mirror of
https://github.com/openclaw/openclaw.git
synced 2026-06-03 02:36:25 +00:00
004835f4c7
Summary: - This PR blocks disabled workspace-origin channel plugins from setup-only scoped imports, rejects their channel registrations at registry assembly, documents the trust rule, and adds regression coverage. - PR surface: Source +46, Tests +610, Docs +13. Total +669 across 22 files. - Reproducibility: yes. source inspection gives a high-confidence reproduction path: current main's setup-only ... ce channel plugin can be imported before this PR. I did not run the repro locally in this read-only review. Automerge notes: - PR branch already contained follow-up commit before automerge: test(plugins): cover workspace channel registry guard - PR branch already contained follow-up commit before automerge: fix(plugins): isolate setup channel registration errors - PR branch already contained follow-up commit before automerge: fix(channels): mark raw catalog listing internal - PR branch already contained follow-up commit before automerge: test(channels): cover trusted catalog filtering - PR branch already contained follow-up commit before automerge: test(channels): mock raw catalog helper - PR branch already contained follow-up commit before automerge: docs(changelog): credit setup channel hardening Validation: - ClawSweeper review passed for head11438bc1a0. - Required merge gates passed before the squash merge. Prepared head SHA:11438bc1a0Review: https://github.com/openclaw/openclaw/pull/86953#issuecomment-4545730044 Co-authored-by: masonxhuang <masonxhuang@tencent.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Mason Huang <masonxhuang@tencent.com> Co-authored-by: Sebastien Tardif <sebtardif@ncf.ca> Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com> Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com> Approved-by: hxy91819 Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>