Pavan Kumar Gondhi bdfb408ce6 fix(plugins): restrict bundled plugin dir resolution to trusted package roots (#73275) ...

* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address codex review feedback

* fix: address codex review feedback

* fix: address codex review feedback

* fix: address PR review feedback

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address review feedback

* docs: add changelog entry for PR merge

2026-04-28 21:35:32 +05:30

..

acpx

fix(acpx): validate runtime session mode at wrapper boundary (#73071) (#73548)

2026-04-28 22:35:25 +10:00

active-memory

fix(active-memory): align recall timeout with hook runner

2026-04-28 10:15:01 -05:00

alibaba

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

amazon-bedrock

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

amazon-bedrock-mantle

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

anthropic

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

anthropic-vertex

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

arcee

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

azure-speech

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

bluebubbles

fix(plugins): prune inactive bundled runtime deps

2026-04-28 10:34:24 +01:00

bonjour

fix(bonjour): classify ciao IPv4 changed assertion

2026-04-27 20:56:43 -07:00

brave

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

browser

fix(security): prevent workspace PATH injection via service env and trash helpers (#73264)

2026-04-28 21:30:51 +05:30

byteplus

fix: simplify volc catalog model builders

2026-04-28 06:21:24 +01:00

cerebras

fix: normalize raw manifest provider catalogs

2026-04-28 05:30:04 +01:00

chutes

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

cloudflare-ai-gateway

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

codex

test(plugins): fix codex inspector capture regression

2026-04-28 02:19:56 -07:00

comfy

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

copilot-proxy

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

deepgram

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

deepinfra

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

deepseek

fix(deepseek): backfill v4 assistant reasoning replay

2026-04-28 10:07:39 +01:00

device-pair

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

diagnostics-otel

fix(otel): record liveness warnings

2026-04-28 05:41:30 +01:00

diagnostics-prometheus

fix: restore main ci and speed tests

2026-04-28 05:34:28 +01:00

diffs

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

discord

fix: Discord read/search timeout, session-key fallback, and gateway execution mode (#73521)

2026-04-28 21:46:05 +10:00

document-extract

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

duckduckgo

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

elevenlabs

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

exa

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

fal

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

feishu

fix(plugins): harden inspector runtime capture

2026-04-28 02:19:56 -07:00

firecrawl

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

fireworks

feat: declare fireworks model catalog

2026-04-28 07:25:03 +01:00

github-copilot

fix: follow up main ci failures

2026-04-28 05:41:49 +01:00

google

docs(google): clarify gemini 3.1 pro alias

2026-04-28 05:41:30 +01:00

google-meet

fix(google-meet): harden observe mode speech health (#73256)

2026-04-28 06:21:10 +01:00

googlechat

fix(plugins): prune inactive bundled runtime deps

2026-04-28 10:34:24 +01:00

gradium

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

groq

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

huggingface

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

image-generation-core

refactor: narrow media core plugin api barrels

2026-04-27 14:34:00 +01:00

imessage

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

inworld

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

irc

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

kilocode

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

kimi-coding

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

line

fix(line): persist inbound media in shared store

2026-04-28 09:12:11 +01:00

litellm

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

llm-task

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

lmstudio

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

lobster

refactor(plugin-sdk): add managed task flow runtime

2026-04-28 05:32:40 +01:00

matrix

fix(plugins): prune inactive bundled runtime deps

2026-04-28 10:34:24 +01:00

mattermost

fix(plugins): prune inactive bundled runtime deps

2026-04-28 10:34:24 +01:00

media-understanding-core

refactor(media): move sharp image ops into media runtime (#71519)

2026-04-25 04:31:10 -07:00

memory-core

fix(memory-core): retry dreaming cron startup reconciliation (#73493)

2026-04-28 21:15:23 +10:00

memory-lancedb

fix(plugins): bound prompt memory recall latency

2026-04-28 03:46:18 -07:00

memory-wiki

fix(memory-wiki): route bridge CLI through gateway

2026-04-28 03:22:12 -07:00

microsoft

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

microsoft-foundry

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

migrate-claude

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

migrate-hermes

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

minimax

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

mistral

refactor: build cerebras and mistral catalogs from manifests

2026-04-28 05:30:04 +01:00

moonshot

refactor: build moonshot catalog from manifest

2026-04-28 05:30:04 +01:00

msteams

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

nextcloud-talk

fix(plugins): prune inactive bundled runtime deps

2026-04-28 10:34:24 +01:00

nostr

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

nvidia

refactor: build nvidia catalog from manifest

2026-04-28 05:30:04 +01:00

ollama

fix(ollama): reject garbled Kimi symbol output

2026-04-28 11:20:15 +01:00

open-prose

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

openai

Fix infer CLI reliability gaps (openclaw#63263)

2026-04-28 08:36:41 -05:00

opencode

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

opencode-go

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

openrouter

feat(openrouter): add video generation provider (#72700)

2026-04-28 10:57:31 +01:00

openshell

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

perplexity

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

phone-control

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

qa-channel

fix(plugins): keep qa sdk aliases private

2026-04-28 01:01:19 -07:00

qa-lab

fix(active-memory): use bundled recall tool

2026-04-28 09:03:47 -05:00

qa-matrix

test(qa-matrix): cover allowBots modes

2026-04-28 00:47:40 -04:00

qianfan

refactor: build qianfan and xiaomi catalogs from manifests

2026-04-28 05:30:04 +01:00

qqbot

fix(plugins): harden inspector runtime capture

2026-04-28 02:19:56 -07:00

qwen

fix(qwen): allow explicit qwen3.6-plus on Coding Plan (#72664)

2026-04-28 02:38:47 -07:00

runway

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

searxng

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

senseaudio

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

sglang

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

shared

refactor: split plugin sdk test helpers

2026-04-28 01:14:19 +01:00

signal

fix(plugins): restrict bundled plugin dir resolution to trusted package roots (#73275)

2026-04-28 21:35:32 +05:30

skill-workshop

fix: startup load skill workshop hooks

2026-04-28 04:33:47 +01:00

slack

fix(slack): bound inbound media downloads

2026-04-28 11:35:26 +01:00

speech-core

fix(gateway): use runtime config for secret-backed talk

2026-04-28 06:05:27 +01:00

stepfun

fix: narrow stepfun manifest provider keys

2026-04-28 05:30:04 +01:00

synology-chat

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

synthetic

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

talk-voice

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

tavily

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

telegram

fix(telegram): distill native metadata session key

2026-04-28 21:18:58 +05:30

tencent

feat: declare tencent tokenhub model catalog

2026-04-28 05:30:04 +01:00

test-support

refactor: split plugin sdk test helpers

2026-04-28 01:14:19 +01:00

thread-ownership

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

tlon

fix(plugins): prune inactive bundled runtime deps

2026-04-28 10:34:24 +01:00

together

feat: declare together model catalog

2026-04-28 07:25:03 +01:00

tokenjuice

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

tts-local-cli

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

twitch

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

venice

fix(deepseek): backfill v4 assistant reasoning replay

2026-04-28 10:07:39 +01:00

vercel-ai-gateway

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

video-generation-core

refactor: narrow media core plugin api barrels

2026-04-27 14:34:00 +01:00

vllm

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

voice-call

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

volcengine

fix: simplify volc catalog model builders

2026-04-28 06:21:24 +01:00

voyage

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

vydra

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

web-readability

perf: mark capability plugins startup lazy

2026-04-28 04:33:47 +01:00

webhooks

refactor(plugin-sdk): add managed task flow runtime

2026-04-28 05:32:40 +01:00

whatsapp

fix(whatsapp): expose Baileys socket timing (#73580)

2026-04-28 15:46:47 +02:00

xai

refactor(plugin-sdk): retire reserved helper exports

2026-04-28 05:21:57 +01:00

xiaomi

refactor: build qianfan and xiaomi catalogs from manifests

2026-04-28 05:30:04 +01:00

zai

perf: mark provider plugins startup lazy

2026-04-28 04:33:47 +01:00

zalo

perf: mark channel plugins startup lazy

2026-04-28 04:33:47 +01:00

zalouser

fix(zalouser): persist refreshed session cookies

2026-04-28 14:26:37 +08:00

.npmignore

…

AGENTS.md

Docs: add test performance guardrails

2026-04-17 02:23:49 -04:00

CLAUDE.md

…

music-generation-providers.live.test.ts

refactor: split plugin sdk test helpers

2026-04-28 01:14:19 +01:00

tsconfig.package-boundary.base.json

refactor(cli): normalize route boundaries

2026-04-06 15:38:04 +01:00

tsconfig.package-boundary.paths.json

refactor(plugin-sdk): retire reserved helper exports

2026-04-28 05:21:57 +01:00

video-generation-providers.live.test.ts

feat(openrouter): add video generation provider (#72700)

2026-04-28 10:57:31 +01:00