mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-24 02:41:12 +00:00
dde90a345a
* refactor(plugin-sdk): narrow wildcard barrels to explicit used exports * refactor(tools): delete dead tool-planning module exposed by barrel narrowing * fix(plugin-sdk): restore deprecation tag on OpenClawSchemaType alias * test(agents): drop test for deleted runtime proxy module * refactor(tools): trim descriptor types to cache consumers * refactor(deadcode): harvest exports orphaned by barrel narrowing * refactor(deadcode): harvest exports orphaned by barrel narrowing (rest) * fix(agents): restore sdk imports and test markers via public predicate * fix(plugin-sdk): named type re-exports in plugin-entry; trim types barrel precisely * chore(plugin-sdk): account unmasked deprecated provider types in budgets * fix(plugins): name star-only type rows for dts bundling * fix(plugins): restore host-hook surface; unexport internal api compositions * fix(plugins): named type imports for api composition; restore needed source exports * fix(plugins): knip-visible type imports for registry surfaces * test: adapt tests to privatized media and command internals * fix(qa-lab): re-export snapshot conversation type * style: format sessions sdk imports * fix(plugins): restore smoke entry export; pin budgets to exact actuals * fix(plugins): canonical smoke-entry import; drop orphaned root shims * fix(plugins): allowlist manifest probe, repoint qa web import, drop dead browser barrels * fix(plugin-sdk): pin codex auth marker and scaffold provider type * fix(qa-lab): keep web-facing model-selection shim within boundary rules * fix(plugin-sdk): preserve merged contracts through narrowed barrels * chore(plugin-sdk): pin post-rebase surface budgets
60 lines
1.5 KiB
TypeScript
60 lines
1.5 KiB
TypeScript
// Public package facade for security runtime helpers.
|
|
|
|
export {
|
|
appendRegularFile,
|
|
assertNoSymlinkParents,
|
|
assertNoSymlinkParentsSync,
|
|
buildUntrustedChannelMetadata,
|
|
canonicalPathFromExistingAncestor,
|
|
compileSafeRegexDetailed,
|
|
ensurePortAvailable,
|
|
evaluateSupplementalContextVisibility,
|
|
expandAllowFromWithAccessGroups,
|
|
extractErrorCode,
|
|
filterSupplementalContextItems,
|
|
findExistingAncestor,
|
|
formatErrorMessage,
|
|
FsSafeError,
|
|
hasProxyEnvConfigured,
|
|
isPathInside,
|
|
isPrivateNetworkAllowedByPolicy,
|
|
matchesHostnameAllowlist,
|
|
movePathWithCopyFallback,
|
|
normalizeHostname,
|
|
openLocalFileSafely,
|
|
parseAccessGroupAllowFromEntry,
|
|
pathExists,
|
|
pathExistsSync,
|
|
pathScope,
|
|
privateFileStoreSync,
|
|
readRegularFile,
|
|
readRegularFileSync,
|
|
redactSensitiveText,
|
|
replaceFileAtomic,
|
|
resolveAbsolutePathForRead,
|
|
resolveAbsolutePathForWrite,
|
|
resolveExistingPathsWithinRoot,
|
|
resolveLocalPathFromRootsSync,
|
|
resolvePinnedHostnameWithPolicy,
|
|
resolvePinnedMainDmOwnerFromAllowlist,
|
|
resolvePreferredOpenClawTmpDir,
|
|
resolveStrictExistingPathsWithinRoot,
|
|
root,
|
|
safeEqualSecret,
|
|
sanitizeUntrustedFileName,
|
|
shouldIncludeSupplementalContext,
|
|
SsrFBlockedError,
|
|
statRegularFile,
|
|
statRegularFileSync,
|
|
withTimeout,
|
|
wrapExternalContent,
|
|
wrapWebContent,
|
|
writeExternalFileWithinRoot,
|
|
} from "../../../src/plugin-sdk/security-runtime.js";
|
|
export type {
|
|
ContextVisibilityDecision,
|
|
LookupFn,
|
|
SafeRegexRejectReason,
|
|
SsrFPolicy,
|
|
} from "../../../src/plugin-sdk/security-runtime.js";
|