mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-18 00:23:25 -06:00
Jesse Merhi
d7627d6f4c
* refactor(prompt): plain inbound context labels with a provenance marker
Replaces trust-worded inbound context labels ("(untrusted metadata)",
"(untrusted, for context)") with plain labels plus a fixed provenance
marker suffix appended to every OpenClaw-injected context header.
Detection keys on the marker, not label text, so strippers stay correct
across UI, TUI, replay, /trace segmentation, memory recall, and the Swift
chat preprocessor. Drops sanitizeInboundSystemTags in favor of the marker
boundary plus trusted system-prompt narration.
Renames the untrusted-named plugin SDK context identifiers to
channel-provenance names, keeping deprecated aliases registered for
removal after 2026-09-08.
Adds `openclaw doctor --fix` migrations that rewrite legacy inbound
labels in stored SQLite transcripts and purge legacy envelope-
contaminated LanceDB recall rows.
* fix(ci): resolve gate failures for plain inbound context labels
- doctor sqlite readers: open read-only connections via openNodeSqliteDatabase
so the Kysely connection-boundary guardrail holds; unexport the now-internal
transcript snapshot type (Knip unused-export gate).
- compat registry: split the record table into registry-records.ts and
plugin-sdk-subpath-records.ts. The new compat record pushed registry.ts past
the 700-line oxlint cap; suppressions are disallowed, so follow the existing
sibling record-module pattern. Public exports and PluginCompatCode literals
unchanged.
- acp-runtime test: assert current finalization behavior (newline normalization
only). The bracket de-fang and System: rewrite it expected were removed with
sanitizeInboundSystemTags; forged system lines are neutralized at the
system-event queue, the single chokepoint feeding the System:-per-line render.
- regenerate docs_map and the plugin SDK API baseline manifest.
* fix(prompt): harden inbound context label migration and drop in-band sanitizer
Review follow-ups on the plain-label + provenance-marker change:
- Remove src/security/system-tags.ts. Rewriting inbound text to neutralize
look-alike `System:`/`[System]` markers corrupted legitimate user text and is
not a real injection boundary; role separation plus external-content wrapping
is. Explicit product decision, recorded at the system-event queue.
- Narrow the LanceDB legacy-row purge so it cannot delete benign memories. It
now requires a complete known legacy sentinel line, a legacy label followed by
a fenced JSON body, or the complete legacy external-content header. The prior
predicates matched ordinary prose such as `Notes (untrusted metadata):`, and
deletion is irreversible.
- Make explicit-empty canonical ChannelStructuredContext win over the deprecated
alias via a present/absent result instead of collapsing `[]` to undefined.
- Keep `\r?` in the active-memory doctor rule. It is the only rule spanning the
header's line break, migrated assistant rows skip newline normalization, and
without it the marked-header replace wins and the body strips to empty. Added
a CRLF regression test.
- Fix stale comments that described removed behavior, and cover the Swift
prose-block strip path.
Claude-Session: https://claude.ai/code/session_01WNzsPddQmxy9Y7jKD4wAxH
35 lines
1.7 KiB
TypeScript
35 lines
1.7 KiB
TypeScript
// Runtime import barrel for node event handlers. Keeping these dependencies in
|
|
// one lazy boundary prevents gateway startup paths from loading every node-event
|
|
// helper before node traffic is actually handled.
|
|
export { resolveSessionAgentId } from "../agents/agent-scope.js";
|
|
export { normalizeChannelId } from "../channels/plugins/index.js";
|
|
export { sendDurableMessageBatch } from "../channels/message/runtime.js";
|
|
export { createOutboundSendDeps } from "../cli/outbound-send-deps.js";
|
|
export { agentCommandFromIngress } from "../commands/agent.js";
|
|
export { getRuntimeConfig } from "../config/io.js";
|
|
export { canonicalizeSessionEntryAliases } from "../config/sessions.js";
|
|
export { loadOrCreateProcessDeviceIdentity } from "../infra/device-identity.js";
|
|
export { requestHeartbeat } from "../infra/heartbeat-wake.js";
|
|
export { buildOutboundSessionContext } from "../infra/outbound/session-context.js";
|
|
export { resolveOutboundTarget } from "../infra/outbound/targets.js";
|
|
export {
|
|
ApnsRegistrationPairingChangedError,
|
|
registerApnsRegistration,
|
|
} from "../infra/push-apns.js";
|
|
export { enqueueSystemEvent } from "../infra/system-events.js";
|
|
export { deleteMediaBuffer } from "../media/store.js";
|
|
export { normalizeMainKey } from "../routing/session-key.js";
|
|
export { defaultRuntime } from "../runtime.js";
|
|
export {
|
|
parseMessageWithAttachments,
|
|
persistInboundImagesForTranscript,
|
|
resolveChatAttachmentMaxBytes,
|
|
} from "./chat-attachments.js";
|
|
export { normalizeRpcAttachmentsToChatAttachments } from "./server-methods/attachment-normalize.js";
|
|
export {
|
|
loadSessionEntry,
|
|
resolveGatewayModelSupportsImages,
|
|
resolveSessionModelRef,
|
|
} from "./session-utils.js";
|
|
export { formatForLog } from "./ws-log.js";
|