惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Hacker News: Ask HN
Hacker News: Ask HN
H
Help Net Security
Microsoft Azure Blog
Microsoft Azure Blog
B
Blog RSS Feed
Jina AI
Jina AI
Stack Overflow Blog
Stack Overflow Blog
量子位
博客园_首页
Vercel News
Vercel News
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
Forbes - Security
Forbes - Security
IT之家
IT之家
N
News and Events Feed by Topic
S
Security Affairs
Recent Commits to openclaw:main
Recent Commits to openclaw:main
Webroot Blog
Webroot Blog
Recorded Future
Recorded Future
L
LangChain Blog
Y
Y Combinator Blog
AI
AI
MyScale Blog
MyScale Blog
大猫的无限游戏
大猫的无限游戏
小众软件
小众软件
Know Your Adversary
Know Your Adversary
AWS News Blog
AWS News Blog
Help Net Security
Help Net Security
Cyberwarzone
Cyberwarzone
L
Lohrmann on Cybersecurity
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Google Online Security Blog
Google Online Security Blog
V2EX - 技术
V2EX - 技术
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
PCI Perspectives
PCI Perspectives
I
Intezer
T
Tenable Blog
G
Google Developers Blog
Application and Cybersecurity Blog
Application and Cybersecurity Blog
T
Troy Hunt's Blog
L
LINUX DO - 最新话题
云风的 BLOG
云风的 BLOG
C
CXSECURITY Database RSS Feed - CXSecurity.com
有赞技术团队
有赞技术团队
O
OpenAI News
P
Proofpoint News Feed
TaoSecurity Blog
TaoSecurity Blog
C
Check Point Blog
Last Week in AI
Last Week in AI
S
Schneier on Security
Simon Willison's Weblog
Simon Willison's Weblog
Blog — PlanetScale
Blog — PlanetScale

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311 test: trim remaining hotspot tests · openclaw/openclaw@6ba8626 test: narrow hotspot mocks · openclaw/openclaw@dbc8179 test: isolate gemini embedding request helpers · openclaw/openclaw@cd330f5 test: trim memory and mcp hotspots · openclaw/openclaw@fd48dfa test: slim provider registry mocks · openclaw/openclaw@2e08c77 test: harden Parallels update smoke · openclaw/openclaw@1a98090 feat: default Anthropic to Opus 4.7 · openclaw/openclaw@628b454 fix: harden node-host shell payload mutability checks · openclaw/openclaw@75c551e fix: land node-host approval binding for native binaries (#66731) (th… · openclaw/openclaw@29919bb CI: add daily schedule to CodeQL workflow (#67645) · openclaw/openclaw@69d25f5 fix(gateway): capture config hash after plugin auto-enable to prevent… · openclaw/openclaw@8c11210 fix: repair sanitized replay tool results before send (#67620) (thank… · openclaw/openclaw@c3c7a99 fix: restrict HTML timeout short-circuit to transient statuses · openclaw/openclaw@de129a6 fix: keep TUI watchdog bound to active run (#67401) (thanks @xantorres) · openclaw/openclaw@3525273 Gateway/skills: dedupe skills prefix-match + drop dead fallback on log · openclaw/openclaw@d7f489f Extensions/lmstudio: back off inference preload after consecutive fai… · openclaw/openclaw@b555214 TUI/streaming: add watchdog that resets the activity indicator after … · openclaw/openclaw@f44ab20 Agents/tool-loop: enable unknown-tool stream guard by default · openclaw/openclaw@36ed367 Gateway/skills: invalidate session skills snapshot on config write · openclaw/openclaw@b23d59a fix: classify HTML provider error pages correctly (#67642) (thanks @s… · openclaw/openclaw@e588e90 fix(skills): remove unused model-usage import (#67641) · openclaw/openclaw@55f05df docs(changelog): credit codex fix superseded PRs · openclaw/openclaw@e485f24 fix(openai-codex): normalize stale transport metadata in resolution a… · openclaw/openclaw@90801ba CI: pin Docker-related GitHub Actions (#67632) · openclaw/openclaw@f697b01 Android: modernize WebView and discovery API usage (#67627) · openclaw/openclaw@44a6e50 fix(deps): bump hono to 4.12.14 and @hono/node-server to 1.19.14 (GHS… · openclaw/openclaw@fbccc18 fix(deps): bump dompurify to 3.4.0 (#67614) · openclaw/openclaw@2c2dc00 CI: add explicit permissions to all workflow jobs (fixes code-scannin… · openclaw/openclaw@01b7516 fix: register bundled TTS providers and route overrides correctly (#6… · openclaw/openclaw@6ea3cdd fix: align host tilde paths with OS home (#62804) (thanks @stainlu) · openclaw/openclaw@ecfaf64 fix: flush creds queue before reconnect socket open (#67464) (thanks … · openclaw/openclaw@405c63f fix: strip standalone <function> tool call tags from visible text (#6… · openclaw/openclaw@78df859 fix(agents): preserve cli session metadata before transcript persist … · openclaw/openclaw@898fd04 docs(changelog): move cli transcript entry · openclaw/openclaw@c1817c6 fix(agents): normalize cli transcript api field · openclaw/openclaw@3a3fae0 docs(changelog): note cli transcript persistence · openclaw/openclaw@6c343f1 fix(agents): persist cli transcript turns · openclaw/openclaw@b8ef507 fix(msteams): harden security-sensitive flows (#65841) · openclaw/openclaw@c56b56e [Dashboard] Fix exec approval modal overflow for long command content… · openclaw/openclaw@053c5b0 Docs: remove QA changelog entry · openclaw/openclaw@7fd5771 QA: fix private runtime source loading (#67428) · openclaw/openclaw@d5933af docs(gateway): correct protocol.md schema path, hello-ok example, aut… · openclaw/openclaw@489404d CI: pin Node 22 runners to 22.18.0 · openclaw/openclaw@4ffa621 models.authStatus: normalize provider ids + tighten env-backed escape… · openclaw/openclaw@f2fdb9d Update CHANGELOG.md · openclaw/openclaw@7694a92 test(parallels): clean up npm update guard jobs · openclaw/openclaw@045ea7b Plugins: prefer scanDir override paths · openclaw/openclaw@b2974da fix(dreaming): default storage.mode to "separate" so phase blocks sto… · openclaw/openclaw@8c392f0 fix(memory-core): skip dreaming transcript ingestion via session stor… · openclaw/openclaw@a1b01f0 fix: dedupe replayed exec.finished node events (#67281) · openclaw/openclaw@5dcf526
refactor: split Crestodian planner backend selection · openclaw/openclaw@e27e29c
steipete · 2026-04-26 · via Recent Commits to openclaw:main

@@ -24,40 +24,47 @@ docsRefs:

2424

- docs/help/testing.md

2525

codeRefs:

2626

- src/crestodian/operations.ts

27+

- scripts/e2e/crestodian-first-run-spec.json

2728

- scripts/e2e/crestodian-first-run-docker-client.ts

2829

- extensions/qa-lab/src/suite-runtime-agent-process.ts

2930

execution:

3031

kind: flow

3132

summary: Drive the public Crestodian CLI in an isolated fresh state dir and verify setup/model/agent/Discord/audit results.

3233

config:

33-

stateDirName: crestodian-ring-zero-state

34-

defaultWorkspaceName: crestodian-main-workspace

35-

agentWorkspaceName: crestodian-reef-workspace

36-

agentId: reef

37-

model: openai/gpt-5.2

38-

discordEnv: DISCORD_BOT_TOKEN

39-

discordToken: openclaw-crestodian-qa-discord-token

34+

specPath: scripts/e2e/crestodian-first-run-spec.json

4035

```

41364237

```yaml qa-flow

4338

steps:

4439

- name: bootstraps config through Crestodian CLI

4540

actions:

41+

- set: setupSpec

42+

value:

43+

expr: "JSON.parse(await fs.readFile(path.join(env.repoRoot, config.specPath), 'utf8'))"

4644

- set: stateDir

4745

value:

48-

expr: "path.join(env.gateway.tempRoot, config.stateDirName)"

46+

expr: "path.join(env.gateway.tempRoot, setupSpec.stateDirName)"

4947

- set: configPath

5048

value:

5149

expr: "path.join(stateDir, 'openclaw.json')"

5250

- set: defaultWorkspace

5351

value:

54-

expr: "path.join(env.gateway.tempRoot, config.defaultWorkspaceName)"

52+

expr: "path.join(env.gateway.tempRoot, setupSpec.defaultWorkspaceName)"

5553

- set: agentWorkspace

5654

value:

57-

expr: "path.join(env.gateway.tempRoot, config.agentWorkspaceName)"

55+

expr: "path.join(env.gateway.tempRoot, setupSpec.agentWorkspaceName)"

56+

- set: commandVars

57+

value:

58+

expr: "({ defaultWorkspace, agentWorkspace, agentId: setupSpec.agentId, model: setupSpec.model, discordEnv: setupSpec.discordEnv })"

59+

- set: renderCommand

60+

value:

61+

lambda:

62+

params:

63+

- template

64+

expr: "String(template).replace(/\\{([A-Za-z0-9_]+)\\}/g, (match, key) => String(commandVars[key] ?? match))"

5865

- set: crestodianEnv

5966

value:

60-

expr: "({ OPENCLAW_STATE_DIR: stateDir, OPENCLAW_CONFIG_PATH: configPath, OPENCLAW_BUNDLED_PLUGINS_DIR: path.join(env.repoRoot, 'dist', 'extensions'), [config.discordEnv]: config.discordToken })"

67+

expr: "({ OPENCLAW_STATE_DIR: stateDir, OPENCLAW_CONFIG_PATH: configPath, OPENCLAW_BUNDLED_PLUGINS_DIR: path.join(env.repoRoot, 'dist', 'extensions'), [setupSpec.discordEnv]: setupSpec.discordToken })"

6168

- call: fs.rm

6269

args:

6370

- ref: stateDir

@@ -85,141 +92,39 @@ steps:

8592

expr: 'String(overviewOutput).includes(''Next: run "setup" to create a starter config'')'

8693

message:

8794

expr: "`fresh Crestodian overview did not recommend setup: ${overviewOutput}`"

88-

- call: runQaCli

89-

saveAs: setupOutput

90-

args:

91-

- ref: env

92-

- - crestodian

93-

- --yes

94-

- -m

95-

- expr: "`setup workspace ${defaultWorkspace} model ${config.model}`"

96-

- timeoutMs: 60000

97-

env:

98-

ref: crestodianEnv

99-

- assert:

100-

expr: "String(setupOutput).includes('[crestodian] done: crestodian.setup')"

101-

message:

102-

expr: "`Crestodian setup did not apply: ${setupOutput}`"

103-

- call: runQaCli

104-

saveAs: modelOutput

105-

args:

106-

- ref: env

107-

- - crestodian

108-

- --yes

109-

- -m

110-

- expr: "`set default model ${config.model}`"

111-

- timeoutMs: 60000

112-

env:

113-

ref: crestodianEnv

114-

- assert:

115-

expr: "String(modelOutput).includes('[crestodian] done: config.setDefaultModel')"

116-

message:

117-

expr: "`Crestodian model update did not apply: ${modelOutput}`"

118-

- call: runQaCli

119-

saveAs: agentOutput

120-

args:

121-

- ref: env

122-

- - crestodian

123-

- --yes

124-

- -m

125-

- expr: "`create agent ${config.agentId} workspace ${agentWorkspace} model ${config.model}`"

126-

- timeoutMs: 60000

127-

env:

128-

ref: crestodianEnv

129-

- assert:

130-

expr: "String(agentOutput).includes('[crestodian] done: agents.create')"

131-

message:

132-

expr: "`Crestodian agent creation did not apply: ${agentOutput}`"

133-

- call: runQaCli

134-

saveAs: discordPluginAllowOutput

135-

args:

136-

- ref: env

137-

- - crestodian

138-

- --yes

139-

- -m

140-

- config set plugins.allow ["discord"]

141-

- timeoutMs: 60000

142-

env:

143-

ref: crestodianEnv

144-

- assert:

145-

expr: "String(discordPluginAllowOutput).includes('[crestodian] done: config.set')"

146-

message:

147-

expr: "`Crestodian Discord plugin allowlist did not apply: ${discordPluginAllowOutput}`"

148-

- call: runQaCli

149-

saveAs: discordPluginEntryOutput

150-

args:

151-

- ref: env

152-

- - crestodian

153-

- --yes

154-

- -m

155-

- config set plugins.entries.discord.enabled true

156-

- timeoutMs: 60000

157-

env:

158-

ref: crestodianEnv

159-

- assert:

160-

expr: "String(discordPluginEntryOutput).includes('[crestodian] done: config.set')"

161-

message:

162-

expr: "`Crestodian Discord plugin entry did not apply: ${discordPluginEntryOutput}`"

163-

- call: runQaCli

164-

saveAs: discordTokenOutput

165-

args:

166-

- ref: env

167-

- - crestodian

168-

- --yes

169-

- -m

170-

- expr: "`config set-ref channels.discord.token env ${config.discordEnv}`"

171-

- timeoutMs: 60000

172-

env:

173-

ref: crestodianEnv

174-

- assert:

175-

expr: "String(discordTokenOutput).includes('[crestodian] done: config.setRef')"

176-

message:

177-

expr: "`Crestodian Discord SecretRef did not apply: ${discordTokenOutput}`"

178-

- call: runQaCli

179-

saveAs: discordEnabledOutput

180-

args:

181-

- ref: env

182-

- - crestodian

183-

- --yes

184-

- -m

185-

- config set channels.discord.enabled true

186-

- timeoutMs: 60000

187-

env:

188-

ref: crestodianEnv

189-

- assert:

190-

expr: "String(discordEnabledOutput).includes('[crestodian] done: config.set')"

191-

message:

192-

expr: "`Crestodian Discord enable did not apply: ${discordEnabledOutput}`"

193-

- call: runQaCli

194-

saveAs: validationOutput

195-

args:

196-

- ref: env

197-

- - crestodian

198-

- -m

199-

- validate config

200-

- timeoutMs: 60000

201-

env:

202-

ref: crestodianEnv

203-

- assert:

204-

expr: "String(validationOutput).includes('Config valid:')"

205-

message:

206-

expr: "`Crestodian config validation did not pass: ${validationOutput}`"

95+

- forEach:

96+

items:

97+

ref: setupSpec.commands

98+

item: commandStep

99+

actions:

100+

- call: runQaCli

101+

saveAs: commandOutput

102+

args:

103+

- ref: env

104+

- expr: "['crestodian', ...(commandStep.approve ? ['--yes'] : []), '-m', renderCommand(commandStep.message)]"

105+

- timeoutMs: 60000

106+

env:

107+

ref: crestodianEnv

108+

- assert:

109+

expr: "String(commandOutput).includes(commandStep.expectOutput)"

110+

message:

111+

expr: "`Crestodian command ${commandStep.id} did not produce ${commandStep.expectOutput}: ${commandOutput}`"

207112

- set: writtenConfig

208113

value:

209114

expr: "JSON.parse(await fs.readFile(configPath, 'utf8'))"

210115

- set: agent

211116

value:

212-

expr: "writtenConfig.agents?.list?.find((candidate) => candidate.id === config.agentId)"

117+

expr: "writtenConfig.agents?.list?.find((candidate) => candidate.id === setupSpec.agentId)"

213118

- assert:

214119

expr: "writtenConfig.agents?.defaults?.workspace === defaultWorkspace"

215120

message:

216121

expr: "`default workspace mismatch: ${JSON.stringify(writtenConfig.agents?.defaults)}`"

217122

- assert:

218-

expr: "writtenConfig.agents?.defaults?.model?.primary === config.model"

123+

expr: "writtenConfig.agents?.defaults?.model?.primary === setupSpec.model"

219124

message:

220125

expr: "`default model mismatch: ${JSON.stringify(writtenConfig.agents?.defaults?.model)}`"

221126

- assert:

222-

expr: "agent?.workspace === agentWorkspace && agent?.model === config.model"

127+

expr: "agent?.workspace === agentWorkspace && agent?.model === setupSpec.model"

223128

message:

224129

expr: "`agent config mismatch: ${JSON.stringify(agent)}`"

225130

- assert:

@@ -231,22 +136,18 @@ steps:

231136

message:

232137

expr: "`Discord was not enabled: ${JSON.stringify(writtenConfig.channels?.discord)}`"

233138

- assert:

234-

expr: "writtenConfig.channels?.discord?.token?.source === 'env' && writtenConfig.channels?.discord?.token?.id === config.discordEnv"

139+

expr: "writtenConfig.channels?.discord?.token?.source === 'env' && writtenConfig.channels?.discord?.token?.id === setupSpec.discordEnv"

235140

message:

236141

expr: "`Discord token was not an env SecretRef: ${JSON.stringify(writtenConfig.channels?.discord?.token)}`"

237142

- assert:

238-

expr: "!JSON.stringify(writtenConfig.channels?.discord ?? {}).includes(config.discordToken)"

143+

expr: "!JSON.stringify(writtenConfig.channels?.discord ?? {}).includes(setupSpec.discordToken)"

239144

message: Crestodian persisted the raw Discord token.

240145

- set: auditText

241146

value:

242147

expr: "await fs.readFile(path.join(stateDir, 'audit', 'crestodian.jsonl'), 'utf8')"

243148

- forEach:

244149

items:

245-

- crestodian.setup

246-

- config.setDefaultModel

247-

- agents.create

248-

- config.setRef

249-

- config.set

150+

ref: setupSpec.auditOperations

250151

item: operation

251152

actions:

252153

- assert: