Renaud Cerrato
95b97e5b0b
fix(exec): fail invalid explicit workdir before running ( #94441 )
...
* fix(exec): fail invalid explicit workdir before running
* test(exec): tighten invalid workdir regression
* fix(exec): clarify invalid workdir recovery
* refactor(exec): centralize workdir resolution
* test(exec): update invalid workdir assertion
* fix(exec): harden backend workdir contract
* fix(exec): map missing backend host workdirs
* fix(exec): reject control commands before workdir prep
* fix(exec): defer env hook until backend cwd validation
* chore(sdk): refresh plugin api baseline
* test(agents): drop redundant definition assertions
* test(exec): use real config workdirs
* test(exec): use tracked temp dirs
* test(openshell): keep temp setup local
* test: update temp-dir route fixture
---------
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-06-26 08:02:00 +10:00
Vincent Koc
d9034da0a6
fix(openshell): upload staged workspace contents
2026-06-24 15:07:48 +08:00
Vincent Koc
d1a7d457e6
fix(openshell): preserve uploaded workspace root
2026-06-24 14:07:30 +08:00
Daniel Morandini
6163425a2d
Fix SSH sandbox remote directory args ( #93367 )
...
Merged via squash.
Prepared head SHA: 02e3d7eb9f10097445+dmorn@users.noreply.github.com >
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com >
Reviewed-by: @vincentkoc
2026-06-16 18:45:18 +08:00
Agustin Rivera
ee81082f57
fix(openshell): pin mirror remote mutations ( #93361 )
...
* fix(openshell): pin mirror remote mutations
* fix(openshell): pin mirror remote mutations
* fix(openshell): keep mirror state pinned
* fix(openshell): preserve pinned remove failures
2026-06-15 21:16:59 -07:00
brokemac79
3b6bcbfb50
fix: make sandbox skills readable in writable sandboxes
...
Materializes prompt-visible skills into a protected sandbox-readable workspace for rw sandboxes, refreshes Docker/SSH/OpenShell views, and hardens stale or poisoned remote skill copies. Fixes #90410 .
2026-06-07 13:47:56 -07:00
Peter Steinberger
4fa5092cdc
docs: document small extension sources
2026-06-04 21:02:07 -04:00
brokemac79
aafed830a5
fix: preflight malformed openshell exec commands
2026-05-25 18:36:55 +01:00
Sally O'Malley
e72f601925
fix(openshell): use NVIDIA CLI contract
...
Remove the unrelated npm openshell dependency and keep the OpenShell sandbox backend pointed at the NVIDIA CLI command contract.
2026-05-21 22:51:57 +08:00
Peter Steinberger
827b0de0ce
refactor: reduce plugin sdk surface
2026-05-10 12:37:10 +01:00
Peter Steinberger
538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
Altay
8cf02e7c47
fix(ci): clear check-additional follow-up regressions ( #63934 )
...
* fix(ci): route messaging temp files through openclaw tmp dir
* fix(ci): clear qa-lab follow-up guardrails
* fix(ci): own-check ACP fallback resolvers
* fix(ci): preserve memory-core write error causes
* fix(ci): narrow qa-channel boundary alias
* fix(test): type memory-core dreaming api stubs
2026-04-09 23:47:59 +01:00
Vincent Koc
ce32697250
fix(openshell): split fs bridge backend types
2026-04-09 09:17:29 +01:00
Peter Steinberger
67dc6e82b9
refactor: dedupe misc lowercase helpers
2026-04-07 22:24:32 +01:00
Vincent Koc
620537914b
fix(plugins): clean bundled extension lint tail
2026-04-06 15:21:46 +01:00
Jacob Tomlinson
cfe1445953
Sandbox: sanitize SSH subprocess env ( #57848 )
...
* Sandbox: sanitize SSH subprocess env
* Sandbox: add sanitize env undefined test
2026-03-30 20:05:57 +01:00
Jacob Tomlinson
3b9dab0ece
OpenShell: harden mirror sync boundaries ( #57693 )
...
* OpenShell: harden mirror sync boundaries
* OpenShell: polish mirror hardening tests
* OpenShell: preserve trusted mirror symlinks
* OpenShell: bound mirror fs work globally
2026-03-30 14:51:44 +01:00
Jacob Tomlinson
c02ee8a3a4
OpenShell: exclude hooks/ from mirror sync ( #54657 )
...
* OpenShell: exclude hooks/ from mirror sync
* OpenShell: make excludeDirs case-insensitive for cross-platform safety
2026-03-25 19:59:07 +00:00
Gustavo Madeira Santana
9fc6c1929a
Plugin SDK: split setup and sandbox subpaths
2026-03-16 12:06:32 +00:00
Peter Steinberger
b8bb8510a2
feat: move ssh sandboxing into core
2026-03-15 21:35:30 -07:00
Peter Steinberger
ae7f18e503
feat: add remote openshell sandbox mode
2026-03-15 20:28:19 -07:00
Peter Steinberger
d8b927ee6a
feat: add openshell sandbox backend
2026-03-15 20:03:22 -07:00
