304e2c83c0
chore(lint): enable stricter oxlint rules
2026-05-31 18:59:02 +01:00
7b78941ea5
refactor: clean up ACP package metadata and helpers ( #88659 )
...
* refactor: derive acp core package subpath maps
* refactor: split acp manager task and timeout helpers
* refactor: split acp translator presentation helpers
* fix: keep packaged acp core plugin aliases
* ci: split gateway control plane runtime shard
2026-05-31 15:53:14 +01:00
77f1359612
refactor: extract media and ACP core packages ( #88534 )
...
* refactor: extract media and acp core packages
* refactor: remove relocated media and acp sources
* build: wire new core packages into dependency checks
* test: alias new core packages in vitest
* build: keep media sniffer runtime dependency
* docs: refresh plugin sdk api baseline
* fix: keep normalized proposal queries non-empty
* test: keep channel timer tests isolated
* fix: keep rebased plugin checks green
* fix: preserve sms numeric allowlist entries
* test: harden exec foreground timeout failure
* test: remove duplicate skill workshop assertion
* fix: remove channel config lint suppression
* test: refresh lint suppression allowlist
2026-05-31 11:30:33 +01:00
e9d01320d7
fix: isolate dev source plugin aliases
2026-05-31 01:47:11 +01:00
30e1556cda
refactor: extract model catalog core package
...
* refactor: extract model catalog core package
* refactor: route model catalog imports through package boundary
* build: include model catalog in plugin sdk package dts
* fix: preserve static fallback model metadata
2026-05-30 16:33:45 +01:00
de1dfab03e
refactor: move terminal core into package ( #88279 )
...
* refactor: move terminal core into package
* refactor: move terminal module files
* fix: clean terminal package CI followups
* test: update lint suppression allowlist
* fix: ship terminal core runtime aliases
2026-05-30 11:07:45 +02:00
99ffd714ce
refactor: extract markdown core package ( #88265 )
...
* refactor: extract markdown core package
* refactor: remove old markdown sources
* fix: use source paths for markdown core imports
* fix: clean markdown package dependency ownership
* fix: refresh root shrinkwrap for markdown dependency move
2026-05-30 09:33:24 +02:00
7c1484d637
refactor: extract media generation core package
...
Extract pure media generation catalog/model-ref/normalization helpers into a private workspace package and wire the package through build, watch, SDK alias, and plugin boundary d.ts paths.
Verification:
- node scripts/run-vitest.mjs test/scripts/crabbox-wrapper.test.ts packages/media-generation-core/src src/media-generation/runtime-shared.test.ts src/plugins/sdk-alias.test.ts src/infra/watch-node.test.ts src/plugins/registry.provider-like.test.ts src/agents/model-ref-shared.test.ts extensions/codex-supervisor/src/plugin-tools.test.ts extensions/codex-supervisor/src/supervisor.test.ts src/wizard/setup.official-plugins.test.ts src/infra/net/http-connect-tunnel.test.ts
- node scripts/prepare-extension-package-boundary-artifacts.mjs --mode=all
- node scripts/run-vitest.mjs src/plugins/contracts/extension-package-project-boundaries.test.ts src/plugins/sdk-alias.test.ts
- pnpm protocol:check
- pnpm check:changed
- .agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main
- GitHub CI 26676608512
2026-05-30 08:17:43 +02:00
82a16d2fee
fix: alias net policy in plugin loader
2026-05-29 10:47:27 +01:00
ee3efc0152
test(plugins): alias gateway workspace packages in plugin loader
2026-05-29 03:54:10 +01:00
1610b4983f
fix: scope jiti transform cache by OpenClaw install
...
Scope jiti filesystem transform caches for OpenClaw plugin loaders by package version and package.json install metadata so stale transforms cannot survive upgrades or package reinstalls.
Covers the central plugin module loader and the plugin SDK root alias CJS loader, while preserving jiti filesystem-cache env opt-outs and the TMPDIR cwd guard.
Verification: CI run 26601117143 passed; Real behavior proof run 26601445285 passed; CodeQL selected checks passed in run 26601117126; CodeQL Critical Quality plugin-boundary and plugin-sdk-package-contract passed in run 26601117074; OpenGrep PR diff passed in run 26601117137.
Refs: https://github.com/openclaw/openclaw/pull/87745
Thanks @fuller-stack-dev.
2026-05-29 00:17:04 +01:00
97eba607b5
perf(gateway): skip concrete jiti alias rewrites
2026-05-27 18:58:12 +01:00
1507a9701b
refactor: centralize inbound supplemental context
...
* refactor: centralize inbound supplemental context
* refactor: trim supplemental finalizer typing
* docs: clarify supplemental context projection
* refactor: move inbound finalization into core
* refactor: simplify channel inbound facts
* refactor: fold supplemental media into inbound finalizer
* refactor: migrate channel inbound callers to builder
* docs: mark inbound finalizer compat types deprecated
* refactor: wire runtime turn context builder
* refactor: replace channel turn runtime API
* fix: respect discord quote visibility
* fix: avoid deprecated line dispatch helper
* refactor: deprecate channel message SDK seams
* docs: trim channel outbound SDK page
* test: migrate irc inbound assertion
* refactor: deprecate outbound SDK facades
* refactor: deprecate channel helper SDK facades
* refactor: deprecate channel streaming SDK facade
* refactor: move direct dm helpers into inbound SDK
* chore: mark legacy test-utils SDK alias deprecated
* refactor: remove unused allow-from read helper
* refactor: route remaining channel dispatch through core
* refactor: enforce modern extension SDK imports
* test: give slow image root tests more time
* ci: support node fallback on windows
* fix: add transcripts tool display metadata
* refactor: trim legacy channel test seams
* fix: preserve channel compat after rebase
* fix: keep deprecated channel inbound aliases
* fix: preserve discord thread context visibility
* fix: clean final rebase conflicts
* fix: preserve channel message dispatch aliases
* fix: sync channel refactor after rebase
* fix: sync channel refactor after latest main
* fix: dedupe memory-core subagent mock
* test: align clickclack inbound dispatch assertions
* fix: sync plugin sdk api hash after rebase
* fix: sync channel refactor after latest main
* fix: sync plugin sdk api hash after rebase
* fix: sync plugin sdk api hash after latest main
* test: remove stale inbound context awaits
2026-05-27 09:26:06 +01:00
5371b96af1
fix: prefer trusted argv runtime fallback roots
2026-05-27 05:46:51 +01:00
e71b6f7e57
fix: expand startup argv runtime fallback hints
2026-05-27 05:46:51 +01:00
2b9be22c0b
fix: keep plugin runtime fallback on startup root
2026-05-27 05:46:51 +01:00
66a8262028
Fix runtime fallback startup argv default
2026-05-27 05:46:51 +01:00
41fa603aa8
Fix plugin runtime module resolution diagnostics
2026-05-27 05:46:51 +01:00
a37ebb2d49
fix(browser): bypass managed proxy for loopback CDP
...
Keep browser CDP managed-proxy bypasses on the private bundled-plugin SSRF helper, strip WebSocket URL credentials before registering exact bypass URLs, and document the managed-browser loopback proxy behavior.
Co-authored-by: Matthew Kern <matthew@matthewkern.xyz >
2026-05-23 23:53:27 +01:00
fd2a9adbe6
fix(ollama): bypass managed proxy for loopback embeddings ( #85707 )
...
* fix(ollama): bypass proxy for local embeddings
* fix(ollama): keep managed proxy bypass loopback-only
* fix(ollama): keep proxy bypass internal
* fix(ollama): keep proxy bypass private
* fix(ollama): harden internal proxy bypass
* chore(plugin-sdk): refresh api baseline
* fix(ollama): keep internal bypass out of qa aliases
* test(ollama): keep ssrf runtime mock complete
* fix(ollama): keep dist sdk aliases public-only
* fix(ollama): keep fetch bypass out of infra runtime
* fix(ollama): preserve packaged private sdk alias
* test(ollama): harden private ssrf alias coverage
* test(ollama): cover private ssrf resolver edges
* fix(ollama): scope private sdk native aliases
* test(ollama): audit blocked loopback bypasses
* fix(plugins): keep staged sdk aliases public-only
* test(ollama): harden proxy bypass proof
* test(ollama): cover origin mismatch proxy path
* test(ollama): cover ipv6 and batch bypass paths
* fix lint findings in Ollama proxy tests
* refactor: tighten Ollama proxy bypass
* fix: widen private sdk owner registry type
* test: stabilize Ollama proxy PR checks
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-23 21:17:55 +01:00
f9d35dc681
fix(codex): deliver native subagent completions
...
Deliver Codex-native subagent completions through the generic plugin harness task runtime.
Proof:
- Autoreview clean on final branch.
- Testbox changed gate: tbx_01ks80eqs7d2e3jq3p99zbm4wd, pnpm check:changed, exit 0.
- Live Codex harness: tbx_01ks80p4ky32sqv2ksan2p0w0q, codex/gpt-5.5 API-key auth, native parent/child bridge tokens observed, exit 0.
Co-authored-by: bryanpearson <bryanmpearson@gmail.com >
2026-05-22 15:28:46 +01:00
8a406528b4
fix(codex): project user MCP servers into app-server threads
...
Fixes #80814 .
Co-authored-by: kinjitakabe <273844887+kinjitakabe@users.noreply.github.com >
2026-05-13 20:07:10 +01:00
3688c47f1f
Trust installed Codex for its private task runtime ( #81206 )
...
* fix(codex): trust installed codex task runtime
* fix(codex): keep private runtime alias packaged
2026-05-12 20:04:45 -07:00
8c75ed3eaa
Mirror Codex native subagents into task registry ( #79512 )
...
Merged via squash.
Prepared head SHA: 75bc96ad74mbelinky@users.noreply.github.com >
Co-authored-by: marianobelinky <63976030+marianobelinky@users.noreply.github.com >
Reviewed-by: @pashpashpash
2026-05-11 20:52:41 +02:00
71a4c29d51
test: tighten sdk alias runtime assertion
2026-05-09 04:06:16 +01:00
f9814cc7de
test: tighten sdk alias missing-subpath assertion
2026-05-09 01:27:24 +01:00
19f948af2e
fix(plugins): gate package test api aliases
2026-05-03 21:40:32 -07:00
dadf0005ec
fix(plugins): alias bundled public surfaces in source loaders
2026-05-03 21:29:55 -07:00
23fd8a90f9
refactor: simplify plugin module loading
2026-05-02 01:41:09 +01:00
c4a4c189f1
fix: enable native require fast path on Windows for bundled plugins ( #74173 )
...
Removes the win32 exclusion from supportsNativeJitiRuntime() and adds { allowWindows: true } to all tryNativeRequireJavaScriptModule call sites, so bundled plugin modules use native require() instead of Jiti on Windows. Also adds an attempted-load counter to the debug timing log and a changelog entry.
Fixes #68656
Co-authored-by: Galin Iliev <galiniliev@users.noreply.github.com >
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-04-29 23:32:20 -07:00
412434a450
test(plugins): extend external install contract coverage
2026-04-29 02:48:58 -07:00
933c7968dc
fix(ci): stabilize full release validation lanes
2026-04-28 20:36:42 +01:00
e1acb61317
refactor: expose SDK test helper subpaths
2026-04-28 03:28:17 +01:00
f0000ab72d
refactor(plugin-sdk): split infra runtime barrel
2026-04-27 20:50:35 +01:00
b49d499b45
fix: stabilize native Windows onboarding
2026-04-25 21:41:47 +01:00
9e9aa4722a
fix(plugins): load mirrored runtime deps through ESM-safe aliases
2026-04-25 19:39:20 +01:00
c0cafb6bbe
perf(plugins): cache normalized jiti aliases
2026-04-22 21:02:29 +01:00
8d021ee7bf
perf(plugins): prefer native jiti for bundled plugin dist modules ( #69925 )
...
Merged via squash.
Prepared head SHA: 1b2da108651392295+aauren@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-21 22:18:35 -04:00
f76b426e2b
perf: reduce jiti loader alias work
2026-04-20 18:06:45 +01:00
099d4b50b6
docs: clarify alias map memoization rationale
2026-04-20 15:00:50 +01:00
53176153a2
test: cover alias map cache context
2026-04-20 15:00:50 +01:00
2b64f4bf4b
perf: memoize buildPluginLoaderAliasMap to enable jiti sentinel reuse
...
buildPluginLoaderAliasMap() creates a new alias object via spread on every
call. jiti's normalizeAliases() uses a reference-identity sentinel
(`if (e[pt]) return e`) to skip its O(N²) normalization work — but fresh
object refs defeat the sentinel, causing the full cycle to repeat on
every call.
This change caches alias maps by their inputs (modulePath, argv1,
moduleUrl, pluginSdkResolution) so identical parameters return the same
object reference. Subsequent jiti calls hit the sentinel fast-path
instead of re-running normalization.
Includes 5 new tests covering:
- reference identity for identical inputs
- cache isolation (different modulePath, pluginSdkResolution, argv1
each produce distinct objects)
- content equivalence between cached and freshly-computed results
Refs #68983 , #63948
2026-04-20 15:00:50 +01:00
d5933af80b
QA: fix private runtime source loading ( #67428 )
...
Merged via squash.
Prepared head SHA: b8bf2b6be65599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-15 21:59:16 -04:00
c727388f93
fix(plugins): localize bundled runtime deps to extensions ( #67099 )
...
* fix(plugins): localize bundled runtime deps to extensions
* fix(plugins): move staged runtime deps out of root
* fix(packaging): harden prepack and runtime dep staging
* fix(packaging): preserve optional runtime dep staging
* Update CHANGELOG.md
* fix(packaging): harden runtime staging filesystem writes
* fix(docker): ship preinstall warning in bootstrap layers
* fix(packaging): exclude staged plugin node_modules from npm pack
2026-04-15 12:04:31 +01:00
2aaa17dc6f
fix(ci): restore main typecheck
2026-04-14 18:53:14 +01:00
2cab81d9a7
fix(plugins): widen plugin-sdk source alias candidates
2026-04-14 18:07:40 +01:00
6821b8bfaa
fix(plugins): widen extension-api source alias candidates
2026-04-14 18:05:05 +01:00
df993291b6
refactor: share bundled loader Jiti config helpers
2026-04-07 14:13:16 +01:00
de3f742221
fix: centralize Windows bundled Jiti loader policy ( #62286 ) (thanks @chen-zhang-cs-code)
2026-04-07 13:08:07 +01:00
0bd0097557
refactor: add xai plugin-sdk boundary canary ( #61548 )
...
* docs: plan real plugin-sdk workspace rollout
* build: add xai plugin-sdk boundary canary
* build: generate plugin-sdk package types
* build: hide plugin-sdk core export
* build: alias scoped plugin-sdk runtime imports
* build: repair plugin-sdk boundary drift
* fix(plugins): remove duplicated plugin-sdk entrypoints
* test(plugins): make tsc boundary canary portable
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-04-06 14:13:11 +01:00
Peter Steinberger