#7356)	2026-04-10 13:06:02 -07:00
test_cli_skin_integration.py	fix: CLI/UX batch — ChatConsole errors, curses scroll, skin-aware banner, git state banner (#5974)	2026-04-07 17:59:42 -07:00
test_ctx_halving_fix.py	fix(tests): fix 78 CI test failures and remove dead test (#9036)	2026-04-13 10:50:24 -07:00
test_empty_model_fallback.py	fix: fall back to provider's default model when model config is empty (#8303)	2026-04-12 03:53:30 -07:00
test_evidence_store.py	feat: add OSS Security Forensics skill (Skills Hub) (#1482)	2026-03-15 21:59:53 -07:00
test_hermes_constants.py	fix(gateway): harden Docker/container gateway pathway	2026-04-12 16:36:11 -07:00
test_hermes_logging.py	fix(tests): fix 78 CI test failures and remove dead test (#9036)	2026-04-13 10:50:24 -07:00
test_hermes_state.py	test(session-search): regression coverage for CJK LIKE fallback	2026-04-18 01:57:57 -07:00
test_honcho_client_config.py	feat(memory): pluggable memory provider interface with profile isolation, review fixes, and honcho CLI restoration (#4623)	2026-04-02 15:33:51 -07:00
test_ipv4_preference.py	feat: add network.force_ipv4 config to fix IPv6 timeout issues (#8196)	2026-04-11 23:12:11 -07:00
test_mcp_serve.py	feat: add MCP server mode — hermes mcp serve (#3795)	2026-03-29 15:47:19 -07:00
test_mini_swe_runner.py	fix(kimi): cover remaining fixed-temperature bypasses	2026-04-17 20:25:42 -07:00
test_minisweagent_path.py	chore: remove all remaining mini-swe-agent references	2026-03-24 08:19:23 -07:00
test_model_picker_scroll.py	fix: CLI/UX batch — ChatConsole errors, curses scroll, skin-aware banner, git state banner (#5974)	2026-04-07 17:59:42 -07:00
test_model_tools.py	feat(plugins): let pre_tool_call hooks block tool execution	2026-04-13 22:01:49 -07:00
test_model_tools_async_bridge.py	fix: use per-thread persistent event loops in worker threads	2026-03-20 15:41:06 -04:00
test_ollama_num_ctx.py	fix: provider/model resolution — salvage 4 PRs + MiniMax aux URL fix (#5983)	2026-04-07 22:23:28 -07:00
test_packaging_metadata.py	chore: prepare Hermes for Homebrew packaging (#4099)	2026-03-30 17:34:43 -07:00
test_plugin_skills.py	fix(tests): attach caplog to specific logger in 3 order-dependent tests (#11453)	2026-04-17 00:20:40 -07:00
test_project_metadata.py	build(deps): add qrcode to dingtalk + feishu extras (parity with messaging) (#11627)	2026-04-17 13:31:53 -07:00
test_retry_utils.py	feat(agent): add jittered retry backoff	2026-04-08 00:41:36 -07:00
test_sql_injection.py	fix(security): eliminate SQL string formatting in execute() calls	2026-03-19 15:16:35 +01:00
test_subprocess_home_isolation.py	fix: per-profile subprocess HOME isolation (#4426) (#7357)	2026-04-10 13:37:45 -07:00
test_timezone.py	test: speed up slow tests (backoff + subprocess + IMDS network) (#11797)	2026-04-17 14:21:22 -07:00
test_toolset_distributions.py
test_toolsets.py	fix(mcp): make server aliases explicit	2026-04-14 17:19:20 -07:00
test_trajectory_compressor.py	fix(kimi): cover remaining fixed-temperature bypasses	2026-04-17 20:25:42 -07:00
test_trajectory_compressor_async.py	fix(kimi): cover remaining fixed-temperature bypasses	2026-04-17 20:25:42 -07:00
test_tui_gateway_server.py	fix(tui): /model picker surfaces curated list, matching classic CLI (#12671)	2026-04-19 16:15:22 -07:00
test_utils_truthy_values.py	Gate tool-gateway behind an env var, so it's not in users' faces until we're ready. Even if users enable it, it'll be blocked server-side for now, until we unlock for non-admin users on tool-gateway.	2026-03-30 13:28:10 +09:00