Peter Steinberger
|
538605ff44
|
[codex] Extract filesystem safety primitives (#77918)
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
|
2026-05-06 02:15:17 +01:00 |
|
Altay
|
8cf02e7c47
|
fix(ci): clear check-additional follow-up regressions (#63934)
* fix(ci): route messaging temp files through openclaw tmp dir
* fix(ci): clear qa-lab follow-up guardrails
* fix(ci): own-check ACP fallback resolvers
* fix(ci): preserve memory-core write error causes
* fix(ci): narrow qa-channel boundary alias
* fix(test): type memory-core dreaming api stubs
|
2026-04-09 23:47:59 +01:00 |
|
Vincent Koc
|
ce32697250
|
fix(openshell): split fs bridge backend types
|
2026-04-09 09:17:29 +01:00 |
|
Peter Steinberger
|
67dc6e82b9
|
refactor: dedupe misc lowercase helpers
|
2026-04-07 22:24:32 +01:00 |
|
Vincent Koc
|
620537914b
|
fix(plugins): clean bundled extension lint tail
|
2026-04-06 15:21:46 +01:00 |
|
Jacob Tomlinson
|
cfe1445953
|
Sandbox: sanitize SSH subprocess env (#57848)
* Sandbox: sanitize SSH subprocess env
* Sandbox: add sanitize env undefined test
|
2026-03-30 20:05:57 +01:00 |
|
Jacob Tomlinson
|
3b9dab0ece
|
OpenShell: harden mirror sync boundaries (#57693)
* OpenShell: harden mirror sync boundaries
* OpenShell: polish mirror hardening tests
* OpenShell: preserve trusted mirror symlinks
* OpenShell: bound mirror fs work globally
|
2026-03-30 14:51:44 +01:00 |
|
Jacob Tomlinson
|
c02ee8a3a4
|
OpenShell: exclude hooks/ from mirror sync (#54657)
* OpenShell: exclude hooks/ from mirror sync
* OpenShell: make excludeDirs case-insensitive for cross-platform safety
|
2026-03-25 19:59:07 +00:00 |
|
Gustavo Madeira Santana
|
9fc6c1929a
|
Plugin SDK: split setup and sandbox subpaths
|
2026-03-16 12:06:32 +00:00 |
|
Peter Steinberger
|
b8bb8510a2
|
feat: move ssh sandboxing into core
|
2026-03-15 21:35:30 -07:00 |
|
Peter Steinberger
|
ae7f18e503
|
feat: add remote openshell sandbox mode
|
2026-03-15 20:28:19 -07:00 |
|
Peter Steinberger
|
d8b927ee6a
|
feat: add openshell sandbox backend
|
2026-03-15 20:03:22 -07:00 |
|