mirror of
https://github.com/outbackdingo/optimclaw.git
synced 2026-08-25 14:53:34 +00:00
- Add 30s tokio::time::timeout around transcription middleware to prevent
a slow/hanging Whisper API from blocking the message pipeline (DoS)
- Extract shared EmittedMessage→IncomingMessage conversion into
convert_emitted_to_incoming() helper, eliminating duplication between
process_emitted_messages and dispatch_emitted_messages
- Sanitize file_id and file_path in Telegram voice download to reject
curly braces, preventing credential placeholder injection via malicious
file_id values like "{OPENAI_API_KEY}"
Co-Authored-By: Claude Opus 4.6 <[email protected]>