Commit Graph

1645 Commits

Author SHA1 Message Date
Peter Steinberger
d515009c53 fix(ci): stabilize auto-reply CI tests 2026-04-11 04:09:10 +01:00
Peter Steinberger
05521242cd fix(ci): stabilize agentic compact tests 2026-04-11 03:25:32 +01:00
Peter Steinberger
1c7444dab6 perf: optimize test import surfaces 2026-04-11 03:08:58 +01:00
Vincent Koc
7198a9f0ee fix(cycles): reduce remaining static import seams 2026-04-11 02:46:41 +01:00
Vincent Koc
350299401f fix(cycles): continue shared seam extraction 2026-04-11 02:46:41 +01:00
Vincent Koc
81235fd923 fix(cycles): split shared contract seams 2026-04-11 02:46:40 +01:00
Vincent Koc
95bc417944 fix(cycles): split residual shared type seams 2026-04-11 02:46:40 +01:00
Peter Steinberger
541f768249 fix(ci): align context and plugin loader tests 2026-04-11 02:28:58 +01:00
Peter Steinberger
202f80792e feat: add plugin text transforms 2026-04-11 02:17:39 +01:00
Peter Steinberger
39d1a817fa lint: enable small oxlint rules 2026-04-11 02:15:21 +01:00
Eva
f65ffdff96 agents: address execution correctness review fixes 2026-04-11 01:27:31 +01:00
Eva
1038c1b8f3 test: keep provider family inventory stable 2026-04-11 01:27:31 +01:00
Eva
626eaf8496 test: align openai shared-family inventory 2026-04-11 01:27:31 +01:00
Peter Steinberger
9e0d358695 refactor: simplify runtime conversions 2026-04-11 01:23:34 +01:00
Eva
756d715ce0 test(oauth): cover slash-terminated authorize urls 2026-04-11 01:19:32 +01:00
Eva
4c0eb14985 fix: address remaining runtime truthfulness review 2026-04-11 01:19:32 +01:00
Eva
9ec96f476d openai-codex: polish auth review fixes 2026-04-11 01:19:32 +01:00
Eva
8166d592d9 openai-codex: classify auth and runtime failures 2026-04-11 01:19:32 +01:00
Peter Steinberger
d85b2a0e81 refactor: simplify core conversions 2026-04-11 01:17:51 +01:00
Peter Steinberger
cfc1ce7547 test: satisfy temp path guard (#64491) 2026-04-11 00:39:21 +01:00
Vincent Koc
fa44a31920 fix(auth): brand codex oauth as openclaw 2026-04-11 00:38:09 +01:00
Peter Steinberger
66ac60acbd test: simplify plugin metadata assertions 2026-04-11 00:12:26 +01:00
Peter Steinberger
71efba043c refactor: simplify provider oauth prompts 2026-04-11 00:11:08 +01:00
Peter Steinberger
73d054b764 refactor: simplify web channel runtime export names 2026-04-11 00:09:38 +01:00
Tak Hoffman
1c0e444f56 fix: preserve sender-keyed plugin command bindings 2026-04-10 18:00:48 -05:00
hcl
8a28a3b056 fix(plugins): preserve contextEngine slot through config normalization (#64192)
Merged via squash.

Prepared head SHA: ae8bd9f09d
Co-authored-by: hclsys <7755017+hclsys@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-04-10 15:58:27 -07:00
Peter Steinberger
53f97f86c7 test: simplify plugin fixture path strings 2026-04-10 23:16:38 +01:00
Peter Steinberger
a73dc477d7 style: apply oxfmt cleanup 2026-04-10 23:09:37 +01:00
Peter Steinberger
31a0b7bd42 feat: add Codex app-server controls 2026-04-10 22:19:00 +01:00
EronFan
5e2136c6ae fix: include memory plugins in gateway startup (openclaw#64423)
Verified:
- pnpm build
- pnpm check
- pnpm test -- src/plugins/channel-plugin-ids.test.ts

Co-authored-by: EronFan <50734013+EronFan@users.noreply.github.com>
2026-04-10 16:02:44 -05:00
Peter Steinberger
75823947ae test: remove redundant loader message conversions 2026-04-10 21:30:48 +01:00
Peter Steinberger
8bc157c304 fix: prefer manifest evidence in install scanner 2026-04-10 21:22:16 +01:00
Peter Steinberger
ba55a81a32 fix: close landing test gaps 2026-04-10 21:22:16 +01:00
Peter Steinberger
c9067b6520 fix: preserve scoped plugin symlink installs 2026-04-10 21:22:16 +01:00
Peter Steinberger
3198c10fba fix: stabilize Codex harness landing checks 2026-04-10 21:22:16 +01:00
Peter Steinberger
44ec4d05de feat: add pluggable agent harness registry 2026-04-10 21:22:16 +01:00
Peter Steinberger
0ebeee8b0d chore: enable consistent-return 2026-04-10 20:56:43 +01:00
Peter Steinberger
cdb944ef0a chore: enable no-misused-spread 2026-04-10 20:14:49 +01:00
Peter Steinberger
a6edccad3d test: align plugin install denylist expectations 2026-04-10 19:42:38 +01:00
Peter Steinberger
e7db987ce6 test: trim heavy imports and harden ci checks 2026-04-10 19:23:10 +01:00
Peter Steinberger
f6ed276f51 style: apply updated formatter output 2026-04-10 19:17:39 +01:00
Peter Steinberger
56468cdb06 fix: align plugin install denylist scan tests 2026-04-10 18:57:52 +01:00
Michael Appel
9f97ad857a fix(security): pin axios to 1.15.0 and add dependency denylist for plugin installs [AI-assisted] (#63891)
* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* Plugins: fix install security CI regressions

* Plugins: make manifest traversal linear

* Plugins: bound manifest security traversal

* Plugins: block denied node_modules package dirs

* Plugins: match node_modules case-insensitively

* Plugins: block denied package symlink paths

* Tests: normalize blocked symlink assertion

* Plugins: fail closed on unreadable denied paths

* Plugins: block denied node_modules file aliases

* Plugins: inspect node_modules symlink targets

* Plugins: preserve symlink target package paths

* fix: address PR review feedback

* chore(changelog): add axios pin and dependency denylist entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-10 11:20:05 -06:00
Peter Steinberger
777c6f7580 refactor: split manifest command alias helpers 2026-04-10 17:37:31 +01:00
Peter Steinberger
8a5b7cf573 test: inject provider auth command fixtures 2026-04-10 16:41:10 +01:00
Peter Steinberger
9fd08f9d0f refactor: remove type-only import cycles 2026-04-10 15:14:27 +01:00
Peter Steinberger
09a8e0f289 fix: keep bundled CLI backend fallback stable (#64242) 2026-04-10 14:56:12 +01:00
Peter Steinberger
beaff3c553 fix: clarify plugin command alias diagnostics (#64242) (thanks @feiskyer) 2026-04-10 14:56:12 +01:00
ly85206559
13821fd54b fix(plugins): make service registration idempotent
Treat duplicate registerService calls from the same plugin id as idempotent so plugin snapshot and activation loads stop emitting spurious service already registered diagnostics.\n\nThanks @ly85206559.
2026-04-10 14:06:18 +01:00
Mariano
03e19c5436 fix(gateway): restore dreaming startup reconciliation (#64258)
* gateway: restore dreaming startup reconciliation

* gateway: harden dreaming startup reconciliation

---------

Co-authored-by: mbelinky <mbelinky@users.noreply.github.com>
2026-04-10 15:02:19 +02:00