fix(external-integrations): bound and sanitize streamed and rendered provider content — prevent memory growth and untrusted-output exposure - #775
Closed
unohee wants to merge 7 commits into
Conversation
added 7 commits
September 10, 2026 02:34
This was referenced Sep 27, 2026
unohee
added a commit
that referenced
this pull request
Sep 28, 2026
…gents (#787) Salvaged from draft PRs #758, #775, #782 (all abandoned mid-loop). - support/outputBudget.ts: destination-specific field/message/aggregate limits plus truncate/capArray/paginateEmbedFields/genericUserError helpers. - discord/embedUtils.ts: EMBED_LIMITS + safeAddField/safeSetTitle/ safeSetDescription/safeSetFooter/enforceAggregateBudget/truncateField. - tui/sanitize.ts: sanitizeAndBoundTerminalText, sanitizeAndNeutralize, clampAndSanitize, escapeHtml, formatMonitorError. - codexResponses: incremental createResponsesReducer (no event-history retention) + MAX_FRAME_LENGTH/MAX_REASONING_BUF stream bounds. - discordCore: allowedMentions parse:[] on every reply/send. - Wired: discordHandlers, discordPair, cliRunner, pipelineFormat, tester, reviewer, skillDocumenter, workerAuditLog, workflowLinear, AuditBoard, DataTable, ChatLog, MonitorPanel, en/ko prompts. Co-authored-by: OpenSwarm <openswarm@local>
Collaborator
Author
|
Closing: superseded — the salvageable work in this draft was rebased onto current main, verified, and re-published as a reviewed PR: absorbed into #787. Closing the stale draft instead of merging it, because it was 170-250 commits behind, carried scratch files, and (in several cases) reverted main's later hardening. |
unohee
deleted the
swarm/AGT-3465-fix-external-integrations-bound-and-sani
branch
September 28, 2026 07:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Published because this run stopped and needs a human: autonomous execution failed 4 times
It has not been reviewed and is very likely incomplete — this PR is a draft on purpose. It exists so the work is reviewable instead of sitting on a branch that was never pushed.
Change shape
430 file(s): 213 source · 191 test · 4 docs · 22 other
Base freshness
Branch base is 175 commit(s) behind
mainat publication.⚠ Conflicts with
mainin:src/adapters/codexResponses.tsGitHub runs no
pull_requestworkflows on a PR it cannot merge, so any green checks here are not the verification gate. Opened as a draft; rebase before review.This branch changes files that other open PRs / active branches also touch. Coordinate before merging to avoid divergent parallel edits (INT-2388 #3):
lslssrc/adapters/codexResponses.test.ts,src/adapters/codexResponses.tssrc/discord/discordHandlers.ts,src/tui/sanitize.test.ts,src/tui/sanitize.tssrc/discord/discordHandlers.tssrc/adapters/codexResponses.tsLinear
Closes AGT-3465
🤖 Generated with OpenSwarm