75fca35d38
perf: bound plugin and doctor selections
2026-05-08 08:14:29 +01:00
538605ff44
[codex] Extract filesystem safety primitives ( #77918 )
...
* refactor: extract filesystem safety primitives
* refactor: use fs-safe for file access helpers
* refactor: reuse fs-safe for media reads
* refactor: use fs-safe for image reads
* refactor: reuse fs-safe in qqbot media opener
* refactor: reuse fs-safe for local media checks
* refactor: consume cleaner fs-safe api
* refactor: align fs-safe json option names
* fix: preserve fs-safe migration contracts
* refactor: use fs-safe primitive subpaths
* refactor: use grouped fs-safe subpaths
* refactor: align fs-safe api usage
* refactor: adapt private state store api
* chore: refresh proof gate
* refactor: follow fs-safe json api split
* refactor: follow reduced fs-safe surface
* build: default fs-safe python helper off
* fix: preserve fs-safe plugin sdk aliases
* refactor: consolidate fs-safe usage
* refactor: unify fs-safe store usage
* refactor: trim fs-safe temp workspace usage
* refactor: hide low-level fs-safe primitives
* build: use published fs-safe package
* fix: preserve outbound recovery durability after rebase
* chore: refresh pr checks
2026-05-06 02:15:17 +01:00
ec73e9985c
fix(clawhub): accept live artifact resolver field aliases
...
Accept live ClawHub artifact resolver kind/sha256 aliases for npm-pack and legacy ZIP installs.\n\nVerified locally after rebase:\n- pnpm exec oxfmt --check --threads=1 src/plugins/clawhub.ts src/plugins/clawhub.test.ts CHANGELOG.md\n- pnpm test:serial src/plugins/clawhub.test.ts
2026-05-03 10:31:27 -07:00
4473c56b85
fix(clawhub): clarify unreleased plugin artifacts
2026-05-03 02:26:27 -07:00
dc6d9973e9
fix(plugins): tolerate missing clawhub artifact resolver
2026-05-02 14:28:20 -07:00
cd710bcfb2
fix(plugins): clarify unavailable clawhub artifacts
2026-05-02 14:06:50 -07:00
91cc1df128
fix(plugins): normalize clawhub artifact resolver types
2026-05-02 11:47:47 -07:00
62aa4df3da
fix(plugins): use clawhub artifact resolver for installs
2026-05-02 11:41:50 -07:00
bc0f89074f
fix(plugins): clean clawhub metadata import
2026-05-02 10:17:20 -07:00
7fae11b3b1
fix(plugins): persist clawhub artifact metadata
2026-05-02 10:17:19 -07:00
03be4bfac5
fix(plugins): align clawhub clawpack downloads
2026-05-02 09:58:09 -07:00
7729e6c104
fix: restore current main ci checks
2026-05-02 05:26:42 +01:00
87f43ca88c
fix: trust official source-linked ClawHub plugins
2026-05-02 05:16:10 +01:00
0a3a89810b
feat(plugins): install clawhub clawpack artifacts
2026-05-01 17:32:23 -07:00
0aa8022e88
refactor(plugins): rename clawhub storepack metadata to clawpack
2026-05-01 17:32:22 -07:00
3e3d7a82a4
fix(plugins): keep clawhub storepack metadata version-scoped
2026-05-01 17:05:47 -07:00
20e8769d93
feat(plugins): persist clawhub storepack metadata
2026-05-01 17:05:47 -07:00
fd2625a162
fix(plugins): resolve ClawHub tags in prerelease CI
2026-04-28 17:04:01 -07:00
b67d9bf7f0
fix: propagate update timeout to plugin installs
2026-04-26 10:45:11 +01:00
40e5d9adc7
fix(plugins): update external plugins in recorded root
2026-04-26 07:14:30 +01:00
c070509b7f
fix(security): bound archive and MIME parser work ( #71561 )
...
* fix(security): bound archive and MIME parser work
* fix(security): harden zip preflight accounting
* fix(plugins): keep update channel sync on bundled path helpers
* fix(lint): avoid boolean literal comparisons
* fix(lint): keep agent spawn assertion immutable
* test(auto-reply): relax slow model directive regression timeout
2026-04-25 06:22:56 -07:00
95e397a266
refactor: dedupe repeated test helpers
2026-04-08 09:58:22 +01:00
a96a1aa670
refactor: dedupe plugin auto-reply trimmed readers
2026-04-08 01:36:39 +01:00
4cfa4b95c3
refactor: dedupe plugin trimmed readers
2026-04-08 01:36:38 +01:00
c6b5731c5d
Plugins: verify ClawHub archive integrity ( #60517 )
...
* docs(changelog): add clawhub archive integrity entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-07 10:55:22 -06:00
09b31f9123
refactor: dedupe plugin task error formatting
2026-04-07 02:03:34 +01:00
0d7f1e2c84
feat(security): fail closed on dangerous skill installs
2026-03-31 23:27:20 +09:00
44b9936136
feat(plugins): add dangerous unsafe install override
2026-03-31 23:16:11 +09:00
e133924047
[codex] harden clawhub plugin publishing and install ( #56870 )
...
* fix: harden clawhub plugin publishing and install
* fix(process): preserve windows shim exit success
2026-03-29 11:59:19 -07:00
0b94382930
fix(plugins): prefer runtime version for host compatibility
2026-03-27 02:29:32 +00:00
85ed1a8986
refactor: clean up ClawHub compatibility validation
2026-03-23 18:52:37 -07:00
5b4fd6bf31
fix: use runtime version for ClawHub plugin API checks ( #53157 ) (thanks @futhgar)
2026-03-23 18:41:18 -07:00
447e074bf4
fix(plugins): use runtime version for plugin API compatibility check
...
OPENCLAW_PLUGIN_API_VERSION was hardcoded to "1.2.0" while ClawHub-published
plugins require >=2026.3.22, making all plugin installs via ClawHub fail with
"requires plugin API >=2026.3.22, but this OpenClaw runtime exposes 1.2.0".
Use resolveRuntimeServiceVersion() (already imported) to read the actual
version from package.json at runtime.
Fixes #53038
2026-03-23 18:41:18 -07:00
5696e24c3f
refactor(cli): use typed clawhub fallback decisions
2026-03-22 12:02:52 -07:00
91b2800241
feat: add native clawhub install flows
2026-03-22 17:03:49 +00:00
Shakker