惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

C
Cisco Blogs
小众软件
小众软件
D
DataBreaches.Net
人人都是产品经理
人人都是产品经理
T
Troy Hunt's Blog
博客园_首页
博客园 - 司徒正美
雷峰网
雷峰网
腾讯CDC
P
Privacy International News Feed
T
Tailwind CSS Blog
大猫的无限游戏
大猫的无限游戏
Hugging Face - Blog
Hugging Face - Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
C
Check Point Blog
Scott Helme
Scott Helme
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
The Hacker News
The Hacker News
T
Tor Project blog
T
The Exploit Database - CXSecurity.com
K
Kaspersky official blog
S
SegmentFault 最新的问题
Know Your Adversary
Know Your Adversary
T
Threat Research - Cisco Blogs
Google DeepMind News
Google DeepMind News
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
V
Vulnerabilities – Threatpost
The Cloudflare Blog
S
Schneier on Security
阮一峰的网络日志
阮一峰的网络日志
NISL@THU
NISL@THU
Cyberwarzone
Cyberwarzone
G
Google Developers Blog
C
Cybersecurity and Infrastructure Security Agency CISA
M
MIT News - Artificial intelligence
博客园 - 叶小钗
AWS News Blog
AWS News Blog
L
Lohrmann on Cybersecurity
博客园 - 三生石上(FineUI控件)
Cisco Talos Blog
Cisco Talos Blog
A
Arctic Wolf
AI
AI
T
Threatpost
Project Zero
Project Zero
博客园 - Franky
WordPress大学
WordPress大学
罗磊的独立博客
U
Unit 42
I
InfoQ
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311 test: trim remaining hotspot tests · openclaw/openclaw@6ba8626 test: narrow hotspot mocks · openclaw/openclaw@dbc8179 test: isolate gemini embedding request helpers · openclaw/openclaw@cd330f5 test: trim memory and mcp hotspots · openclaw/openclaw@fd48dfa test: slim provider registry mocks · openclaw/openclaw@2e08c77 test: harden Parallels update smoke · openclaw/openclaw@1a98090 feat: default Anthropic to Opus 4.7 · openclaw/openclaw@628b454 fix: harden node-host shell payload mutability checks · openclaw/openclaw@75c551e fix: land node-host approval binding for native binaries (#66731) (th… · openclaw/openclaw@29919bb CI: add daily schedule to CodeQL workflow (#67645) · openclaw/openclaw@69d25f5 fix(gateway): capture config hash after plugin auto-enable to prevent… · openclaw/openclaw@8c11210 fix: repair sanitized replay tool results before send (#67620) (thank… · openclaw/openclaw@c3c7a99 fix: restrict HTML timeout short-circuit to transient statuses · openclaw/openclaw@de129a6 fix: keep TUI watchdog bound to active run (#67401) (thanks @xantorres) · openclaw/openclaw@3525273 Gateway/skills: dedupe skills prefix-match + drop dead fallback on log · openclaw/openclaw@d7f489f Extensions/lmstudio: back off inference preload after consecutive fai… · openclaw/openclaw@b555214 TUI/streaming: add watchdog that resets the activity indicator after … · openclaw/openclaw@f44ab20 Agents/tool-loop: enable unknown-tool stream guard by default · openclaw/openclaw@36ed367 Gateway/skills: invalidate session skills snapshot on config write · openclaw/openclaw@b23d59a fix: classify HTML provider error pages correctly (#67642) (thanks @s… · openclaw/openclaw@e588e90 fix(skills): remove unused model-usage import (#67641) · openclaw/openclaw@55f05df docs(changelog): credit codex fix superseded PRs · openclaw/openclaw@e485f24 fix(openai-codex): normalize stale transport metadata in resolution a… · openclaw/openclaw@90801ba CI: pin Docker-related GitHub Actions (#67632) · openclaw/openclaw@f697b01 Android: modernize WebView and discovery API usage (#67627) · openclaw/openclaw@44a6e50 fix(deps): bump hono to 4.12.14 and @hono/node-server to 1.19.14 (GHS… · openclaw/openclaw@fbccc18 fix(deps): bump dompurify to 3.4.0 (#67614) · openclaw/openclaw@2c2dc00 CI: add explicit permissions to all workflow jobs (fixes code-scannin… · openclaw/openclaw@01b7516 fix: register bundled TTS providers and route overrides correctly (#6… · openclaw/openclaw@6ea3cdd fix: align host tilde paths with OS home (#62804) (thanks @stainlu) · openclaw/openclaw@ecfaf64 fix: flush creds queue before reconnect socket open (#67464) (thanks … · openclaw/openclaw@405c63f fix: strip standalone <function> tool call tags from visible text (#6… · openclaw/openclaw@78df859 fix(agents): preserve cli session metadata before transcript persist … · openclaw/openclaw@898fd04 docs(changelog): move cli transcript entry · openclaw/openclaw@c1817c6 fix(agents): normalize cli transcript api field · openclaw/openclaw@3a3fae0 docs(changelog): note cli transcript persistence · openclaw/openclaw@6c343f1 fix(agents): persist cli transcript turns · openclaw/openclaw@b8ef507 fix(msteams): harden security-sensitive flows (#65841) · openclaw/openclaw@c56b56e [Dashboard] Fix exec approval modal overflow for long command content… · openclaw/openclaw@053c5b0 Docs: remove QA changelog entry · openclaw/openclaw@7fd5771 QA: fix private runtime source loading (#67428) · openclaw/openclaw@d5933af docs(gateway): correct protocol.md schema path, hello-ok example, aut… · openclaw/openclaw@489404d CI: pin Node 22 runners to 22.18.0 · openclaw/openclaw@4ffa621 models.authStatus: normalize provider ids + tighten env-backed escape… · openclaw/openclaw@f2fdb9d Update CHANGELOG.md · openclaw/openclaw@7694a92 test(parallels): clean up npm update guard jobs · openclaw/openclaw@045ea7b Plugins: prefer scanDir override paths · openclaw/openclaw@b2974da fix(dreaming): default storage.mode to "separate" so phase blocks sto… · openclaw/openclaw@8c392f0 fix(memory-core): skip dreaming transcript ingestion via session stor… · openclaw/openclaw@a1b01f0 fix: dedupe replayed exec.finished node events (#67281) · openclaw/openclaw@5dcf526
fix #90333: [Bug]: Discord image build aborts at step 66 — openclaw-b… · openclaw/openclaw@a1f18ef
zhangguiping · 2026-06-15 · via Recent Commits to openclaw:main

@@ -3,9 +3,9 @@ import fs from "node:fs";

33

import { isRecord } from "@openclaw/normalization-core/record-coerce";

44

import { uniqueStrings } from "@openclaw/normalization-core/string-normalization";

55

import { theme } from "../../packages/terminal-core/src/theme.js";

6-

import { collectChannelDoctorStaleConfigMutations } from "../commands/doctor/shared/channel-doctor.js";

76

import { assertConfigWriteAllowedInCurrentMode, readConfigFileSnapshot } from "../config/config.js";

87

import type { OpenClawConfig } from "../config/types.openclaw.js";

8+

import type { PluginInstallRecord } from "../config/types.plugins.js";

99

import { installHooksFromNpmSpec, installHooksFromPath } from "../hooks/install.js";

1010

import { resolveArchiveKind } from "../infra/archive.js";

1111

import { parseClawHubPluginSpec } from "../infra/clawhub.js";

@@ -22,6 +22,7 @@ import {

2222

installPluginFromNpmSpec,

2323

installPluginFromPath,

2424

} from "../plugins/install.js";

25+

import { loadInstalledPluginIndexInstallRecords } from "../plugins/installed-plugin-index-records.js";

2526

import {

2627

installPluginFromMarketplace,

2728

resolveMarketplaceInstallShortcut,

@@ -35,7 +36,7 @@ import {

3536

import { tracePluginLifecyclePhaseAsync } from "../plugins/plugin-lifecycle-trace.js";

3637

import { validateJsonSchemaValue } from "../plugins/schema-validator.js";

3738

import { defaultRuntime, type RuntimeEnv } from "../runtime.js";

38-

import { shortenHomePath } from "../utils.js";

39+

import { resolveUserPath, shortenHomePath } from "../utils.js";

3940

import { formatCliCommand } from "./command-format.js";

4041

import { looksLikeLocalInstallSpec } from "./install-spec.js";

4142

import { resolvePinnedNpmInstallRecordForCli } from "./npm-resolution.js";

@@ -493,6 +494,8 @@ function isTerminalPluginInstallFailure(code?: string): boolean {

493494

function isAllowedPluginRecoveryIssue(

494495

issue: { path?: string; message?: string },

495496

request: PluginInstallRequestContext,

497+

installRecords: Record<string, PluginInstallRecord>,

498+

env: NodeJS.ProcessEnv = process.env,

496499

): boolean {

497500

const pluginId = request.bundledPluginId?.trim();

498501

if (!pluginId) {

@@ -503,10 +506,7 @@ function isAllowedPluginRecoveryIssue(

503506

issue.message === `unknown channel id: ${pluginId}`) ||

504507

(issue.path === "plugins.load.paths" &&

505508

typeof issue.message === "string" &&

506-

issue.message.includes("plugin path not found")) ||

507-

(issue.path === "plugins" &&

508-

typeof issue.message === "string" &&

509-

issue.message.includes("requires compiled runtime output")) ||

509+

isMissingPluginLoadPathForInstallRecord({ issue, installRecords, pluginId, env })) ||

510510

(issue.path === `plugins.entries.${pluginId}` &&

511511

typeof issue.message === "string" &&

512512

issue.message.includes("requires compiled runtime output")) ||

@@ -522,6 +522,166 @@ function buildInvalidPluginInstallConfigError(message: string): Error {

522522

return error;

523523

}

524524525+

function hasConfigInclude(value: unknown): boolean {

526+

if (Array.isArray(value)) {

527+

return value.some((child) => hasConfigInclude(child));

528+

}

529+

if (!isRecord(value)) {

530+

return false;

531+

}

532+

if (Object.hasOwn(value, "$include")) {

533+

return true;

534+

}

535+

return Object.values(value).some((child) => hasConfigInclude(child));

536+

}

537+538+

const ENV_VAR_REFERENCE_RE = /\$\{[A-Z_][A-Z0-9_]*\}/;

539+540+

function extractMissingPluginLoadPath(issue: { path?: string; message?: string }): string | null {

541+

if (issue.path !== "plugins.load.paths" || typeof issue.message !== "string") {

542+

return null;

543+

}

544+

const marker = "plugin path not found:";

545+

const markerIndex = issue.message.indexOf(marker);

546+

if (markerIndex < 0) {

547+

return null;

548+

}

549+

const value = issue.message.slice(markerIndex + marker.length).trim();

550+

return value || null;

551+

}

552+553+

function resolvePluginInstallRecordPaths(params: {

554+

installRecords: Record<string, PluginInstallRecord>;

555+

pluginId: string;

556+

env: NodeJS.ProcessEnv;

557+

}): Set<string> {

558+

const install = params.installRecords[params.pluginId];

559+

const paths = new Set<string>();

560+

for (const value of [install?.installPath, install?.sourcePath]) {

561+

if (typeof value === "string" && value.trim()) {

562+

paths.add(resolveUserPath(value, params.env));

563+

}

564+

}

565+

return paths;

566+

}

567+568+

function isMissingPluginLoadPathForInstallRecord(params: {

569+

issue: { path?: string; message?: string };

570+

installRecords: Record<string, PluginInstallRecord>;

571+

pluginId: string;

572+

env: NodeJS.ProcessEnv;

573+

}): boolean {

574+

const missingPath = extractMissingPluginLoadPath(params.issue);

575+

if (!missingPath) {

576+

return false;

577+

}

578+

return resolvePluginInstallRecordPaths(params).has(resolveUserPath(missingPath, params.env));

579+

}

580+581+

function readPluginLoadPathEntries(cfg: unknown): unknown[] | undefined {

582+

if (!isRecord(cfg) || !isRecord(cfg.plugins) || !isRecord(cfg.plugins.load)) {

583+

return undefined;

584+

}

585+

const paths = cfg.plugins.load.paths;

586+

return Array.isArray(paths) ? paths : undefined;

587+

}

588+589+

function arrayHasEnvRef(value: unknown): boolean {

590+

return (

591+

Array.isArray(value) &&

592+

value.some((entry) => typeof entry === "string" && ENV_VAR_REFERENCE_RE.test(entry))

593+

);

594+

}

595+596+

function hasAuthoredPluginPolicyEnvRefs(params: {

597+

authoredConfig: unknown;

598+

resolvedConfig: OpenClawConfig;

599+

pluginId: string;

600+

}): boolean {

601+

if (!isRecord(params.authoredConfig) || !isRecord(params.authoredConfig.plugins)) {

602+

return false;

603+

}

604+

const resolvedPlugins = params.resolvedConfig.plugins;

605+

const allowWillChange =

606+

Array.isArray(resolvedPlugins?.allow) &&

607+

resolvedPlugins.allow.length > 0 &&

608+

!resolvedPlugins.allow.includes(params.pluginId);

609+

if (allowWillChange && arrayHasEnvRef(params.authoredConfig.plugins.allow)) {

610+

return true;

611+

}

612+

const denyWillChange =

613+

Array.isArray(resolvedPlugins?.deny) && resolvedPlugins.deny.includes(params.pluginId);

614+

return denyWillChange && arrayHasEnvRef(params.authoredConfig.plugins.deny);

615+

}

616+617+

function wouldMoveAuthoredEnvPluginLoadPath(params: {

618+

cfg: OpenClawConfig;

619+

issues: readonly { path?: string; message?: string }[];

620+

authoredConfig: unknown;

621+

env: NodeJS.ProcessEnv;

622+

}): boolean {

623+

const missingPaths = new Set(

624+

params.issues

625+

.map(extractMissingPluginLoadPath)

626+

.filter((value): value is string => Boolean(value))

627+

.map((value) => resolveUserPath(value, params.env)),

628+

);

629+

const paths = params.cfg.plugins?.load?.paths;

630+

const authoredPaths = readPluginLoadPathEntries(params.authoredConfig);

631+

if (missingPaths.size === 0 || !Array.isArray(paths) || !Array.isArray(authoredPaths)) {

632+

return false;

633+

}

634+

let removedBefore = false;

635+

for (const [index, entry] of paths.entries()) {

636+

if (typeof entry === "string" && missingPaths.has(resolveUserPath(entry, params.env))) {

637+

removedBefore = true;

638+

continue;

639+

}

640+

const authoredEntry = authoredPaths[index];

641+

if (

642+

removedBefore &&

643+

typeof authoredEntry === "string" &&

644+

ENV_VAR_REFERENCE_RE.test(authoredEntry)

645+

) {

646+

return true;

647+

}

648+

}

649+

return false;

650+

}

651+652+

function removeMissingPluginLoadPaths(

653+

cfg: OpenClawConfig,

654+

issues: readonly { path?: string; message?: string }[],

655+

env: NodeJS.ProcessEnv = process.env,

656+

): OpenClawConfig {

657+

const missingPaths = new Set(

658+

issues

659+

.map(extractMissingPluginLoadPath)

660+

.filter((value): value is string => Boolean(value))

661+

.map((value) => resolveUserPath(value, env)),

662+

);

663+

const paths = cfg.plugins?.load?.paths;

664+

if (missingPaths.size === 0 || !Array.isArray(paths)) {

665+

return cfg;

666+

}

667+

const nextPaths = paths.filter(

668+

(entry) => typeof entry !== "string" || !missingPaths.has(resolveUserPath(entry, env)),

669+

);

670+

if (nextPaths.length === paths.length) {

671+

return cfg;

672+

}

673+

return {

674+

...cfg,

675+

plugins: {

676+

...cfg.plugins,

677+

load: {

678+

...cfg.plugins?.load,

679+

paths: nextPaths,

680+

},

681+

},

682+

};

683+

}

684+525685

async function loadConfigFromSnapshotForInstall(

526686

request: PluginInstallRequestContext,

527687

snapshot: Awaited<ReturnType<typeof readConfigFileSnapshot>>,

@@ -537,22 +697,56 @@ async function loadConfigFromSnapshotForInstall(

537697

"Config file could not be parsed; run `openclaw doctor` to repair it.",

538698

);

539699

}

700+

const pluginId = request.bundledPluginId?.trim() ?? "";

701+

const pluginLabel = pluginId || "the requested plugin";

702+

if (hasConfigInclude(snapshot.parsed)) {

703+

throw buildInvalidPluginInstallConfigError(

704+

`Config invalid outside the plugin recovery path for ${pluginLabel}; run \`openclaw doctor --fix\` before reinstalling it.`,

705+

);

706+

}

707+

if (

708+

hasAuthoredPluginPolicyEnvRefs({

709+

authoredConfig: snapshot.parsed,

710+

resolvedConfig: snapshot.config,

711+

pluginId,

712+

})

713+

) {

714+

throw buildInvalidPluginInstallConfigError(

715+

`Config invalid outside the plugin recovery path for ${pluginLabel}; run \`openclaw doctor --fix\` before reinstalling it.`,

716+

);

717+

}

718+

const persistedInstallRecords = await tracePluginLifecyclePhaseAsync(

719+

"install records load",

720+

() => loadInstalledPluginIndexInstallRecords(),

721+

{ command: "install" },

722+

);

723+

const installRecords = {

724+

...snapshot.config.plugins?.installs,

725+

...persistedInstallRecords,

726+

};

540727

if (

541728

snapshot.legacyIssues.length > 0 ||

542729

snapshot.issues.length === 0 ||

543-

snapshot.issues.some((issue) => !isAllowedPluginRecoveryIssue(issue, request))

730+

snapshot.issues.some((issue) => !isAllowedPluginRecoveryIssue(issue, request, installRecords))

544731

) {

545-

const pluginLabel = request.bundledPluginId ?? "the requested plugin";

546732

throw buildInvalidPluginInstallConfigError(

547733

`Config invalid outside the plugin recovery path for ${pluginLabel}; run \`openclaw doctor --fix\` before reinstalling it.`,

548734

);

549735

}

550736

let nextConfig = snapshot.config;

551-

for (const mutation of await collectChannelDoctorStaleConfigMutations(snapshot.config, {

552-

env: process.env,

553-

})) {

554-

nextConfig = mutation.config;

737+

if (

738+

wouldMoveAuthoredEnvPluginLoadPath({

739+

cfg: nextConfig,

740+

issues: snapshot.issues,

741+

authoredConfig: snapshot.parsed,

742+

env: process.env,

743+

})

744+

) {

745+

throw buildInvalidPluginInstallConfigError(

746+

`Config invalid outside the plugin recovery path for ${pluginLabel}; run \`openclaw doctor --fix\` before reinstalling it.`,

747+

);

555748

}

749+

nextConfig = removeMissingPluginLoadPaths(nextConfig, snapshot.issues, process.env);

556750

return {

557751

config: nextConfig,

558752

baseHash: snapshot.hash,