Jacob Tomlinson 7a953a5227 Plugins: block install when source scan fails (#57729) ...

* Plugins: block unsafe install scan fallthrough

* Tests: normalize install scanner formatting

* Plugins: avoid duplicate scan failure messaging

* Plugins: preserve hook install block codes

2026-03-30 15:36:08 +01:00

..

capability-runtime-vitest-shims

Tests: shim config runtime for capability contracts

2026-03-28 20:02:28 -04:00

contracts

fix: stabilize bundled plugin ci lanes

2026-03-30 05:35:53 +09:00

runtime

Runtime: dedupe typing lease logic

2026-03-30 00:58:04 -04:00

test-helpers

fix: resolve current ci regressions

2026-03-14 00:51:12 +00:00

AGENTS.md

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

api-builder.ts

refactor: centralize plugin API assembly

2026-03-28 05:24:25 +00:00

build-smoke-entry.ts

CI: add built plugin singleton smoke (#48710)

2026-03-17 15:17:41 -05:00

bundle-claude-inspect.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-commands.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-commands.ts

feat(plugins): register claude bundle commands natively

2026-03-21 08:14:48 -07:00

bundle-config-shared.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

bundle-lsp.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

bundle-manifest.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-manifest.ts

refactor: share boundary open and gateway test helpers

2026-03-23 00:37:05 +00:00

bundle-mcp.test-support.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-mcp.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-mcp.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

bundled-capability-metadata.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-capability-runtime.ts

Tests: shim config runtime for capability contracts

2026-03-28 20:02:28 -04:00

bundled-compat.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

bundled-dir.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundled-dir.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-plugin-metadata.test.ts

fix: stabilize serial test suite

2026-03-30 04:46:04 +09:00

bundled-plugin-metadata.ts

refactor: finish decoupling plugin sdk seams

2026-03-29 22:42:06 +01:00

bundled-plugin-naming.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundled-provider-auth-env-vars.generated.ts

refactor: pluginize litellm auth onboarding

2026-03-27 12:26:01 +00:00

bundled-provider-auth-env-vars.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundled-provider-auth-env-vars.ts

Plugins: generate bundled auth env metadata

2026-03-18 10:53:48 -07:00

bundled-sources.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-sources.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-web-search-ids.ts

refactor: derive bundled contracts from extension manifests

2026-03-27 01:45:52 +00:00

bundled-web-search-provider-ids.ts

fix: clean bundled contract metadata follow-ups

2026-03-27 01:45:53 +00:00

bundled-web-search-registry.ts

style: normalize import order and formatting

2026-03-29 16:33:22 +09:00

bundled-web-search.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

bundled-web-search.ts

refactor: route bundled capability providers through plugin runtime

2026-03-27 16:39:41 +00:00

cache-controls.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

capability-provider-runtime.test.ts

fix(plugins): preserve active capability providers

2026-03-28 15:46:24 +05:30

capability-provider-runtime.ts

fix(plugins): preserve active capability providers

2026-03-28 15:46:24 +05:30

captured-registration.test.ts

refactor: centralize plugin API assembly

2026-03-28 05:24:25 +00:00

captured-registration.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

channel-plugin-ids.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

channel-plugin-ids.ts

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

CLAUDE.md

Docs: add boundary AGENTS guides (#56647)

2026-03-28 20:22:03 -04:00

clawhub.test.ts

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

clawhub.ts

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

cli-backends.runtime.ts

feat: pluginize cli inference backends

2026-03-26 15:11:15 +00:00

cli.browser-plugin.integration.test.ts

fix(ci): stabilize browser bundled integration tests

2026-03-28 08:34:18 +00:00

cli.test.ts

Plugins: align CLI metadata loader behavior

2026-03-29 19:20:42 -04:00

cli.ts

Plugins: align CLI metadata loader behavior

2026-03-29 19:20:42 -04:00

command-registration.ts

refactor: split plugin command registration startup path

2026-03-22 21:28:16 +00:00

command-registry-state.ts

chore: refresh plugin sdk api baseline

2026-03-24 18:49:51 +00:00

commands.test.ts

fix: stabilize gate and extension boundary checks

2026-03-30 02:37:36 +01:00

commands.ts

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

config-schema.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

config-schema.ts

refactor: deduplicate plugin config schemas

2026-03-27 02:53:08 +00:00

config-state.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

config-state.ts

refactor: move bundled plugin policy into manifests

2026-03-27 16:40:27 +00:00

conversation-binding.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

conversation-binding.ts

refactor: simplify plugin runtime singletons

2026-03-22 18:09:45 +00:00

copy-bundled-plugin-metadata.test.ts

test: dedupe plugin bundle and discovery helpers

2026-03-28 03:06:27 +00:00

discovery.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

discovery.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

enable.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

enable.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

generated-plugin-test-helpers.ts

refactor: dedupe test and runtime seams

2026-03-24 23:33:30 +00:00

hook-runner-global.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hook-runner-global.ts

refactor(plugins): make hook runner global lazy

2026-03-24 11:07:37 -07:00

hooks.before-agent-start.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.before-install.test.ts

refactor(plugins): centralize before_install context shaping

2026-03-29 12:35:01 -07:00

hooks.before-tool-call.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.model-override-wiring.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.phase-hooks.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.security.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.test-helpers.ts

fix(regression): preserve plugin identity in hook test helpers

2026-03-27 22:34:09 -05:00

hooks.ts

Agents: reuse shared subagent hook runner type

2026-03-29 20:06:05 -04:00

http-path.ts

…

http-registry.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

http-registry.ts

fix(gateway): pin plugin webhook route registry (#47902)

2026-03-15 21:53:05 -07:00

http-route-overlap.ts

fix(gateway): harden plugin HTTP route auth

2026-03-07 19:55:06 +00:00

install-policy-context.ts

refactor(plugins): centralize before_install context shaping

2026-03-29 12:35:01 -07:00

install-security-scan.runtime.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

install-security-scan.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

install.runtime.ts

plugins: enrich before_install policy context

2026-03-29 12:35:01 -07:00

install.test.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

install.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

installs.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

installs.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

interactive-dispatch-adapters.ts

refactor: split plugin interactive dispatch adapters

2026-03-16 05:53:35 +00:00

interactive.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

interactive.ts

refactor(plugins): make interactive state lazy

2026-03-24 11:29:20 -07:00

lazy-service-module.test.ts

test: dedupe plugin utility config suites

2026-03-28 04:02:13 +00:00

lazy-service-module.ts

refactor: finish browser compat untangle

2026-03-26 22:42:41 +00:00

loader.git-path-regression.test.ts

refactor: consolidate plugin sdk surface

2026-03-20 19:24:10 +00:00

loader.test.ts

Plugins: align CLI metadata loader behavior

2026-03-29 19:20:42 -04:00

loader.ts

Plugins: align CLI metadata loader behavior

2026-03-29 19:20:42 -04:00

logger.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

logger.ts

refactor(plugins): reuse plugin loader logger adapter

2026-02-18 23:48:32 +00:00

manifest-registry.test.ts

fix(matrix): resolve crypto bootstrap failure and multi-extension idHint warning (#53298)

2026-03-29 12:38:10 -04:00

manifest-registry.ts

fix(matrix): resolve crypto bootstrap failure and multi-extension idHint warning (#53298)

2026-03-29 12:38:10 -04:00

manifest.ts

refactor: derive channel metadata from plugin manifests

2026-03-28 17:17:10 +00:00

marketplace.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

marketplace.ts

fix: note marketplace streaming and ClawHub URL (#54160) (thanks @QuinnH496)

2026-03-25 10:29:21 +05:30

memory-embedding-providers.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

memory-embedding-providers.ts

fix(memory): share embedding providers across plugin runtime splits (#55945)

2026-03-27 21:40:19 +03:00

memory-runtime.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

memory-runtime.ts

Plugins: reuse shared bootstrap registry resolution

2026-03-28 00:19:33 -04:00

memory-state.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

memory-state.ts

Memory: fix QMD doctor contract typing

2026-03-30 00:54:41 -04:00

min-host-version.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

min-host-version.ts

fix(plugins): enforce minimum host versions for installable plugins (#52094)

2026-03-22 09:12:08 -07:00

path-safety.ts

fix(windows): normalize namespaced path containment checks

2026-02-26 18:49:48 +00:00

pi-package-graph.test.ts

test: dedupe plugin lifecycle runtime suites

2026-03-28 04:28:54 +00:00

provider-api-key-auth.runtime.ts

refactor: consolidate lazy runtime surfaces

2026-03-17 00:59:20 -07:00

provider-api-key-auth.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-choice-helpers.ts

refactor: move provider auth-choice helpers into plugins

2026-03-16 22:40:33 -07:00

provider-auth-choice-preference.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-choice.runtime.ts

perf: split provider metadata from runtime loading

2026-03-22 21:52:42 +00:00

provider-auth-choice.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-choices.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-auth-choices.ts

refactor: move bundled plugin policy into manifests

2026-03-27 16:40:27 +00:00

provider-auth-helpers.ts

fix(regression): merge aliased auth order provider keys

2026-03-27 22:31:07 -05:00

provider-auth-input.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-mode.ts

perf: reduce runtime and test startup overhead

2026-03-21 20:18:16 +00:00

provider-auth-ref.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-storage.ts

fix: restore green check after upstream API changes

2026-03-27 20:29:18 +00:00

provider-auth-token.ts

fix: slim provider sdk surfaces

2026-03-28 09:35:42 +00:00

provider-auth-types.ts

refactor: isolate provider sdk auth and model helpers

2026-03-16 21:47:28 -07:00

provider-catalog.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-catalog.ts

fix: normalize provider catalog config lookup

2026-03-27 21:03:53 -05:00

provider-discovery.runtime.ts

fix: keep provider discovery on mockable lazy runtime paths

2026-03-28 11:40:40 +00:00

provider-discovery.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-discovery.ts

fix: keep provider discovery on mockable lazy runtime paths

2026-03-28 11:40:40 +00:00

provider-model-allowlist.ts

fix(ci): stabilize bundled capability contract loading

2026-03-28 07:33:19 +00:00

provider-model-compat.ts

refactor(agents): generalize tool schema compat cleanup

2026-03-28 05:42:46 +00:00

provider-model-defaults.ts

refactor(plugins): finish provider and whatsapp cleanup

2026-03-22 19:13:25 -07:00

provider-model-helpers.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-model-helpers.ts

refactor(xai): move bundled xai runtime into plugin

2026-03-28 05:02:41 +00:00

provider-model-kilocode.ts

refactor(kilocode): route shared model constants through core seam

2026-03-22 19:43:19 -07:00

provider-model-primary.ts

refactor: isolate provider sdk auth and model helpers

2026-03-16 21:47:28 -07:00

provider-oauth-flow.ts

refactor: isolate provider sdk auth and model helpers

2026-03-16 21:47:28 -07:00

provider-onboarding-config.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-onboarding-config.ts

refactor: add provider onboarding preset appliers

2026-03-23 01:56:00 +00:00

provider-openai-codex-oauth-tls.ts

refactor: isolate provider sdk auth and model helpers

2026-03-16 21:47:28 -07:00

provider-openai-codex-oauth.ts

fix: ensure env proxy dispatcher before MiniMax and OpenAI Codex OAuth flows (openclaw#52228)

2026-03-23 09:26:34 -05:00

provider-runtime.runtime.ts

fix: restore provider runtime lazy boundary

2026-03-23 09:24:20 +00:00

provider-runtime.test-support.ts

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

provider-runtime.test.ts

refactor: generalize provider transport hooks

2026-03-29 23:05:58 +09:00

provider-runtime.ts

refactor: generalize provider transport hooks

2026-03-29 23:05:58 +09:00

provider-self-hosted-setup.ts

refactor: move provider seams behind plugin sdk surfaces

2026-03-27 23:26:26 +00:00

provider-thinking.ts

perf(inbound): trim reply startup imports (#51988)

2026-03-21 20:49:41 -07:00

provider-validation.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-validation.ts

refactor: move oauth profile repair metadata into providers

2026-03-27 17:23:40 +00:00

provider-wizard.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-wizard.ts

fix(provider-wizard): avoid hook-time model normalization

2026-03-28 14:46:12 +05:30

provider-zai-endpoint.ts

refactor: move provider model helpers into plugins

2026-03-27 20:20:31 +00:00

providers.runtime.ts

fix(ci): use process env for provider compat fallback

2026-03-28 08:10:47 +00:00

providers.test.ts

fix(ci): use process env for provider compat fallback

2026-03-28 08:10:47 +00:00

providers.ts

refactor: scope provider runtime to enabled provider plugins

2026-03-28 01:40:30 +00:00

public-artifacts.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

registry-empty.ts

refactor: add browser plugin runtime package

2026-03-26 22:20:39 +00:00

registry.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

roots.ts

Plugins: fix env-aware root resolution and caching (#44046)

2026-03-12 15:31:31 +00:00

runtime-live-state-guardrails.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

runtime-plugin-boundary.whatsapp.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

runtime.channel-pin.test.ts

fix(channels): use pinned channel registry for outbound adapter resolution

2026-03-29 12:54:14 +05:30

runtime.test.ts

feat(line): add outbound media support for image, video, and audio

2026-03-28 20:51:16 -05:00

runtime.ts

fix(plugins): preserve gateway-bindable registry reuse

2026-03-29 09:59:06 +05:30

schema-validator.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

schema-validator.ts

fix(config): support uri formats in schema validation

2026-03-27 02:29:32 +00:00

sdk-alias.test.ts

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

sdk-alias.ts

plugins: disable native jiti loading under bun

2026-03-27 20:02:59 +00:00

services.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

services.ts

chore(plugins): remove opik investigation checkpoints

2026-03-23 01:21:19 -07:00

setup-binary.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

setup-browser.ts

refactor: share browser and sandbox helpers

2026-03-26 18:43:57 +00:00

signal-cli-install.ts

refactor: move plugin sdk setup helpers out of commands

2026-03-16 22:11:56 -07:00

slots.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

slots.ts

feature(context): extend plugin system to support custom context management (#22201)

2026-03-06 05:31:59 -08:00

source-display.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

source-display.ts

Plugins: fix env-aware root resolution and caching (#44046)

2026-03-12 15:31:31 +00:00

stage-bundled-plugin-runtime.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

status.test-helpers.ts

feat: pluginize cli inference backends

2026-03-26 15:11:15 +00:00

status.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

status.ts

fix(regression): align plugin inspect policy with auto-enabled config

2026-03-27 22:42:59 -05:00

toggle-config.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

tools.optional.test.ts

test: reset plugin runtime state in optional tools tests

2026-03-29 08:52:12 +01:00

tools.ts

fix(plugins): preserve gateway-bindable registry reuse

2026-03-29 09:59:06 +05:30

types.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

uninstall.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

uninstall.ts

Plugins: clean up channel config on uninstall (#35915)

2026-03-27 17:28:38 -07:00

update.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

update.ts

refactor(cli): extract hook pack update flow

2026-03-22 12:02:52 -07:00

web-search-providers.runtime.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

web-search-providers.runtime.ts

Plugins: share runtime registry resolution

2026-03-28 00:19:33 -04:00

web-search-providers.shared.ts

fix(regression): auto-enable web search provider loads

2026-03-27 23:00:49 -05:00

web-search-providers.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

web-search-providers.ts

fix(web-search): split runtime provider resolution

2026-03-20 00:06:12 -07:00

wired-hooks-after-tool-call.e2e.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-compaction.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-gateway.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-inbound-claim.test.ts

fix(regression): preserve plugin identity in hook test helpers

2026-03-27 22:34:09 -05:00

wired-hooks-llm.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-message.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-session.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-subagent.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00