"test:docker:openai-web-search-minimal": "bash scripts/e2e/openai-web-search-minimal-docker.sh",

"test:docker:openwebui": "bash scripts/e2e/openwebui-docker.sh",

"test:docker:pi-bundle-mcp-tools": "bash scripts/e2e/pi-bundle-mcp-tools-docker.sh",

"test:docker:plugin-binding-command-escape": "bash scripts/e2e/plugin-binding-command-escape-docker.sh",

"test:docker:plugin-lifecycle-matrix": "bash scripts/e2e/plugin-lifecycle-matrix-docker.sh",

"test:docker:plugin-update": "bash scripts/e2e/plugin-update-unchanged-docker.sh",

"test:docker:plugins": "bash scripts/e2e/plugins-docker.sh",

#!/usr/bin/env bash

# Verifies the plugin-owned conversation binding command escape regression in

# Docker. The focused Vitest cases assert that real authorized commands escape,

# while unknown or unauthorized slash text stays with the bound plugin.

set -euo pipefail

ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"

source "$ROOT_DIR/scripts/lib/docker-e2e-image.sh"

IMAGE_NAME="${OPENCLAW_PLUGIN_BINDING_COMMAND_ESCAPE_E2E_IMAGE:-openclaw-plugin-binding-command-escape-e2e}"

CONTAINER_NAME="openclaw-plugin-binding-command-escape-e2e-$$"

RUN_LOG="$(mktemp -t openclaw-plugin-binding-command-escape-log.XXXXXX)"

FOCUSED_TEST_REGEX="lets authorized plugin-owned binding commands fall through to command processing|keeps authorized unknown slash text in a plugin-owned binding routed to the bound plugin|keeps unauthorized plugin-owned binding slash text routed to the bound plugin"

cleanup() {

docker rm -f "$CONTAINER_NAME" >/dev/null 2>&1 || true

rm -f "$RUN_LOG"

}

trap cleanup EXIT

docker_e2e_build_or_reuse \

"$IMAGE_NAME" \

plugin-binding-command-escape \

"$ROOT_DIR/scripts/e2e/plugin-binding-command-escape.Dockerfile" \

"$ROOT_DIR"

echo "Running plugin binding command escape Docker E2E..."

set +e

docker run --rm \

--name "$CONTAINER_NAME" \

-e COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \

-e "FOCUSED_TEST_REGEX=$FOCUSED_TEST_REGEX" \

-e OPENCLAW_VITEST_FS_MODULE_CACHE_PATH=/tmp/openclaw-vitest-cache \

"$IMAGE_NAME" \

bash -lc 'set -euo pipefail; corepack enable; node scripts/run-vitest.mjs src/auto-reply/reply/dispatch-from-config.test.ts -- --reporter=verbose -t "$FOCUSED_TEST_REGEX"' \

>"$RUN_LOG" 2>&1

status=$?

set -e

if [ "$status" -ne 0 ]; then

echo "Docker plugin binding command escape smoke failed"

cat "$RUN_LOG"

exit "$status"

fi

echo "OK"

FROM node:24-bookworm-slim@sha256:e8e2e91b1378f83c5b2dd15f0247f34110e2fe895f6ca7719dbb780f929368eb

RUN apt-get update \

&& apt-get install -y --no-install-recommends ca-certificates git python3 \

&& rm -rf /var/lib/apt/lists/*

RUN corepack enable

WORKDIR /workspace/openclaw

COPY . .

RUN pnpm install --frozen-lockfile

CMD ["bash"]

"session-runtime-context",

"OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:session-runtime-context",

),

lane("plugin-binding-command-escape", "pnpm test:docker:plugin-binding-command-escape", {

e2eImageKind: false,

resources: ["npm"],

stateScenario: "empty",

}),

lane("commitments-safety", "OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:commitments-safety", {

stateScenario: "empty",

}),

"session-runtime-context",

"OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:session-runtime-context",

),

lane("plugin-binding-command-escape", "pnpm test:docker:plugin-binding-command-escape", {

e2eImageKind: false,

resources: ["npm"],

stateScenario: "empty",

}),

lane("commitments-safety", "OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:commitments-safety", {

stateScenario: "empty",

}),

expect(plan.needs.package).toBe(true);

});

it("plans the plugin binding command escape lane as source Docker proof", () => {

const plan = planFor({ selectedLaneNames: ["plugin-binding-command-escape"] });

expect(plan.lanes).toHaveLength(1);

const lane = requireFirstLane(plan);

expect(lane.command).toBe("pnpm test:docker:plugin-binding-command-escape");

expect(lane.imageKind).toBeUndefined();

expect(lane.live).toBe(false);

expect(lane.name).toBe("plugin-binding-command-escape");

expect(lane.resources).toEqual(["docker", "npm"]);

expect(lane.stateScenario).toBe("empty");

expect(plan.needs.e2eImage).toBe(false);

expect(plan.needs.package).toBe(false);

});

it("plans the live plugin tool lane as package-backed OpenAI proof", () => {

const plan = planFor({ selectedLaneNames: ["live-plugin-tool"] });