Josh Avant a2a9a553e1 Stabilize plugin loader and Docker extension smoke (#50058) ...

* Plugins: stabilize Area 6 loader and Docker smoke

* Docker: fail fast on extension npm install errors

* Tests: stabilize loader non-native Jiti boundary CI timeout

* Tests: stabilize plugin loader Jiti source-runtime coverage

* Docker: keep extension deps on lockfile graph

* Tests: cover tsx-cache renamed package cwd fallback

* Tests: stabilize plugin-sdk export subpath assertions

* Plugins: align tsx-cache alias fallback with subpath fallback

* Tests: normalize guardrail path checks for Windows

* Plugins: restrict plugin-sdk cwd fallback to trusted roots

* Tests: exempt outbound-session from extension import guard

* Tests: tighten guardrails and cli-entry trust coverage

* Tests: guard optional loader fixture exports

* Tests: make loader fixture package exports null-safe

* Tests: make loader fixture package exports null-safe

* Tests: make loader fixture package exports null-safe

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-03-18 23:35:32 -05:00

..

account-helpers.ts

Plugin SDK: add outbound session route helpers

2026-03-18 04:09:47 +00:00

account-id.ts

fix(channels): add optional defaultAccount routing

2026-03-02 04:03:46 +00:00

account-resolution.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

acp-runtime.ts

Main recovery: restore formatter and contract checks (#49570)

2026-03-18 00:30:01 -07:00

acpx.ts

Plugin SDK: clarify ACPX public seam

2026-03-17 23:53:32 -07:00

agent-media-payload.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

agent-runtime.ts

Plugin SDK: harden provider auth seams

2026-03-18 02:29:25 -07:00

allow-from.test.ts

refactor: share allowFrom formatter scaffolding

2026-03-07 23:27:51 +00:00

allow-from.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

allowlist-config-edit.test.ts

refactor: deduplicate channel runtime helpers

2026-03-18 16:37:27 +00:00

allowlist-config-edit.ts

refactor: deduplicate channel runtime helpers

2026-03-18 16:37:27 +00:00

allowlist-resolution.test.ts

refactor: unify extension allowlist resolver and directory scaffolding

2026-03-07 23:27:51 +00:00

allowlist-resolution.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

bluebubbles.ts

refactor: converge plugin sdk channel helpers

2026-03-19 00:25:19 +00:00

boolean-param.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

channel-config-helpers.test.ts

refactor: deduplicate channel config adapters

2026-03-18 04:51:29 +00:00

channel-config-helpers.ts

Main recovery: restore formatter and contract checks (#49570)

2026-03-18 00:30:01 -07:00

channel-config-schema.ts

fix(release): isolate bundled config docs loading

2026-03-18 16:01:43 -07:00

channel-import-guardrails.test.ts

Stabilize plugin loader and Docker extension smoke (#50058)

2026-03-18 23:35:32 -05:00

channel-lifecycle.test.ts

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

channel-lifecycle.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

channel-pairing.test.ts

refactor: unify plugin sdk pairing flows

2026-03-19 00:31:03 +00:00

channel-pairing.ts

refactor: tighten sdk reply pipeline contract

2026-03-19 03:13:15 +00:00

channel-plugin-common.ts

Plugin SDK: consolidate shared channel exports

2026-03-16 10:05:40 +00:00

channel-policy.ts

refactor: deduplicate channel runtime helpers

2026-03-18 16:37:27 +00:00

channel-reply-pipeline.test.ts

refactor: converge plugin sdk channel helpers

2026-03-19 00:25:19 +00:00

channel-reply-pipeline.ts

refactor: tighten sdk reply pipeline contract

2026-03-19 03:13:15 +00:00

channel-runtime.ts

refactor: deduplicate reply payload helpers

2026-03-18 17:30:25 +00:00

channel-send-result.test.ts

refactor: deduplicate reply payload helpers

2026-03-18 17:30:25 +00:00

channel-send-result.ts

refactor: deduplicate reply payload helpers

2026-03-18 17:30:25 +00:00

channel-setup.test.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

channel-setup.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

cli-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

command-auth.test.ts

fix: enforce explicit group auth boundaries across channels

2026-02-26 18:49:16 +01:00

command-auth.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

compat.ts

fix: restore rebased full gate

2026-03-18 15:34:27 +00:00

config-paths.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

config-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

conversation-runtime.ts

ACP: harden startup and move configured routing behind plugin seams (#48197)

2026-03-17 17:27:52 +01:00

copilot-proxy.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

core.ts

Plugin SDK: fix contract seam regressions

2026-03-18 00:50:19 -07:00

device-pair.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

diagnostics-otel.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

diffs.ts

Diffs: route plugin context through artifacts

2026-03-19 00:24:00 -04:00

directory-runtime.ts

refactor: deduplicate channel runtime helpers

2026-03-18 16:37:27 +00:00

discord-core.ts

fix: resolve rebase export collisions

2026-03-17 19:53:32 -07:00

discord-send.ts

refactor: deduplicate reply payload helpers

2026-03-18 17:30:25 +00:00

discord.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

entrypoints.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

extension-shared.ts

Plugins: remove shared extension boundary debt

2026-03-18 22:58:40 -05:00

feishu.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

fetch-auth.test.ts

refactor: unify typing dispatch lifecycle and policy boundaries

2026-02-26 17:36:16 +01:00

fetch-auth.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

file-lock.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

gateway-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

google.ts

refactor: finish public plugin sdk boundary seams

2026-03-16 21:33:59 -07:00

googlechat.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00

group-access.test.ts

refactor: share missing-sender matched allowlist evaluation

2026-03-08 00:05:24 +00:00

group-access.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

hook-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

image-generation-runtime.ts

feat(plugins): add image generation capability

2026-03-16 22:58:55 -07:00

image-generation.ts

Image generation: add fal provider (#49454)

2026-03-17 21:35:13 -07:00

imessage-core.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

imessage-targets.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

imessage.ts

Plugin SDK: route core channel runtimes through public subpaths

2026-03-18 11:00:58 -07:00

inbound-envelope.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

inbound-reply-dispatch.ts

refactor: tighten sdk reply pipeline contract

2026-03-19 03:13:15 +00:00

index.test.ts

fix: restore full gate stability

2026-03-19 03:36:03 +00:00

index.ts

feat: expose context-engine compaction delegate helper (#49061)

2026-03-17 22:54:18 -07:00

infra-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

interactive-runtime.ts

refactor(plugin-sdk): split interactive runtime helpers

2026-03-18 11:30:34 +05:30

irc.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00

json-store.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

keyed-async-queue.test.ts

test: fix tsgo baseline test compatibility

2026-03-03 01:24:20 +00:00

keyed-async-queue.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

lazy-runtime.ts

refactor: dedupe plugin lazy runtime helpers

2026-03-17 09:24:22 -07:00

line-core.ts

LINE: remove shared group mentions helper

2026-03-18 03:43:07 +00:00

line.ts

refactor: enforce plugin boundary seams

2026-03-17 19:45:36 -07:00

llm-task.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

lobster.ts

Plugin SDK: restore lobster and voice-call exports

2026-03-18 00:09:22 -07:00

matrix.ts

refactor: unify plugin sdk pairing flows

2026-03-19 00:31:03 +00:00

mattermost.ts

refactor: converge plugin sdk channel helpers

2026-03-19 00:25:19 +00:00

media-runtime.ts

refactor: move bundled extension deps to plugin packages

2026-03-19 00:04:50 +00:00

media-understanding-runtime.ts

feat(plugins): add image generation capability

2026-03-16 22:58:55 -07:00

media-understanding.ts

feat(plugins): share capability capture helpers

2026-03-16 22:21:18 -07:00

memory-core.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

memory-lancedb.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

minimax-portal-auth.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

msteams.ts

refactor: converge plugin sdk channel helpers

2026-03-19 00:25:19 +00:00

nextcloud-talk.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00

nostr.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

oauth-utils.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

ollama-setup.ts

refactor: move plugin sdk setup helpers out of commands

2026-03-16 22:11:56 -07:00

open-prose.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

optional-channel-setup.ts

Build: isolate optional bundled plugin-sdk clusters

2026-03-18 09:54:22 -07:00

outbound-media.test.ts

perf: reduce unit test hot path overhead

2026-03-18 18:19:40 +00:00

outbound-media.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

package-contract-guardrails.test.ts

refactor: shrink plugin sdk public surface

2026-03-18 23:31:08 +00:00

pairing-access.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

persistent-dedupe.test.ts

fix(feishu): persist dedup cache across gateway restarts via warmup (openclaw#31605) thanks @Sid-Qin

2026-03-02 17:30:40 -06:00

persistent-dedupe.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

phone-control.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

plugin-entry.ts

fix(plugin-sdk): isolate provider entry surfaces

2026-03-18 13:20:46 -07:00

plugin-runtime.ts

fix: restore full gate

2026-03-17 07:47:28 +00:00

process-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

provider-auth-api-key.ts

Plugin SDK: harden provider auth seams

2026-03-18 02:29:25 -07:00

provider-auth-login.runtime.ts

fix(auth): lazy-load provider oauth helpers

2026-03-18 13:40:28 -07:00

provider-auth-login.ts

fix(auth): lazy-load provider oauth helpers

2026-03-18 13:40:28 -07:00

provider-auth-result.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

provider-auth.ts

Plugin SDK: split provider auth login seam

2026-03-18 02:04:10 -07:00

provider-catalog.ts

refactor: finish public plugin sdk boundary seams

2026-03-16 21:33:59 -07:00

provider-models.ts

refactor: shrink plugin sdk public surface

2026-03-18 23:31:08 +00:00

provider-onboard.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

provider-setup.ts

refactor: move plugin sdk setup helpers out of commands

2026-03-16 22:11:56 -07:00

provider-stream.ts

feat: finish xai provider integration

2026-03-17 21:31:20 -07:00

provider-tools.ts

feat: finish xai provider integration

2026-03-17 21:31:20 -07:00

provider-usage.ts

refactor(usage): share legacy pi auth token lookup

2026-03-17 06:24:01 +00:00

provider-web-search.ts

fix: restore rebased full gate

2026-03-18 15:34:27 +00:00

qwen-portal-auth.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

reply-history.ts

refactor: finalize plugin sdk legacy boundary cleanup

2026-03-16 22:51:46 -07:00

reply-payload.test.ts

refactor: deduplicate reply payload handling

2026-03-18 18:14:57 +00:00

reply-payload.ts

refactor: deduplicate reply payload handling

2026-03-18 18:14:57 +00:00

reply-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

request-url.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

request-url.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

resolution-notes.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

root-alias.cjs

fix: use transpiled jiti for source plugin shims

2026-03-18 16:24:45 +00:00

root-alias.test.ts

fix: use transpiled jiti for source plugin shims

2026-03-18 16:24:45 +00:00

routing.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

run-command.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

runtime-api-guardrails.test.ts

fix: stabilize windows temp and path handling

2026-03-18 23:29:14 -05:00

runtime-env.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

runtime-store.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

runtime.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

sandbox.ts

Tests: fix green check typing regressions

2026-03-16 12:54:01 +00:00

secret-input-runtime.ts

fix(release): isolate bundled config docs loading

2026-03-18 16:01:43 -07:00

secret-input-schema.test.ts

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

secret-input-schema.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

secret-input.test.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

secret-input.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

security-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

self-hosted-provider-setup.ts

refactor: move plugin sdk setup helpers out of commands

2026-03-16 22:11:56 -07:00

setup-tools.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

setup.ts

refactor: deduplicate setup wizard helpers

2026-03-18 03:58:22 +00:00

signal-core.ts

fix: restore full gate after web-search rebase

2026-03-18 15:35:27 +00:00

signal.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

slack-core.ts

refactor: enforce plugin boundary seams

2026-03-17 19:45:36 -07:00

slack-targets.ts

refactor: clean extension api boundaries

2026-03-17 09:38:21 -07:00

slack.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

speech-runtime.ts

feat(plugins): add image generation capability

2026-03-16 22:58:55 -07:00

speech.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

ssrf-policy.test.ts

refactor: unify channel/plugin ssrf fetch policy and auth fallback

2026-02-26 16:44:13 +01:00

ssrf-policy.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

state-paths.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

status-helpers.test.ts

refactor(core): extract shared dedup helpers

2026-03-07 10:41:05 +00:00

status-helpers.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

subpaths.test.ts

refactor: untangle whatsapp runtime boundary

2026-03-19 03:13:48 +00:00

synology-chat.ts

refactor: enforce plugin boundary seams

2026-03-17 19:45:36 -07:00

talk-voice.ts

fix(plugin-sdk): isolate provider entry surfaces

2026-03-18 13:20:46 -07:00

telegram-core.ts

fix: resolve rebase export collisions

2026-03-17 19:53:32 -07:00

telegram.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

temp-path.test.ts

fix(security): lock sandbox tmp media paths to openclaw roots

2026-02-24 23:10:19 +00:00

temp-path.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

test-utils.ts

refactor: split plugin testing seam from bundled extension helpers

2026-03-17 01:05:09 -07:00

testing.ts

Plugins: remove shared extension boundary debt

2026-03-18 22:58:40 -05:00

text-chunking.test.ts

refactor(shared): reuse outbound text chunking core

2026-02-19 07:01:54 +00:00

text-chunking.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

text-runtime.ts

refactor: untangle remaining plugin sdk boundaries

2026-03-16 21:16:32 -07:00

thread-ownership.ts

refactor: dedupe bundled plugin entrypoints

2026-03-17 00:14:12 -07:00

tlon.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00

tool-send.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

twitch.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00

voice-call.ts

Plugin SDK: restore lobster and voice-call exports

2026-03-18 00:09:22 -07:00

web-media.ts

refactor: untangle whatsapp runtime boundary

2026-03-19 03:13:48 +00:00

webhook-ingress.ts

refactor: unify plugin sdk primitives

2026-03-18 23:58:56 +00:00

webhook-memory-guards.test.ts

refactor(security): unify webhook guardrails across channels

2026-03-02 00:31:42 +00:00

webhook-memory-guards.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

webhook-path.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

webhook-request-guards.test.ts

fix: harden webhook auth-before-body handling

2026-03-02 17:21:09 +00:00

webhook-request-guards.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

webhook-targets.test.ts

refactor: unify extension webhook request lifecycle scaffolding

2026-03-07 23:27:51 +00:00

webhook-targets.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

whatsapp-action-runtime.ts

refactor: untangle whatsapp runtime boundary

2026-03-19 03:13:48 +00:00

whatsapp-core.ts

fix: restore full gate

2026-03-18 15:34:27 +00:00

whatsapp-login-qr.ts

refactor: untangle whatsapp runtime boundary

2026-03-19 03:13:48 +00:00

whatsapp-shared.ts

refactor: untangle whatsapp runtime boundary

2026-03-19 03:13:48 +00:00

whatsapp.ts

refactor: route extension seams through public apis

2026-03-19 03:20:10 +00:00

windows-spawn.ts

refactor: tighten plugin sdk channel seams

2026-03-16 01:05:51 -07:00

zai.ts

refactor: move plugin sdk setup helpers out of commands

2026-03-16 22:11:56 -07:00

zalo.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00

zalouser.ts

refactor: tighten plugin sdk channel surfaces

2026-03-19 00:46:36 +00:00