Ayaan Zaidi
77ae06bfaa
fix: skip compile cache permission warnings ( #76362 ) (thanks @neeravmakwana)
2026-05-05 21:25:02 +05:30
Vincent Koc
ac3cd1a0ca
Harden Codex harness control surfaces ( #77459 )
...
* fix(scripts): find codex protocol source from worktrees
* fix(test): keep codex harness docker caches writable
* fix(test): relax live codex cache mount permissions
* test(codex): add live docker harness debug output
* fix(test): detect numeric ci env in codex docker harness
* fix(codex): skip duplicate agent-command telemetry
* fix(tooling): skip sparse-missing oxlint tsconfig
* fix(tooling): route changed checks through testbox
* fix(qa): keep coverage json source-clean
* fix(test): preflight codex docker auth
* fix(codex): validate bind option values
* fix(codex): parse quoted command arguments
* fix(codex): reject extra control args
* fix(codex): use content for blank bound prompts
* fix(codex): decode local image file urls
* fix(codex): treat local media urls as images
* fix(codex): keep windows media paths local
* fix(codex): reject malformed diagnostics confirmations
* fix(codex): reject malformed resume commands
* fix(codex): reject malformed thread actions
* fix(codex): reject malformed turn controls
* fix(codex): reject malformed model controls
* fix(codex): resolve empty user input prompts
* fix(codex): enforce user input options
* fix(codex): reject ambiguous computer-use actions
* fix(codex): ignore stale bound turn notifications
* test(gateway): close task registries in gateway harness
* test(gateway): route cleanup through task seams
* fix(codex): describe current permission approvals
* fix(codex): disclose command approval amendments
* fix(codex): preserve approval detail under truncation
* fix(codex): propagate dynamic tool failures
* test(codex): align dynamic tool block contract
* fix(codex): reject extra read-only command operands
* fix(codex): escape command readout fields
* fix(codex): escape status probe errors
* fix(codex): narrow formatted thread details
* fix(codex): escape successful status summaries
* fix(codex): escape bound control replies
* fix(codex): escape user input prompts
* fix(codex): escape control failure replies
* fix(codex): escape approval prompt text
* test(codex): narrow escaped reply assertions
* test(codex): complete strict reply fixtures
* test(codex): preserve account fixture literals
* test(codex): align status probe fixtures
* fix(codex): satisfy sanitizer regex lint
* fix(codex): harden command readouts
* fix(codex): harden bound image inputs
* fix(codex): sanitize command failure replies
* test(codex): complete rate limit fixture
* test(tooling): isolate postinstall compile cache fixture
* fix(codex): keep app-server event ownership explicit
---------
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-05-05 07:23:41 +09:00
Peter Steinberger
9ebdd26020
fix: thread package root into symlink cleanup
2026-05-03 21:49:53 +01:00
Peter Steinberger
797d02497e
fix: prune stale plugin runtime symlinks
2026-05-03 21:49:53 +01:00
Shakker
f7549079ce
fix: prune legacy plugin runtime deps on install
2026-05-03 00:39:40 +01:00
Vincent Koc
76c327c096
fix(plugins): remove unsupported bundle metadata
2026-05-02 11:42:17 -07:00
Peter Steinberger
8514e4c913
fix(release): stage runtime deps from plugin package root
2026-05-02 03:07:56 +01:00
Peter Steinberger
7d89d4997e
fix(release): detect packaged bundled runtime layouts
2026-05-02 02:35:02 +01:00
Peter Steinberger
1844c1fb38
fix(release): classify packaged runtime deps roots
2026-05-02 02:18:51 +01:00
Peter Steinberger
01c384cbf9
refactor: prune legacy plugin dependency debris on postinstall
2026-05-01 22:08:28 +01:00
Peter Steinberger
1e4f511f0a
chore: clean up plugin dependency wording
2026-05-01 21:39:03 +01:00
Peter Steinberger
ed8f50f240
refactor: simplify plugin dependency handling
...
Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths.
Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.
2026-05-01 21:32:22 +01:00
Peter Steinberger
250376f885
fix: simplify bundled runtime dependency repair ( #75183 )
...
Summary:
- Merged fix: simplify bundled runtime dependency repair after ClawSweeper review.
ClawSweeper fixups:
- Included follow-up commit: fix: verify cached bundled runtime roots
- Included follow-up commit: refactor: simplify plugin runtime startup paths
- Included follow-up commit: refactor: trim plugin startup policy helpers
- Included follow-up commit: refactor: trust package manager runtime deps materialization
- Included follow-up commit: fix: narrow channel runtime deps skip policy
- Included follow-up commit: refactor: defer startup plugin runtime deps
- Ran the ClawSweeper repair loop before final review.
Validation:
- ClawSweeper review passed for head 04dc56653404dc566534https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786
Co-authored-by: Peter Steinberger <steipete@gmail.com >
Co-authored-by: Shakker <shakkerdroid@gmail.com >
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com >
2026-05-01 07:49:02 +00:00
openclaw-clownfish[bot]
1a936f225e
fix: Found one bug in the new compile-cache prune path: it removes a d ( #74067 )
...
* fix: Found one bug in the new compile-cache prune path: it removes a d
* fix(postinstall): keep compile cache pruning resilient
---------
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-04-29 01:12:59 -07:00
Peter Steinberger
128115fb25
fix(update): prune stale compile cache on install
2026-04-29 05:17:39 +01:00
Peter Steinberger
03b1731d0f
fix(ci): preserve imported dist chunks after install
2026-04-29 01:13:03 +01:00
Peter Steinberger
955b4df093
fix(ci): stabilize full release validation
2026-04-28 23:54:43 +01:00
Peter Steinberger
7d4da9c610
fix(plugins): ignore inherited npm dry-run for runtime deps
2026-04-28 02:36:48 +01:00
Peter Steinberger
d23ee2f702
fix: hide bundled runtime npm windows
2026-04-27 08:31:07 +01:00
Peter Steinberger
eccb79db99
build: remove private QA package compat shims
2026-04-27 00:26:02 +01:00
Peter Steinberger
26e4eb8e40
fix(update): ignore plugin install stages in dist verify
2026-04-26 07:28:02 +01:00
Vincent Koc
73cacebac3
fix(plugins): normalize registry migration env flags
2026-04-25 16:12:01 -07:00
Vincent Koc
ad8296e685
fix(plugins): harden registry migration guards
2026-04-25 04:59:52 -07:00
Vincent Koc
d7cf803705
fix(plugins): preflight registry install migration
2026-04-25 04:59:52 -07:00
Vincent Koc
81aefb9a18
feat(plugins): migrate plugin registry on install
2026-04-25 04:59:52 -07:00
pashpashpash
103d7af458
Fix legacy update compat sidecars
2026-04-22 19:27:52 -07:00
Peter Steinberger
0ada97d513
fix: restore legacy update compat sidecars
2026-04-23 02:19:19 +01:00
Peter Steinberger
a32a6c2f89
fix: stop generating qa npm sidecars
2026-04-22 23:11:01 +01:00
Peter Steinberger
9d66a900e5
fix(plugins): harden bundled runtime dep staging
2026-04-22 18:49:13 +01:00
Peter Steinberger
d2185bd45b
fix: run packed bundled postinstall in release check
...
(cherry picked from commit e57e54e591
2026-04-21 16:40:07 +01:00
Peter Steinberger
494cd78889
fix: tolerate pnpm-backed runtime dependency installs
2026-04-21 07:37:48 +01:00
Peter Steinberger
14eb1923b4
test: share postinstall davey fixture
2026-04-20 17:38:46 +01:00
Peter Steinberger
8a4332864b
fix(plugins): stop eager bundled plugin dep install ( #69334 )
...
* fix(plugins): stop eager bundled plugin dep install
* test(auto-reply): mock direct auth profile store imports
2026-04-20 14:41:18 +01:00
Peter Steinberger
26db52ed69
build: restore qa lab updater sidecar
2026-04-17 00:44:35 +01:00
Peter Steinberger
ed04d38bec
build: restore qa channel updater sidecar
2026-04-17 00:00:41 +01:00
Peter Steinberger
229eb72cf6
build: exclude private QA from npm package
2026-04-15 09:39:51 -07:00
Vincent Koc
7f35f76914
fix(update): harden dist inventory handling
2026-04-15 09:16:46 +01:00
Ayaan Zaidi
2a8226f8e2
fix(postinstall): reject dist symlink escapes
2026-04-15 13:22:04 +05:30
Ayaan Zaidi
9e1df98475
fix(postinstall): reject unsafe dist symlinks
2026-04-15 13:22:04 +05:30
Ayaan Zaidi
1077cb74f9
test(postinstall): use real dist inventory fixtures
2026-04-15 13:22:04 +05:30
Ayaan Zaidi
5754667c87
fix(postinstall): prune stale packaged dist files
2026-04-15 13:22:04 +05:30
Peter Steinberger
ad7f605a6d
fix(plugins): tolerate bundled peer resolution
2026-04-13 00:20:52 +01:00
Peter Steinberger
d77360c076
fix(plugins): restore missing native runtime deps
2026-04-13 00:20:52 +01:00
Ayaan Zaidi
f4ec59c431
fix(build): honor postinstall disable flag
2026-04-08 21:01:53 +05:30
Ayaan Zaidi
66ec8909bd
fix(build): address bundled plugin prune review
2026-04-08 21:01:53 +05:30
Ayaan Zaidi
b28fe1b92f
fix(build): prune stale bundled plugin node_modules
2026-04-08 21:01:53 +05:30
Peter Steinberger
95e397a266
refactor: dedupe repeated test helpers
2026-04-08 09:58:22 +01:00
Vincent Koc
319217a30d
test(scripts): add async temp dir helper
2026-04-06 05:37:38 +01:00
Onur
7de3a16ab4
ACPX: bump pinned version to 0.4.1 ( #60918 )
...
* ACPX: bump pinned version to 0.4.1
* ACPX: refresh lockfile for 0.4.1
2026-04-04 17:37:17 +02:00
Peter Steinberger
95182d51cc
fix: harden bundled plugin runtime deps
2026-04-01 08:55:00 +01:00
