惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

MyScale Blog
MyScale Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Google DeepMind News
Google DeepMind News
C
Cisco Blogs
量子位
WordPress大学
WordPress大学
C
CXSECURITY Database RSS Feed - CXSecurity.com
The Hacker News
The Hacker News
C
Comments on: Blog
Blog — PlanetScale
Blog — PlanetScale
PCI Perspectives
PCI Perspectives
Martin Fowler
Martin Fowler
云风的 BLOG
云风的 BLOG
博客园 - 司徒正美
D
DataBreaches.Net
T
The Exploit Database - CXSecurity.com
有赞技术团队
有赞技术团队
Hugging Face - Blog
Hugging Face - Blog
Simon Willison's Weblog
Simon Willison's Weblog
Stack Overflow Blog
Stack Overflow Blog
月光博客
月光博客
T
Troy Hunt's Blog
L
Lohrmann on Cybersecurity
L
LangChain Blog
Security Latest
Security Latest
A
Arctic Wolf
博客园 - Franky
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
C
Check Point Blog
V
Vulnerabilities – Threatpost
博客园 - 聂微东
SecWiki News
SecWiki News
H
Hackread – Cybersecurity News, Data Breaches, AI and More
I
Intezer
腾讯CDC
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
N
News and Events Feed by Topic
E
Exploit-DB.com RSS Feed
Recent Commits to openclaw:main
Recent Commits to openclaw:main
Engineering at Meta
Engineering at Meta
Microsoft Security Blog
Microsoft Security Blog
Google DeepMind News
Google DeepMind News
Spread Privacy
Spread Privacy
Recorded Future
Recorded Future
C
CERT Recently Published Vulnerability Notes
Last Week in AI
Last Week in AI
大猫的无限游戏
大猫的无限游戏
V
Visual Studio Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
小众软件
小众软件

Recent Commits to openclaw:main

ci(testbox): expose stable pnpm through corepack · openclaw/openclaw@3e14f54 ci(testbox): avoid ready raw runners after hydration failure perf(gateway): defer startup-idle runtime work · openclaw/openclaw@f1226ae ci: harden beta release validation flakes · openclaw/openclaw@391f29b test: type codex thread request mocks · openclaw/openclaw@86a0502 test: avoid codex heartbeat lifecycle timeout · openclaw/openclaw@85664f8 fix(scripts): run Windows check commands through shims · openclaw/openclaw@8a94e82 fix: aggressively prune retired model catalogs fix: harden package URL downloads (#85578) ci: retry npm Telegram release dispatch test: isolate Telegram spooled timeout from stall watchdog · openclaw/openclaw@a04566d fix(exec-approvals): add .catch() to expiry delivery fire-and-forget … fix(memory-core): avoid double bulleting promoted snippets (#85724) · openclaw/openclaw@983a3b9 fix(doctor): skip empty entries and memoize routes in plugin session … ci: avoid duplicate release-check auth headers · openclaw/openclaw@6191750 fix: prune retired model catalog entries ci: authenticate release-check reachability fetches · openclaw/openclaw@0c192e2 docs(changelog): note Telegram attachment action fix · openclaw/openclaw@c5f1344 fix(telegram): send attachment paths as media · openclaw/openclaw@fdf01db refactor(telegram): simplify action media sends · openclaw/openclaw@0540025 fix(doctor): canonicalize git checkout detection (#85735) test(ci): update plugin prerelease checkout expectation ci: persist checkout credentials for release validation test(codex): avoid searchable-tool registration flake · openclaw/openclaw@5e8c71b refactor: simplify doctor repair checks (#83753) docs(changelog): credit landed bug sweep PRs · openclaw/openclaw@24de304 perf(utils): preserve message identity in stripInlineDirectiveTagsFro… · openclaw/openclaw@bf84b30 fix(agents): add openai-responses family to non-visible turn retry gu… · openclaw/openclaw@49e9c3e fix(status): show configured cost for aws-sdk models (#85619) · openclaw/openclaw@6e289b4 fix(microsoft-foundry): DeepSeek V4 models incorrectly use openai-com… · openclaw/openclaw@ec43acb fix(skills): show empty state notice in config wizard (#85032) · openclaw/openclaw@74e65f4 test(codex): avoid forced-tool allowlist flake · openclaw/openclaw@ef7e652 fix: avoid gateway startup event-loop stalls test(codex): type forced-tool request mock · openclaw/openclaw@f6ab188 test(codex): avoid forced-tool turn flake · openclaw/openclaw@8d1ab83 test(codex): avoid startup cleanup socket flake fix(gateway): pin relative state dir at startup · openclaw/openclaw@2e5be0c fix(whatsapp): persist inbound delivery in plugin state (#85506) · openclaw/openclaw@b47bace test(codex): make sandbox cleanup proof deterministic fix(cron): route topic targets through channel plugins · openclaw/openclaw@9175491 fix(agents): simplify subagent completion handoff ci(release): isolate npm publish concurrency · openclaw/openclaw@9c26b87 ci(release): allow beta publish after npm preflight · openclaw/openclaw@0e37263 fix(release): allow large beta smoke run lists ci(release): retry child workflow polling · openclaw/openclaw@c689f71 ci(release): poll child workflows through actions api · openclaw/openclaw@e5dab55 fix(bootstrap): guard bootstrap name checks against undefined names (… · openclaw/openclaw@25fa46b fix(cli): waitForever must keep the event loop alive (#85694) · openclaw/openclaw@eca9645 fix(cli-output): ignore cumulative usage from result events in stream… · openclaw/openclaw@84229d9 fix(secrets): show irreversible warning after interactive apply confi… · openclaw/openclaw@bb52b54 fix(agents/harness): pass CLI runtime aliases through to PI in select… · openclaw/openclaw@2c3b7ea docs: add bug-sweep changelog entries fix(release): run npm shims on Windows · openclaw/openclaw@1f32a48 fix(ci): repair crabbox hydrate replay (#85706) · openclaw/openclaw@0d7d99b feat(auth): support named model login profiles fix(gateway): restore WebChat image understanding routing · openclaw/openclaw@55a0c9b fix(anthropic): migrate 1M context to GA handling fix(scripts): resolve Crabbox shims on Windows · openclaw/openclaw@5c535df test(ci): harden installer smoke coverage · openclaw/openclaw@68bcd4e fix(status): bound deep docker audit probes (#85476) · openclaw/openclaw@f7c05dc docs: expand meeting notes docs · openclaw/openclaw@a7e0fa0 fix(cli): validate tasks audit limit (#84901) · openclaw/openclaw@44d470f fix(twitch): preserve newer message handler during cleanup (#85425) · openclaw/openclaw@71ddc01 fix(ci): require live docker credentials by resource · openclaw/openclaw@1e21121 fix(diagnostics): drop snake case otel ids (#72645) · openclaw/openclaw@e0bafc5 fix(ci): clear signal and docs guard blockers (#85693) · openclaw/openclaw@3a1d4dd fix(ci): require factory auth for droid live docker · openclaw/openclaw@cc6c372 fix: honor disabled synthetic auth lookup · openclaw/openclaw@a4a1abb fix(scripts): repair live docker auth shellcheck · openclaw/openclaw@4e34ac4 fix(docker): avoid printing gateway token · openclaw/openclaw@5db773f fix(cli): keep logs follow on live gateway state · openclaw/openclaw@6e3b318 fix(e2e): prefer x64 MinGit on Windows · openclaw/openclaw@15d9134 feat: add meeting notes plugin docs: update changelog for memory artifacts (#85060) (thanks @brokema… · openclaw/openclaw@9e55383 fix(memory-lancedb): expose public memory artifacts · openclaw/openclaw@aac1abe fix(memory): preserve sidecar capability hooks · openclaw/openclaw@e6288ca fix(e2e): scrub Windows update config on PowerShell 5.1 · openclaw/openclaw@6657b49 docs: absorb documentation PR sweep · openclaw/openclaw@2c536a8 fix(agents): stabilize Linux fallback tests · openclaw/openclaw@6b04170 fix(codex): preserve native web search action metadata (#85378) · openclaw/openclaw@bcf756c test: refresh Codex prompt snapshots · openclaw/openclaw@492d656 docs: absorb hook and subagent guidance PRs fix(agents): audit tool policy blocks (#85673) · openclaw/openclaw@09dd051 ci: fix plugin npm bundled dependency install · openclaw/openclaw@d485464 feat(diagnostics): classify skill and tool usage (#80370) docs(skills): clarify control ui recording proof (#85568) · openclaw/openclaw@0b476b9 test(agents): repair main failure fixtures · openclaw/openclaw@c29967b feat(diagnostics): trace gateway secret preparation (#83019) · openclaw/openclaw@4f0c902 fix(diagnostics): harden observability exports and smokes (#85371) · openclaw/openclaw@7f05be0 fix(stepfun): drop stale auth choice metadata · openclaw/openclaw@0b2ab6c test(e2e): sample kitchen sink RSS on Windows · openclaw/openclaw@73c1e37 test(plugins): fail gauntlet on load diagnostics fix(build): preserve tsdown heap floor · openclaw/openclaw@9ff1a43 fix(tools): honor config apiKey in media tool preflight (#85570) · openclaw/openclaw@31c269f fix(e2e): support macOS script wrappers fix(ci): scope changed shrinkwrap checks · openclaw/openclaw@743fd4c chore(ui): refresh fa control ui locale chore(ui): refresh nl control ui locale · openclaw/openclaw@908464b chore(ui): refresh vi control ui locale · openclaw/openclaw@62b75f4 chore(ui): refresh th control ui locale · openclaw/openclaw@fc4ba31
ci: harden release package validation · openclaw/openclaw@41f4605
steipete · 2026-05-24 · via Recent Commits to openclaw:main

@@ -58,6 +58,7 @@ import {

5858

buildCodexPluginAppCacheKey,

5959

resolveCodexPluginAppCacheEndpoint,

6060

} from "./plugin-app-cache-key.js";

61+

import { buildCodexPluginThreadConfig } from "./plugin-thread-config.js";

6162

import type { CodexServerNotification } from "./protocol.js";

6263

import {

6364

readRecentCodexRateLimits,

@@ -569,6 +570,76 @@ function createCodexToolBridgeForTest(

569570

});

570571

}

571572573+

async function startThreadWithDisabledNativeSurfaceForTest(

574+

params: EmbeddedRunAttemptParams,

575+

options: {

576+

pluginConfig?: Record<string, unknown>;

577+

developerInstructions?: string;

578+

} = {},

579+

) {

580+

const workspaceDir = params.workspaceDir;

581+

if (!workspaceDir) {

582+

throw new Error("createParams must provide a workspaceDir for Codex thread tests.");

583+

}

584+

const sandboxSessionKey = params.sessionKey;

585+

if (!sandboxSessionKey) {

586+

throw new Error("createParams must provide a sessionKey for Codex dynamic tool tests.");

587+

}

588+

const nativeToolSurfaceEnabled = testing.shouldEnableCodexAppServerNativeToolSurface(params);

589+

const dynamicTools = await testing.buildDynamicTools({

590+

params,

591+

resolvedWorkspace: workspaceDir,

592+

effectiveWorkspace: workspaceDir,

593+

sandboxSessionKey,

594+

sandbox: { enabled: false, backendId: "docker" } as never,

595+

nativeToolSurfaceEnabled,

596+

runAbortController: new AbortController(),

597+

sessionAgentId: "main",

598+

pluginConfig: options.pluginConfig ?? {},

599+

onYieldDetected: () => undefined,

600+

});

601+

const request = vi.fn(async (method: string, _requestParams?: unknown) => {

602+

if (method === "thread/start") {

603+

return threadStartResult();

604+

}

605+

if (method === "app/list") {

606+

throw new Error("app/list should not run when runtime toolsAllow is empty.");

607+

}

608+

throw new Error(`unexpected method: ${method}`);

609+

});

610+

const pluginConfig = {

611+

...options.pluginConfig,

612+

codexPlugins: {

613+

...((options.pluginConfig?.codexPlugins as Record<string, unknown> | undefined) ?? {}),

614+

enabled: false,

615+

},

616+

};

617+618+

await startOrResumeThread({

619+

client: { request } as never,

620+

params,

621+

cwd: workspaceDir,

622+

dynamicTools: dynamicTools as never,

623+

appServer: createThreadLifecycleAppServerOptions(),

624+

developerInstructions: options.developerInstructions,

625+

nativeCodeModeEnabled: nativeToolSurfaceEnabled,

626+

nativeCodeModeOnlyEnabled: false,

627+

userMcpServersEnabled: false,

628+

environmentSelection: [],

629+

pluginThreadConfig: {

630+

enabled: true,

631+

build: () =>

632+

buildCodexPluginThreadConfig({

633+

pluginConfig,

634+

request: request as never,

635+

appCacheKey: "test-app-cache-key",

636+

}),

637+

},

638+

});

639+640+

return { request, nativeToolSurfaceEnabled };

641+

}

642+572643

function filterAllowedRuntimeToolNamesForTest(

573644

params: EmbeddedRunAttemptParams,

574645

tools: RuntimeDynamicToolForTest[],

@@ -2489,12 +2560,6 @@ describe("runCodexAppServerAttempt", () => {

24892560

createRuntimeDynamicTool("message"),

24902561

createRuntimeDynamicTool("web_search"),

24912562

]);

2492-

const harness = createStartedThreadHarness(async (method) => {

2493-

if (method === "app/list") {

2494-

throw new Error("app/list should not run when runtime toolsAllow is empty.");

2495-

}

2496-

return undefined;

2497-

});

24982563

const params = createParams(

24992564

path.join(tempDir, "session.jsonl"),

25002565

path.join(tempDir, "workspace"),

@@ -2504,26 +2569,27 @@ describe("runCodexAppServerAttempt", () => {

25042569

params.toolsAllow = [];

25052570

params.extraSystemPrompt = "Tool and file actions are disabled for this sender by chat policy.";

250625712507-

const run = runCodexAppServerAttempt(params, {

2508-

pluginConfig: {

2509-

appServer: { mode: "yolo" },

2510-

codexPlugins: {

2511-

enabled: true,

2512-

plugins: {

2513-

"google-calendar": {

2514-

marketplaceName: "openai-curated",

2515-

pluginName: "google-calendar",

2572+

const { request, nativeToolSurfaceEnabled } = await startThreadWithDisabledNativeSurfaceForTest(

2573+

params,

2574+

{

2575+

pluginConfig: {

2576+

appServer: { mode: "yolo" },

2577+

codexPlugins: {

2578+

enabled: true,

2579+

plugins: {

2580+

"google-calendar": {

2581+

marketplaceName: "openai-curated",

2582+

pluginName: "google-calendar",

2583+

},

25162584

},

25172585

},

25182586

},

2587+

developerInstructions: params.extraSystemPrompt,

25192588

},

2520-

});

2521-

await harness.waitForMethod("turn/start", 120_000);

2522-

await harness.completeTurn({ threadId: "thread-1", turnId: "turn-1" });

2523-

await run;

2589+

);

252425902525-

const startRequest = harness.requests.find((entry) => entry.method === "thread/start");

2526-

const startParams = startRequest?.params as

2591+

const startRequest = request.mock.calls.find(([method]) => method === "thread/start");

2592+

const startParams = startRequest?.[1] as

25272593

| {

25282594

dynamicTools?: Array<{ name?: string }>;

25292595

environments?: unknown[];

@@ -2539,6 +2605,7 @@ describe("runCodexAppServerAttempt", () => {

25392605

}

25402606

| undefined;

254126072608+

expect(nativeToolSurfaceEnabled).toBe(false);

25422609

expect(startParams?.dynamicTools).toEqual([]);

25432610

expect(startParams?.environments).toEqual([]);

25442611

expect(startParams?.developerInstructions).toContain(

@@ -2552,17 +2619,11 @@ describe("runCodexAppServerAttempt", () => {

25522619

open_world_enabled: false,

25532620

});

25542621

expect(startParams?.config?.apps?.["google-calendar-app"]?.enabled).toBeUndefined();

2555-

expect(harness.requests.map((entry) => entry.method)).not.toContain("app/list");

2622+

expect(request.mock.calls.map(([method]) => method)).not.toContain("app/list");

25562623

});

2557262425582625

it("fails closed for Codex app defaults when restricted native tools have no plugin config", async () => {

25592626

testing.setOpenClawCodingToolsFactoryForTests(() => [createRuntimeDynamicTool("message")]);

2560-

const harness = createStartedThreadHarness(async (method) => {

2561-

if (method === "app/list") {

2562-

throw new Error("app/list should not run when runtime toolsAllow is empty.");

2563-

}

2564-

return undefined;

2565-

});

25662627

const params = createParams(

25672628

path.join(tempDir, "session.jsonl"),

25682629

path.join(tempDir, "workspace"),

@@ -2571,15 +2632,12 @@ describe("runCodexAppServerAttempt", () => {

25712632

params.runtimePlan = createCodexRuntimePlanFixture();

25722633

params.toolsAllow = [];

257326342574-

const run = runCodexAppServerAttempt(params, {

2635+

const { request } = await startThreadWithDisabledNativeSurfaceForTest(params, {

25752636

pluginConfig: { appServer: { mode: "yolo" } },

25762637

});

2577-

await harness.waitForMethod("turn/start", 120_000);

2578-

await harness.completeTurn({ threadId: "thread-1", turnId: "turn-1" });

2579-

await run;

258026382581-

const startRequest = harness.requests.find((entry) => entry.method === "thread/start");

2582-

const startParams = startRequest?.params as

2639+

const startRequest = request.mock.calls.find(([method]) => method === "thread/start");

2640+

const startParams = startRequest?.[1] as

25832641

| {

25842642

config?: {

25852643

apps?: Record<

@@ -2595,7 +2653,7 @@ describe("runCodexAppServerAttempt", () => {

25952653

destructive_enabled: false,

25962654

open_world_enabled: false,

25972655

});

2598-

expect(harness.requests.map((entry) => entry.method)).not.toContain("app/list");

2656+

expect(request.mock.calls.map(([method]) => method)).not.toContain("app/list");

25992657

});

2600265826012659

it("returns a run context report without deferred Codex dynamic tool schemas", async () => {