Commit Graph

4 Commits

Author SHA1 Message Date
sen 445f00f42e [packages/openclaw-plugin]refactor: remove before_prompt_build prompt injection
Rely on bundled SKILL.md for agent guidance instead of unconditionally
injecting system context via prependSystemContext on every prompt build.
2026-03-19 13:56:42 +08:00
sen 4af929dc1d [packages/openclaw-plugin]fix: handle bracketed IPv6 in SSRF guard
URL.hostname wraps IPv6 addresses in brackets (e.g. [fd00::1]),
which bypassed the regex-based private IP check. Strip brackets
before matching.

Addresses: PR #213 Codex review comment
2026-03-17 16:18:50 +08:00
sen c30acf7f0e [packages/openclaw-plugin]fix: SSRF protection, consistent error handling, and test coverage
- Add private IP / localhost / non-http protocol validation in resolveApiUrl
- Unify error handling via formatToolError using isActionbookError from SDK
- Wrap register() in try-catch to prevent crashing the host on bad config
- Add 28 new tests covering tool execution, SSRF, proxy bypass, and error paths
2026-03-17 16:17:32 +08:00
sen c4d4a3ae69 feat(openclaw-plugin): add native OpenClaw plugin support 2026-03-17 16:17:32 +08:00