Peter Steinberger
bb46b79d3c
refactor: internalize OpenClaw agent runtime ( #85341 )
...
* refactor: extract agent core package
Introduce packages/agent-core as the OpenClaw-owned home for reusable agent loop, harness, session, prompt, and runtime dependency contracts.
* refactor: extract shared llm runtime
Move provider model registries, stream wrappers, OAuth helpers, and LLM utilities into src/llm with plugin-sdk barrels instead of depending on the old embedded runtime layout.
* refactor: remove pi runtime internals
Rename remaining Pi-shaped agent surfaces to OpenClaw agent runtime names, delete obsolete Pi docs and package graph checks, and add the third-party notice for incorporated code.
* refactor: tighten agent session runtime
Make agent-core/runtime dependencies explicit, consolidate compaction and session transcript helpers, and move model/session helpers behind OpenClaw-owned contracts.
* refactor: remove static model and pi auth paths
Drop static model catalogs and Pi auth bridges, move model/provider facts to manifest-owned runtime contracts, and harden internal embedded-agent utilities.
* refactor: remove legacy provider compat paths
* docs: remove agent parity notes
* fix: skip provider wildcard metadata parsing
* refactor: share session extension sdk loading
* refactor: inline acpx proxy error formatter
* refactor: fold edit recovery into edit tool
* fix: accept extension batch separator
* test: align startup provider plugin expectations
* fix: restore provider-scoped release discovery
* test: align static asset packaging expectations
* fix: run static provider catalogs during scoped discovery
* fix: add provider entry catalogs for scoped live discovery
* fix: load lightweight provider catalog entries
* fix: refresh provider-scoped plugin metadata
* fix: keep provider catalog entries on release live path
* fix: keep static manifest models in release live checks
* fix: harden release model discovery
* fix: reduce OpenAI live cache probe reasoning
* fix: disable OpenAI cache probe reasoning
* ci: extend OpenAI gateway live timeout
* fix: extend live gateway model budget
* fix: stabilize release validation regressions
* fix: honor provider aliases in model rows
* fix: stabilize release validation lanes
* fix: stabilize release memory qa
* ci: stabilize release validation lanes
* ci: prefer ipv4 for live docker node calls
* fix: restore shared tool-call stream wrapper
* ci: remove legacy pi test shard alias
* fix: clean up embedded agent test drift
* fix: stabilize runtime alias status
* fix: clean up embedded agent ci drift
* fix: restore release ci invariants
* fix: clean up post-rebase runtime drift
* fix: restore release ci checks
* fix: restore release ci after rebase
* fix: remove stale pi runtime path
* test: align compaction runtime expectations
* test: update plugin prerelease expectations
* fix: handle claude live tool approvals
* fix: stabilize release validation gates
* fix: finish agent runtime import
* test: finish post-rebase agent runtime mocks
* fix: keep codex compaction native
* fix: stabilize codex app-server hook tests
* test: isolate codex diagnostic active run
* test: remove codex diagnostic completion race
# Conflicts:
# extensions/codex/src/app-server/run-attempt.test.ts
* ci: fix full release manifest performance run id
* refactor: narrow llm plugin sdk boundary
* chore: drop generated google boundary stamps
* fix: repair rebase fallout
* fix: clean up rebased runtime references
* fix: decode codex jwt payloads as base64url
* fix: preserve shipped pi runtime alias
* fix: add scoped sdk virtual modules
* fix: decode llm codex oauth jwt as base64url
* fix: avoid stale vertex adc negative cache
* fix: harden tool arg decoding and codeql path
* fix: keep vertex adc negative checks live
* refactor: consolidate codex jwt and edit helpers
* fix: await codex oauth node runtime imports
* fix: preserve sdk tool and notice contracts
* fix: preserve shipped compat config boundaries
* fix: align codex oauth callback host
* fix: terminate agent-core loop streams on failure
* fix: keep codex oauth callback alive during fallback
* ci: include session tools in critical codeql scans
* fix: keep Cloudflare Anthropic provider auth header
* docs: redirect legacy pi runtime pages
* fix: honor bundled web provider compat discovery
* fix: protect session output spill files
* fix: keep legacy agent dir env blocked
* fix: contain auto-discovered skill symlinks
* fix: harden agent core sdk proxy surfaces
* fix: restore approval reaction sdk compat
* fix: keep live docker runs bounded
* fix: keep codex oauth redirect host aligned
* fix: resolve post-rebase agent runtime drift
* fix: redact anthropic oauth parse failures
* fix: preserve responses strict tool shaping
* fix: repair agent runtime rebase cleanup
* docs: redirect retired parity pages
* fix: bound auto-discovered resources to roots
* fix: repair post-rebase agent test drift
* fix: preserve bundled provider allowlist migration
* fix: preserve manifest-owned provider aliases
* fix: declare photon image dependency
* fix: keep provider headers out of proxy body
* fix: preserve shipped env aliases
* fix: refresh control ui i18n generated state
* fix: quote read fallback paths
* fix: preview edits through configured backend
* test: satisfy core test typecheck
* fix: preserve ZAI usage auth fallback
* test: repair codex diagnostic test
* fix: repair agent runtime rebase drift
* test: finish embedded runner import rename
* fix: repair agent runtime rebase integrations
* test: align compaction oauth fallback expectations
* fix: allow sdk-auth session models
* fix: update doctor tool schema import
* fix: preserve bedrock plugin region
* fix: stream harmony-like prose immediately
* ci: include session runtime in codeql shards
* fix: repair latest rebase integrations
* fix: honor explicit codex websocket transport
* fix: keep openai-compatible credentials provider-scoped
* fix: refresh sdk api baseline after rebase
* fix: route cli runtime aliases through openclaw harness
* test: rename stale harness mock expectation
* test: rename embedded agent overflow calls
* test: clean embedded auth test wording
* test: use openclaw stream types in deepinfra cache test
* fix: refresh sdk api baseline on latest main
* fix: honor bundled discovery compat allowlists
* fix: refresh sdk api baseline after latest rebase
* fix: remove stale rebase imports
* test: rename stale model catalog mock
* test: mock renamed doctor runtime modules
* fix: map canonical kimi env auth
* fix: use internal model registry in bench script
* fix: migrate deepinfra provider catalog entry
* fix: enforce builtin tool suppression
* fix: route compaction auth and proxy payloads safely
* refactor: prune unused llm registry leftovers
* test: update codex hooks session import
* test: fix model picker ci coverage
* test: align model picker auth mock types
2026-05-27 19:24:04 +01:00
Vincent Koc
eb15c443fc
fix(docker): bound live setup commands
2026-05-27 00:38:17 +02:00
Vincent Koc
5ef812293b
fix(codex): bridge cli api-key auth into app-server
2026-05-26 17:19:50 +02:00
Vincent Koc
0cca7861c1
fix(e2e): kill timed setup process groups
2026-05-26 15:31:56 +02:00
Vincent Koc
8c7f226401
fix(e2e): time out live docker setup installs
2026-05-26 14:58:45 +02:00
Vincent Koc
d1f2eb0709
fix(e2e): time out live Docker runs
2026-05-26 12:24:13 +02:00
Vincent Koc
1e21121021
fix(ci): require live docker credentials by resource
2026-05-23 12:39:02 +02:00
Peter Steinberger
e973aa278f
test: add codex media path docker e2e
2026-05-18 13:45:35 +01:00
Vincent Koc
b19b7539a8
test: fix Codex live Docker api key permissions
2026-05-17 02:32:58 +08:00
Vincent Koc
3a13d1e0be
test: bind Codex live API key lane through OpenAI
2026-05-17 02:32:57 +08:00
Vincent Koc
f0105939bf
test: pass Codex API key into Docker bind lane
2026-05-17 02:32:57 +08:00
Peter Steinberger
f1ddaf46c7
ci: avoid pnpm prompts in live docker tests
2026-05-13 03:46:33 +01:00
Vincent Koc
6c7c0e559a
test(docker): hydrate codex harness live profile
2026-05-06 03:24:58 -07:00
Vincent Koc
a3aa0a457f
fix(test): harden docker live harness
2026-05-06 03:24:56 -07:00
Vincent Koc
ac3cd1a0ca
Harden Codex harness control surfaces ( #77459 )
...
* fix(scripts): find codex protocol source from worktrees
* fix(test): keep codex harness docker caches writable
* fix(test): relax live codex cache mount permissions
* test(codex): add live docker harness debug output
* fix(test): detect numeric ci env in codex docker harness
* fix(codex): skip duplicate agent-command telemetry
* fix(tooling): skip sparse-missing oxlint tsconfig
* fix(tooling): route changed checks through testbox
* fix(qa): keep coverage json source-clean
* fix(test): preflight codex docker auth
* fix(codex): validate bind option values
* fix(codex): parse quoted command arguments
* fix(codex): reject extra control args
* fix(codex): use content for blank bound prompts
* fix(codex): decode local image file urls
* fix(codex): treat local media urls as images
* fix(codex): keep windows media paths local
* fix(codex): reject malformed diagnostics confirmations
* fix(codex): reject malformed resume commands
* fix(codex): reject malformed thread actions
* fix(codex): reject malformed turn controls
* fix(codex): reject malformed model controls
* fix(codex): resolve empty user input prompts
* fix(codex): enforce user input options
* fix(codex): reject ambiguous computer-use actions
* fix(codex): ignore stale bound turn notifications
* test(gateway): close task registries in gateway harness
* test(gateway): route cleanup through task seams
* fix(codex): describe current permission approvals
* fix(codex): disclose command approval amendments
* fix(codex): preserve approval detail under truncation
* fix(codex): propagate dynamic tool failures
* test(codex): align dynamic tool block contract
* fix(codex): reject extra read-only command operands
* fix(codex): escape command readout fields
* fix(codex): escape status probe errors
* fix(codex): narrow formatted thread details
* fix(codex): escape successful status summaries
* fix(codex): escape bound control replies
* fix(codex): escape user input prompts
* fix(codex): escape control failure replies
* fix(codex): escape approval prompt text
* test(codex): narrow escaped reply assertions
* test(codex): complete strict reply fixtures
* test(codex): preserve account fixture literals
* test(codex): align status probe fixtures
* fix(codex): satisfy sanitizer regex lint
* fix(codex): harden command readouts
* fix(codex): harden bound image inputs
* fix(codex): sanitize command failure replies
* test(codex): complete rate limit fixture
* test(tooling): isolate postinstall compile cache fixture
* fix(codex): keep app-server event ownership explicit
---------
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-05-05 07:23:41 +09:00
Peter Steinberger
57e4a12165
fix(release): stage codex plugin source for live docker harness
2026-05-02 15:34:59 +01:00
Peter Steinberger
81e1deade2
fix(release): restore plugin runtime loading
2026-05-02 14:28:55 +01:00
Peter Steinberger
7a100021d3
test(release): stabilize live codex gates
2026-05-02 14:08:47 +01:00
Peter Steinberger
ffc79532b8
test(release): stabilize live release gates
2026-05-02 13:06:37 +01:00
Peter Steinberger
955b4df093
fix(ci): stabilize full release validation
2026-04-28 23:54:43 +01:00
Vincent Koc
42de56cc22
fix(ci): trust live docker harness scripts
2026-04-27 20:52:37 -07:00
Vincent Koc
b1439ca527
fix(ci): keep codex live harness helpers trusted
2026-04-27 20:37:57 -07:00
Peter Steinberger
68561a8c94
ci: use trusted codex live harness
2026-04-28 04:29:35 +01:00
Peter Steinberger
0ddbae171d
test: cover codex app-server subagents
2026-04-26 03:46:30 +01:00
Peter Steinberger
6b3e4b88d6
test: update QA parity fixtures for GPT-5.5
2026-04-25 18:05:28 +01:00
Peter Steinberger
5d724863bb
test: show live Docker profile mount
2026-04-25 04:57:20 +01:00
Peter Steinberger
ed7ea75fc0
perf: speed up live Docker staging
2026-04-24 20:03:08 +01:00
Peter Steinberger
560b04d4c6
perf: avoid slow Docker live lane cleanup
2026-04-24 18:09:04 +01:00
Peter Steinberger
1e83357abe
test: harden live docker lanes
2026-04-24 05:55:27 +01:00
Peter Steinberger
e0d3256311
test(codex): cover app-server Docker flows
2026-04-24 04:24:08 +01:00
Peter Steinberger
e98331b0be
test: parallelize docker aggregate
2026-04-23 14:31:18 +01:00
Peter Steinberger
d88d6a3c8b
fix: complete codex app-server turns in docker
2026-04-23 05:35:17 +01:00
pashpashpash
ff02563c7c
feat(codex): add guardian app-server mode ( #70090 )
...
Reworks the Codex app-server Guardian change into the final landing shape:
- keep YOLO as the default local app-server mode
- add explicit `appServer.mode: "guardian"`
- remove the legacy `OPENCLAW_CODEX_APP_SERVER_GUARDIAN` shortcut
- document Guardian configuration and behavior
- add Guardian event projection and Docker live probes for approved/ask-back decisions
Co-authored-by: pashpashpash <nik@vault77.ai >
2026-04-23 00:25:43 +01:00
Peter Steinberger
047acaa176
fix: stage ACP and Codex runtime deps
2026-04-21 08:47:24 +01:00
Onur
361750775d
CI: stabilize live release lanes ( #67838 )
...
* CI: stabilize live release lanes
* CI: widen codex live exclusions
* Gateway: stop live config/auth lazy re-imports
* CI: mount writable live Docker homes
* Live: tighten retry and provider filter overrides
* CI: use API-key auth for codex live lanes
* CI: fix remaining live lanes
* CI: stop forwarding live OpenAI base URLs
* Gateway: fix live startup loader regression
* CI: stop expanding OpenAI keys in live Docker lanes
* CI: stop expanding installer secrets in Docker
* CI: tighten live secret boundaries
* Gateway: pin Codex harness base URL
* CI: fix reusable workflow runner label
* CI: avoid template expansion in live ref guard
* CI: tighten live trust gate
* Gateway: ignore empty Codex harness base URL
* CI: stabilize remaining live lanes
* CI: harden live retries and canvas auth test
* CI: extend cron live probe budget
* CI: keep codex harness lane on api-key auth
* CI: stage live Docker OpenAI auth via env files
* CI: bootstrap codex login for Docker API-key lanes
* CI: accept hosted-runner codex fallback responses
* CI: accept additional codex sandbox fallback text
* CI: accept hosted-runner live fallback variants
* CI: accept codex current-model fallback
* CI: broaden codex sandbox model fallbacks
* CI: cover extra codex sandbox wording
* CI: extend cli backend cron retry budget
* CI: match codex models fallbacks by predicate
* CI: accept configured-models live fallback
* CI: relax OpenAI websocket warmup timeout
* CI: accept extra codex model fallback wording
* CI: generalize codex model fallback matching
* CI: retry cron verify cancellation wording
* CI: accept interactive codex model entrypoint fallback
* Agents: stabilize Claude bundle skill command test
* CI: prestage live Docker auth homes
* Tests: accept current Codex models wording
* CI: stabilize remaining live lanes
* Tests: widen CLI backend live timeout
* Tests: accept current Codex model summary wording
* CI: disable codex-cli image probe in Docker lane
* Tests: respect CLI override for Codex Docker login
* Tests: accept current Codex session models header
* CI: stabilize remaining live validation lanes
* CI: preserve Gemini ACP coverage in auth fallback
* CI: fix final live validation blockers
* CI: restore Codex auth for CLI backend lane
* CI: drop local Codex config in live Docker lane
* Tests: tolerate Codex cron and model reply drift
* Tests: accept current Codex live replies
* Tests: retry more Codex cron retry wording
* Tests: accept environment-cancelled Codex cron retries
* Tests: retry blank Codex cron probe replies
* Tests: broaden Codex cron retry wording
* Tests: require explicit Codex cron retry replies
* Tests: accept current Codex models environment wording
* CI: restore trusted Codex config in live lane
* CI: bypass nested Codex sandbox in docker
* CI: instrument live codex cron lane
* CI: forward live CLI resume args
* Tests: accept interactive Codex model selection
* Tests: bound websocket warm-up live lane
* CI: close live lane review gaps
* Tests: lazy-load gateway live server
* Tests: avoid gateway live loader regression
* CI: scope reusable workflow secrets
* Tests: tighten codex models live assertion
* Tests: normalize OpenAI speech live text
2026-04-18 03:18:12 +02:00
Onur
98c681e033
CI: mount writable Docker cache homes ( #67825 )
2026-04-16 23:16:48 +02:00
Onur
3ae5d95bfd
CI: fix live Docker auth mounts ( #67812 )
...
* CI: fix live Docker auth mounts
* CI: harden live Docker auth mounts
2026-04-16 23:00:11 +02:00
Peter Steinberger
46a6746bca
docs: clarify codex harness validation
2026-04-11 00:13:08 +01:00
Peter Steinberger
bfc0889776
docs: document Codex harness plugin workflow
2026-04-10 21:22:16 +01:00