Vincent Koc
|
c37c8d5671
|
fix(plugin-sdk): resolve surface counts from source graph
|
2026-07-12 04:28:22 +02:00 |
|
Peter Steinberger
|
9b1c36d23c
|
fix: prevent exec approval revocation races (#103515)
* fix(security): serialize exec approval mutations
* fix(security): preserve additive approval writes
* test(cli): expect normalized approval shape
* fix(security): preserve exec approval compatibility
* test(security): exercise locked approval initialization
* test(security): mock serialized approval helpers
* test(exec): derive enforced command path from plan
* fix(gateway): always return approval CAS conflicts
* fix(macos): serialize exec approvals writes
* fix(security): repair approval build errors
* fix(security): serialize exec approval mutations
* fix(security): fail closed on approval persistence errors
* test(security): cover detached approval persistence failures
* fix(security): harden exec approval state
* style(macos): format exec approval sources
* fix(security): complete exec approval hardening
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(macos): preserve approved login-shell semantics
* fix(macos): keep login shell approvals one-shot
* fix(security): linearize exec authorization
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(security): preserve durable approval basis
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(security): bind exec grants to current policy
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* test(security): fix exec revocation fixtures
* test(security): align gateway approval fixtures
* fix(macos): return approval decisions
* chore(i18n): sync native approval strings
* test(security): align approval hardening fixtures
* test(node): authorize completed event fixture
* test(security): fix approval decision fixtures
* test(security): await durable approval visibility
* fix(exec): preserve concurrent approval grants
* fix(exec): address exact-head CI failures
* fix(exec): preserve concurrent approval promotions
* fix(exec): make Swift shutdown state explicit
* test(macos): handle approval read failures
* fix(macos): harden approval socket paths
* fix(macos): preserve exact shell payload bytes
* test(macos): make approval fixtures explicit
* test(macos): fix approval suite compilation
* fix(macos): bound approval socket JSONL reads
* chore: move exec approval note to release process
* chore: move exec approval note to release process
---------
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
|
2026-07-10 21:35:05 +01:00 |
|
Peter Steinberger
|
1f484a8dbd
|
test: speed up and stabilize full suite
|
2026-07-05 08:00:23 -04:00 |
|
Gio Della-Libera
|
ef083b9389
|
test: stabilize policy PR CI guardrails
|
2026-07-04 15:06:10 -07:00 |
|
Peter Steinberger
|
ed2eebd31d
|
perf: reuse plugin SDK report compiler graph (#99940)
|
2026-07-04 07:41:19 -04:00 |
|
Renaud Cerrato
|
95b97e5b0b
|
fix(exec): fail invalid explicit workdir before running (#94441)
* fix(exec): fail invalid explicit workdir before running
* test(exec): tighten invalid workdir regression
* fix(exec): clarify invalid workdir recovery
* refactor(exec): centralize workdir resolution
* test(exec): update invalid workdir assertion
* fix(exec): harden backend workdir contract
* fix(exec): map missing backend host workdirs
* fix(exec): reject control commands before workdir prep
* fix(exec): defer env hook until backend cwd validation
* chore(sdk): refresh plugin api baseline
* test(agents): drop redundant definition assertions
* test(exec): use real config workdirs
* test(exec): use tracked temp dirs
* test(openshell): keep temp setup local
* test: update temp-dir route fixture
---------
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
|
2026-06-26 08:02:00 +10:00 |
|
Vincent Koc
|
497d53d821
|
fix(sdk): tighten wildcard surface budget
|
2026-06-25 23:30:17 +08:00 |
|
Vincent Koc
|
6df67285df
|
fix(sdk): keep surface budgets tight
|
2026-06-25 02:18:07 +08:00 |
|
Vincent Koc
|
d01c290601
|
test(sdk): assert surface budget growth guard
|
2026-06-25 02:05:06 +08:00 |
|
Josh Lehman
|
132d70bfb3
|
refactor: migrate bundled transcript target lookups (#89911)
|
2026-06-23 14:32:21 -07:00 |
|
Vincent Koc
|
e856a24754
|
fix(qa): bound docker e2e log replay
|
2026-06-23 13:26:09 +02:00 |
|
Vincent Koc
|
5dc6e0ea77
|
test(scripts): align SDK surface budget assertion
|
2026-06-22 18:58:59 +08:00 |
|
Peter Steinberger
|
15a0609a6b
|
test(plugin-sdk): restore private surface budget
|
2026-06-22 03:30:14 -04:00 |
|
Vincent Koc
|
078044a2cf
|
test(sdk): refresh plugin surface budget
|
2026-06-22 14:57:53 +08:00 |
|
Vincent Koc
|
a9be81d510
|
fix(ci): repair baseline lint and test gates
|
2026-06-22 11:44:21 +08:00 |
|
Vincent Koc
|
77b6ca9a9b
|
fix(sdk): tighten surface report budgets
|
2026-06-22 01:04:53 +02:00 |
|
mikasa
|
ec7a548062
|
fix #95378: https://github.com/openclaw/openclaw/issues/95378 (#95390)
* fix(telegram): use session transcript for direct context
* fix(telegram): account for proof and SDK checks
* fix(telegram): address review findings
* fix(telegram): tighten session transcript context
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
|
2026-06-22 04:29:44 +05:30 |
|
Vincent Koc
|
86fea26797
|
fix(plugin-sdk): stabilize surface report after builds
|
2026-06-21 21:28:47 +02:00 |
|
Vincent Koc
|
d5c9e7ea99
|
test(plugin-sdk): ratchet surface budget checks
|
2026-06-16 02:56:41 +02:00 |
|
Peter Steinberger
|
58c663920d
|
docs: document script tests
|
2026-06-04 20:49:50 -04:00 |
|
Vincent Koc
|
4b18234fc1
|
fix(scripts): enforce plugin sdk surface budgets
|
2026-05-29 05:32:12 +02:00 |
|