Peter Steinberger
b53f77b840
test: clear browser client broad matchers
2026-05-10 19:05:33 +01:00
Peter Steinberger
58aeae5b66
test: harden browser chrome env test
2026-05-10 12:37:10 +01:00
Peter Steinberger
827b0de0ce
refactor: reduce plugin sdk surface
2026-05-10 12:37:10 +01:00
Peter Steinberger
3ff0da7993
test: clear browser act command broad matchers
2026-05-10 11:33:09 +01:00
Peter Steinberger
8841d9270f
test(browser): relax chromium xdg env assertion
2026-05-10 07:45:44 +01:00
Ayaan Zaidi
a13d569f07
fix(browser): use OpenClaw temp dir for Chromium state
2026-05-10 11:37:37 +05:30
Ayaan Zaidi
082c932e94
fix(docker): export Playwright browser runtime path
2026-05-10 11:37:37 +05:30
Ayaan Zaidi
3050b1568d
fix(browser): detect Playwright chrome-linux64 cache
2026-05-10 11:37:37 +05:30
Ayaan Zaidi
baa08dd5d1
fix(browser): detect Playwright Chromium cache
2026-05-10 11:37:37 +05:30
Peter Steinberger
4c1e6ba2f0
test: clear browser tool broad matchers
2026-05-10 05:28:31 +01:00
Peter Steinberger
932e436250
test: tighten browser tool assertions
2026-05-10 05:24:11 +01:00
Ruben Cuevas
f654f2f353
fix(browser): extend existing-session status probe
2026-05-09 22:26:16 -04:00
Shakker
01741f81f8
test: remove stale unused imports
2026-05-09 11:26:43 +01:00
Peter Steinberger
297665197b
test: tighten browser request timeout assertion
2026-05-09 05:38:42 +01:00
Shakker
5496100a51
test: tighten browser empty array assertions
2026-05-09 05:17:37 +01:00
Shakker
c6faba0713
test: tighten browser empty payload assertions
2026-05-09 04:28:18 +01:00
Peter Steinberger
ac18768c19
test: tighten browser download path assertion
2026-05-09 03:31:54 +01:00
Shakker
20a2ac3e5d
test: tighten extension cleanup assertions
2026-05-09 02:56:17 +01:00
Peter Steinberger
c958716d10
test: dedupe browser download absence assertions
2026-05-09 02:42:52 +01:00
Peter Steinberger
b28e29c4f3
test: tighten browser cdp transport failure assertions
2026-05-09 01:49:26 +01:00
Peter Steinberger
387846f1c7
test: tighten browser proxy file absence assertion
2026-05-09 01:44:15 +01:00
Shakker
105cc8d18a
test: clear browser open tab timeout guard
2026-05-09 00:59:36 +01:00
Peter Steinberger
35363a279b
test: simplify browser doctor warning ids
2026-05-08 23:03:18 +01:00
Peter Steinberger
aa78d9eab9
test: avoid extension filter count helpers
2026-05-08 22:15:56 +01:00
Peter Steinberger
73faa75be1
test: require browser async callbacks
2026-05-08 19:23:45 +01:00
Peter Steinberger
ad818ed99d
test: require matrix test targets
2026-05-08 17:03:43 +01:00
Shakker
a07802e7f0
test: tighten browser profile assertion
2026-05-08 16:56:54 +01:00
Peter Steinberger
bbd6d9e254
test: stabilize node 26 full-suite edge cases
2026-05-08 16:52:23 +01:00
Peter Steinberger
7cc0b21e4d
test: restore node 26 test compatibility
2026-05-08 16:52:23 +01:00
Peter Steinberger
f6476140d2
test: tighten live provider assertions
2026-05-08 15:11:21 +01:00
Peter Steinberger
f5e6108133
test: clarify browser cdp fuzz assertions
2026-05-08 13:17:30 +01:00
clawsweeper
48c24c86c9
test: cover download parent symlink race
2026-05-08 20:31:43 +10:00
jesse-merhi
c71dfb6f52
test: cover download parent symlink race
2026-05-08 20:31:43 +10:00
Shakker
9ae982f486
test: clarify browser download output assertions
2026-05-08 09:45:28 +01:00
Peter Steinberger
b55dfd53b4
test: clarify browser doctor warning assertions
2026-05-08 08:43:51 +01:00
Peter Steinberger
3e53b19284
test: clarify browser client endpoint assertions
2026-05-08 08:17:08 +01:00
scotthuang
37af50f3db
fix(browser): keep user tabs open on SSRF-denied reads ( #78874 )
...
Summary:
- Split browser SSRF quarantine from tab closure so read-only browser operations do not close user-owned tabs on policy denial.
- Keep OpenClaw-initiated navigation/create paths closing blocked tabs, and add regression coverage for both contracts.
- Update changelog with contributor credit.
Verification:
- pnpm test extensions/browser/src/browser/pw-session.assert-navigation-safety.test.ts extensions/browser/src/browser/pw-tools-core.snapshot.navigate-guard.test.ts
- pnpm test extensions/browser/src/browser/pw-tools-core.browser-ssrf-guard.test.ts extensions/browser/src/browser/pw-tools-core.snapshot.test.ts
- Exact-head CI success: 25535578610
- Exact-head Real behavior proof success: 25536652326
Thanks @scotthuang.
2026-05-08 08:13:04 +01:00
Jesse Merhi
a9377fe667
Harden browser download output writes ( #78780 )
...
Summary:
- The PR exports `ensureAbsoluteDirectory` through the fs-safe/SDK runtime facades and routes browser download ... through safe output directory/file helpers with focused tests, a changelog entry, and SDK API hash updates.
- Reproducibility: yes. at source level: current main creates browser download/output roots with raw recursive ... jection coverage for that path. I did not run a live browser runtime reproduction in this read-only review.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(browser): use fs-safe output directory helper
- PR branch already contained follow-up commit before automerge: docs(changelog): mention browser fs-safe hardening
- PR branch already contained follow-up commit before automerge: fix(browser): harden download output writes
Validation:
- ClawSweeper review passed for head a9c9570f66a9c9570f66https://github.com/openclaw/openclaw/pull/78780#issuecomment-4394146682
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-08 05:57:23 +00:00
Peter Steinberger
9ef37d1907
test: tighten assertions and harness coverage
2026-05-08 05:28:12 +01:00
Peter Steinberger
6a4069dead
fix: share plugin runtime helpers
...
Consolidate shared plugin runtime MIME/schema helpers, preserve canonical runtime behavior, and guard QQBot STT fetches.
2026-05-08 00:28:43 +01:00
Peter Steinberger
252a76d25c
refactor: stage external output writes through fs-safe
2026-05-07 06:05:24 +01:00
Vincent Koc
b680360fde
test(browser): allow fs-safe download staging
2026-05-06 21:11:18 -07:00
Vincent Koc
dddd9cb3b6
test(browser): use existing outside trash path
2026-05-06 21:03:06 -07:00
Vincent Koc
0c4111de9d
test(browser): use real trash fixture paths
2026-05-06 21:01:53 -07:00
Peter Steinberger
6da5eda488
test: avoid real waits in cdp and outbound tests
2026-05-06 05:43:48 +01:00
Peter Steinberger
afc2c2e207
test(browser): avoid real retry waits
2026-05-06 05:33:28 +01:00
Peter Steinberger
b85b1c68d1
Refactor file access to use fs-safe primitives ( #78255 )
...
* refactor: use fs-safe primitives across file access
* fix: preserve invalid managed npm manifests
* fix: keep fs seams for startup metadata
2026-05-06 05:03:11 +01:00
Peter Steinberger
b43efd3793
fix: clean up post-land CI guards
2026-05-06 02:51:53 +01:00
Peter Steinberger
538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
Peter Steinberger
4556707cb7
test(browser): mirror route URL guard in existing-session helper
2026-05-04 22:29:13 +01:00
