Jacob Tomlinson 8deb9522f3 Guard marketplace and Ollama network requests (#57850) ...

* Plugins: guard marketplace and Ollama fetches

* Ollama: pin guarded host allowlist

2026-03-30 20:08:38 +01:00

..

capability-runtime-vitest-shims

Tests: shim config runtime for capability contracts

2026-03-28 20:02:28 -04:00

contracts

fix: stabilize bundled plugin ci lanes

2026-03-30 05:35:53 +09:00

runtime

Runtime: dedupe typing lease logic

2026-03-30 00:58:04 -04:00

test-helpers

…

AGENTS.md

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

api-builder.ts

refactor: centralize plugin API assembly

2026-03-28 05:24:25 +00:00

build-smoke-entry.ts

…

bundle-claude-inspect.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-commands.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-commands.ts

…

bundle-config-shared.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

bundle-lsp.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

bundle-manifest.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-manifest.ts

refactor: share boundary open and gateway test helpers

2026-03-23 00:37:05 +00:00

bundle-mcp.test-support.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-mcp.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundle-mcp.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

bundled-capability-metadata.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-capability-runtime.ts

Tests: shim config runtime for capability contracts

2026-03-28 20:02:28 -04:00

bundled-compat.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

bundled-dir.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundled-dir.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-plugin-metadata.test.ts

fix: stabilize serial test suite

2026-03-30 04:46:04 +09:00

bundled-plugin-metadata.ts

refactor: finish decoupling plugin sdk seams

2026-03-29 22:42:06 +01:00

bundled-plugin-naming.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundled-provider-auth-env-vars.generated.ts

refactor: pluginize litellm auth onboarding

2026-03-27 12:26:01 +00:00

bundled-provider-auth-env-vars.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

bundled-provider-auth-env-vars.ts

…

bundled-sources.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-sources.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

bundled-web-search-ids.ts

refactor: derive bundled contracts from extension manifests

2026-03-27 01:45:52 +00:00

bundled-web-search-provider-ids.ts

fix: clean bundled contract metadata follow-ups

2026-03-27 01:45:53 +00:00

bundled-web-search-registry.ts

style: normalize import order and formatting

2026-03-29 16:33:22 +09:00

bundled-web-search.test.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

bundled-web-search.ts

refactor: route bundled capability providers through plugin runtime

2026-03-27 16:39:41 +00:00

cache-controls.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

capability-provider-runtime.test.ts

fix(plugins): preserve active capability providers

2026-03-28 15:46:24 +05:30

capability-provider-runtime.ts

fix(plugins): preserve active capability providers

2026-03-28 15:46:24 +05:30

captured-registration.test.ts

refactor: centralize plugin API assembly

2026-03-28 05:24:25 +00:00

captured-registration.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

channel-plugin-ids.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

channel-plugin-ids.ts

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

CLAUDE.md

Docs: add boundary AGENTS guides (#56647)

2026-03-28 20:22:03 -04:00

clawhub.test.ts

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

clawhub.ts

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

cli-backends.runtime.ts

feat: pluginize cli inference backends

2026-03-26 15:11:15 +00:00

cli.browser-plugin.integration.test.ts

fix(ci): stabilize browser bundled integration tests

2026-03-28 08:34:18 +00:00

cli.test.ts

Plugins: align CLI metadata loader behavior

2026-03-29 19:20:42 -04:00

cli.ts

Plugins: align CLI metadata loader behavior

2026-03-29 19:20:42 -04:00

command-registration.ts

…

command-registry-state.ts

chore: refresh plugin sdk api baseline

2026-03-24 18:49:51 +00:00

commands.test.ts

fix: stabilize gate and extension boundary checks

2026-03-30 02:37:36 +01:00

commands.ts

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

config-schema.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

config-schema.ts

refactor: deduplicate plugin config schemas

2026-03-27 02:53:08 +00:00

config-state.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

config-state.ts

refactor: move bundled plugin policy into manifests

2026-03-27 16:40:27 +00:00

conversation-binding.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

conversation-binding.ts

…

copy-bundled-plugin-metadata.test.ts

test: dedupe plugin bundle and discovery helpers

2026-03-28 03:06:27 +00:00

discovery.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

discovery.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

enable.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

enable.ts

…

generated-plugin-test-helpers.ts

refactor: dedupe test and runtime seams

2026-03-24 23:33:30 +00:00

hook-runner-global.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hook-runner-global.ts

refactor(plugins): make hook runner global lazy

2026-03-24 11:07:37 -07:00

hooks.before-agent-start.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.before-install.test.ts

refactor(plugins): centralize before_install context shaping

2026-03-29 12:35:01 -07:00

hooks.before-tool-call.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.model-override-wiring.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.phase-hooks.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.security.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

hooks.test-helpers.ts

fix(regression): preserve plugin identity in hook test helpers

2026-03-27 22:34:09 -05:00

hooks.ts

Agents: reuse shared subagent hook runner type

2026-03-29 20:06:05 -04:00

http-path.ts

…

http-registry.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

http-registry.ts

…

http-route-overlap.ts

…

install-policy-context.ts

refactor(plugins): centralize before_install context shaping

2026-03-29 12:35:01 -07:00

install-security-scan.runtime.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

install-security-scan.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

install.runtime.ts

plugins: enrich before_install policy context

2026-03-29 12:35:01 -07:00

install.test.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

install.ts

Plugins: block install when source scan fails (#57729)

2026-03-30 15:36:08 +01:00

installs.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

installs.ts

…

interactive-dispatch-adapters.ts

…

interactive.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

interactive.ts

refactor(plugins): make interactive state lazy

2026-03-24 11:29:20 -07:00

lazy-service-module.test.ts

test: dedupe plugin utility config suites

2026-03-28 04:02:13 +00:00

lazy-service-module.ts

refactor: finish browser compat untangle

2026-03-26 22:42:41 +00:00

loader.git-path-regression.test.ts

…

loader.test.ts

fix(plugins): keep snapshot hook loads isolated

2026-03-30 22:00:54 +05:30

loader.ts

fix: restore cli registry side-effect option

2026-03-30 18:10:08 +01:00

logger.test.ts

test: dedupe plugin command and runtime helpers

2026-03-28 03:06:27 +00:00

logger.ts

…

manifest-registry.test.ts

fix(matrix): resolve crypto bootstrap failure and multi-extension idHint warning (#53298)

2026-03-29 12:38:10 -04:00

manifest-registry.ts

fix(matrix): resolve crypto bootstrap failure and multi-extension idHint warning (#53298)

2026-03-29 12:38:10 -04:00

manifest.ts

refactor: derive channel metadata from plugin manifests

2026-03-28 17:17:10 +00:00

marketplace.test.ts

Guard marketplace and Ollama network requests (#57850)

2026-03-30 20:08:38 +01:00

marketplace.ts

Guard marketplace and Ollama network requests (#57850)

2026-03-30 20:08:38 +01:00

memory-embedding-providers.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

memory-embedding-providers.ts

fix(memory): share embedding providers across plugin runtime splits (#55945)

2026-03-27 21:40:19 +03:00

memory-runtime.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

memory-runtime.ts

Plugins: reuse shared bootstrap registry resolution

2026-03-28 00:19:33 -04:00

memory-state.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

memory-state.ts

Memory: fix QMD doctor contract typing

2026-03-30 00:54:41 -04:00

min-host-version.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

min-host-version.ts

…

path-safety.ts

…

pi-package-graph.test.ts

test: dedupe plugin lifecycle runtime suites

2026-03-28 04:28:54 +00:00

provider-api-key-auth.runtime.ts

…

provider-api-key-auth.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-choice-helpers.ts

…

provider-auth-choice-preference.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-choice.runtime.ts

…

provider-auth-choice.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-choices.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-auth-choices.ts

refactor: move bundled plugin policy into manifests

2026-03-27 16:40:27 +00:00

provider-auth-helpers.ts

fix(regression): merge aliased auth order provider keys

2026-03-27 22:31:07 -05:00

provider-auth-input.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-mode.ts

…

provider-auth-ref.ts

fix: restore provider auth and build checks

2026-03-27 20:20:31 +00:00

provider-auth-storage.ts

fix: restore green check after upstream API changes

2026-03-27 20:29:18 +00:00

provider-auth-token.ts

fix: slim provider sdk surfaces

2026-03-28 09:35:42 +00:00

provider-auth-types.ts

…

provider-catalog.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-catalog.ts

fix: normalize provider catalog config lookup

2026-03-27 21:03:53 -05:00

provider-discovery.runtime.ts

fix: keep provider discovery on mockable lazy runtime paths

2026-03-28 11:40:40 +00:00

provider-discovery.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-discovery.ts

fix: keep provider discovery on mockable lazy runtime paths

2026-03-28 11:40:40 +00:00

provider-model-allowlist.ts

fix(ci): stabilize bundled capability contract loading

2026-03-28 07:33:19 +00:00

provider-model-compat.ts

refactor(agents): generalize tool schema compat cleanup

2026-03-28 05:42:46 +00:00

provider-model-defaults.ts

refactor(plugins): finish provider and whatsapp cleanup

2026-03-22 19:13:25 -07:00

provider-model-helpers.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-model-helpers.ts

refactor(xai): move bundled xai runtime into plugin

2026-03-28 05:02:41 +00:00

provider-model-kilocode.ts

refactor(kilocode): route shared model constants through core seam

2026-03-22 19:43:19 -07:00

provider-model-primary.ts

…

provider-oauth-flow.ts

…

provider-onboarding-config.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-onboarding-config.ts

refactor: add provider onboarding preset appliers

2026-03-23 01:56:00 +00:00

provider-openai-codex-oauth-tls.ts

…

provider-openai-codex-oauth.ts

fix: ensure env proxy dispatcher before MiniMax and OpenAI Codex OAuth flows (openclaw#52228)

2026-03-23 09:26:34 -05:00

provider-runtime.runtime.ts

fix: restore provider runtime lazy boundary

2026-03-23 09:24:20 +00:00

provider-runtime.test-support.ts

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

provider-runtime.test.ts

refactor: generalize provider transport hooks

2026-03-29 23:05:58 +09:00

provider-runtime.ts

refactor: generalize provider transport hooks

2026-03-29 23:05:58 +09:00

provider-self-hosted-setup.ts

refactor: move provider seams behind plugin sdk surfaces

2026-03-27 23:26:26 +00:00

provider-thinking.ts

…

provider-validation.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-validation.ts

refactor: move oauth profile repair metadata into providers

2026-03-27 17:23:40 +00:00

provider-wizard.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

provider-wizard.ts

fix(provider-wizard): avoid hook-time model normalization

2026-03-28 14:46:12 +05:30

provider-zai-endpoint.ts

refactor: move provider model helpers into plugins

2026-03-27 20:20:31 +00:00

providers.runtime.ts

fix(ci): use process env for provider compat fallback

2026-03-28 08:10:47 +00:00

providers.test.ts

fix(ci): use process env for provider compat fallback

2026-03-28 08:10:47 +00:00

providers.ts

refactor: scope provider runtime to enabled provider plugins

2026-03-28 01:40:30 +00:00

public-artifacts.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

registry-empty.ts

refactor: add browser plugin runtime package

2026-03-26 22:20:39 +00:00

registry.ts

fix(plugins): keep snapshot hook loads isolated

2026-03-30 22:00:54 +05:30

roots.ts

…

runtime-live-state-guardrails.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

runtime-plugin-boundary.whatsapp.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

runtime.channel-pin.test.ts

fix(channels): use pinned channel registry for outbound adapter resolution

2026-03-29 12:54:14 +05:30

runtime.test.ts

feat(line): add outbound media support for image, video, and audio

2026-03-28 20:51:16 -05:00

runtime.ts

fix(plugins): preserve gateway-bindable registry reuse

2026-03-29 09:59:06 +05:30

schema-validator.test.ts

test: dedupe plugin bundle discovery suites

2026-03-28 06:04:50 +00:00

schema-validator.ts

fix(config): support uri formats in schema validation

2026-03-27 02:29:32 +00:00

sdk-alias.test.ts

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

sdk-alias.ts

plugins: disable native jiti loading under bun

2026-03-27 20:02:59 +00:00

services.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

services.ts

chore(plugins): remove opik investigation checkpoints

2026-03-23 01:21:19 -07:00

setup-binary.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

setup-browser.ts

refactor: share browser and sandbox helpers

2026-03-26 18:43:57 +00:00

signal-cli-install.ts

…

slots.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

slots.ts

…

source-display.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

source-display.ts

…

stage-bundled-plugin-runtime.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

status.test-helpers.ts

feat: pluginize cli inference backends

2026-03-26 15:11:15 +00:00

status.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

status.ts

fix(regression): align plugin inspect policy with auto-enabled config

2026-03-27 22:42:59 -05:00

toggle-config.ts

…

tools.optional.test.ts

test: reset plugin runtime state in optional tools tests

2026-03-29 08:52:12 +01:00

tools.ts

fix(plugins): preserve gateway-bindable registry reuse

2026-03-29 09:59:06 +05:30

types.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

uninstall.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

uninstall.ts

Plugins: clean up channel config on uninstall (#35915)

2026-03-27 17:28:38 -07:00

update.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

update.ts

…

web-search-providers.runtime.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

web-search-providers.runtime.ts

Plugins: share runtime registry resolution

2026-03-28 00:19:33 -04:00

web-search-providers.shared.ts

fix(regression): auto-enable web search provider loads

2026-03-27 23:00:49 -05:00

web-search-providers.test.ts

test: dedupe plugin provider runtime suites

2026-03-28 06:04:51 +00:00

web-search-providers.ts

…

wired-hooks-after-tool-call.e2e.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-compaction.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-gateway.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-inbound-claim.test.ts

fix(regression): preserve plugin identity in hook test helpers

2026-03-27 22:34:09 -05:00

wired-hooks-llm.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-message.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-session.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00

wired-hooks-subagent.test.ts

test: dedupe plugin hook runner suites

2026-03-28 03:30:25 +00:00