Vincent Koc ac3cd1a0ca Harden Codex harness control surfaces (#77459) ...

* fix(scripts): find codex protocol source from worktrees

* fix(test): keep codex harness docker caches writable

* fix(test): relax live codex cache mount permissions

* test(codex): add live docker harness debug output

* fix(test): detect numeric ci env in codex docker harness

* fix(codex): skip duplicate agent-command telemetry

* fix(tooling): skip sparse-missing oxlint tsconfig

* fix(tooling): route changed checks through testbox

* fix(qa): keep coverage json source-clean

* fix(test): preflight codex docker auth

* fix(codex): validate bind option values

* fix(codex): parse quoted command arguments

* fix(codex): reject extra control args

* fix(codex): use content for blank bound prompts

* fix(codex): decode local image file urls

* fix(codex): treat local media urls as images

* fix(codex): keep windows media paths local

* fix(codex): reject malformed diagnostics confirmations

* fix(codex): reject malformed resume commands

* fix(codex): reject malformed thread actions

* fix(codex): reject malformed turn controls

* fix(codex): reject malformed model controls

* fix(codex): resolve empty user input prompts

* fix(codex): enforce user input options

* fix(codex): reject ambiguous computer-use actions

* fix(codex): ignore stale bound turn notifications

* test(gateway): close task registries in gateway harness

* test(gateway): route cleanup through task seams

* fix(codex): describe current permission approvals

* fix(codex): disclose command approval amendments

* fix(codex): preserve approval detail under truncation

* fix(codex): propagate dynamic tool failures

* test(codex): align dynamic tool block contract

* fix(codex): reject extra read-only command operands

* fix(codex): escape command readout fields

* fix(codex): escape status probe errors

* fix(codex): narrow formatted thread details

* fix(codex): escape successful status summaries

* fix(codex): escape bound control replies

* fix(codex): escape user input prompts

* fix(codex): escape control failure replies

* fix(codex): escape approval prompt text

* test(codex): narrow escaped reply assertions

* test(codex): complete strict reply fixtures

* test(codex): preserve account fixture literals

* test(codex): align status probe fixtures

* fix(codex): satisfy sanitizer regex lint

* fix(codex): harden command readouts

* fix(codex): harden bound image inputs

* fix(codex): sanitize command failure replies

* test(codex): complete rate limit fixture

* test(tooling): isolate postinstall compile cache fixture

* fix(codex): keep app-server event ownership explicit

---------

Co-authored-by: pashpashpash <nik@vault77.ai>

2026-05-05 07:23:41 +09:00

..

audit-seams.test.ts

fix(heartbeat): type wake scheduling intent

2026-05-02 14:52:18 +01:00

barnacle-auto-response.test.ts

fix(github): raise Barnacle active PR limit

2026-05-02 10:37:46 -07:00

bench-gateway-startup.test.ts

perf(gateway): add startup CPU profile option

2026-05-03 13:30:35 +01:00

blacksmith-testbox-runner.test.ts

refactor: simplify e2e fixture helpers

2026-04-29 10:08:34 +01:00

blacksmith-testbox-state.test.ts

fix(testbox): guard stale OpenClaw Testbox reuse

2026-04-29 00:51:17 -07:00

build-all.test.ts

fix(build): stamp runtime postbuild artifacts

2026-04-28 07:56:08 +01:00

bundle-a2ui.test.ts

build: keep a2ui bundle stable

2026-04-21 04:11:01 +01:00

bundled-plugin-build-entries.test.ts

test(release): align pack checks with externalized plugins

2026-05-02 23:00:04 +01:00

changed-lanes.test.ts

Harden Codex harness control surfaces (#77459)

2026-05-05 07:23:41 +09:00

channel-contract-test-plan.test.ts

ci: reduce node runner fanout

2026-04-23 15:25:28 +01:00

check-changelog-attributions.test.ts

fix(e2e): escape Windows stale update import regex (#75315) thanks @steipete

2026-05-02 19:10:44 -05:00

check-channel-agnostic-boundaries.test.ts

…

check-cli-bootstrap-imports.test.ts

test: catch transitive gateway cold imports

2026-04-28 02:58:06 +01:00

check-deadcode-unused-files.test.ts

fix: ignore pnpm progress in deadcode guard

2026-05-02 05:59:54 +01:00

check-dynamic-import-warts.test.ts

refactor: cache provider tool runtimes

2026-04-18 19:05:00 +01:00

check-extension-package-tsc-boundary.test.ts

test: stabilize loaded full-suite checks

2026-04-12 11:52:56 -07:00

check-extension-wildcard-reexports.test.ts

ci: guard extension wildcard reexports

2026-04-27 20:34:35 +01:00

check-file-utils.test.ts

test(scripts): share temp dir helpers

2026-04-06 05:35:00 +01:00

check-gateway-watch-regression.test.ts

refactor: remove plugin dependency cleanup leftovers

2026-05-01 21:55:50 +01:00

check-no-conflict-markers.test.ts

test(scripts): share temp dir helpers

2026-04-06 05:35:00 +01:00

check-no-random-messaging-tmp.test.ts

Media: secure image temp dirs (#58270)

2026-03-31 11:12:47 +01:00

check-no-raw-window-open.test.ts

…

check-openclaw-package-tarball.test.ts

fix(ci): preserve imported dist chunks after install

2026-04-29 01:13:03 +01:00

check-opengrep-rule-metadata.test.ts

feat(security): add GHSA detector-review pipeline and OpenGrep CI workflows (#69483)

2026-04-30 02:42:20 +10:00

check-plugin-sdk-wildcard-reexports.test.ts

ci: guard plugin sdk wildcard reexports

2026-04-27 14:52:21 +01:00

check-runtime-sidecar-loaders.test.ts

fix(tasks): ship task registry control runtime

2026-04-28 06:18:30 +01:00

ci-node-test-plan.test.ts

ci: split slow CI shards

2026-05-03 14:11:04 +01:00

ci-run-timings.test.ts

ci: split auto-reply shard timing

2026-04-25 23:47:00 +01:00

close-duplicate-prs-after-merge.test.ts

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

codex-app-server-protocol-source.test.ts

Harden Codex harness control surfaces (#77459)

2026-05-05 07:23:41 +09:00

committer.test.ts

fix(tooling): commit hook-restaged file contents

2026-04-12 05:19:56 +01:00

docker-all-scheduler.test.ts

ci: shard release live validation

2026-04-27 14:24:10 +01:00

docker-build-helper.test.ts

test(ci): update plugin registry fixture assertion

2026-05-03 01:23:00 -07:00

docker-e2e-plan.test.ts

test(package): cover stale source plugin shadows

2026-05-04 21:55:08 +01:00

extension-source-classifier.test.ts

refactor: centralize update targets and extension guardrails

2026-04-03 23:26:31 +09:00

gh-read.test.ts

feat: add gh-read GitHub app helper

2026-04-08 00:09:07 +01:00

install-ps1.test.ts

fix(release): stabilize windows npm install

2026-05-02 05:49:45 +01:00

install-sh.test.ts

fix: warn before npm prefix redirection (#73890) (thanks @Sayeem3051)

2026-04-30 04:49:03 +01:00

ios-pin-version.test.ts

test(scripts): share ios fixture setup

2026-04-12 04:51:18 +01:00

ios-team-id.test.ts

test(root): share temp dir helper across root tests

2026-04-06 05:43:48 +01:00

ios-version.test-support.ts

test(scripts): share ios fixture setup

2026-04-12 04:51:18 +01:00

ios-version.test.ts

feat: support alpha releases

2026-05-02 18:29:13 +01:00

lint-suppressions.test.ts

[plugin sdk] Project session extension slots (#75609)

2026-05-04 08:04:27 -07:00

live-docker-stage.test.ts

fix: keep host plugin registry out of live Docker state

2026-04-26 09:17:38 +01:00

local-heavy-check-runtime.test.ts

chore: move oxlint tsconfigs under config

2026-05-03 15:12:06 +01:00

managed-child-process.test.ts

test(scripts): remove managed child race

2026-04-29 12:34:41 -07:00

npm-runner.test.ts

fix: restore bundled runtime dependency provisioning (#58782) (thanks @obviyus)

2026-04-01 13:03:36 +05:30

npm-telegram-live.test.ts

test(ci): align telegram live package assertion

2026-04-29 12:06:57 +01:00

openclaw-cross-os-release-checks.test.ts

ci(release): recover Windows packaged update no-restart timeout

2026-05-04 21:34:24 +01:00

openclaw-cross-os-release-workflow.test.ts

fix(ci): run cross-os checks on Windows

2026-05-03 18:05:50 -07:00

openclaw-test-state.test.ts

test: strengthen published upgrade survivor lane (#75361)

2026-04-30 21:50:36 -05:00

oxlint-config.test.ts

chore: move oxlint tsconfigs under config

2026-05-03 15:12:06 +01:00

package-acceptance-workflow.test.ts

test(package): cover stale source plugin shadows

2026-05-04 21:55:08 +01:00

parallels-npm-update-smoke.test.ts

test: improve Parallels beta validation

2026-05-04 04:43:24 +01:00

parallels-smoke-model.test.ts

test: improve Parallels beta validation

2026-05-04 04:43:24 +01:00

plugin-boundary-report.test.ts

perf(test): speed up boundary report checks

2026-04-28 19:00:22 +01:00

plugin-contract-test-plan.test.ts

test: guard legacy target ci planner fallback

2026-04-29 13:42:10 +01:00

plugin-gateway-gauntlet.test.ts

fix(test): align plugin gauntlet with built runtime

2026-05-03 13:17:21 -07:00

plugin-prerelease-test-plan.test.ts

ci: speed up full release validation

2026-05-03 12:24:24 +01:00

plugin-update-unchanged-docker.test.ts

test: follow docker e2e script refactor

2026-04-29 08:56:23 +01:00

pnpm-audit-prod.test.ts

fix(ci): parse quoted pnpm snapshot keys

2026-04-14 21:15:43 -04:00

pnpm-runner.test.ts

fix: cover Windows pnpm and Lobster install regressions

2026-04-26 08:14:28 +01:00

postinstall-bundled-plugins.test.ts

Harden Codex harness control surfaces (#77459)

2026-05-05 07:23:41 +09:00

preinstall-package-manager-warning.test.ts

fix(plugins): localize bundled runtime deps to extensions (#67099)

2026-04-15 12:04:31 +01:00

prepare-extension-package-boundary-artifacts.test.ts

fix(test): reuse heavy-check lock in boundary prep

2026-04-25 02:49:45 -07:00

prompt-snapshots.test.ts

Scope Codex heartbeat guidance to heartbeat turns (#76788)

2026-05-04 01:58:39 +09:00

release-beta-smoke.test.ts

fix(release): resolve beta smoke workflow run

2026-05-03 23:35:04 -07:00

release-check.test.ts

fix(release): use bundled channel in activation smoke

2026-05-02 19:41:16 -07:00

resolve-openclaw-package-candidate.test.ts

feat: support alpha releases

2026-05-02 18:29:13 +01:00

root-dependency-ownership-audit.test.ts

Add Codex happy path prompt snapshots (#75807)

2026-05-03 00:59:55 +09:00

root-package-overrides.test.ts

test: cover npm pack override reference

2026-05-02 10:25:44 +01:00

rtt-harness.test.ts

feat: support alpha releases

2026-05-02 18:29:13 +01:00

run-additional-boundary-checks.test.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

run-opengrep.test.ts

feat(security): add GHSA detector-review pipeline and OpenGrep CI workflows (#69483)

2026-04-30 02:42:20 +10:00

run-oxlint.test.ts

Harden Codex harness control surfaces (#77459)

2026-05-05 07:23:41 +09:00

run-tsgo.test.ts

chore: move test tsconfigs

2026-05-03 12:56:52 +01:00

run-vitest-profile.test.ts

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

run-vitest.test.ts

fix(test): keep local Vitest checks serialized

2026-04-25 03:07:27 -07:00

runtime-postbuild-stamp.test.ts

fix(build): stamp runtime postbuild artifacts

2026-04-28 07:56:08 +01:00

runtime-postbuild.test.ts

fix(update): keep plugin install runtime aliases stable

2026-05-04 21:55:08 +01:00

sbom-risk-report.test.ts

fix(deps): keep plugin ownership records live (#71331)

2026-04-24 19:15:12 -07:00

stage-bundled-plugin-runtime.test.ts

fix(build): harden bundled plugin runtime staging

2026-04-25 04:27:17 -07:00

test-extension.test.ts

test(extensions): keep shard balance assertion stable

2026-05-03 15:38:27 -07:00

test-group-report.test.ts

Tests: scope grouped benchmark artifacts

2026-04-16 23:45:57 -04:00

test-helpers.ts

test(scripts): add async temp dir helper

2026-04-06 05:37:38 +01:00

test-install-sh-docker.test.ts

ci(release): force release smokes onto GPT-5.5

2026-05-02 01:38:09 +01:00

test-live-cli-backend-docker.test.ts

fix(ci): stabilize full release validation

2026-04-28 23:54:43 +01:00

test-live-codex-harness-docker.test.ts

Harden Codex harness control surfaces (#77459)

2026-05-05 07:23:41 +09:00

test-live-shard.test.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

test-projects.test.ts

test(gateway): split full-suite gateway-server shard

2026-05-02 22:40:00 -07:00

test-report-utils.test.ts

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

testbox-sync-sanity.test.ts

fix: centralize source reply delivery mode

2026-04-28 09:14:19 +01:00

ts-guard-utils.test.ts

fix(qqbot): guard image-size probe against SSRF (#63495)

2026-04-09 16:48:04 +08:00

ts-topology.test.ts

test: trim unit-fast hotspots

2026-04-27 09:46:06 +01:00

tsdown-build.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

ui.test.ts

fix: quote Windows UI runner paths

2026-04-26 08:31:00 +01:00

upgrade-survivor-baselines.test.ts

test: add update migration package gate

2026-05-02 00:34:33 +01:00

verify-docker-attestations.test.ts

ci: verify docker release attestations

2026-04-26 22:40:44 +01:00

verify-plugin-npm-published-runtime.test.ts

fix(release): reject blank plugin runtime entries

2026-05-04 02:18:11 -07:00

vitest-local-scheduling.test.ts

fix(test): keep local Vitest checks serialized

2026-04-25 03:07:27 -07:00

vitest-process-group.test.ts

chore: update dependencies and oxc tooling

2026-04-10 19:28:42 +01:00

vitest-shard-timings.test.ts

ci: split auto-reply shard timing

2026-04-25 23:47:00 +01:00

write-cli-startup-metadata.test.ts

perf(browser): precompute browser help

2026-04-25 13:07:15 +01:00