 Josh Avant
|
73a9eed95b
|
refactor(audit): add canonical admitted-run context (#120534)
* feat(audit): carry canonical admitted execution context
* fix(agents): preserve admitted context across retries
* fix(worker): fence legacy launch dialect
* test(gateway): track approval temp dirs
* fix(plugin-sdk): preserve harness attempt compatibility
* fix: close delegated run authority at owner boundaries
* fix: internalize delegated authority validators
* refactor: split delegated authority proof surfaces
* refactor: centralize command admission identity
* test: claim runtime tool authority
* fix(gateway): keep lifecycle cleanup within static budgets
* fix(agents): revalidate harness policy authority
* fix(agents): fence awaited approval capability results
* test(copilot): supply required harness capability fixtures
* fix(agent): preserve scoped embedded run admission
* fix(agent): preserve keyless and worker authority
* test(agent): bind incomplete-turn authority
* docs: preserve execution authority invariants
* chore(plugin-sdk): regenerate API baseline
* fix(gateway): notify pending claim closure
* fix(gateway): revalidate delegated tool authority
* fix(plugin-sdk): keep source guard internal
* fix: close delegated authority races
* fix: revalidate delegated side effects
* fix: close harness authority projection gaps
* fix: align authority integration types
* fix: isolate settled harness finalization
* fix: fence recovery identity finalization
* fix: preserve committed session worktrees
* fix: preserve worker placement agent identity
* fix: fence active harness tool work
* fix(plugins): restore embedded run admission owner
* chore(plugin-sdk): compose integrated surface budgets
* fix(copilot): keep finalization attempt type internal
* fix(plugins): complete admission owner type imports
* test(harness): use settled finalization attempt shape
* fix(security): retain exact side-run and approval authority
* fix(security): preserve protected authority through terminal sweep
* fix(agents): follow moved recovery store owner
* fix(ci): align integrated authority owners with gates
* fix(plugins): distinguish embedded agent adapter export
* chore(plugin-sdk): regenerate API baseline after rolling integration
* refactor(gateway): keep session authority within owner budgets
* fix(gateway): keep session helpers private
* docs(plugin-sdk): name the V2 parameter subpath
* chore(integration): reconcile worker and SDK surfaces
* docs(plugin-sdk): require the V2 host API floor
* chore(plugin-sdk): regenerate after proxy-auth integration
|
2026-08-10 23:15:20 -05:00 |
|
|
Peter Steinberger
|
c70aee247e
|
refactor(scripts): migrate JavaScript tools to TypeScript (#121005)
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
|
2026-08-09 07:21:35 -07:00 |
|
|
Peter Steinberger
|
ea2c6a63c9
|
refactor(scripts): adopt shared scaffolding (#118514)
* refactor(scripts): adopt shared scaffolding
* fix(scripts): satisfy strict tooling checks
* fix(scripts): preserve scaffolding contracts
|
2026-08-03 04:40:30 -07:00 |
|
|
Vincent Koc
|
c37c8d5671
|
fix(plugin-sdk): resolve surface counts from source graph
|
2026-07-12 04:28:22 +02:00 |
|
|
Peter Steinberger
|
9b1c36d23c
|
fix: prevent exec approval revocation races (#103515)
* fix(security): serialize exec approval mutations
* fix(security): preserve additive approval writes
* test(cli): expect normalized approval shape
* fix(security): preserve exec approval compatibility
* test(security): exercise locked approval initialization
* test(security): mock serialized approval helpers
* test(exec): derive enforced command path from plan
* fix(gateway): always return approval CAS conflicts
* fix(macos): serialize exec approvals writes
* fix(security): repair approval build errors
* fix(security): serialize exec approval mutations
* fix(security): fail closed on approval persistence errors
* test(security): cover detached approval persistence failures
* fix(security): harden exec approval state
* style(macos): format exec approval sources
* fix(security): complete exec approval hardening
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(macos): preserve approved login-shell semantics
* fix(macos): keep login shell approvals one-shot
* fix(security): linearize exec authorization
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(security): preserve durable approval basis
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(security): bind exec grants to current policy
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* test(security): fix exec revocation fixtures
* test(security): align gateway approval fixtures
* fix(macos): return approval decisions
* chore(i18n): sync native approval strings
* test(security): align approval hardening fixtures
* test(node): authorize completed event fixture
* test(security): fix approval decision fixtures
* test(security): await durable approval visibility
* fix(exec): preserve concurrent approval grants
* fix(exec): address exact-head CI failures
* fix(exec): preserve concurrent approval promotions
* fix(exec): make Swift shutdown state explicit
* test(macos): handle approval read failures
* fix(macos): harden approval socket paths
* fix(macos): preserve exact shell payload bytes
* test(macos): make approval fixtures explicit
* test(macos): fix approval suite compilation
* fix(macos): bound approval socket JSONL reads
* chore: move exec approval note to release process
* chore: move exec approval note to release process
---------
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
|
2026-07-10 21:35:05 +01:00 |
|
|
Peter Steinberger
|
1f484a8dbd
|
test: speed up and stabilize full suite
|
2026-07-05 08:00:23 -04:00 |
|
|
Gio Della-Libera
|
ef083b9389
|
test: stabilize policy PR CI guardrails
|
2026-07-04 15:06:10 -07:00 |
|
|
Peter Steinberger
|
ed2eebd31d
|
perf: reuse plugin SDK report compiler graph (#99940)
|
2026-07-04 07:41:19 -04:00 |
|
|
Renaud Cerrato
|
95b97e5b0b
|
fix(exec): fail invalid explicit workdir before running (#94441)
* fix(exec): fail invalid explicit workdir before running
* test(exec): tighten invalid workdir regression
* fix(exec): clarify invalid workdir recovery
* refactor(exec): centralize workdir resolution
* test(exec): update invalid workdir assertion
* fix(exec): harden backend workdir contract
* fix(exec): map missing backend host workdirs
* fix(exec): reject control commands before workdir prep
* fix(exec): defer env hook until backend cwd validation
* chore(sdk): refresh plugin api baseline
* test(agents): drop redundant definition assertions
* test(exec): use real config workdirs
* test(exec): use tracked temp dirs
* test(openshell): keep temp setup local
* test: update temp-dir route fixture
---------
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
|
2026-06-26 08:02:00 +10:00 |
|
|
Vincent Koc
|
497d53d821
|
fix(sdk): tighten wildcard surface budget
|
2026-06-25 23:30:17 +08:00 |
|
|
Vincent Koc
|
6df67285df
|
fix(sdk): keep surface budgets tight
|
2026-06-25 02:18:07 +08:00 |
|
|
Vincent Koc
|
d01c290601
|
test(sdk): assert surface budget growth guard
|
2026-06-25 02:05:06 +08:00 |
|
|
Josh Lehman
|
132d70bfb3
|
refactor: migrate bundled transcript target lookups (#89911)
|
2026-06-23 14:32:21 -07:00 |
|
|
Vincent Koc
|
e856a24754
|
fix(qa): bound docker e2e log replay
|
2026-06-23 13:26:09 +02:00 |
|
|
Vincent Koc
|
5dc6e0ea77
|
test(scripts): align SDK surface budget assertion
|
2026-06-22 18:58:59 +08:00 |
|
|
Peter Steinberger
|
15a0609a6b
|
test(plugin-sdk): restore private surface budget
|
2026-06-22 03:30:14 -04:00 |
|
|
Vincent Koc
|
078044a2cf
|
test(sdk): refresh plugin surface budget
|
2026-06-22 14:57:53 +08:00 |
|
|
Vincent Koc
|
a9be81d510
|
fix(ci): repair baseline lint and test gates
|
2026-06-22 11:44:21 +08:00 |
|
|
Vincent Koc
|
77b6ca9a9b
|
fix(sdk): tighten surface report budgets
|
2026-06-22 01:04:53 +02:00 |
|
|
mikasa
|
ec7a548062
|
fix #95378: https://github.com/openclaw/openclaw/issues/95378 (#95390)
* fix(telegram): use session transcript for direct context
* fix(telegram): account for proof and SDK checks
* fix(telegram): address review findings
* fix(telegram): tighten session transcript context
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us>
|
2026-06-22 04:29:44 +05:30 |
|
|
Vincent Koc
|
86fea26797
|
fix(plugin-sdk): stabilize surface report after builds
|
2026-06-21 21:28:47 +02:00 |
|
|
Vincent Koc
|
d5c9e7ea99
|
test(plugin-sdk): ratchet surface budget checks
|
2026-06-16 02:56:41 +02:00 |
|
|
Peter Steinberger
|
58c663920d
|
docs: document script tests
|
2026-06-04 20:49:50 -04:00 |
|
|
Vincent Koc
|
4b18234fc1
|
fix(scripts): enforce plugin sdk surface budgets
|
2026-05-29 05:32:12 +02:00 |
|