惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Hugging Face - Blog
Hugging Face - Blog
Vercel News
Vercel News
C
Check Point Blog
G
Google Developers Blog
博客园 - 司徒正美
量子位
Engineering at Meta
Engineering at Meta
S
SegmentFault 最新的问题
Google DeepMind News
Google DeepMind News
F
Fortinet All Blogs
A
About on SuperTechFans
美团技术团队
D
DataBreaches.Net
Stack Overflow Blog
Stack Overflow Blog
Jina AI
Jina AI
Y
Y Combinator Blog
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Apple Machine Learning Research
Apple Machine Learning Research
J
Java Code Geeks
MongoDB | Blog
MongoDB | Blog
人人都是产品经理
人人都是产品经理
H
Hackread – Cybersecurity News, Data Breaches, AI and More
The Cloudflare Blog
U
Unit 42

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
refactor(sandbox): remove stale bridge helpers · openclaw...
vincentkoc · 2026-06-19 · via Recent Commits to openclaw:main

@@ -26,8 +26,6 @@ const dockerMocks = vi.hoisted(() => ({

2626

execDocker: vi.fn(),

2727

readDockerContainerEnvVar: vi.fn(),

2828

readDockerContainerLabel: vi.fn(),

29-

readDockerNetworkDriver: vi.fn(),

30-

readDockerNetworkGateway: vi.fn(),

3129

readDockerPort: vi.fn(),

3230

}));

3331

@@ -57,8 +55,6 @@ vi.mock("./docker.js", async () => {

5755

execDocker: dockerMocks.execDocker,

5856

readDockerContainerEnvVar: dockerMocks.readDockerContainerEnvVar,

5957

readDockerContainerLabel: dockerMocks.readDockerContainerLabel,

60-

readDockerNetworkDriver: dockerMocks.readDockerNetworkDriver,

61-

readDockerNetworkGateway: dockerMocks.readDockerNetworkGateway,

6258

readDockerPort: dockerMocks.readDockerPort,

6359

};

6460

});

@@ -213,8 +209,6 @@ describe("ensureSandboxBrowser create args", () => {

213209

dockerMocks.execDocker.mockClear();

214210

dockerMocks.readDockerContainerEnvVar.mockClear();

215211

dockerMocks.readDockerContainerLabel.mockClear();

216-

dockerMocks.readDockerNetworkDriver.mockClear();

217-

dockerMocks.readDockerNetworkGateway.mockClear();

218212

dockerMocks.readDockerPort.mockClear();

219213

registryMocks.readBrowserRegistry.mockClear();

220214

registryMocks.updateBrowserRegistry.mockClear();

@@ -230,8 +224,6 @@ describe("ensureSandboxBrowser create args", () => {

230224

});

231225

dockerMocks.readDockerContainerLabel.mockResolvedValue(null);

232226

dockerMocks.readDockerContainerEnvVar.mockResolvedValue(null);

233-

dockerMocks.readDockerNetworkDriver.mockResolvedValue("bridge");

234-

dockerMocks.readDockerNetworkGateway.mockResolvedValue("172.21.0.1");

235227

dockerMocks.readDockerPort.mockImplementation(async (_containerName: string, port: number) => {

236228

if (port === 9222) {

237229

return 49100;

@@ -653,8 +645,6 @@ describe("ensureSandboxBrowser create args", () => {

653645

});

654646655647

it("requires auth for the sandbox CDP relay without auto-derived source ranges", async () => {

656-

dockerMocks.readDockerNetworkGateway.mockResolvedValue("172.21.0.1");

657-658648

await ensureTestSandboxBrowser({

659649

scopeKey: "session:test",

660650

workspaceDir: "/tmp/workspace",

@@ -669,8 +659,6 @@ describe("ensureSandboxBrowser create args", () => {

669659

);

670660

expect(authEntry).toMatch(/^OPENCLAW_BROWSER_CDP_AUTH_TOKEN=[0-9a-f]{48}$/);

671661

expect(envEntries).not.toContain("OPENCLAW_BROWSER_CDP_SOURCE_RANGE=172.21.0.1/32");

672-

expect(dockerMocks.readDockerNetworkDriver).not.toHaveBeenCalled();

673-

expect(dockerMocks.readDockerNetworkGateway).not.toHaveBeenCalled();

674662675663

const token = requireValue(authEntry, "CDP auth env").slice(

676664

"OPENCLAW_BROWSER_CDP_AUTH_TOKEN=".length,

@@ -684,7 +672,6 @@ describe("ensureSandboxBrowser create args", () => {

684672

});

685673686674

it("passes explicit cdpSourceRange as an additional relay filter", async () => {

687-

dockerMocks.readDockerNetworkGateway.mockResolvedValue("172.21.0.1");

688675

const cfg = buildConfig(false);

689676

cfg.browser.cdpSourceRange = "10.0.0.0/24";

690677

@@ -698,7 +685,6 @@ describe("ensureSandboxBrowser create args", () => {

698685

const createArgs = findDockerArgsCall(dockerMocks.execDocker.mock.calls, "create");

699686

const envEntries = collectDockerFlagValues(createArgs ?? [], "-e");

700687

expect(envEntries).toContain("OPENCLAW_BROWSER_CDP_SOURCE_RANGE=10.0.0.0/24");

701-

expect(dockerMocks.readDockerNetworkGateway).not.toHaveBeenCalled();

702688

});

703689704690

it("recreates existing browser containers that do not expose relay auth", async () => {

@@ -720,7 +706,6 @@ describe("ensureSandboxBrowser create args", () => {

720706

});

721707722708

it("does not inject a source range for network=none by default", async () => {

723-

dockerMocks.readDockerNetworkGateway.mockResolvedValue(null);

724709

const cfg = buildConfig(false);

725710

cfg.browser.network = "none";

726711