Peter Steinberger
b85b1c68d1
Refactor file access to use fs-safe primitives ( #78255 )
...
* refactor: use fs-safe primitives across file access
* fix: preserve invalid managed npm manifests
* fix: keep fs seams for startup metadata
2026-05-06 05:03:11 +01:00
Peter Steinberger
538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
Vincent Koc
2fe2dbdb7d
test(openshell): accept native symlink targets
2026-05-04 09:20:02 -07:00
Peter Steinberger
0ba5586ba9
refactor: trim config helper exports
2026-05-01 19:58:36 +01:00
Peter Steinberger
2628326264
refactor: expose agent runtime test contracts
2026-04-28 03:40:57 +01:00
Peter Steinberger
56875c4d32
refactor: split generic plugin test fixtures
2026-04-28 01:21:39 +01:00
Peter Steinberger
74e62c32c3
test: route extension tests through sdk subpaths
2026-04-27 21:58:48 +01:00
Peter Steinberger
f0000ab72d
refactor(plugin-sdk): split infra runtime barrel
2026-04-27 20:50:35 +01:00
Peter Steinberger
de95e414d1
style: format stale source files
2026-04-23 02:20:10 +01:00
Devin Robison
95119017c8
fix(openshell): pin sandbox file reads ( #69798 )
...
* fix(openshell): pin sandbox file reads against parent symlink swaps
* docs(changelog): note openshell sandbox read pinning (#69798 )
* fix(openshell): containment-check against literal root and self-contain file-identity helper
* test(openshell): spy on fsPromises.open for swap races, skip dev=0 test on win32
* fix(openshell): single-syscall fallback identity check + tighten sameFileIdentity types
* fix(openshell): re-fstat pinned handle after identity check for defense-in-depth
* fix(openshell): lstat leaf on platforms without O_NOFOLLOW to close windows symlink gap
* fix(openshell): expose test seam for O_NOFOLLOW availability instead of patching native constants
2026-04-22 16:44:25 -06:00
Peter Steinberger
b0734664f8
style: format touched code
2026-04-22 04:24:45 +01:00
Devin Robison
7be82d4fd1
fix(openshell): pin host writes to sandbox root ( #69797 )
...
* fix(openshell): pin host writes to sandbox root
* fix(openshell): use plugin sdk infra runtime
* fix(openshell): reject symlink write targets
* chore(changelog): note openshell sandbox write fix
2026-04-21 15:18:28 -06:00
Peter Steinberger
0094f76314
refactor: share plugin config issue formatting
2026-04-20 23:34:19 +01:00
Peter Steinberger
cfd5f9e4e3
test(e2e): repair OpenShell prerelease smoke
2026-04-13 00:20:51 +01:00
Altay
8cf02e7c47
fix(ci): clear check-additional follow-up regressions ( #63934 )
...
* fix(ci): route messaging temp files through openclaw tmp dir
* fix(ci): clear qa-lab follow-up guardrails
* fix(ci): own-check ACP fallback resolvers
* fix(ci): preserve memory-core write error causes
* fix(ci): narrow qa-channel boundary alias
* fix(test): type memory-core dreaming api stubs
2026-04-09 23:47:59 +01:00
Vincent Koc
ce32697250
fix(openshell): split fs bridge backend types
2026-04-09 09:17:29 +01:00
Vincent Koc
7d6af7e154
fix(agents): split sandbox backend handle types
2026-04-09 08:52:14 +01:00
Peter Steinberger
67dc6e82b9
refactor: dedupe misc lowercase helpers
2026-04-07 22:24:32 +01:00
Peter Steinberger
a86fa3b211
refactor(deadcode): drop orphaned extension helpers
2026-04-06 17:18:03 +01:00
Vincent Koc
620537914b
fix(plugins): clean bundled extension lint tail
2026-04-06 15:21:46 +01:00
Peter Steinberger
af62a2c2e4
style: fix extension lint violations
2026-04-06 14:53:55 +01:00
Peter Steinberger
cc62fd38f6
test: trim more extension mock imports
2026-04-03 19:34:55 +01:00
Vincent Koc
4b2c7404e5
test(types): remove remaining testing barrel references
2026-04-03 23:03:02 +09:00
Vincent Koc
710c63edad
test(extensions): use direct runtime capture helpers
2026-04-03 21:37:41 +09:00
Peter Steinberger
847faa3d04
test: trim extension test import churn
2026-04-03 04:41:08 +01:00
Agustin Rivera
b21c9840c2
OpenShell: constrain mirror sync roots ( #58515 )
...
* fix(openshell): constrain mirror sync roots
* fix(openshell): restore config test types
* fix(openshell): simplify managed root sync
2026-04-02 06:21:30 -07:00
Vincent Koc
67bb3454ee
fix(openshell): support remote fs read mutation in tests
2026-03-31 10:30:37 +09:00
Jacob Tomlinson
cfe1445953
Sandbox: sanitize SSH subprocess env ( #57848 )
...
* Sandbox: sanitize SSH subprocess env
* Sandbox: add sanitize env undefined test
2026-03-30 20:05:57 +01:00
Jacob Tomlinson
3b9dab0ece
OpenShell: harden mirror sync boundaries ( #57693 )
...
* OpenShell: harden mirror sync boundaries
* OpenShell: polish mirror hardening tests
* OpenShell: preserve trusted mirror symlinks
* OpenShell: bound mirror fs work globally
2026-03-30 14:51:44 +01:00
Peter Steinberger
8861cdbb6f
refactor(plugin-sdk): untangle extension test seams
2026-03-29 23:43:53 +01:00
Peter Steinberger
8ddeada97d
test: move extension-owned coverage into plugins
2026-03-27 15:11:33 +00:00
Ayaan Zaidi
8b13710c09
refactor(plugin-sdk): expose zod subpath
2026-03-27 09:55:47 +05:30
Peter Steinberger
c9ab095099
refactor: deduplicate plugin config schemas
2026-03-27 02:53:08 +00:00
Peter Steinberger
e774fe1286
refactor: share browser and sandbox helpers
2026-03-26 18:43:57 +00:00
Jacob Tomlinson
c02ee8a3a4
OpenShell: exclude hooks/ from mirror sync ( #54657 )
...
* OpenShell: exclude hooks/ from mirror sync
* OpenShell: make excludeDirs case-insensitive for cross-platform safety
2026-03-25 19:59:07 +00:00
Peter Steinberger
ed9646516d
test: collapse utility plugin suites
2026-03-25 04:25:02 +00:00
Peter Steinberger
6f6468027a
refactor: dedupe test and runtime seams
2026-03-24 23:33:30 +00:00
Vincent Koc
009980465f
fix(openshell): bundle upstream cli fallback
2026-03-22 19:20:33 -07:00
Vincent Koc
9a07187339
style(format): fix extension test drift
2026-03-22 18:53:22 -07:00
Vincent Koc
248caf09f5
fix(test): speed up openshell remote fs bridge
2026-03-22 18:38:45 -07:00
Vincent Koc
25f05612ee
fix(test): unblock openshell remote fs bridge
2026-03-22 18:13:07 -07:00
Gustavo Madeira Santana
9fc6c1929a
Plugin SDK: split setup and sandbox subpaths
2026-03-16 12:06:32 +00:00
Peter Steinberger
b8bb8510a2
feat: move ssh sandboxing into core
2026-03-15 21:35:30 -07:00
Peter Steinberger
ae7f18e503
feat: add remote openshell sandbox mode
2026-03-15 20:28:19 -07:00
Peter Steinberger
d8b927ee6a
feat: add openshell sandbox backend
2026-03-15 20:03:22 -07:00
