Vincent Koc abd5ec98ab fix(runtime): harden dependency install surfaces (#71997) ...

* fix(runtime): harden dependency surfaces

* fix(runtime): harden dependency install surfaces

* fix(runtime): address dependency surface review

* fix(runtime): address dependency surface review

* fix(channels): avoid read-only plugin loader cycle

* fix(channels): allow optional read-only loader workspace

* test(commands): refresh current main checks

* test(commands): keep provider metadata mock unique

* test(commands): keep doctor security read-only mock unique

2026-04-26 01:38:21 -07:00

..

clawdock

…

dev

…

docker

fix(docker): disable bonjour by default for compose

2026-04-26 05:51:05 +01:00

docs-i18n

test: update QA parity fixtures for GPT-5.5

2026-04-25 18:05:28 +01:00

e2e

test: remove slow reply bypass from docker smoke

2026-04-26 08:19:23 +01:00

github

fix(github): exempt maintainers from barnacle candidate labels

2026-04-25 18:49:44 -07:00

k8s

…

lib

fix: keep host plugin registry out of live Docker state

2026-04-26 09:17:38 +01:00

podman

…

pr-lib

chore: tighten changelog unreleased detection

2026-04-24 21:52:00 -04:00

pre-commit

…

repro

…

systemd

…

test-planner

…

AGENTS.md

…

analyze-plugin-sdk-usage.ts

…

anthropic-prompt-probe.ts

…

audit-seams.mjs

…

auth-monitor.sh

…

bench-cli-startup.ts

…

bench-gateway-startup.ts

…

bench-model.ts

…

bench-test-changed.mjs

…

build_icon.sh

…

build-all.mjs

…

build-and-run-mac.sh

…

build-docs-list.mjs

…

build-stamp.d.mts

…

build-stamp.mjs

…

bundle-a2ui.mjs

…

bundle-a2ui.sh

…

canvas-a2ui-copy.ts

…

changed-lanes.mjs

test: narrow live Docker package script changes

2026-04-26 01:59:12 +01:00

changelog-add-unreleased.ts

…

changelog-to-html.sh

…

check-architecture-smells.mjs

test: speed up import-heavy tests

2026-04-25 11:04:16 +01:00

check-changed.mjs

test: narrow live Docker package script changes

2026-04-26 01:59:12 +01:00

check-channel-agnostic-boundaries.mjs

…

check-cli-startup-memory.mjs

…

check-codex-app-server-protocol.ts

feat(codex): add app-server protocol bridge

2026-04-24 04:24:08 +01:00

check-composite-action-input-interpolation.py

…

check-docs-i18n-glossary.mjs

…

check-docs-mdx.mjs

refactor: dedupe shared helpers

2026-04-24 08:26:37 +01:00

check-dynamic-import-warts.mjs

…

check-extension-package-tsc-boundary.mjs

…

check-extension-plugin-sdk-boundary.mjs

test: speed up import-heavy tests

2026-04-25 11:04:16 +01:00

check-file-utils.ts

…

check-gateway-watch-regression.mjs

…

check-import-cycles.ts

refactor: dedupe tooling helpers

2026-04-23 18:09:20 +01:00

check-ingress-agent-owner-context.mjs

…

check-live-cache.ts

…

check-madge-import-cycles.ts

refactor: dedupe tooling helpers

2026-04-23 18:09:20 +01:00

check-no-conflict-markers.mjs

…

check-no-extension-src-imports.ts

…

check-no-extension-test-core-imports.ts

…

check-no-monolithic-plugin-sdk-entry-imports.ts

…

check-no-pairing-store-group-auth.mjs

…

check-no-random-messaging-tmp.mjs

…

check-no-raw-channel-fetch.mjs

chore(ci): refresh raw fetch allowlist

2026-04-25 09:21:29 +05:30

check-no-raw-window-open.mjs

…

check-no-register-http-handler.mjs

…

check-no-runtime-action-load-config.mjs

…

check-pairing-account-scope.mjs

…

check-plugin-extension-import-boundary.mjs

…

check-plugin-sdk-exports.mjs

…

check-plugin-sdk-subpath-exports.mjs

…

check-release-metadata-only.mjs

…

check-sdk-package-extension-import-boundary.mjs

…

check-src-extension-import-boundary.mjs

…

check-temp-path-guardrails.ts

…

check-test-helper-extension-import-boundary.mjs

…

check-timed.mjs

…

check-ts-max-loc.ts

…

check-tsgo-core-boundary.mjs

…

check-web-fetch-provider-boundaries.mjs

perf: cache guard inventory checks

2026-04-25 10:02:02 +01:00

check-web-search-provider-boundaries.mjs

…

check-webhook-auth-body-order.mjs

…

check.mjs

…

ci-changed-scope.d.mts

ci: split install smoke fast path

2026-04-24 01:50:42 +01:00

ci-changed-scope.mjs

ci: keep fast fixture edits on narrow path

2026-04-25 06:22:57 +01:00

ci-hydrate-live-auth.sh

…

ci-run-timings.mjs

ci: split auto-reply shard timing

2026-04-25 23:47:00 +01:00

claude-auth-status.sh

…

CLAUDE.md

…

clawlog.sh

…

clawtributors-map.json

…

close-duplicate-prs-after-merge.mjs

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

codesign-mac-app.sh

fix(macos): sign mlx tts helper before app binary

2026-04-23 16:49:53 +01:00

codespell-dictionary.txt

…

codespell-ignore.txt

…

committer

…

control-ui-i18n.ts

test: update QA parity fixtures for GPT-5.5

2026-04-25 18:05:28 +01:00

copy-bundled-plugin-metadata.d.mts

…

copy-bundled-plugin-metadata.mjs

fix(telegram): persist accepted update offsets

2026-04-25 01:35:05 +01:00

copy-export-html-templates.ts

…

copy-hook-metadata.ts

…

copy-plugin-sdk-root-alias.mjs

…

create-dmg.sh

…

cron_usage_report.ts

…

debug-claude-usage.ts

…

docs-link-audit.d.mts

…

docs-link-audit.mjs

…

docs-list.js

…

docs-spellcheck.sh

…

docs-sync-publish.mjs

refactor: dedupe shared helpers

2026-04-24 08:26:37 +01:00

firecrawl-compare.ts

…

generate-base-config-schema.ts

…

generate-bundled-channel-config-metadata.ts

…

generate-bundled-provider-auth-env-vars.d.mts

…

generate-config-doc-baseline.ts

…

generate-host-env-security-policy-swift.mjs

…

generate-plugin-sdk-api-baseline.ts

…

generate-runtime-sidecar-paths-baseline.ts

…

generate-secretref-credential-matrix.ts

…

gh-read

…

gh-read.ts

…

ghsa-patch.mjs

…

install.ps1

fix(installer): preserve PowerShell host on failure

2026-04-26 07:23:48 +01:00

install.sh

fix(installer): fall back from stale nvm dir

2026-04-26 07:04:40 +01:00

ios-asc-keychain-setup.sh

…

ios-beta-archive.sh

…

ios-beta-prepare.sh

…

ios-beta-release.sh

…

ios-configure-signing.sh

…

ios-pin-version.ts

…

ios-sync-versioning.ts

…

ios-team-id.sh

…

ios-version.ts

…

ios-write-version-xcconfig.sh

…

label-open-issues.ts

…

live-docker-normalize-config.ts

…

load-channel-config-surface.ts

…

make_appcast.sh

…

mobile-reauth.sh

…

notarize-mac-artifact.sh

…

npm-runner.mjs

…

openclaw-cross-os-release-checks.ts

fix(release): reject staged runtime deps in packs

2026-04-26 09:08:54 +01:00

openclaw-npm-postpublish-verify.ts

fix(release): preserve plugin-local runtime deps in postpublish verify

2026-04-24 18:22:24 +01:00

openclaw-npm-publish.sh

…

openclaw-npm-release-check.ts

fix(memory): keep llama runtime optional (#71425)

2026-04-25 00:09:12 -07:00

openclaw-prepack.ts

…

package-mac-app.sh

…

package-mac-dist.sh

fix(macos): derive correction sparkle build

2026-04-23 16:49:53 +01:00

plugin-clawhub-publish.sh

…

plugin-clawhub-release-check.ts

…

plugin-clawhub-release-plan.ts

…

plugin-npm-publish.sh

…

plugin-npm-release-check.ts

…

plugin-npm-release-plan.ts

…

pnpm-runner.d.ts

…

pnpm-runner.mjs

fix: cover Windows pnpm and Lobster install regressions

2026-04-26 08:14:28 +01:00

postinstall-bundled-plugins.mjs

fix(update): ignore plugin install stages in dist verify

2026-04-26 07:28:02 +01:00

pr

…

pr-merge

…

pr-prepare

…

pr-review

…

preinstall-package-manager-warning.mjs

…

prepare-codex-ci-auth.ts

test(codex): cover app-server Docker flows

2026-04-24 04:24:08 +01:00

prepare-codex-ci-config.ts

…

prepare-extension-package-boundary-artifacts.mjs

fix(test): reuse heavy-check lock in boundary prep

2026-04-25 02:49:45 -07:00

prepush-ci.sh

…

print-cli-backend-live-metadata.ts

…

process-warning-filter.mjs

…

profile-extension-memory.mjs

…

profile-tsgo.mjs

…

protocol-gen-swift.ts

…

protocol-gen.ts

…

proxy-install-ca.mjs

…

qa-e2e.ts

…

qa-lab-up.ts

…

qa-otel-smoke.ts

feat(diagnostics): add harness lifecycle telemetry

2026-04-25 23:34:34 -07:00

readability-basic-compare.ts

…

recover-orphaned-processes.sh

…

release-check.ts

fix(release): reject staged runtime deps in packs

2026-04-26 09:08:54 +01:00

restart-mac.sh

…

root-dependency-ownership-audit.mjs

feat(plugins): move Bonjour discovery into bundled plugin

2026-04-23 23:29:51 -07:00

run-additional-boundary-checks.mjs

…

run-bundled-extension-oxlint.mjs

…

run-extension-channel-oxlint.mjs

…

run-node.d.mts

…

run-node.mjs

fix(google-meet): guide timeout recovery

2026-04-25 03:57:26 +01:00

run-openclaw-podman.sh

…

run-oxlint-shards.mjs

…

run-oxlint.mjs

fix(test): ignore local check opt-out in dev wrappers

2026-04-25 03:32:01 -07:00

run-tsgo.mjs

fix(test): ignore local check opt-out in dev wrappers

2026-04-25 03:32:01 -07:00

run-vitest-profile.mjs

…

run-vitest.mjs

fix(test): keep local Vitest checks serialized

2026-04-25 03:07:27 -07:00

runtime-postbuild-shared.mjs

…

runtime-postbuild.mjs

…

sandbox-browser-entrypoint.sh

…

sandbox-browser-setup.sh

…

sandbox-common-setup.sh

…

sandbox-setup.sh

…

sbom-risk-report.mjs

fix(deps): keep plugin ownership records live (#71331)

2026-04-24 19:15:12 -07:00

setup-auth-system.sh

…

sparkle-build.ts

…

sqlite-vec-smoke.mjs

…

stage-bundled-plugin-runtime-deps.mjs

fix(build): harden bundled plugin runtime staging

2026-04-25 04:27:17 -07:00

stage-bundled-plugin-runtime.d.mts

…

stage-bundled-plugin-runtime.mjs

fix(build): harden bundled plugin runtime staging

2026-04-25 04:27:17 -07:00

sync-codex-app-server-protocol.ts

feat(codex): add app-server protocol bridge

2026-04-24 04:24:08 +01:00

sync-labels.ts

…

sync-moonshot-docs.ts

…

sync-plugin-sdk-exports.mjs

…

sync-plugin-versions.ts

…

termux-auth-widget.sh

…

termux-quick-auth.sh

…

termux-sync-widget.sh

…

test-built-bundled-channel-entry-smoke.mjs

fix(discord): keep subagent hooks lazy in channel entry

2026-04-23 16:56:44 +01:00

test-built-bundled-runtime-deps.mjs

…

test-built-plugin-singleton.mjs

…

test-cleanup-docker.sh

…

test-cli-startup-bench-budget.mjs

…

test-docker-all.mjs

test: add Droid ACP bind Docker lane

2026-04-26 01:31:27 +01:00

test-docker-all.sh

…

test-extension-batch.mjs

…

test-extension.mjs

…

test-force.ts

…

test-group-report.mjs

…

test-hotspots.mjs

…

test-install-sh-docker.sh

ci: use latest stable install smoke baseline

2026-04-23 22:11:53 +01:00

test-install-sh-e2e-docker.sh

…

test-live-acp-bind-docker.sh

test: add Droid ACP bind Docker lane

2026-04-26 01:31:27 +01:00

test-live-build-docker.sh

…

test-live-cli-backend-docker.sh

test: speed up Docker live scheduling

2026-04-25 10:01:50 +01:00

test-live-codex-harness-docker.sh

test: cover codex app-server subagents

2026-04-26 03:46:30 +01:00

test-live-gateway-models-docker.sh

test: show live Docker profile mount

2026-04-25 04:57:20 +01:00

test-live-media.ts

…

test-live-models-docker.sh

test: show live Docker profile mount

2026-04-25 04:57:20 +01:00

test-live.mjs

…

test-perf-budget.mjs

…

test-projects.mjs

ci: split auto-reply shard timing

2026-04-25 23:47:00 +01:00

test-projects.test-support.d.mts

…

test-projects.test-support.mjs

fix: keep host plugin registry out of live Docker state

2026-04-26 09:17:38 +01:00

test-report-utils.mjs

…

test-shell-completion.ts

…

test-unit-fast-audit.mjs

…

test-update-cli-startup-bench.mjs

…

test-voicecall-closedloop.mjs

…

tool-display.ts

…

ts-topology.ts

…

tsconfig.json

…

tsdown-build.mjs

…

ui.js

fix: quote Windows UI runner paths

2026-04-26 08:31:00 +01:00

update-clawtributors.ts

…

update-clawtributors.types.ts

…

vitest-process-group.mjs

…

watch-node.d.mts

fix(runtime): harden dependency install surfaces (#71997)

2026-04-26 01:38:21 -07:00

watch-node.mjs

fix(runtime): harden dependency install surfaces (#71997)

2026-04-26 01:38:21 -07:00

windows-cmd-helpers.mjs

…

write-build-info.ts

…

write-cli-compat.ts

…

write-cli-startup-metadata.ts

perf(browser): precompute browser help

2026-04-25 13:07:15 +01:00

write-npm-update-compat-sidecars.ts

…

write-official-channel-catalog.d.mts

…

write-official-channel-catalog.mjs

…

write-package-dist-inventory.ts

…

write-plugin-sdk-entry-dts.ts

…

zai-fallback-repro.ts

…