vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-17 17:01:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: show marketplace feed trust state (#98350)

Browse Source
This commit is contained in:
Gio Della-Libera
2026-07-09 11:27:04 -07:00
committed by GitHub
parent a9578436de
commit 188d109eda
3 changed files with 170 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
src/cli/plugins-cli.runtime.ts
View File

@@ -467,9 +467,18 @@ type MarketplaceRefreshPayload = {
snapshot?: {
savedAt: string;
};
trust?: MarketplaceFeedTrustPayload;
error?: string;
};
type MarketplaceFeedTrustPayload = {
mode: "signed";
signedBy: string;
signatureCount: number;
threshold: number;
verifiedAt: string;
};
type MarketplaceEntryPayload = {
id?: string;
label: string;
@@ -559,6 +568,12 @@ function emitMarketplaceFeedTelemetry(params: {
if (params.payload.snapshot) {
attributes.snapshotUsed = true;
}
if (params.payload.trust) {
attributes.feedTrustVerified = true;
attributes.feedTrustMode = params.payload.trust.mode;
attributes.feedTrustSignatureCount = params.payload.trust.signatureCount;
attributes.feedTrustThreshold = params.payload.trust.threshold;
}
const fallbackCategory = classifyMarketplaceFeedFallback(params.payload.error);
if (fallbackCategory) {
attributes.fallbackCategory = fallbackCategory;
@@ -597,6 +612,15 @@ function buildMarketplaceRefreshPayload(
generatedAt: result.feed.generatedAt,
sequence: result.feed.sequence,
};
if (result.trust) {
payload.trust = {
mode: result.trust.mode,
signedBy: result.trust.signedBy,
signatureCount: result.trust.signatureCount,
threshold: result.trust.threshold,
verifiedAt: result.trust.verifiedAt,
};
}
}
if (result.source === "hosted-snapshot") {
payload.snapshot = { savedAt: result.snapshot.savedAt };
@@ -681,6 +705,10 @@ function formatMarketplaceRefreshSource(source: MarketplaceRefreshPayload["sourc
return theme.warn("bundled fallback");
}
function formatMarketplaceFeedTrust(trust: MarketplaceFeedTrustPayload): string {
return `${trust.mode} by ${trust.signedBy} (${trust.signatureCount}/${trust.threshold}) verified ${trust.verifiedAt}`;
}
function shouldFailPinnedMarketplaceRefresh(params: {
expectedSha256?: string;
source: MarketplaceRefreshPayload["source"];
@@ -778,6 +806,9 @@ export async function runPluginMarketplaceEntriesCommand(
if (summary.snapshot?.savedAt) {
lines.push(theme.muted("Snapshot:") + " " + summary.snapshot.savedAt);
}
if (summary.trust) {
lines.push(theme.muted("Trust:") + " " + formatMarketplaceFeedTrust(summary.trust));
}
if (summary.error) {
lines.push(theme.muted("Fallback reason:") + " " + summary.error);
}
@@ -845,6 +876,9 @@ export async function runPluginMarketplaceRefreshCommand(
if (payload.snapshot?.savedAt) {
lines.push(`${theme.muted("Snapshot:")} ${payload.snapshot.savedAt}`);
}
if (payload.trust) {
lines.push(`${theme.muted("Trust:")} ${formatMarketplaceFeedTrust(payload.trust)}`);
}
if (payload.error) {
lines.push(`${theme.muted("Fallback reason:")} ${payload.error}`);
}