Peter Steinberger 9eae43bd37 refactor(infra): move exec approvals into the shared SQLite state DB (#114063) ...

* refactor(infra): move exec approvals into the shared SQLite state DB

Delete the file-runtime exec-approvals store (exec-approvals.json + .lock
sidecar machinery) on both runtimes and make the reserved
exec_approvals_config singleton row canonical. Doctor owns the one-time
import with claim/verify/receipt discipline; runtime fails closed with a
doctor instruction while un-migrated legacy state exists. The wire CAS
contract, socket semantics, and gateway auth-token derivations are
unchanged. Kills the #113929 lock-contention bug class structurally and
nets around -2.9k lines.

* fix(infra): green CI gates and retire file-era exec approvals tests

Break the migration-type import cycle with a leaf contract, regenerate the
plugin-SDK API and native i18n baselines for the intentional surface change,
drop unused exports, and replace the macOS file-era approvals test suite with
SQLite-backed behavior coverage per the obsolete-internals test policy.

* chore: green max-lines ratchet, native i18n baseline, and unused-export scan

2026-07-26 06:39:23 -04:00

..

acpx

fix: show native history in adopted Pi and OpenCode sessions (#114040)

2026-07-26 02:09:48 -04:00

active-memory

refactor: canonicalize session delivery state (#113225)

2026-07-24 01:01:19 -07:00

admin-http-rpc

fix(admin-http-rpc): time out incomplete request bodies (#104564)

2026-07-20 20:40:12 -07:00

alibaba

…

amazon-bedrock

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

amazon-bedrock-mantle

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

anthropic

feat: detect external human turns in adopted Pi and OpenCode sessions (#113957)

2026-07-25 19:05:22 -07:00

anthropic-vertex

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

arcee

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

azure-speech

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

baseten

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

bonjour

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

brave

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

browser

feat(browser): scoped and structured page extraction (#113938)

2026-07-25 19:32:44 -07:00

byteplus

refactor(providers): shared manifest row builder and fleet default-model adoption (#113879)

2026-07-25 15:00:02 -07:00

canvas

refactor(fs): adopt shared safe filesystem primitives (#113596)

2026-07-25 03:24:19 -07:00

cerebras

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

chutes

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

clawrouter

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

clickclack

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

cloudflare-ai-gateway

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

codex

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

cohere

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

comfy

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00

copilot

refactor(copilot): split attempt runtime (#114035)

2026-07-26 01:58:31 -04:00

copilot-proxy

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

crabbox

…

cua-computer

feat(cua-computer): add experimental Windows/Linux computer-use fulfiller (#112267)

2026-07-21 05:58:04 -07:00

deepgram

fix(agents): honor run abort signal in image and pdf tools (#112644)

2026-07-25 05:17:09 -07:00

deepinfra

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

deepseek

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

device-pair

…

diagnostics-otel

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

diagnostics-prometheus

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

diffs

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

diffs-language-pack

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

discord

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

document-extract

…

duckduckgo

fix(duckduckgo): preserve words around highlighted matches (#111460)

2026-07-19 19:09:09 -07:00

elevenlabs

fix(agents): honor run abort signal in image and pdf tools (#112644)

2026-07-25 05:17:09 -07:00

exa

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

fal

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

featherless

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

feishu

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

file-transfer

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

firecrawl

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

fireworks

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

github-copilot

refactor(providers): table-driven forward compat and manifest-derived contract tests (#113940)

2026-07-25 18:09:37 -07:00

gmi

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

google

refactor(providers): table-driven forward compat and manifest-derived contract tests (#113940)

2026-07-25 18:09:37 -07:00

google-meet

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

googlechat

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

gradium

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

groq

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

huggingface

feat: discover models from live provider catalogs (#112412)

2026-07-21 19:29:57 -06:00

image-generation-core

…

imessage

refactor(plugin-sdk): share ingress lifecycle fan-in (#113648)

2026-07-25 05:34:35 -07:00

inworld

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

irc

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

kilocode

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

kimi-coding

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

line

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

linux-canvas

…

linux-node

…

litellm

feat: discover models from live provider catalogs (#112412)

2026-07-21 19:29:57 -06:00

llama-cpp

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

llm-task

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

lmstudio

refactor(config): config-surface reduction tranche 3 — product consolidations (review request) (#111527)

2026-07-21 20:28:43 -07:00

lobster

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

logbook

refactor(sqlite): enforce one database connection boundary (#113418)

2026-07-24 15:15:17 -07:00

longcat

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

matrix

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

mattermost

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

media-understanding-core

…

memory-core

fix(memory): close previous embedding provider before replacement (#113471)

2026-07-26 03:00:22 -04:00

memory-lancedb

fix(memory): close previous embedding provider before replacement (#113471)

2026-07-26 03:00:22 -04:00

memory-wiki

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

meta

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

microsoft

test: consolidate OpenClaw test state fixtures (#113576)

2026-07-25 05:30:52 -07:00

microsoft-foundry

fix(microsoft-foundry): honor Azure device-code lifetime (#113741)

2026-07-25 08:33:05 -07:00

migrate-claude

fix(migrate): harden importer path resolution and memory copy safety (#109314)

2026-07-16 12:56:43 -07:00

migrate-hermes

refactor(sqlite): enforce one database connection boundary (#113418)

2026-07-24 15:15:17 -07:00

minimax

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

mistral

refactor(providers): manifest-declared default models and unified onboarding presets (#113794)

2026-07-25 12:54:53 -07:00

moonshot

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

msteams

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

mxc

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

nextcloud-talk

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

nostr

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

novita

refactor(providers): shared manifest row builder and fleet default-model adoption (#113879)

2026-07-25 15:00:02 -07:00

nvidia

fix(release): align extension validation contracts (#113919)

2026-07-25 17:07:51 -07:00

oc-path

fix(oc-path): reject oversized multibyte JSONC input (#104140)

2026-07-18 17:47:15 -07:00

ollama

chore(models): curate all provider model catalogs to current-generation lineups (#113681)

2026-07-25 07:21:17 -07:00

onepassword

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

open-prose

…

openai

fix(providers): openai live-test config isolation and qianfan default refresh (#113999)

2026-07-25 20:35:28 -07:00

opencode

fix: show native history in adopted Pi and OpenCode sessions (#114040)

2026-07-26 02:09:48 -04:00

opencode-go

chore(models): curate all provider model catalogs to current-generation lineups (#113681)

2026-07-25 07:21:17 -07:00

openrouter

refactor(providers): collapse live model discovery onto shared projection hook (#113903)

2026-07-25 16:17:27 -07:00

openshell

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

parallel

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

perplexity

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

phone-control

feat(agents): mobile_ui agent tool (PR 3/3) (#112255)

2026-07-22 01:49:14 -07:00

pixverse

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

policy

refactor(infra): move exec approvals into the shared SQLite state DB (#114063)

2026-07-26 06:39:23 -04:00

qa-channel

refactor(media): delete internal MsgContext.Media* parallel fields for fact-only runtime (#113042)

2026-07-23 11:45:40 -07:00

qa-lab

test(qa): wait for durable fanout completion (#114080)

2026-07-26 05:26:33 -04:00

qianfan

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

qqbot

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

qwen

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

raft

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

reef

fix: make filesystem publication crash-durable (#113453)

2026-07-24 20:58:17 -07:00

runway

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

searxng

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

senseaudio

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

sglang

feat: discover models from live provider catalogs (#112412)

2026-07-21 19:29:57 -06:00

signal

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

slack

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

sms

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

stepfun

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

synology-chat

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

synthetic

fix(models): refresh bundled provider catalogs (#109410)

2026-07-16 16:47:25 -07:00

talk-voice

…

tavily

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

teams-meetings

feat: auto-collect durable meeting transcripts (#113122)

2026-07-23 11:41:08 -07:00

telegram

fix(release): align extension validation contracts (#113919)

2026-07-25 17:07:51 -07:00

tencent

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

test-support

refactor: reduce plugin SDK test import overhead (#109333)

2026-07-16 13:55:23 -07:00

thread-ownership

fix(thread-ownership): cancel unread ownership response bodies (#111231)

2026-07-19 20:48:44 -07:00

tlon

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

together

feat(providers): refresh onboarding defaults to current models (#113973)

2026-07-25 19:10:26 -07:00

tokenjuice

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

tts-local-cli

…

twitch

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

vault

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

venice

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

vercel-ai-gateway

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

video-generation-core

…

vllm

feat: discover models from live provider catalogs (#112412)

2026-07-21 19:29:57 -06:00

voice-call

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

volcengine

refactor(providers): shared manifest row builder and fleet default-model adoption (#113879)

2026-07-25 15:00:02 -07:00

voyage

…

vydra

refactor(media): consolidate generated media byte limits (#113556)

2026-07-25 15:39:49 +08:00

web-readability

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

webhooks

fix(webhooks): keep routes cold when SecretRefs are unavailable (#109715)

2026-07-16 23:56:59 -07:00

whatsapp

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

workboard

refactor(workboard): share claim token redaction (#113618)

2026-07-25 19:06:18 +08:00

xai

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00

xiaomi

fix(xiaomi): reject malformed base64 audio in TTS responses (#113106)

2026-07-25 07:52:23 -07:00

zai

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

zalo

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

zalouser

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

zoom-meetings

feat: auto-collect durable meeting transcripts (#113122)

2026-07-23 11:41:08 -07:00

.npmignore

…

AGENTS.md

…

CLAUDE.md

…

music-generation-providers.live.test.ts

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

refactor(tasks): classify harness-owned subagent rows without plugin ids (#113964)

2026-07-25 18:41:13 -07:00

video-generation-providers.live.test.ts

test: isolate live test config reads (#114024)

2026-07-25 21:51:47 -07:00