2 commits

Author	SHA1	Message	Date
oliver	31e3962c74	Harden attachment access controls and stabilize the Weixin bridge. ... This persists referenced media safely, adds explicit attachment ACL/backfill flows, and fixes the Weixin sidecar so official login state can bridge reliably into oclaw without duplicate replays or dropped replies. Made-with: Cursor	2026-04-28 15:38:55 +08:00
oliver	6cfaff06f6	Refactor media payload handling to persist base64 blobs as attachment refs and keep non-turn model paths safe by degrading risky payloads. ... This preserves multimodal fidelity for the latest user turn while preventing historical/tool replay bloat, and adds admin UI support for referenced attachment preview/download flows. Made-with: Cursor	2026-04-28 10:30:27 +08:00