Jesse Merhi a9377fe667 Harden browser download output writes (#78780) ...

Summary:
- The PR exports `ensureAbsoluteDirectory` through the fs-safe/SDK runtime facades and routes browser download ... through safe output directory/file helpers with focused tests, a changelog entry, and SDK API hash updates.
- Reproducibility: yes. at source level: current main creates browser download/output roots with raw recursive ... jection coverage for that path. I did not run a live browser runtime reproduction in this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(browser): use fs-safe output directory helper
- PR branch already contained follow-up commit before automerge: docs(changelog): mention browser fs-safe hardening
- PR branch already contained follow-up commit before automerge: fix(browser): harden download output writes

Validation:
- ClawSweeper review passed for head a9c9570f66.
- Required merge gates passed before the squash merge.

Prepared head SHA: a9c9570f66
Review: https://github.com/openclaw/openclaw/pull/78780#issuecomment-4394146682

Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>

2026-05-08 05:57:23 +00:00

..

acpx

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

active-memory

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

alibaba

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

amazon-bedrock

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

amazon-bedrock-mantle

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

anthropic

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

anthropic-vertex

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

arcee

fix(arcee): disable tools for Trinity thinking

2026-05-07 14:28:33 +01:00

azure-speech

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

bonjour

test: guard extension callback captures

2026-05-08 06:34:45 +01:00

brave

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

browser

Harden browser download output writes (#78780)

2026-05-08 05:57:23 +00:00

byteplus

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

canvas

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

cerebras

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

chutes

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

cloudflare-ai-gateway

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

codex

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

comfy

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

copilot-proxy

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

deepgram

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

deepinfra

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

deepseek

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

device-pair

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

diagnostics-otel

feat(agents): implement state-aware failover and lane suspension

2026-05-07 18:34:05 -05:00

diagnostics-prometheus

feat: add user input blocking lifecycle gates (#75035)

2026-05-06 11:41:04 +00:00

diffs

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

discord

test: tighten proxy fetch assertions

2026-05-08 06:28:56 +01:00

document-extract

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

duckduckgo

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

elevenlabs

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

exa

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

fal

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

feishu

test: tighten function-shape assertions

2026-05-08 06:19:37 +01:00

file-transfer

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

firecrawl

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

fireworks

fix: strip unsupported Fireworks tool schema keywords

2026-05-07 13:46:46 +01:00

github-copilot

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

google

test: tighten helper assertion guards

2026-05-08 06:56:38 +01:00

google-meet

fix(openai): use GA realtime bridge for gpt-realtime-2

2026-05-08 00:47:25 +01:00

googlechat

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

gradium

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

groq

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

huggingface

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

image-generation-core

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

imessage

feat(imessage): add native imsg message actions

2026-05-08 05:34:22 +01:00

inworld

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

irc

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

kilocode

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

kimi-coding

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

line

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

litellm

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

llm-task

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

lmstudio

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

lobster

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

matrix

test: finish exact function assertion cleanup

2026-05-08 06:38:25 +01:00

mattermost

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

media-understanding-core

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

memory-core

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

memory-lancedb

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

memory-wiki

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

microsoft

refactor: stage external output writes through fs-safe

2026-05-07 06:05:24 +01:00

microsoft-foundry

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

migrate-claude

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

migrate-hermes

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

minimax

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

mistral

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

moonshot

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

msteams

test: tighten function-shape assertions

2026-05-08 06:19:37 +01:00

nextcloud-talk

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

nostr

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

nvidia

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

ollama

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

open-prose

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

openai

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

opencode

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

opencode-go

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

openrouter

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

openshell

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

perplexity

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

phone-control

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

qa-channel

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qa-lab

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qa-matrix

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qianfan

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

qqbot

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qwen

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

runway

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

searxng

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

senseaudio

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

sglang

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

signal

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

skill-workshop

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

slack

test: finish exact function assertion cleanup

2026-05-08 06:38:25 +01:00

speech-core

test(channels): drop bluebubbles fixture assumptions

2026-05-07 12:53:01 -07:00

stepfun

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

synology-chat

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

synthetic

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

talk-voice

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

tavily

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

telegram

test: guard extension callback captures

2026-05-08 06:34:45 +01:00

tencent

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

test-support

refactor: trim test support helper exports

2026-05-01 12:02:22 +01:00

thread-ownership

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

tlon

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

together

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

tokenjuice

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

tts-local-cli

refactor: stage external output writes through fs-safe

2026-05-07 06:05:24 +01:00

twitch

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

venice

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

vercel-ai-gateway

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

video-generation-core

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

vllm

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

voice-call

test: guard extension callback captures

2026-05-08 06:34:45 +01:00

volcengine

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

voyage

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

vydra

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

web-readability

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

webhooks

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

whatsapp

test: invoke whatsapp setup validators

2026-05-08 06:31:10 +01:00

xai

test: tighten function-shape assertions

2026-05-08 06:19:37 +01:00

xiaomi

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

zai

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

zalo

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

zalouser

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

.npmignore

…

AGENTS.md

fix(memory-lancedb): declare apache-arrow peer

2026-05-04 00:30:02 +01:00

CLAUDE.md

…

music-generation-providers.live.test.ts

refactor: remove legacy agent dir resolver

2026-05-05 20:07:49 +01:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

Add WhatsApp live QA lane (#77704)

2026-05-05 12:09:28 -07:00

video-generation-providers.live.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00