c23d66e3b5
refactor: consolidate coercion ownership ( #122692 )
...
* refactor: consolidate coercion ownership
* test: align shard check with weighted planning
* chore: refresh plugin SDK API baseline
2026-08-12 09:25:28 -07:00
964c8c84c1
refactor: consolidate coercion ownership ( #122299 )
...
* refactor: consolidate coercion ownership
Centralize four canonical coercion helpers, migrate exact core and plugin duplicates through narrow Plugin SDK facades, and enforce declaration and plugin-normalization ownership boundaries.
The sweep adds eight focused SDK exports while deleting more production and tooling code than it adds. User-visible behavior is unchanged except for safer equivalent object and UI parsing at existing boundaries.
* fix: guard integer option ownership
Register resolveIntegerOption with the canonical function owner and extend the declaration-guard fixture so future local duplicates fail validation.
* fix: keep integer helpers on numeric facade
Remove the unshipped duplicate string-coerce exports and route every affected plugin consumer through the existing number-runtime contract.
* fix: point numeric coercion to number runtime
Make boundary and declaration diagnostics recommend the canonical numeric facade, with failing-before coverage for both guidance paths.
2026-08-11 17:14:53 -07:00
fa03d9b913
refactor: consolidate coercion helpers ( #121366 )
...
* refactor: consolidate coercion helpers
* fix: remove duplicate coercion imports
* fix: preserve serialized coercion guard
* chore: ratchet coercion helper carve-outs
* fix(test): keep gauntlet subprocess startup lean
* fix: preserve imported session timestamp semantics
* fix: preserve catalog timestamp string semantics
* chore: align plugin SDK surface ratchet
* fix: preserve trajectory and SDK string contracts
* fix(test): preserve QA record assertion semantics
* fix: complete standalone record guard rename
* refactor(cron): use canonical string coercion
* fix(acpx): preserve Pi timestamp parsing
* test(channels): adapt custody test harnesses
* test(telegram): classify media harness as test support
* test(acpx): split timestamp contract coverage
* test(channels): support generated custody contracts
* chore: ban the full coercion helper name set
Extends the declaration guard to all eleven consolidated helper names and
renames the cron schedule-identity readNumber wrapper to readScheduleInteger
so the banned generic name cannot regrow.
* fix(scripts): repair release-validation guard drift and lint cause
Restores the renamed isJsonRecord guard in assertTrustedWorkflowHarness after
main added isRecord call sites in parallel, and attaches the caught YAML error
as the thrown error cause (preserve-caught-error was red on main).
* fix: preserve Claude timestamp string semantics
* fix: preserve persisted timestamp string semantics
* fix: preserve date-first timestamp contracts
* fix(openai): harden delegation failure formatting
* chore: close coercion helper guard gaps
* test(openai): model non-error delegation rejection
* chore: refresh plugin SDK API contract
* fix(tasks): use canonical string field reader
* fix(ai): use canonical provider error field coercion
* fix(browser): migrate native bootstrap coercion
* docs(plugin-sdk): clarify text record export compatibility
* fix(gateway): normalize approval execution identity
* test(outbound): isolate message action poll harness
2026-08-11 00:02:18 -07:00
9b8e50b9f6
refactor(scripts): consolidate redundant tooling paths ( #118259 )
2026-08-02 16:20:09 -07:00
23d2f664fb
fix(release): retain npm provenance evidence
2026-07-15 20:02:53 +01:00
2e2366b6d3
chore(tooling): typecheck scripts/** with a dedicated tsgo lane ( #104348 )
...
* feat(tooling): add tsgo typecheck lane for scripts/**
* fix(scripts): burn down scripts type debt surfaced by the new lane
Typing-only except bugs the lane surfaced: gh-read timeout race,
Discord Headers spread dropping entries, undefined allowedHeadBranches
match, plugin-boundary matchAll crash. Deletes retired config keys from
fixtures/benches (prompt snapshots regenerated, config dump only) and
the orphaned non-runnable sync-moonshot-docs script. Adds full-surface
.d.mts declarations for existing .mjs boundaries.
2026-07-11 02:31:17 -07:00
54cc90b1b1
fix(release): publish ClawHub bootstrap artifacts immutably ( #103809 )
...
* fix(release): harden ClawHub bootstrap
* fix(release): centralize publication artifact verification
* fix(release): harden publication artifact verification
* fix(release): lock ClawHub bootstrap toolchain
* test(release): assert locked ClawHub binary
* fix(release): pack with trusted ClawHub harness
* fix(release): bound beta verifier artifact reads
* fix(release): bind target and tooling identities
* fix(release): stabilize signed package ordering
* fix(release): bind ClawHub pretag proof
* fix(release): bind ClawHub OIDC readback
* fix(release): bind ClawHub OIDC readback
2026-07-10 13:33:20 -07:00
3bbc2732c0
refactor(deadcode): localize script helper types ( #101917 )
2026-07-07 16:59:51 -07:00
8e66d7aad3
fix(release): cancel beta verifier status bodies
2026-06-19 07:57:19 +02:00
324ad548a8
fix(release): keep ClawHub verification bodies timed
2026-06-19 06:36:55 +02:00
abb6f04e0c
ci(release): harden release controls
...
One-time maintainer-authorized bootstrap merge for the release-gate verifier policy. Exact hosted CI and all supporting workflow gates passed on 66133de419
2026-06-18 03:11:20 +08:00
ee495abda1
fix(release): satisfy retry delay lint
2026-06-16 09:58:25 +08:00
1ee788189a
fix(release): accept trusted main Telegram evidence
2026-06-16 09:54:56 +08:00
e71cf0ffcb
fix(release): tolerate npm propagation after publish
2026-06-16 09:51:47 +08:00
6cf06e8e7e
ci: split plugin ClawHub publishing paths
...
* feat: partition clawhub plugin release candidates
* fix: read clawhub trusted publisher config endpoint
* feat: split clawhub plugin bootstrap workflow
* ci: split plugin clawhub publish paths
* ci: pin clawhub package publish workflow
* ci: keep clawhub bootstrap token out of builds
* ci: fix clawhub release dry-run gating
* ci: align clawhub oidc publish refs
* ci: make clawhub bootstrap recovery idempotent
* ci: route clawhub repair candidates through bootstrap
* ci: preserve tideclaw alpha clawhub guards
* ci: simplify clawhub release ref handling
* ci: extract clawhub release routing plan
* ci: extract clawhub release runtime state
* test: guard clawhub release helper executability
* ci: pin ClawHub CLI for plugin publishing
* ci: allow historical ClawHub dry-run validation
* ci: fix ClawHub bootstrap token handoff
2026-06-12 20:16:06 -07:00
6fb0c940fa
fix(release): gate beta publish on plugin verification
...
Delay public GitHub release publication until postpublish verification, dependency evidence upload, proof append, and required plugin publish gates pass.
Also updates release-maintainer instructions so newly publishable plugins are minted/prepublished through an owner-approved path without consuming the next auto-bumped beta version unless that path is the actual release publish.
2026-06-11 20:42:58 +09:00
b8d08f0cfd
docs: document repository scripts
2026-06-04 20:52:50 -04:00
22cb7fb6b7
chore(lint): enable no-promise-executor-return
2026-05-31 23:06:13 +01:00
b9d609edfe
refactor: share bounded release response reader
2026-05-29 15:54:36 +02:00
44adda3195
fix(release): bound ClawHub verifier responses
2026-05-29 08:33:50 +02:00
ef17bbaabf
ci(release): harden postpublish verification
2026-05-27 13:58:14 +01:00
2a01fbb56c
ci: keep ClawHub advisory for alpha publish
2026-05-20 01:57:00 +01:00
1ceebf8a01
ci: harden release publish evidence
2026-05-17 06:34:58 +01:00
c4d8e0be18
ci: harden release validation flow
2026-05-17 06:34:58 +01:00
38593cc8fc
fix: preserve beta verifier parse errors
...
(cherry picked from commit 454f6ed402
2026-05-12 06:21:10 +01:00
a4acd33097
ci: speed up beta release verification
...
(cherry picked from commit 7ca9b58a27
2026-05-12 06:21:09 +01:00
Peter Steinberger