Peter Steinberger
507038c456
refactor: split oversized test suites ( #106354 )
...
* refactor: split oversized test suites
* test: classify split modules as test utilities
* test: preserve bundled routing after suite splits
* style: format unit-fast routing import
* test: preserve owner routing for split suites
2026-07-13 07:01:08 -07:00
Peter Steinberger
98e3f729bc
refactor: remove dead plugin loader exports ( #105937 )
...
* refactor(plugins): trim activation and contract exports
* test(plugins): restore fixture cleanup
* refactor(plugins): trim install and loader exports
* test(plugins): fully reset loader caches
* refactor(plugins): trim metadata and catalog exports
* test(plugins): preserve catalog trust coverage
* refactor(plugins): trim provider and plugin exports
* refactor(plugins): trim runtime and tool exports
* test(plugins): update dead-export consumers
* test(plugins): remove empty dead-export suites
* refactor(plugins): align exports with split registry
* refactor(plugins): trim drifted loader exports
* style(plugins): format test fixtures
* refactor(scripts): use supported plugin APIs
* refactor(plugins): finish dead export cleanup
* chore(deadcode): refresh export baseline
* test(cli): mock production memory state
* chore(deadcode): sync latest export baseline
* fix(tests): keep plugin fixtures inside core
* chore(deadcode): refresh rebased export baseline
* chore(deadcode): sync current ratchets
* fix(plugins): retain reserved slot invariant
* fix(plugins): preserve dead-export invariants
* test(plugins): use neutral catalog query fixture
* test(plugins): satisfy catalog lint
* test(plugins): preserve integrity drift coverage
* fix(ci): register skill experience live proof
2026-07-13 01:29:33 -07:00
Peter Steinberger
1b313dc4d4
chore(tooling): enforce indexed access in core tests ( #105375 )
...
* test(tooling): enforce indexed access in core tests
* test(tui): constrain theme environment overrides
* test(doctor): enforce indexed access in migration fixtures
2026-07-12 14:29:52 +01:00
Vincent Koc
d2ad471a8c
refactor(plugins): centralize registration rollback ( #104902 )
2026-07-12 10:39:15 +08:00
Peter Steinberger
d05391b9b3
fix: prevent Slack startup from loading stale builds ( #104831 )
2026-07-11 17:51:19 -07:00
Peter Steinberger
90e465833b
feat(gateway): durable cloud worker environments, provider SDK contract, and lifecycle RPCs ( #104401 )
...
* docs(plan): add cloud workers design plan
* feat(plugin-sdk): add cloud worker provider foundations
* feat(protocol): add worker environment lifecycle shapes
* feat(gateway): persist worker environment lifecycles
* test(gateway): pin environment inventory assertion for damaged worker store
* style(cloud-workers): satisfy lint and docs formatting
* fix(gateway): narrow worker environment type boundaries
* chore(plugin-sdk): account for WorkerProvider surface growth
* docs: regenerate docs map
2026-07-11 04:54:27 -07:00
Josh Avant
fbd330b7aa
fix(channels): honor configured read target policies ( #99905 )
...
* fix(channels): enforce configured read targets
* test(channels): align policy checks with boundaries
* fix: bind channel reads to trusted turn context
* test: satisfy gateway lint
* fix: narrow message action channel imports
* fix(feishu): authorize message reads before provider access
* fix(slack): await reaction clear authorization
* fix(channels): align provider action contracts
* fix(matrix): read direct-room account data before sync
* fix(channels): reject unsupported attachment actions early
* fix: restore trusted operator conversation reads
* fix(matrix): authorize pin actions before provider reads
* fix: preserve trusted channel read workflows
* fix(discord): resolve current channel ids consistently
* fix(agents): preserve message action turn capability
* fix(plugins): enforce host-owned read provenance
* fix(channels): harden Teams and Discord read policy
* fix(channels): preserve exact-current action compatibility
* fix(imessage): authorize trusted current chat aliases
* fix(channels): preserve normalized current aliases
* fix(channels): preserve external current target aliases
* fix: reconcile channel policy with current main
* fix(discord): isolate DM read policy
* fix(channels): enforce provider read gates
* fix(gateway): await serialized message action identity tokens
* fix(ci): refresh channel protocol contracts
2026-07-10 22:29:37 -05:00
Peter Steinberger
2cc8bb40fd
fix(plugins): quiet trusted discovery warning ( #104097 )
2026-07-10 19:53:03 -07:00
Dallin Romney
a45c0999ce
refactor(plugins): require initialized registry collections ( #100990 )
...
* refactor(plugins): require initialized registry collections
* test(plugins): keep empty registry imports lightweight
2026-07-06 10:25:22 -07:00
Mark
5db7c3797d
Fix Telegram plugin callback routing ( #97174 )
...
* fix telegram plugin callback routing
* Add Telegram callback proof coverage
* Fix proof script lint
* Fix Telegram proof CI regressions
* test: fix telegram callback proof CI regressions
* fix: retire registry-owned callbacks
* fix: retire registry-owned callbacks
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-01 19:49:54 +01:00
黄伟浩
35fcfe85cd
fix(plugins): preserve mutable hook context ( #97281 )
...
* fix(plugins): preserve mutable hook context
* fix(plugins): satisfy hook context lint
2026-06-28 12:28:30 -07:00
Joe Pahuchi
b27ac78d4d
fix(plugins): make empty-allowlist actionable for new users ( #78105 )
...
* fix(plugins): make empty-allowlist warning actionable for first-time users
* fix(plugins): make empty-allowlist warnings actionable
* fix(plugins): make empty-allowlist warnings actionable
* fix(plugins): make empty-allowlist actionable for new users
---------
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
2026-06-23 04:41:40 +00:00
Sean Sun
1d013c219b
plugins: clarify allowlist warning when entries don't match discovered ids ( #68389 )
...
* plugins: clarify allowlist warning when entries don't match discovered ids
When plugins.allow contains entries that do not match any discovered
plugin id (for example a channel id like feishu instead of the real
plugin id openclaw-lark), stop emitting the misleading "plugins.allow
is empty" warning. Emit a specific mismatch warning that lists the
unknown allow entries alongside the discovered plugin ids and points
users at the plugin id rather than a channel id or npm package name.
Refs #68352
* plugins: treat bundled plugin ids as valid allow entries
Codex P2 on #68389 : warnWhenAllowlistIsOpen computed allowHasMatch
against the auto-discoverable (workspace + global) subset only, so
a legitimate bundled-only allowlist like plugins.allow=['telegram']
would trip the new mismatch warning whenever any non-bundled plugin
happened to be discoverable alongside it.
Compare allow entries to every discovered plugin id (bundled +
workspace + global) for both the short-circuit and the unmatched-
entries computation. The warning text stays scoped to non-bundled
auto-discoverable plugins; we just stop flagging bundled ids as
'does not match any discovered plugin ids'. Add a regression test
that covers the bundled-only allowlist + non-bundled workspace
plugin combination.
Refs #68352
* chore: drop release-owned CHANGELOG entry (AGENTS.md: changelog is release-generated)
* plugins: clarify allowlist warning when entries do not match plugin ids
---------
Co-authored-by: Sean Sun <lyfuci11@gmail.com >
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
2026-06-23 02:20:17 +00:00
Vincent Koc
29df94382e
chore(deadcode): remove duplicate compaction provider lister
2026-06-20 16:22:46 +08:00
Vincent Koc
6ef4970988
refactor(agents): drop unused harness registry wrappers
2026-06-19 18:22:26 +08:00
Alex Knight
23eadfa277
fix(plugins): compose live hook registry view for tool-call hooks
...
Local extension before_tool_call/after_tool_call hooks registered but
never fired after a scoped mid-run plugin activation (harness or memory
ensure) rebound the global hook runner to a narrow registry, dropping
hooks unique to the broader registry (#91918 ).
The runner is now created once and resolves hooks live on every dispatch
from the composed set of currently-live registries (the most recently
initialized registry, the active registry, and the pinned channel and
http-route surfaces) instead of freezing one registry. The loader's
one-shot preserve gate is removed since activation order no longer
matters. Per-plugin ownership prefers loaded records so a failed scoped
reload cannot shadow a healthy pinned registration (including a
fail-closed tool-call gate), and the explicitly initialized registry
stays highest precedence so SDK callers keep an authoritative registry.
Reuses the live-registry collector the agent-event bridge already uses
so both dispatch surfaces agree on what is live.
2026-06-18 09:39:44 +10:00
Vincent Koc
de1d329e31
fix(plugins): allow Dreaming sidecar through restrictive memory allowlists ( #93678 )
...
Co-authored-by: openclaw-clownfish[bot] <280122609+openclaw-clownfish[bot]@users.noreply.github.com>
Co-authored-by: pradeep7127 <21005375+pradeep7127@users.noreply.github.com >
2026-06-16 23:02:15 +08:00
clawsweeper[bot]
2bec2caf0c
fix(channel): harden local setup trust ( #92175 )
...
Summary:
- The PR extends channel setup trust enforcement and trusted catalog fallback from workspace-origin plugins to ... nfigured load paths into catalog discovery, and adds focused regression plus Docker/package proof coverage.
- PR surface: Source +190, Tests +892, Other +324. Total +1406 across 13 files.
- Reproducibility: yes. The source PR provides a concrete clean-main Docker/package path where an explicitly t ... ns unresolved, while the patched package resolves it and still blocks untrusted module and setup execution.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(channel): stabilize trusted catalog dts typing
- PR branch already contained follow-up commit before automerge: fix(channel): repair trusted catalog exclusions typing
- PR branch already contained follow-up commit before automerge: test(channel): cover local channel plugin trust
- PR branch already contained follow-up commit before automerge: chore(deps): refresh plugin shrinkwraps
- PR branch already contained follow-up commit before automerge: test(channel): route trust regression in command shard
- PR branch already contained follow-up commit before automerge: test(channel): remove e2e-named trust regression
Validation:
- ClawSweeper review passed for head eabee04d54eabee04d54https://github.com/openclaw/openclaw/pull/92175#issuecomment-4680798117
Co-authored-by: Mason Huang <masonxhuang@tencent.com >
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
2026-06-11 13:48:41 +00:00
brokemac79
de4b8d8ebf
feat(plugins): allow installed trusted policy contracts
...
Allow explicitly enabled installed plugins to register declared trusted tool policies and agent tool result middleware, with trusted policy ids scoped by plugin owner.\n\nVerification covered targeted plugin/agent tests, typecheck, build, lint, local autoreview, and a Blacksmith Testbox runtime proof (tbx_01ktr1nq0rhq47fjkwrepm7fd3).
2026-06-10 16:18:23 +10:00
Peter Steinberger
f875b519e5
docs: document plugin host contracts
2026-06-04 04:51:24 -04:00
Mason Huang
004835f4c7
fix(plugins): block untrusted workspace setup-only channel loads ( #86953 )
...
Summary:
- This PR blocks disabled workspace-origin channel plugins from setup-only scoped imports, rejects their channel registrations at registry assembly, documents the trust rule, and adds regression coverage.
- PR surface: Source +46, Tests +610, Docs +13. Total +669 across 22 files.
- Reproducibility: yes. source inspection gives a high-confidence reproduction path: current main's setup-only ... ce channel plugin can be imported before this PR. I did not run the repro locally in this read-only review.
Automerge notes:
- PR branch already contained follow-up commit before automerge: test(plugins): cover workspace channel registry guard
- PR branch already contained follow-up commit before automerge: fix(plugins): isolate setup channel registration errors
- PR branch already contained follow-up commit before automerge: fix(channels): mark raw catalog listing internal
- PR branch already contained follow-up commit before automerge: test(channels): cover trusted catalog filtering
- PR branch already contained follow-up commit before automerge: test(channels): mock raw catalog helper
- PR branch already contained follow-up commit before automerge: docs(changelog): credit setup channel hardening
Validation:
- ClawSweeper review passed for head 11438bc1a011438bc1a0https://github.com/openclaw/openclaw/pull/86953#issuecomment-4545730044
Co-authored-by: masonxhuang <masonxhuang@tencent.com >
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
Co-authored-by: Mason Huang <masonxhuang@tencent.com >
Co-authored-by: Sebastien Tardif <sebtardif@ncf.ca >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
2026-06-01 09:25:56 +00:00
Shakker
ae800e160d
fix: prefer source plugins in dev runs
2026-05-31 01:47:11 +01:00
Peter Steinberger
3fc0df953c
refactor(agents): bind subagent threads in core ( #88416 )
...
Move subagent thread binding ownership into core so session-mode spawns prepare channel bindings before launching the child agent. Deprecate the legacy subagent_spawning SDK hook in code, compatibility metadata, diagnostics, and plugin docs; plugin authors should observe subagent_spawned instead.
Verification:
- node scripts/run-vitest.mjs src/agents/sessions-spawn-hooks.test.ts src/agents/subagent-spawn.thread-binding.test.ts src/agents/subagent-spawn.workspace.test.ts src/agents/subagent-spawn.mode-session-diagnostics.test.ts
- node scripts/run-tsgo.mjs -p tsconfig.core.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/core.tsbuildinfo
- git diff --check
- .agents/skills/autoreview/scripts/autoreview --mode local
- CI run 26693808952 green, including checks-node-agentic-agents-core and checks-node-agentic-plugin-sdk
2026-05-30 21:19:09 +01:00
Marvinthebored
6b41a0692f
fix(plugins): preserve single-pass plugin env config
...
Resolve raw plugin config environment references before plugin discovery and validation, while preserving the existing single-pass behavior for configs already loaded through config IO.
The loader now resolves raw config opt-ins with config.env vars included, bypasses active/cache reuse for that mode, and redacts plugin entry config from raw-mode cache keys so resolved secrets do not enter registry keys or reentry errors.
Verification:
- OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs src/plugins/loader.test.ts src/plugins/loader.runtime-registry.test.ts
- autoreview --mode branch --base origin/main
- pnpm check:changed on Blacksmith Testbox tbx_01ksw36bp7zygwxgq3jcsvjv3b / GitHub Actions run 26680322889
- PR CI green on facb77634epeter@lindsey.jp >
2026-05-30 11:39:15 +02:00
Peter Steinberger
1517fe2c32
perf: prefer package-local bundled plugin artifacts
2026-05-29 22:57:40 +01:00
Peter Steinberger
57a3dbe736
perf: avoid jiti for built plugin startup paths
2026-05-29 10:17:43 +01:00
Peter Steinberger
8ed9330a30
perf: defer Slack full startup ( #87760 )
2026-05-28 20:37:09 +01:00
Peter Steinberger
fe91ada730
fix: reflect lazy plugin runtime surfaces
2026-05-27 18:35:04 +01:00
Bob
4d89e00c50
feat(embeddings): add OpenAI-compatible core provider ( #85269 )
...
Merged via squash.
Prepared head SHA: dc9a5d5397261991368+dutifulbob@users.noreply.github.com >
Co-authored-by: mbelinky <132747814+mbelinky@users.noreply.github.com >
Reviewed-by: @mbelinky
2026-05-27 14:37:17 +02:00
Peter Steinberger
b972ac1940
fix(release): keep private QA markers out of bundled alias code
2026-05-24 06:03:21 +01:00
Gio Della-Libera
e6d5b7db96
fix(plugins): return plugin gateway method results ( #85785 )
2026-05-23 20:41:52 -07:00
Kaspre
fd2a9adbe6
fix(ollama): bypass managed proxy for loopback embeddings ( #85707 )
...
* fix(ollama): bypass proxy for local embeddings
* fix(ollama): keep managed proxy bypass loopback-only
* fix(ollama): keep proxy bypass internal
* fix(ollama): keep proxy bypass private
* fix(ollama): harden internal proxy bypass
* chore(plugin-sdk): refresh api baseline
* fix(ollama): keep internal bypass out of qa aliases
* test(ollama): keep ssrf runtime mock complete
* fix(ollama): keep dist sdk aliases public-only
* fix(ollama): keep fetch bypass out of infra runtime
* fix(ollama): preserve packaged private sdk alias
* test(ollama): harden private ssrf alias coverage
* test(ollama): cover private ssrf resolver edges
* fix(ollama): scope private sdk native aliases
* test(ollama): audit blocked loopback bypasses
* fix(plugins): keep staged sdk aliases public-only
* test(ollama): harden proxy bypass proof
* test(ollama): cover origin mismatch proxy path
* test(ollama): cover ipv6 and batch bypass paths
* fix lint findings in Ollama proxy tests
* refactor: tighten Ollama proxy bypass
* fix: widen private sdk owner registry type
* test: stabilize Ollama proxy PR checks
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-23 21:17:55 +01:00
Bob
ae4806ed9a
feat(plugins): add embedding provider contract ( #84947 )
...
Summary:
- Merged feat(plugins): add embedding provider contract after ClawSweeper review.
Automerge notes:
- PR branch already contained follow-up commit before automerge: chore(plugins): refresh embedding provider sdk baseline
- PR branch already contained follow-up commit before automerge: docs(plugins): document embedding provider contract
- PR branch already contained follow-up commit before automerge: fix(plugins): restore embedding providers after snapshot loads
- PR branch already contained follow-up commit before automerge: fix(plugins): resolve embedding providers from manifests
- PR branch already contained follow-up commit before automerge: fix(plugin-sdk): keep embedding provider registry mutators internal
- PR branch already contained follow-up commit before automerge: chore(plugin-sdk): refresh embedding provider API baseline
Validation:
- ClawSweeper review passed for head 41ebd66ab441ebd66ab4https://github.com/openclaw/openclaw/pull/84947#issuecomment-4514762026
Co-authored-by: Bob <dutifulbob@gmail.com >
Co-authored-by: Mariano Belinky <mbelinky@gmail.com >
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: osolmaz
Co-authored-by: osolmaz <2453968+osolmaz@users.noreply.github.com >
2026-05-22 03:36:51 +00:00
Peter Steinberger
4f4d108639
chore(lint): remove underscore-dangle allow list ( #83542 )
...
* chore(lint): reduce underscore-dangle exceptions
* chore(lint): reduce more underscore exceptions
* chore(lint): remove underscore-dangle allow list
* fix(lint): repair underscore cleanup regressions
* test(lint): track version define suppression
2026-05-18 14:56:06 +01:00
Vincent Koc
a85cd65775
fix(plugins): deprecate deactivate hook alias
2026-05-16 18:36:27 +08:00
Vincent Koc
33be0fbea7
fix(plugins): accept deactivate hook alias
2026-05-16 17:47:14 +08:00
Peter Steinberger
373f709130
fix(gateway): preserve core method collision guards
2026-05-15 12:25:31 +01:00
Peter Steinberger
db3c4ba8d3
refactor(gateway): collapse method metadata shims
2026-05-15 12:25:31 +01:00
Peter Steinberger
622728757f
refactor(gateway): add method descriptor registry
2026-05-15 12:25:31 +01:00
samzong
1d121c1f08
chore(gateway): add startup trace attribution ( #81738 )
...
Adds owner-level startup trace attribution for gateway auth, plugin loading, lookup counts, and plugin sidecar services.
Verification:
- node scripts/run-vitest.mjs src/plugins/startup-trace-segment.test.ts src/plugins/services.test.ts src/plugins/loader.test.ts src/gateway/server-startup-config.secrets.test.ts
- pnpm build
- pnpm check
CI override:
- Red checks are unrelated baseline noise. The failed CI shard is src/cli/plugins-install-persist.test.ts, which fails on origin/main 336ba2a2b3#81738 touches gateway/plugin startup trace files and CHANGELOG.md, not the failing CLI plugin install test.
Thanks @samzong.
Co-authored-by: samzong <13782141+samzong@users.noreply.github.com >
2026-05-14 16:50:08 +08:00
Vincent Koc
25eef1203a
fix(plugins): prefer installed memory tool owners
2026-05-14 14:35:45 +08:00
Shakker
c80152eadd
test: canonicalise plugin discovery paths
2026-05-12 21:52:03 +01:00
Peter Steinberger
93dd5e61ba
test: guard multiline helper assertions
2026-05-11 20:49:23 +01:00
Peter Steinberger
0e82b77857
test: guard plugin loader diagnostics
2026-05-11 20:08:19 +01:00
Chinar Amrutkar
f2c15f94ae
fix(channels): narrow bundled channel loader diagnostics
...
Narrow bundled channel wrong-loader diagnostics, preserve ordinary missing-register debug details, and add focused loader coverage.
Verification:
- pnpm test src/plugins/loader.test.ts src/plugins/loader.cli-metadata.test.ts -- --reporter=verbose
- env -u OPENCLAW_TESTBOX -u OPENCLAW_TESTBOX_REMOTE_RUN pnpm check:changed
CI notes:
- Real behavior proof passed with maintainer proof: override label.
- check-additional-boundaries-d is red from existing extension test imports outside this PR: extensions/telegram/src/bot.create-telegram-bot.test.ts and extensions/whatsapp/src/login.coverage.test.ts.
Co-authored-by: Chinar Amrutkar <chinar.amrutkar@gmail.com >
2026-05-11 16:58:06 +01:00
Eva
50ee68cdf4
feat(plugin-sdk): consolidate session workflow APIs
2026-05-11 03:24:08 +01:00
Peter Steinberger
827b0de0ce
refactor: reduce plugin sdk surface
2026-05-10 12:37:10 +01:00
Peter Steinberger
04a414de20
test: clear plugin loader broad matchers
2026-05-10 08:40:19 +01:00
Shakker
df4aaaecfa
test: tighten plugin loader empty array assertions
2026-05-09 05:19:02 +01:00
Shakker
fa83925fab
test: tighten plugin empty state assertions
2026-05-09 04:10:32 +01:00
