mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 09:39:25 +00:00
5c3d2ee897
* fix(plugins): install npm-sourced plugins on Bun-only hosts Bun-only installs have no Node, so every npm-sourced plugin operation that spawned `npm` failed. OpenClaw's managed plugin roots rely on npm's lockfile, peer planner, and lock-based rollback, so keep npm's semantics and run a pinned npm CLI under Bun instead of switching package managers. - Add npm 11.20.0 as an exact dependency (npm 12.1.0 fails the managed peer planner under both Bun and Node). - One owner, resolveNpmCommand(), serves all plugin install, update, uninstall, peer-planning, prune, and npm-config call sites: Node keeps `npm` unchanged; Bun runs `<bun> <bundled npm-cli.js>`. - npm's bundled minimatch/brace-expansion/ip-address sit below the workspace security floors and cannot be overridden; a maintainer-approved exception is bound to npm@11.20.0's exact bundle, and the npm lock mirror verifies those members against the pnpm-locked npm tarball. * refactor(plugins): keep npm fund suppression out of the shared spawn helper Keep managed Bun npm installs quiet through their existing --no-fund arguments and safe install environment. Leave the shared process helper unchanged from main to reduce PR #160224 CI fanout. * fix(plugins): keep the bundled npm lookup error private |
||
|---|---|---|
| .. | ||
| .generated | ||
| .i18n | ||
| announcements | ||
| assets | ||
| automation | ||
| channels | ||
| ci | ||
| cli | ||
| concepts | ||
| diagnostics | ||
| gateway | ||
| help | ||
| images | ||
| install | ||
| maturity | ||
| nodes | ||
| platforms | ||
| plugins | ||
| providers | ||
| reference | ||
| releases | ||
| security | ||
| snippets/plugin-publish | ||
| specs | ||
| start | ||
| tools | ||
| web | ||
| agent-runtime-architecture.md | ||
| AGENTS.md | ||
| auth-credential-semantics.md | ||
| ci.md | ||
| date-time.md | ||
| docs.json | ||
| docs_map.md | ||
| index.md | ||
| logging.md | ||
| network.md | ||
| openclaw-agent-runtime.md | ||
| prose.md | ||
| vps.md | ||
| whatsapp-openclaw.jpg | ||
