Commit Graph

1649 Commits

Author SHA1 Message Date
Vincent Koc 75d7325e32 test(tasks): add control runtime override seam 2026-04-11 12:03:16 +01:00
Vincent Koc 08ba5a72f7 fix(cycles): add remaining seam files 2026-04-11 10:43:22 +01:00
Vincent Koc 7308e72fac fix(cycles): continue seam extraction 2026-04-11 10:43:22 +01:00
fuller-stack-dev 58708e6f88 fix: preserve Codex OAuth scopes (#64713) (thanks @fuller-stack-dev)
* fix(auth): preserve upstream Codex OAuth scopes

* test(auth): drop stale Codex OAuth helper test

* test(auth): colocate codex oauth coverage

* fix: preserve Codex OAuth scopes (#64713) (thanks @fuller-stack-dev)

* fix: place Codex OAuth changelog entry in Unreleased (#64713) (thanks @fuller-stack-dev)

---------

Co-authored-by: Ayaan Zaidi <hi@obviy.us>
2026-04-11 14:38:19 +05:30
Peter Steinberger d515009c53 fix(ci): stabilize auto-reply CI tests 2026-04-11 04:09:10 +01:00
Peter Steinberger 05521242cd fix(ci): stabilize agentic compact tests 2026-04-11 03:25:32 +01:00
Peter Steinberger 1c7444dab6 perf: optimize test import surfaces 2026-04-11 03:08:58 +01:00
Vincent Koc 7198a9f0ee fix(cycles): reduce remaining static import seams 2026-04-11 02:46:41 +01:00
Vincent Koc 350299401f fix(cycles): continue shared seam extraction 2026-04-11 02:46:41 +01:00
Vincent Koc 81235fd923 fix(cycles): split shared contract seams 2026-04-11 02:46:40 +01:00
Vincent Koc 95bc417944 fix(cycles): split residual shared type seams 2026-04-11 02:46:40 +01:00
Peter Steinberger 541f768249 fix(ci): align context and plugin loader tests 2026-04-11 02:28:58 +01:00
Peter Steinberger 202f80792e feat: add plugin text transforms 2026-04-11 02:17:39 +01:00
Peter Steinberger 39d1a817fa lint: enable small oxlint rules 2026-04-11 02:15:21 +01:00
Eva f65ffdff96 agents: address execution correctness review fixes 2026-04-11 01:27:31 +01:00
Eva 1038c1b8f3 test: keep provider family inventory stable 2026-04-11 01:27:31 +01:00
Eva 626eaf8496 test: align openai shared-family inventory 2026-04-11 01:27:31 +01:00
Peter Steinberger 9e0d358695 refactor: simplify runtime conversions 2026-04-11 01:23:34 +01:00
Eva 756d715ce0 test(oauth): cover slash-terminated authorize urls 2026-04-11 01:19:32 +01:00
Eva 4c0eb14985 fix: address remaining runtime truthfulness review 2026-04-11 01:19:32 +01:00
Eva 9ec96f476d openai-codex: polish auth review fixes 2026-04-11 01:19:32 +01:00
Eva 8166d592d9 openai-codex: classify auth and runtime failures 2026-04-11 01:19:32 +01:00
Peter Steinberger d85b2a0e81 refactor: simplify core conversions 2026-04-11 01:17:51 +01:00
Peter Steinberger cfc1ce7547 test: satisfy temp path guard (#64491) 2026-04-11 00:39:21 +01:00
Vincent Koc fa44a31920 fix(auth): brand codex oauth as openclaw 2026-04-11 00:38:09 +01:00
Peter Steinberger 66ac60acbd test: simplify plugin metadata assertions 2026-04-11 00:12:26 +01:00
Peter Steinberger 71efba043c refactor: simplify provider oauth prompts 2026-04-11 00:11:08 +01:00
Peter Steinberger 73d054b764 refactor: simplify web channel runtime export names 2026-04-11 00:09:38 +01:00
Tak Hoffman 1c0e444f56 fix: preserve sender-keyed plugin command bindings 2026-04-10 18:00:48 -05:00
hcl 8a28a3b056 fix(plugins): preserve contextEngine slot through config normalization (#64192)
Merged via squash.

Prepared head SHA: ae8bd9f09da76c2ec1dccda946c9f9e1a5e0a000
Co-authored-by: hclsys <7755017+hclsys@users.noreply.github.com>
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com>
Reviewed-by: @jalehman
2026-04-10 15:58:27 -07:00
Peter Steinberger 53f97f86c7 test: simplify plugin fixture path strings 2026-04-10 23:16:38 +01:00
Peter Steinberger a73dc477d7 style: apply oxfmt cleanup 2026-04-10 23:09:37 +01:00
Peter Steinberger 31a0b7bd42 feat: add Codex app-server controls 2026-04-10 22:19:00 +01:00
EronFan 5e2136c6ae fix: include memory plugins in gateway startup (openclaw#64423)
Verified:
- pnpm build
- pnpm check
- pnpm test -- src/plugins/channel-plugin-ids.test.ts

Co-authored-by: EronFan <50734013+EronFan@users.noreply.github.com>
2026-04-10 16:02:44 -05:00
Peter Steinberger 75823947ae test: remove redundant loader message conversions 2026-04-10 21:30:48 +01:00
Peter Steinberger 8bc157c304 fix: prefer manifest evidence in install scanner 2026-04-10 21:22:16 +01:00
Peter Steinberger ba55a81a32 fix: close landing test gaps 2026-04-10 21:22:16 +01:00
Peter Steinberger c9067b6520 fix: preserve scoped plugin symlink installs 2026-04-10 21:22:16 +01:00
Peter Steinberger 3198c10fba fix: stabilize Codex harness landing checks 2026-04-10 21:22:16 +01:00
Peter Steinberger 44ec4d05de feat: add pluggable agent harness registry 2026-04-10 21:22:16 +01:00
Peter Steinberger 0ebeee8b0d chore: enable consistent-return 2026-04-10 20:56:43 +01:00
Peter Steinberger cdb944ef0a chore: enable no-misused-spread 2026-04-10 20:14:49 +01:00
Peter Steinberger a6edccad3d test: align plugin install denylist expectations 2026-04-10 19:42:38 +01:00
Peter Steinberger e7db987ce6 test: trim heavy imports and harden ci checks 2026-04-10 19:23:10 +01:00
Peter Steinberger f6ed276f51 style: apply updated formatter output 2026-04-10 19:17:39 +01:00
Peter Steinberger 56468cdb06 fix: align plugin install denylist scan tests 2026-04-10 18:57:52 +01:00
Michael Appel 9f97ad857a fix(security): pin axios to 1.15.0 and add dependency denylist for plugin installs [AI-assisted] (#63891)
* fix: address issue

* fix: address review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* Plugins: fix install security CI regressions

* Plugins: make manifest traversal linear

* Plugins: bound manifest security traversal

* Plugins: block denied node_modules package dirs

* Plugins: match node_modules case-insensitively

* Plugins: block denied package symlink paths

* Tests: normalize blocked symlink assertion

* Plugins: fail closed on unreadable denied paths

* Plugins: block denied node_modules file aliases

* Plugins: inspect node_modules symlink targets

* Plugins: preserve symlink target package paths

* fix: address PR review feedback

* chore(changelog): add axios pin and dependency denylist entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>
2026-04-10 11:20:05 -06:00
Peter Steinberger 777c6f7580 refactor: split manifest command alias helpers 2026-04-10 17:37:31 +01:00
Peter Steinberger 8a5b7cf573 test: inject provider auth command fixtures 2026-04-10 16:41:10 +01:00
Peter Steinberger 9fd08f9d0f refactor: remove type-only import cycles 2026-04-10 15:14:27 +01:00