sallyom
4ba02b83e8
refactor(sandbox): share container backend with Podman
...
Signed-off-by: sallyom <somalley@redhat.com >
2026-07-31 00:06:33 -04:00
Mrunal Patel
903276c798
Add Podman sandbox backend
...
Closes #101348
Adds a bundled podman sandbox backend, SDK helper exports, policy/Codex integration, generated plugin docs, and focused tests.
2026-07-30 20:20:42 -04:00
Peter Steinberger
669db2968f
refactor(agents): retire TOOLS.md into an AGENTS.md section with a doctor migration ( #113966 )
...
* fix(agents): stop retired attestation hashes from faking a vanished workspace
* feat(agents): migrate TOOLS.md content into the AGENTS.md tools section
* refactor(agents): drop TOOLS.md from the workspace bootstrap set
* refactor(policy): read tool policy entries from AGENTS.md
* docs: describe local tool notes as an AGENTS.md section
* test(codex): drop TOOLS.md developer-instruction coverage with the removed path
* test(agents): cover the TOOLS.md doctor migration behaviors
* refactor(doctor): satisfy TOOLS.md migration lint
* test(agents): split workspace attestation survival coverage
* refactor(codex): simplify workspace context basenames
* refactor(doctor): keep TOOLS.md migration helpers module-local
* docs: regenerate docs map
* fix(doctor): keep migration claims fresh
* fix(doctor): preserve nested tool notes
* refactor(doctor): split tools migration helpers
* refactor(doctor): limit TOOLS.md migration to workspace root
* style(doctor): keep migration under line limit
* fix(doctor): recover interrupted AGENTS publish
* docs(hooks): describe root-only TOOLS.md migration accurately
* fix(doctor): preserve migrated tool guidance visibility
* test(agents): regenerate prompt snapshots after rebase
* fix(policy): block evaluation while TOOLS.md is unmigrated
* fix(doctor): check merged bootstrap budget per agent
* fix(doctor): keep budget helper internal
* refactor(doctor): keep migration budget helpers to their consumers
2026-07-27 03:56:30 -04:00
Peter Steinberger
9eae43bd37
refactor(infra): move exec approvals into the shared SQLite state DB ( #114063 )
...
* refactor(infra): move exec approvals into the shared SQLite state DB
Delete the file-runtime exec-approvals store (exec-approvals.json + .lock
sidecar machinery) on both runtimes and make the reserved
exec_approvals_config singleton row canonical. Doctor owns the one-time
import with claim/verify/receipt discipline; runtime fails closed with a
doctor instruction while un-migrated legacy state exists. The wire CAS
contract, socket semantics, and gateway auth-token derivations are
unchanged. Kills the #113929 lock-contention bug class structurally and
nets around -2.9k lines.
* fix(infra): green CI gates and retire file-era exec approvals tests
Break the migration-type import cycle with a leaf contract, regenerate the
plugin-SDK API and native i18n baselines for the intentional surface change,
drop unused exports, and replace the macOS file-era approvals test suite with
SQLite-backed behavior coverage per the obsolete-internals test policy.
* chore: green max-lines ratchet, native i18n baseline, and unused-export scan
2026-07-26 06:39:23 -04:00
Peter Steinberger
e935a008f8
docs(cli): cross-link agent exec from automation and policy pages ( #114034 )
2026-07-26 01:19:11 -04:00
Peter Steinberger
fc3476b116
fix(policy): drop retired config coverage entry ( #114014 )
2026-07-25 21:29:50 -07:00
Peter Steinberger
08138cabe0
refactor(policy): drop unreachable sensitive-logging redaction check ( #113993 )
...
The policy/data-handling-redaction-disabled check could never emit a finding:
scanPolicyDataHandling records the sensitiveLoggingRedaction evidence with a
hardcoded value true, and the finding builder only fired on value !== true.
Redaction is unconditional in src/logging/redact.ts, which hardcodes tools mode
and reads only redactPatterns, so no config can turn it off.
Delete the check, its finding builder, check id, and the validateOnly fix class
that existed solely for it. Keep the public
dataHandling.sensitiveLogging.requireRedaction policy key: it is a policy.jsonc
contract, it still drives openclaw policy compare baseline strictness, and its
shape stays validated.
Make the key's satisfied status explicit instead of silent: the policy rule
declares satisfiedByInvariant pointing at the evidence source policy state
records (oc://openclaw.invariant/logging/redaction), which openclaw policy check
emits in dataHandling evidence and the attestation. A metadata test asserts every
rule names either its checks or its invariant, never both and never neither, and
that policy state actually emits the declared source.
Also drop the stale logging.redactSensitive entry from the policy config coverage
manifest; that config key is retired.
2026-07-25 20:00:25 -07:00
Peter Steinberger
977c8e9d37
refactor(policy): drop retired redactSensitive doctor remediation ( #113961 )
...
Sensitive log redaction became unconditional and `logging.redactSensitive`
was retired from the config schema, but the policy doctor still classified
`dataHandling.sensitiveLogging.requireRedaction` as an automatic repair that
would have written the retired key back into config.
Remove the automatic repair (check-id registration, patch branch, and the
`enableSensitiveLoggingRedaction` writer), drop the `logging.redactSensitive`
config target, and reclassify the check as `validateOnly`. The check keeps
evaluating the policy declaration against the redaction invariant; it just no
longer claims a fixable config target. Refresh the policy docs, the finding
fix hint, and a stale comment in `src/logging/redact.ts`.
2026-07-25 18:27:31 -07:00
Peter Steinberger
edecdbd05e
refactor(config): config-surface reduction tranche 3 — product consolidations (review request) ( #111527 )
...
* refactor(config): consolidate media model lists
* refactor(config): unify memory configuration
* refactor(config): consolidate TTS ownership
* refactor(config): move typing policy to agents
* refactor(config): retire product-level config surfaces
* refactor(config): share scoped tool policy type
* chore(config): refresh generated baselines
* fix(config): honor agent typing overrides
* fix(config): migrate sibling config consumers
* refactor(infra): keep base64url decoder private
* fix(config): strip invalid legacy TTS values
* chore(config): refresh rebased baseline hash
* fix(doctor): route legacy messages.tts.realtime voice to talk during tts move
* refactor(config): polish final layout names
* refactor(config): freeze retired tuning defaults
* feat(config): add fast mode default symmetry
* refactor(config): key agent entries by id
* docs(config): update final layout reference
* test(config): cover final layout migrations
* chore(config): refresh final layout baselines
* fix(config): align final layout runtime readers
* fix(config): align remaining readers
* fix(config): stabilize final layout migrations
* fix(config): finalize config projection proof
* fix(config): address final layout review
* docs(release): preserve historical config names
* fix(config): complete keyed agent migration
* fix(config): close final migration gaps
* fix(config): finish full-branch review
* fix(config): complete runtime secret detection
* fix(config): close final review findings
* fix(config): finish canonical docs and heartbeat migration
* fix(config): integrate latest main after rebase
* refactor(env): isolate test-only controls
* refactor(env): isolate build and development controls
* refactor(env): collapse process identity indirection
* refactor(env): remove duplicate config and temp aliases
* docs(env): define the operator-facing allowlist
* ci(env): ratchet production variable count
* fix(env): remove stale provider helper import
* fix(env): make ratchet sorting explicit
* test(env): keep test seam in dead-code audit
* test(env): cover ratchet growth and boundary; document surface budgets
* docs(config): document tier-eval consolidations
* docs(config): clarify speech preference ownership
* test(memory): align retired tuning fixtures
* refactor(memory): freeze engine heuristics
* refactor(config): apply tier-eval tranche
* refactor(tts): move persona shaping to providers
* refactor(compaction): move prompt policy to providers
* test(config): align hookified prompt fixtures
* chore(deadcode): classify test-only exports
* chore(github): remove unused spawn helper
* chore(deadcode): classify queue diagnostics
* chore(deadcode): remove unused lane snapshot export
* chore(plugin-sdk): ratchet consolidated surface
* fix(config): integrate latest main after rebase
2026-07-21 20:28:43 -07:00
Omar Shahine
e27e2d08fd
feat(policy): check authored message routing ( #111087 )
...
* feat(policy): check authored message routing
* fix(policy): normalize routing probe comparisons
* Policy: keep routing evidence types internal
* Docs: refresh policy map
---------
Co-authored-by: Omar Shahine <10343873+omarshahine@users.noreply.github.com >
2026-07-20 17:31:29 -07:00
Peter Steinberger
fa77fe10d5
chore: migrate active GPT-5.5 references to GPT-5.6 ( #104452 )
...
* chore(models): migrate active GPT-5.5 references
* test(workboard): expect GPT-5.6 Sol default
* chore: keep release notes in PR body
* test(models): align picker fixtures with Sol default
* test: update PDF default model expectation
* test(qa): migrate thinking smoke to Luna
* test(gateway): align mock catalog with Sol default
* ci: retrigger exact-head PR checks
* test(gateway): document default catalog invariant
2026-07-11 06:30:57 -07:00
Gio Della-Libera
aa27ae9d9f
policy: preview review-required gateway repairs ( #99776 )
...
* policy: preview review-required gateway repairs
* docs(policy): document gateway review previews
* docs(policy): document gateway review previews
* docs(policy): document gateway review previews
* docs(policy): document gateway review previews
---------
Co-authored-by: Gio Della-Libera <giodl@microsoft.com >
2026-07-08 10:44:56 -07:00
Gio Della-Libera
41425bf094
policy: repair denied gateway http endpoints ( #99731 )
...
* policy: repair denied gateway http endpoints
* docs(policy): describe gateway http repairs
---------
Co-authored-by: Gio Della-Libera <giodl@microsoft.com >
2026-07-07 11:26:54 -07:00
Gio Della-Libera
97777a7026
policy: repair channel ingress findings ( #99720 )
...
* policy: repair channel ingress findings
* policy: skip scoped inherited ingress repairs
* fix(policy): keep doctor lint findings generic
---------
Co-authored-by: Gio Della-Libera <giodl@microsoft.com >
2026-07-06 18:03:40 -07:00
Gio Della-Libera
5b06eba9fe
policy: repair required deny tool findings ( #99700 )
2026-07-06 09:56:03 -07:00
Gio Della-Libera
14b2ca11ff
policy: repair automatic narrowing findings ( #99690 )
2026-07-05 08:11:38 -07:00
Peter Steinberger
f7d7148cf0
docs: rewrite published docs grounded in current source ( #100142 )
...
Source-grounded rewrite of 529 published docs pages with per-unit information-loss verification: 1,713 factual corrections cited to src/**, generated surfaces regenerated, frontmatter titles preserved for i18n, release notes pages untouched. All docs gates green.
Closes #100141
2026-07-05 00:32:47 -04:00
Gio Della-Libera
fa8f10e6cd
docs(policy): document gateway node command policy
2026-07-04 15:06:10 -07:00
Gio Della-Libera
55263b3dfa
feat(policy): cover exec approvals artifact ( #90003 )
...
Add exec approvals artifact evidence to Policy.
- add the execApprovals policy namespace and check IDs for required artifact presence, default/per-agent security posture, autoAllowSkills, and allowlist drift
- read the active exec-approvals.json artifact only when execApprovals policy rules are configured, honoring OPENCLAW_STATE_DIR before the default ~/.openclaw path
- emit redacted posture evidence and stable oc:// references without socket tokens, command text, resolved paths, timestamps, or approval-session details
- document the public policy surface and add focused scanner, doctor, conformance, and CLI coverage
Validation:
- GitHub Actions for head b82eefe492235387111+giodl73-repo@users.noreply.github.com >
2026-06-15 17:30:48 -07:00
Gio Della-Libera
646974b7d8
fix(policy): reject unsupported policy keys ( #87074 )
...
Merged via squash.
Prepared head SHA: 3ab4ff1d8f235387111+giodl73-repo@users.noreply.github.com >
Co-authored-by: giodl73-repo <235387111+giodl73-repo@users.noreply.github.com >
Reviewed-by: @giodl73-repo
2026-06-02 15:01:57 -07:00
Gio Della-Libera
1d3cfc4b01
Policy: add data handling conformance checks ( #87056 )
...
Merged via squash.
Prepared head SHA: 6a0e9730aa235387111+giodl73-repo@users.noreply.github.com >
Reviewed-by: @giodl73-repo
2026-06-02 10:48:07 -07:00
Gio Della-Libera
08beb6b0e8
Policy: add policy file comparison command ( #86768 )
...
Merged via squash.
Prepared head SHA: 2023e8cba1235387111+giodl73-repo@users.noreply.github.com >
Reviewed-by: @giodl73-repo
2026-05-28 23:10:27 -07:00
Gio Della-Libera
5fb83af3e3
Policy: add ingress channel conformance checks ( #85744 )
...
Policy: add ingress channel conformance checks (#85744 )
Merged via squash.
Prepared head SHA: bd63c8d153235387111+giodl73-repo@users.noreply.github.com >
Reviewed-by: @giodl73-repo
2026-05-28 22:07:49 -07:00
Gio Della-Libera
af64a824a1
Policy: add sandbox posture conformance checks ( #85572 )
...
Policy: add sandbox posture conformance checks (#85572 )
Merged via squash.
Prepared head SHA: 1cf1953d8c235387111+giodl73-repo@users.noreply.github.com >
Co-authored-by: giodl73-repo <235387111+giodl73-repo@users.noreply.github.com >
Reviewed-by: @giodl73-repo
2026-05-28 21:00:24 -07:00
Gio Della-Libera
fbb6340542
Policy: add agent-scoped policy overlays ( #85817 )
...
* feat(policy): add agent-scoped policy overlays
* docs(policy): use generic agent-scoped examples
* fix(policy): generalize scoped policy overlays
* fix(policy): clean scoped overlay checks
* fix(policy): evaluate inherited scoped agent posture
* chore(policy): keep agent harness out of scoped policy pr
2026-05-25 08:45:16 -07:00
Gio Della-Libera
4ffbd07c06
docs(policy): add policy rule reference tables ( #85795 )
2026-05-23 16:59:33 -07:00
Gio Della-Libera
1e2e614748
Policy: add tool posture conformance checks ( #85482 )
...
* feat(policy): add tool posture conformance
* fix(policy): attest tool alsoAllow posture
2026-05-23 16:44:42 -07:00
Gio Della-Libera
a94f3444a0
Policy: add agent workspace conformance checks ( #85096 )
...
* feat(policy): add agent workspace conformance
* chore(policy): refresh agent workspace checks
* fix(policy): require enabled sandbox for workspace policy
* fix(policy): align agent workspace evidence with runtime
2026-05-22 20:24:31 -07:00
Gio Della-Libera
dcc5e45b50
Policy: add gateway exposure checks ( #81981 )
...
* feat(policy): add gateway exposure conformance
* fix(policy): align custom bind exposure evidence
2026-05-22 14:18:01 -07:00
Gio Della-Libera
c85feace54
Policy: add secret and auth conformance checks ( #81974 )
...
* feat(policy): add secrets auth conformance
* fix(policy): include sandbox ssh secret data
* fix(policy): complete secret input provenance
* fix(policy): cover media request secrets
* fix(policy): satisfy policy lint
* fix(policy): narrow secret conformance evidence
* fix(policy): cover request bearer token secrets
2026-05-22 12:48:14 -07:00
Gio Della-Libera
6dbd5bd446
Policy: add model, network, and MCP conformance checks ( #80783 )
...
* feat(policy): add model network and mcp conformance checks
* fix(policy): validate conformance rule shapes
* fix(policy): quote dynamic evidence paths
* fix(policy): scan per-agent model maps
* fix(policy): normalize model provider conformance
2026-05-21 07:27:16 -07:00
Gio Della-Libera
a30ac3f8d7
Policy: add tool metadata conformance ( #80056 )
...
* feat(policy): add tool metadata conformance checks
* Add policy trusted tool runtime gate
* Use requireMetadata for tool policy
Make tools.requireMetadata the canonical policy schema for risk, sensitivity, and owner requirements. Update runtime enforcement, doctor findings, evidence parsing, tests, and policy docs to use the new schema.
* fix(policy): persist approval metadata
* fix(policy): refresh approval metadata artifacts
* docs(policy): list all tool finding checks
* fix(policy): parse multiline tool metadata
* test(policy): cover unparseable policy check output
* fix(policy): resolve oc-path api in packaged dist
* fix(policy): clear post-rebase CI failures
* test(policy): clear post-rebase CI failures
* fix(policy): restore watch and align validation
* fix(policy): clear ci gate failures
* Simplify policy tool evidence parsing
2026-05-20 20:47:32 -07:00
Gio Della-Libera
cbf72e5e26
feat(policy): add channel conformance checks ( #80407 )
...
Summary:
- Add the bundled Policy plugin with policy-backed doctor checks for channel conformance.
- Add `openclaw policy check` attestations, accepted-attestation drift checks, and opt-in doctor repair.
- Add policy CLI docs, generated plugin inventory/reference docs, and changelog credit.
Verification:
- node --import tsx scripts/sync-plugin-versions.ts --check
- pnpm plugins:inventory:check
- pnpm docs:list
- git diff --check origin/main..HEAD
- node scripts/run-vitest.mjs extensions/policy/src/policy-state.test.ts extensions/policy/src/cli.test.ts extensions/policy/src/doctor/register.test.ts src/flows/bundled-health-checks.test.ts src/cli/program/register.maintenance.test.ts
- codex review --uncommitted; accepted finding fixed, reran clean
- codex review --commit HEAD
- GitHub CI for 4e09b067f4giodl73@gmail.com >
Co-authored-by: Gio Della-Libera <giodl@microsoft.com >
2026-05-20 11:50:21 +01:00
