mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 17:53:39 +00:00
1f71c763ea
* chore(deps): refresh eligible seven-day npm dependencies * docs(plugins): align embedded TypeBox dependency pins * test(deps): align evidence and Escape ownership * fix(ci): repair native PID imports and cancellation assertions * test(ui): make effort Escape ownership explicit * fix(agents): keep error presentation on prepared policy * fix(agents): preserve loaded provider policy in error presentation * fix(agents): carry prepared provider owners into lifecycle errors Preserve endpoint-owned recovery guidance for custom provider routes in terminal events and callbacks. Reuse the prepared model handle and full-signal classifier, with a real Agent/AgentSession boundary regression. * fix(agents): reconcile explicit diagnostic ownership and structured errors Keep presentation on explicit prepared owners, preserve full assistant error facts ahead of generic request wrappers, and retain raw-schema diagnostics. Carry prepared owners into terminal observations and prove source/compiled scope boundaries. Complete the shared attempt fixture with the real model-handle getter. * fix(agents): carry full classified facts into safe failure copy Share explicit-owner assistant classification between direct formatting and the user-facing wrapper. Preserve structured codes, types and body evidence in safe provider/model/status copy, including message-less failures, while retaining raw-schema diagnostics and ownerless policy boundaries. * fix(ui): keep Home work context lazy and current Let the existing deferred assistant panel prepare page work context once, using the shell's validated route facts. Keep explicit agent ownership through global/main aliases and refresh the quoted reference when session, agent or Gateway snapshots change. Reuse the frozen refinement from PR #134059: 6e2a8f9550e6e6da957b0352fa674024f198118e. Add source-bound roster-refresh/send proof, extend the existing owner fixture for snapshot updates and cleanup, and regenerate the boot manifest for the pinned dependency graph. Startup gzip is 347243 B under the unchanged 347353 B gate. The UI repair removes two production lines net. * test(agents): align generation fixtures with prepared metadata Use the captured main generation-scope contract in lifecycle and source/compiled provider-owner fixtures. Remove its retired config input while preserving provider selection and empty-generation fencing. Integrate captured main10564e2with the Home context refinement from PR #134059 and the assistant dock cleanup from PR #134435. Preserve the existing contributor credit and canonical catalog owner already on main. The integrated candidate passes the normal full build, scoped checks, 679 original-order model cases, 400 backend owner cases, both catalog E2Es, 290 UI cases and 18 browser cases. Final grouped startup gzip is 347299 B under the unchanged 347353 B enforcement limit. * refactor(ui): keep submission projection in lazy chat owner Keep the app store responsible for bounded retained bytes and client lifetime. Move receipt adaptation and display retirement into the existing history projection owner, shared by both lazy chat consumers. Preserve missing-store behavior and the retained-prompt, attachment and reconnect contracts. Continue the retained-submission owner from PR #134059 (0f3e17e56b). Validation: 808 owner tests, 21 Chromium cases, grouped-bundle Home and retired-prompt proof, changed checks and fresh full-candidate autoreview. Startup gzip: 347588 -> 347320 bytes; unchanged limit 347353.
75 lines
2.7 KiB
Bash
Executable file
75 lines
2.7 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
|
|
set -euo pipefail
|
|
|
|
source_root="${1:?trusted Vercel CLI source root is required}"
|
|
destination="${2:?Vercel CLI destination is required}"
|
|
github_output="${3:-}"
|
|
|
|
package_json="${source_root}/package.json"
|
|
package_lock="${source_root}/package-lock.json"
|
|
expected_lock_sha256="95ca33fbfd0e0dd8527062f0c15f2e40508f4aa61eb7e28b4fa2bb82024e5d74"
|
|
expected_vercel_integrity="sha512-tQgKXmppJ/uoQZfX+HYAVIxWSUS6V6FMounEEpsHTUqlHyBI/aOATH9sKtkXXD1lQt/JsN4ocWymIGUPLRTxwA=="
|
|
test -f "${package_json}"
|
|
test -f "${package_lock}"
|
|
if [[ -e "${destination}" || -L "${destination}" ]]; then
|
|
echo "Vercel CLI destination must not already exist: ${destination}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
install -d -m 0700 "${destination}"
|
|
install -m 0600 "${package_json}" "${destination}/package.json"
|
|
install -m 0600 "${package_lock}" "${destination}/package-lock.json"
|
|
|
|
lock_sha256="$(
|
|
VERCEL_CLI_LOCK="${package_lock}" \
|
|
node -e "const { createHash } = require('node:crypto'); const { readFileSync } = require('node:fs'); process.stdout.write(createHash('sha256').update(readFileSync(process.env.VERCEL_CLI_LOCK)).digest('hex'));"
|
|
)"
|
|
[[ "${lock_sha256}" == "${expected_lock_sha256}" ]] || {
|
|
echo "Pinned Vercel CLI lock SHA-256 mismatch." >&2
|
|
exit 1
|
|
}
|
|
vercel_integrity="$(
|
|
VERCEL_CLI_LOCK="${package_lock}" \
|
|
node -p "require(require('node:path').resolve(process.env.VERCEL_CLI_LOCK)).packages['node_modules/vercel'].integrity"
|
|
)"
|
|
[[ "${vercel_integrity}" == "${expected_vercel_integrity}" ]] || {
|
|
echo "Pinned Vercel CLI integrity mismatch." >&2
|
|
exit 1
|
|
}
|
|
|
|
# Install with lifecycle scripts disabled before any credential is exposed to
|
|
# the CLI process. The committed lock fixes the complete dependency closure.
|
|
(
|
|
cd "${destination}"
|
|
npm ci \
|
|
--ignore-scripts \
|
|
--no-audit \
|
|
--no-fund \
|
|
--omit=dev
|
|
)
|
|
|
|
vercel_version="$(
|
|
VERCEL_CLI_ROOT="${destination}" \
|
|
node -p "require(require('node:path').join(process.env.VERCEL_CLI_ROOT, 'node_modules/vercel/package.json')).version"
|
|
)"
|
|
[[ "${vercel_version}" == "59.5.0" ]] || {
|
|
echo "Pinned Vercel CLI version mismatch: ${vercel_version}" >&2
|
|
exit 1
|
|
}
|
|
test -x "${destination}/node_modules/.bin/vercel"
|
|
vercel_cli="${destination}/node_modules/.bin/vercel"
|
|
# Use Sandbox directly: Vercel's sandbox wrapper overwrites failed remote exits.
|
|
test -x "${destination}/node_modules/.bin/sandbox"
|
|
sandbox_cli="${destination}/node_modules/.bin/sandbox"
|
|
|
|
echo "Materialized vercel@${vercel_version} from lock ${lock_sha256}."
|
|
if [[ -n "${github_output}" ]]; then
|
|
{
|
|
echo "cli=${vercel_cli}"
|
|
echo "sandbox_cli=${sandbox_cli}"
|
|
echo "integrity=${vercel_integrity}"
|
|
echo "lock_sha256=${lock_sha256}"
|
|
echo "version=${vercel_version}"
|
|
} >> "${github_output}"
|
|
fi
|