惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Google DeepMind News
Google DeepMind News
F
Fortinet All Blogs
阮一峰的网络日志
阮一峰的网络日志
Apple Machine Learning Research
Apple Machine Learning Research
爱范儿
爱范儿
WordPress大学
WordPress大学
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
J
Java Code Geeks
罗磊的独立博客
S
SegmentFault 最新的问题
V
V2EX
V
Visual Studio Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
美团技术团队
博客园 - 三生石上(FineUI控件)
Stack Overflow Blog
Stack Overflow Blog
Y
Y Combinator Blog
MyScale Blog
MyScale Blog
D
Docker
Google DeepMind News
Google DeepMind News
Blog — PlanetScale
Blog — PlanetScale
M
Microsoft Research Blog - Microsoft Research
Martin Fowler
Martin Fowler
S
Secure Thoughts
B
Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
www.infosecurity-magazine.com
www.infosecurity-magazine.com
Recent Announcements
Recent Announcements
MongoDB | Blog
MongoDB | Blog
C
Cisco Blogs
C
CERT Recently Published Vulnerability Notes
T
True Tiger Recordings
GbyAI
GbyAI
P
Proofpoint News Feed
P
Privacy International News Feed
Jina AI
Jina AI
The Cloudflare Blog
I
Intezer
AWS News Blog
AWS News Blog
Hacker News - Newest:
Hacker News - Newest: "LLM"
S
Security Archives - TechRepublic
NISL@THU
NISL@THU
The Register - Security
The Register - Security
Recent Commits to openclaw:main
Recent Commits to openclaw:main
P
Palo Alto Networks Blog
S
Schneier on Security
L
LINUX DO - 热门话题
C
CXSECURITY Database RSS Feed - CXSecurity.com
Security Latest
Security Latest
C
Cybersecurity and Infrastructure Security Agency CISA

Recent Commits to openclaw:main

test(qa-lab): report scenario pack coverage · openclaw/openclaw@dcd98bf fix(plugins): drop stale tlon tool contract · openclaw/openclaw@d70dc4b fix(installer): prefer tar for portable Node extraction · openclaw/openclaw@a54a881 fix(codex): deliver native subagent completions feat: add context-engine host capability requirements (#84994) · openclaw/openclaw@cff5244 fix(release): keep shrinkwrap pinned to pnpm lock · openclaw/openclaw@9d24fde fix: surface plan updates as status notices · openclaw/openclaw@dc04503 test(google): narrow web search fake timers · openclaw/openclaw@fe7d13c fix(installer): extract portable Node with ZipFile · openclaw/openclaw@ffa6cd8 fix(gateway): defer provider auth prewarm after startup (#85369) · openclaw/openclaw@69255f8 fix(talk): stabilize realtime voice consults · openclaw/openclaw@683ad75 test(qa): tolerate slow gateway rpc startup · openclaw/openclaw@29118a0 fix(diagnostics): surface async queue drops fix(diagnostics): bound diagnostic buffers · openclaw/openclaw@bdcaac0 chore(diagnostics): refresh plugin sdk baseline · openclaw/openclaw@ab684f5 fix(installer): copy portable Node into place · openclaw/openclaw@c21ca88 fix(cli): recover replaced device approvals (#85342) · openclaw/openclaw@6ea907c test(release): align prerelease validation · openclaw/openclaw@0def3e2 fix(installer): install portable Node directory atomically · openclaw/openclaw@2890b1a fix(runtime-llm): avoid duplicate provider prefix in allowlist diagno… · openclaw/openclaw@937a756 fix(gateway): include openclaw bin in service PATH (#84475) · openclaw/openclaw@66d1d13 fix(gateway): handle concurrent launchd bootstrap restart race (#84722) · openclaw/openclaw@ba86716 feat: support pi and opencode autoreview engines · openclaw/openclaw@31a189d ci(package): gate acceptance on package integrity · openclaw/openclaw@5275929 ci(release): bypass pnpm for tsdown package build · openclaw/openclaw@fea89cd test(release): align prerelease validation baselines · openclaw/openclaw@04ebdc6 ci(release): harden docker package build · openclaw/openclaw@7b1fbe1 fix(codex): skip native web search transcript mirroring (#85346) · openclaw/openclaw@c3531fc fix(gateway): harden launchd reload handoff race recovery (#84641) · openclaw/openclaw@fc7a531 fix: honor per-model provider transport overrides (#80488) fix(skills): dedupe shared-directory watchers across agent workspaces… · openclaw/openclaw@3e94290 fix(skills): document watcher edge cases, add teardown/rebuild tests,… · openclaw/openclaw@19ff77e fix(skills): type watcher mock calls in dedupe regression tests · openclaw/openclaw@bb73f0a fix(infra): allow macos browser open over ssh env (#85340) · openclaw/openclaw@47d66fe fix(update): preserve package service state during cutover (#83026) · openclaw/openclaw@a15797a fix(gateway): broadcast agent-run error payloads (#85355) · openclaw/openclaw@07e61fc test(e2e): avoid synthetic channel config in plugin smoke fix(cli): suppress systemd hints for live gateway (#85336) · openclaw/openclaw@a00c583 fix(cli): honor agent for model auth logout (#85326) · openclaw/openclaw@fc47c1f fix(gateway): eager-load lifecycle runtime to survive in-place upgrad… · openclaw/openclaw@4a91385 fix(doctor): point codex asset warning at migrate plan (#85324) fix(update): harden managed handoff cwd (#83875) · openclaw/openclaw@1bafc23 docs(release): prepare 2026.5.21 notes ci(crabbox): harden docker hydration refactor(crabbox): parse provider list from binary help instead of ha… test(plugins): keep rpc source walk on source call gateway test(plugins): add kitchen sink rpc docker lane · openclaw/openclaw@6f6da5f test(plugins): run kitchen sink rpc lane without tsx test(qa-lab): add bus tool trace scenario · openclaw/openclaw@2b39613 fix(cron): classify network retry errors (#85344) fix(installer): bootstrap portable Windows Node · openclaw/openclaw@3551e98 fix(ui): move chat session search into picker (#85303) · openclaw/openclaw@1fdc73a chore: harden npm shrinkwrap release path chore: refresh shrinkwrap for Testbox npm · openclaw/openclaw@b2dc449 chore: add shrinkwrap to plugin npm packages · openclaw/openclaw@b6c8807 feat: bundle plugin npm dependencies · openclaw/openclaw@de022bb test: update shrinkwrap packaging expectations · openclaw/openclaw@a1b05aa fix: include plugin shrinkwraps in dependency reports · openclaw/openclaw@82f69a2 fix: make bundled plugin packages portable fix: opt acpx out of bundled runtime deps · openclaw/openclaw@9914e25 fix: cover plugin package locks in dependency review · openclaw/openclaw@bfa5b39 fix: opt codex out of bundled runtime deps · openclaw/openclaw@fcecbd8 fix: keep bundled plugin peers nested · openclaw/openclaw@86faf65 fix: honor overrides in npm shrinkwrap generation · openclaw/openclaw@0d28040 chore: refresh shrinkwrap metadata fix: honor shrinkwrap when bundling plugin deps fix: publish explicit plugin bundled dependencies · openclaw/openclaw@976da39 test: refresh shrinkwrap after rebase · openclaw/openclaw@8b0537c fix: limit subagent bootstrap defaults · openclaw/openclaw@56308a7 feat: update autoreview engine coverage · openclaw/openclaw@ab1fedb fix(messages): strip unsupported citation markers (#85204) (thanks @n… · openclaw/openclaw@0a95e53 test(qa-lab): report live transport coverage lanes · openclaw/openclaw@fda0baf fix(gateway): close child ACP sessions on parent reset/delete · openclaw/openclaw@136c927 fix: preserve Google Gemini 3 cron thinking (#85300) docs(skills): exclude SDK boundary bug sweeps · openclaw/openclaw@85e468d feat(plugin-sdk): add generic channel poll sender (#85299) · openclaw/openclaw@c9a0f03 fix(agents): preserve OpenAI reasoning token usage · openclaw/openclaw@0ddf51c test(e2e): harden plugin smoke cleanup fix(plugins): resolve native plugin sdk aliases (#85298) · openclaw/openclaw@6b1c868 fix(update): keep service logs out of json output · openclaw/openclaw@03f61cd fix(agent): retry transient gateway handshake closes · openclaw/openclaw@ff79299 fix(codex): keep interrupted turns visible-answer eligible (#84494) · openclaw/openclaw@8523e09 test(agents): narrow bundle mcp e2e setup · openclaw/openclaw@6bd430e test: add mocked Control UI E2E tests and playwright for local verifi… fix: land code-mode structured worker errors (#83444) (thanks @Kaspre) · openclaw/openclaw@70dd315 fix(code-mode): return structured worker error codes · openclaw/openclaw@edab653 fix: route direct thread event wakes to main DMs · openclaw/openclaw@0acfb7b fix heartbeat event routing for main-scoped DMs test: align exec event routing proof (#83743) (thanks @Kaspre) · openclaw/openclaw@7b48956 fix: preserve route-bound direct thread events · openclaw/openclaw@0d8c9ca fix: break plugin metadata snapshot cycle · openclaw/openclaw@4ee8a2a test node exec event wake metadata · openclaw/openclaw@37207c6 test(plugins): retry bundled smoke health probes test(gateway): bind auth-free websocket harness to loopback · openclaw/openclaw@2b1c01f test(plugins): keep npm peer prune mock directory-safe · openclaw/openclaw@a12e302 chore(ui): refresh fa control ui locale fix(ci): allow release update restarts · openclaw/openclaw@b859654 chore(ui): refresh nl control ui locale · openclaw/openclaw@cc6d222 chore(ui): refresh vi control ui locale · openclaw/openclaw@b59ab5b chore(ui): refresh th control ui locale · openclaw/openclaw@f483f59
fix(gateway): require trusted local audio display media · openclaw/openclaw@8560760
vincentkoc · 2026-05-16 · via Recent Commits to openclaw:main

@@ -2,15 +2,25 @@ import { resolveAgentWorkspaceDir } from "../../agents/agent-scope.js";

22

import type { ReplyPayload } from "../../auto-reply/reply-payload.js";

33

import { createReplyMediaPathNormalizer } from "../../auto-reply/reply/reply-media-paths.runtime.js";

44

import type { OpenClawConfig } from "../../config/types.openclaw.js";

5+

import { isPassThroughRemoteMediaSource } from "../../media/media-source-url.js";

56

import { isAudioFileName } from "../../media/mime.js";

67

import { resolveSendableOutboundReplyParts } from "../../plugin-sdk/reply-payload.js";

7889

function isDataUrlMedia(mediaUrl: string): boolean {

910

return mediaUrl.trim().toLowerCase().startsWith("data:");

1011

}

111212-

function shouldPreserveDisplayMediaUrl(mediaUrl: string): boolean {

13-

return isDataUrlMedia(mediaUrl) || isAudioFileName(mediaUrl);

13+

function shouldPreserveDisplayMediaUrl(payload: ReplyPayload, mediaUrl: string): boolean {

14+

if (isDataUrlMedia(mediaUrl)) {

15+

return true;

16+

}

17+

if (!isAudioFileName(mediaUrl)) {

18+

return false;

19+

}

20+

if (isPassThroughRemoteMediaSource(mediaUrl)) {

21+

return true;

22+

}

23+

return payload.trustedLocalMedia === true;

1424

}

15251626

export async function normalizeWebchatReplyMediaPathsForDisplay(params: {

@@ -42,18 +52,18 @@ export async function normalizeWebchatReplyMediaPathsForDisplay(params: {

4252

continue;

4353

}

4454

const mediaUrls = resolveSendableOutboundReplyParts(payload).mediaUrls;

45-

if (!mediaUrls.some(shouldPreserveDisplayMediaUrl)) {

55+

if (!mediaUrls.some((mediaUrl) => shouldPreserveDisplayMediaUrl(payload, mediaUrl))) {

4656

normalized.push(await normalizeMediaPaths(payload));

4757

continue;

4858

}

49-

if (!mediaUrls.some((mediaUrl) => !shouldPreserveDisplayMediaUrl(mediaUrl))) {

59+

if (!mediaUrls.some((mediaUrl) => !shouldPreserveDisplayMediaUrl(payload, mediaUrl))) {

5060

normalized.push(payload);

5161

continue;

5262

}

5363

const mergedMediaUrls: string[] = [];

5464

let text = payload.text;

5565

for (const mediaUrl of mediaUrls) {

56-

if (shouldPreserveDisplayMediaUrl(mediaUrl)) {

66+

if (shouldPreserveDisplayMediaUrl(payload, mediaUrl)) {

5767

mergedMediaUrls.push(mediaUrl);

5868

continue;

5969

}