Feat/sec core/update rpm#6

Open

yangdao479 wants to merge 238 commits into

mainfrom

feat/sec-core/update_rpm

Commits on May 11, 2026

fix(sight): mask payload_len for BPF verifier on older kernels

chengshuyi
authored and
Daydreamer-Li
committed

Commits on May 12, 2026

ci(sec-core): add python code style check

yangdao479
authored and
edonyzpc
committed
chore(sec-core): add AGENTS.md for sec-core

yangdao479
authored and
edonyzpc
committed
fix(sec-core): fix reviewer comments

yangdao479
authored and
edonyzpc
committed
fix(sec-core): detect unsigned skill files

1570005763
authored and
edonyzpc
committed
fix(sec-core): align skill signing paths

1570005763
authored and
edonyzpc
committed
feat(sight): add uid field to SLS logs with OnceLock cache and startup validation

chengshuyi
authored and
Daydreamer-Li
committed
fix(sight): handle Node.js process.title change in OpenClaw matcher

chengshuyi
authored and
Daydreamer-Li
committed
feat(cosh): expose run_id in HookInput for per-run event correlation

kongche-jbw
authored and
samchu-zsl
committed

Commits on May 13, 2026

fix(sight): adapt skill extraction for Hermes agent architecture

Daydreamer-Li
authored and
chengshuyi
committed
fix(sec-core): limit skill-ledger hook scope

1570005763
authored and
edonyzpc
committed
fix(tokenless): add activation onCapabilities hook for openclaw plugin compatibility

shiloong
authored and
Forrest-ly
committed
chore(tokenless): bump to v0.3.1

shiloong
authored and
Forrest-ly
committed
feat(sight): add tls sni module

chengshuyi
authored and
Daydreamer-Li
committed
feat(sight): refactor discovery to config-driven rules, add SNI probe support

authored and
Daydreamer-Li
committed
feat(sight): replace TLS SNI probe with UDP DNS probe for agent discovery

chengshuyi
authored and
Daydreamer-Li
committed
fix(sight): resolve BPF verifier -E2BIG by removing nested #pragma unroll in udpdns.bpf.c

chengshuyi
authored and
Daydreamer-Li
committed
refactor(sight): move DNS QNAME parsing from BPF to userspace to resolve -E2BIG

chengshuyi
authored and
Daydreamer-Li
committed
docs(sight): reorganize integration-tests with DNS test cases and templates

chengshuyi
authored and
Daydreamer-Li
committed
docs(sight): update c-ffi-api doc replacing SNI with DNS, add example and integration test

chengshuyi
authored and
Daydreamer-Li
committed
feat(sec-core): integrate code-scanner with skill-ledger
1570005763
committed
feat(sec-core): add cisco static skill scanner

1570005763
authored and
edonyzpc
committed
fix(tokenless): redesign tool-ready for 4-category spec model and fix env-check bugs

shiloong
authored and
samchu-zsl
committed
fix(tokenless): use official CLI for openclaw plugin and fix RPM install/uninstall

shiloong
authored and
samchu-zsl
committed
fix(tokenless): add schema migration for before_output/after_output columns

shiloong
authored and
samchu-zsl
committed
chore(tokenless): bump to v0.3.2

shiloong
authored and
samchu-zsl
committed

Commits on May 14, 2026

feat(sec-core): add security observability metrics for agent runs

RemindD
authored and
edonyzpc
committed
feat(sec-core): security observability CLI and jsonl writer

RemindD
authored and
edonyzpc
committed
feat(sec-core): openclaw plugin for security observability

RemindD
authored and
edonyzpc
committed
fix(tokenless): correct 5 bugs in stats, naming, SQL, paths and permissions

shiloong
authored and
Forrest-ly
committed
fix(skill-ledger): use managed skill dirs for discovery

1570005763
authored and
edonyzpc
committed
chore(sec-core): update owner info of agent-sec-core module

kid9
authored and
edonyzpc
committed
feat(sec-core): support build all for sec-core

yangdao479
authored and
edonyzpc
committed
ci(sec-core): add source build ci

yangdao479
authored and
edonyzpc
committed
ci(sec-core): check cosh python deps in ci

yangdao479
authored and
edonyzpc
committed
fix(sec-core): support installed skill signing paths

1570005763
authored and
edonyzpc
committed
test(sec-core): run skill signing e2e in ci

1570005763
authored and
edonyzpc
committed
test(sec-core): cover legacy skill signing ci call

1570005763
authored and
edonyzpc
committed
fix(sec-core): decouple skill signing path detection

1570005763
authored and
edonyzpc
committed
feat(sec-core): install in local space for build-all

yangdao479
authored and
edonyzpc
committed
chore(sec-core): remove sign-skill tool

yangdao479
authored and
edonyzpc
committed
chore(sec-core): fix comments

yangdao479
authored and
edonyzpc
committed

Commits on May 15, 2026

refactor(tokenless): align FHS paths, restructure adapter dir, remove install.sh

yangdao479
authored and
Forrest-ly
committed
fix(cosh): fire UserPromptSubmit hook only on real user prompts

kongche-jbw
authored and
samchu-zsl
committed
feat(sec-core): add PIIChecker scan CLI and middleware

1570005763
authored and
edonyzpc
committed
fix(cosh): set run_id before UserPromptSubmit hook fires

kongche-jbw
authored and
samchu-zsl
committed
fix(sec-core): detect scan-pii module mode via subprocess

1570005763
authored and
edonyzpc
committed
fix(tokenless): address code review findings across schema, env-check, hooks, and plugin

shiloong
authored and
Forrest-ly
committed
feat(sec-core): cosh hook for security observability

RemindD
authored and
edonyzpc
committed
feat(tokenless): add hermes agent plugin

shiloong
authored and
Forrest-ly
committed
feat(sec-core): update skill ledger security interactions

1570005763
authored and
edonyzpc
committed

Commits on May 18, 2026

feat(sec-core): add hermes-plugin framework and add code scan support for hermes

yangdao479
authored and
edonyzpc
committed
chore(sec-core): move hermes test case

yangdao479
authored and
edonyzpc
committed
feat(sec-core): abstract class for hermes hook

yangdao479
authored and
edonyzpc
committed
chore(sec-core): fix comments, add more log in hermes plugin

yangdao479
authored and
edonyzpc
committed
fix(cosh): correct read_file arg key in auto-memory session hook

kongche-jbw
authored and
samchu-zsl
committed
fix(cosh): preserve user dirs in auto-memory workspace cleanup

kongche-jbw
authored and
samchu-zsl
committed
fix(sec-core): move warmup detection from error-string matching to file-based check

haosanzi
authored and
edonyzpc
committed
chore(sec-core): bump version to 0.4.1

yangdao479
authored and
edonyzpc
committed
feat(cosh): surface UserPromptSubmit and PostToolUse hook reason in UI

kongche-jbw
authored and
samchu-zsl
committed
fix(cosh): atomic stale-lock takeover and async IO in memory hooks

kongche-jbw
authored and
samchu-zsl
committed
feat(sec-core): add PIIChecker hooks for cosh and OpenClaw

1570005763
authored and
edonyzpc
committed
fix(sec-core): show PII warnings via reply dispatch

1570005763
authored and
edonyzpc
committed
fix(sec-core): make PII scan unbounded by default

1570005763
authored and
edonyzpc
committed
feat(sec-core): persist observability record to sqldb

RemindD
authored and
edonyzpc
committed
fix(sec-core): lower frequency for sql maintenance

RemindD
authored and
edonyzpc
committed
fix(sec-core): fix TOCTOU at sqldb read path

RemindD
authored and
edonyzpc
committed
fix(sec-core): fix fixed timestamp in test which cause sqldb prune

RemindD
authored and
edonyzpc
committed

Commits on May 19, 2026

feat(sec-core): observability plugin for hermes

RemindD
authored and
edonyzpc
committed
fix(sec-core): log clear error message for openclaw and hermes plugin

RemindD
authored and
edonyzpc
committed
fix(sec-core): remove compact logic for hermes observability plugin

RemindD
authored and
edonyzpc
committed
docs(sec-core): align skill ledger docs with implementation

1570005763
authored and
edonyzpc
committed
feat(sec-core): refine skill ledger scan workflow

1570005763
authored and
edonyzpc
committed
docs(sec-core): add scheduled skill ledger scan guide

1570005763
authored and
edonyzpc
committed
test(sec-core): fix skill ledger CI expectations

1570005763
authored and
edonyzpc
committed
fix(sec-core): harden skill ledger recovery and key UX

1570005763
authored and
edonyzpc
committed
feat(sight): support container PID namespace in BPF traced process filtering and event emission

chengshuyi
authored and
Daydreamer-Li
committed
feat(sec-core): add code-scan requireappove config for openclaw

yangdao479
authored and
edonyzpc
committed
feat(sec-core): add Hermes PII checker hook

1570005763
authored and
edonyzpc
committed
fix(sec-core): pass PII scan input via stdin

1570005763
authored and
edonyzpc
committed
fix(sec-core): bound PII stdin reads

1570005763
authored and
edonyzpc
committed
feat(ckpt): change the daemon to a stateful one

Ziqi002
authored and
Yuanhong Peng
committed
feat(ckpt): mv state file `img` to /var/lib/ws-ckpt/

Ziqi002
authored and
Yuanhong Peng
committed
feat(ckpt): rm placeholder interface for overlayFS backend

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): pre stage in spec shouldn't block rpm installation

Ziqi002
authored and
Yuanhong Peng
committed
refactor(ckpt): refactor bootstrap as trait

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): move legacy img migration into daemon bootstrap

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): drop dead img_path from DaemonConfig and ConfigReport

Ziqi002
authored and
Yuanhong Peng
committed
fix(tokenless): security hardening & critical algorithm correctness

shiloong
authored and
Forrest-ly
committed
fix(tokenless): behavioral correctness & logic fixes

shiloong
authored and
Forrest-ly
committed
fix(tokenless): dedup, dead code removal & cosmetic cleanup

shiloong
authored and
Forrest-ly
committed
feat(sight): reduce BPF ring buffer to 32MB and add agent matching rules

Daydreamer-Li
authored and
chengshuyi
committed
feat(sight): add tools field to AgentsightLLMData FFI struct

chengshuyi
authored and
Daydreamer-Li
committed
fix(sight): pass tools field through as raw JSON and fix duration_ns calculation

chengshuyi
authored and
Daydreamer-Li
committed

Commits on May 20, 2026

fix(cosh): include tool_use_id in PreToolUse hooks

kongche-jbw
authored and
samchu-zsl
committed
feat(sec-core): add cli review for observability

RemindD
authored and
edonyzpc
committed
fix(sec-core): optimize query function in list_runs

RemindD
authored and
edonyzpc
committed
feat(sec-core): add Hermes skill ledger hook

1570005763
authored and
edonyzpc
committed
fix(sec-core): align Hermes skill ledger hook resolution

1570005763
authored and
edonyzpc
committed
test(sec-core): include skill-ledger e2e in install flows

1570005763
authored and
edonyzpc
committed
feat(sec-core): add correlation context in agent-sec-cli

RemindD
authored and
edonyzpc
committed
feat(sec-core): cosh adapter change for correlation context

RemindD
authored and
edonyzpc
committed
feat(sec-core): openclaw adapter change for correlation context

RemindD
authored and
edonyzpc
committed
fix(sec-core): add path in workflow before import and add e2e tests for cosh hook invocation

RemindD
authored and
edonyzpc
committed
fix(sec-core): restrict cosh trace context extraction to hook input fields

RemindD
authored and
edonyzpc
committed
fix(sec-core): truncate correlation id if too long

RemindD
authored and
edonyzpc
committed
fix(sec-core): define bootstrap trace-context parsing contract

RemindD
authored and
edonyzpc
committed
feat(sec-core): make openclaw skill ledger approval configurable
1570005763
committed
fix(sec-core): skip skill ledger warning hook in approval mode
1570005763
committed
feat(sight): add connection scanner for pre-established LLM API connections
chengshuyi
committed
fix(ckpt): list snapshot with metadata will bincode err

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): diff returns SnapshotNotFound instead of InternalError on resolve failure

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): diff parser handles symlink, hardlink, and mv via link/unlink pairs

Ziqi002
authored and
Yuanhong Peng
committed
feat(ckpt): support displaying local time and zone offsets when list table

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): daemon robustness and edge-case handling

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): live-mount legacy→target relocation and loop_img_state reporting

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): ws-ckpt cannot declare ownership of "%{_datadir}/anolisa"

Ziqi002
authored and
Yuanhong Peng
committed

Commits on May 21, 2026

refactor(cosh): support install profiles
kongche-jbw
committed
refactor(skills): add make install contract
kongche-jbw
committed
refactor(tokenless): support staged installs
kongche-jbw
committed
refactor(ws-ckpt): add make install contract
kongche-jbw
committed
refactor(agentsight): support profile installs
kongche-jbw
committed
feat(sec-core): add adapter manifest
kongche-jbw
committed
refactor(build): introduce unified build workflow
kongche-jbw
committed
fix(sec-core): rely on Makefile install paths
kongche-jbw
committed
chore(build): improve build-all interaction UX
kongche-jbw
committed
fix(build): make dry-run non-mutating
kongche-jbw
committed
feat(sight): support claude code
chengshuyi
committed
fix(sight): support Anthropic SSE thinking/tool_use content blocks and message_start absence

sa-buc
authored and
chengshuyi
committed
fix(sight): fix SSL probe attach for Claude Code (BoringSSL) and cleanup stale inodes on process exit

sa-buc
authored and
chengshuyi
committed
fix(sight): extend response_mapper to support Anthropic message.id format for session correlation

sa-buc
authored and
chengshuyi
committed
docs(sight): add Claude Code integration test prompt

husterL9
authored and
chengshuyi
committed
fix(sec-core): skip sqldb prune in unit tests

RemindD
authored and
yangdao479
committed
feat(sec-core): add Hermes prompt-scan capability

yanrong-hsr
authored and
edonyzpc
committed
fix(sec-core): pass prompt text via stdin instead of argv

yanrong-hsr
authored and
edonyzpc
committed
feat(sec-core): add OpenClaw enableBlock hook policies

1570005763
authored and
edonyzpc
committed
fix(sec-core): make sqlarchemy lazy import

RemindD
authored and
edonyzpc
committed
feat(sec-core): correlate security events with observability events

RemindD
authored and
edonyzpc
committed
fix(sec-core): optimize correlation logic and support batch query

RemindD
authored and
edonyzpc
committed
feat(sec-core): add hermes plugin install for rpmbuild and build from scratch

yangdao479
authored and
edonyzpc
committed
feat(sec-core): support correlation context in hermes agent plugin

RemindD
authored and
edonyzpc
committed
fix(openclaw): expand home paths for skill-ledger

1570005763
authored and
edonyzpc
committed
fix(sec-core): respect trace-id filter in count

RemindD
authored and
edonyzpc
committed

Commits on May 22, 2026

fix(sec-core): stabilize Hermes skill-ledger warnings

1570005763
authored and
edonyzpc
committed
refactor(tokenless): replace submodules with crates.io deps and

authored and
Forrest-ly
committed
fix(cosh): route UserPromptSubmit through safety-priority merge

kongche-jbw
authored and
samchu-zsl
committed
chore(sec-core): bump version to 0.5.0

yangdao479
authored and
edonyzpc
committed
feat(cosh): add dashscope token plan provider

samchu-zsl
authored and
kongche-jbw
committed
feat(sight): add tcpsniff probe for plain HTTP traffic capture

Daydreamer-Li
authored and
chengshuyi
committed
feat(sight): add User-Agent based agent detection and redesign tcpsniff IP/port filtering

Daydreamer-Li
authored and
chengshuyi
committed
refactor(sight): simplify agent detection by using comm as fallback instead of User-Agent matching

Daydreamer-Li
authored and
chengshuyi
committed
docs(sight): add tcpsniff integration test specification

Daydreamer-Li
authored and
chengshuyi
committed
fix(sight): disable tcpsniff by default with empty tcp_targets

Daydreamer-Li
authored and
chengshuyi
committed
feat(ckpt): init openclaw plugin

Ziqi002
authored and
Yuanhong Peng
committed
feat(ckpt): rpm/makefile/manifest support plugins

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): bugs from rpm/makefile/manifest support plugins

Ziqi002
authored and
Yuanhong Peng
committed
feat(ckpt): make ws-ckpt skill agent-agnostic, prompt for workspace

Ziqi002
authored and
Yuanhong Peng
committed
feat(ckpt): init hermes plugin

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): bugs from openclaw plugins and docs

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): build-all and adapter error

Ziqi002
authored and
Yuanhong Peng
committed
chore(ckpt): release v0.3.0

Ziqi002
authored and
Yuanhong Peng
committed
chore(sight): release v0.5.0

Daydreamer-Li
authored and
samchu-zsl
committed
feat(sight): add FFI interface for tcp_targets config

Daydreamer-Li
authored and
chengshuyi
committed

Commits on May 25, 2026

chore(cosh): release v2.4.0

samchu-zsl
authored and
kongche-jbw
committed
fix(tokenless): support Debian/Ubuntu FHS paths and harden binary resolution

authored and
Forrest-ly
committed
fix(tokenless): build OpenClaw plugin to dist/index.js

kongche-jbw
authored and
shiloong
committed
chore(tokenless): bump to v0.4.0

shiloong
authored and
samchu-zsl
committed
feat(sight): add client-side hybrid encryption for sensitive message fields

husterL9
authored and
chengshuyi
committed
refactor(sight): load encryption public key from agentsight.json

husterL9
authored and
chengshuyi
committed
fix(sight): preserve initial SSE chunk in event-stream responses

Relifest
authored and
chengshuyi
committed

Commits on May 26, 2026

Commits on May 27, 2026

fix(tokenless): derive Makefile version from Cargo.toml, fix spec changelog weekday

shiloong
authored and
samchu-zsl
committed
feat(sight): add unit tests for http endpoint and domain rule parsing

Daydreamer-Li
authored and
chengshuyi
committed
feat(memory): introduce agent-memory MCP server v0.1.0

Shile Zhang
authored and
samchu-zsl
committed
ci(memory): wire agent-memory into CI / release pipelines

Shile Zhang
authored and
samchu-zsl
committed
fix(cosh): keep prompt ids monotonic after shell remount

kongche-jbw
authored and
samchu-zsl
committed
fix(cosh): render HookSystemMessage as info and fix Content/Thought duplication

kongche-jbw
authored and
samchu-zsl
committed
fix(ckpt): remove unused btrfs_ops.rs

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): fswatch don't close after write ops close

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): add protect for "cwd can't be workspace itself or a descendant"

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): skill requires --force when delete

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): plugin may not auto load

Ziqi002
authored and
Yuanhong Peng
committed
fix(ckpt): plugin tool support pass workspace with priority over config

Ziqi002
authored and
Yuanhong Peng
committed
refactor(sight): query stats.db by tool_use_id and unify savings display

chengshuyi
authored and
Daydreamer-Li
committed
fix(tokenless): derive adapter plugin versions from Cargo.toml instead of hardcoding

shiloong
authored and
samchu-zsl
committed
fix(openclaw): normalize OpenClaw state dir handling

kongche-jbw
authored and
Forrest-ly
committed
chore(tokenless): bump to v0.4.1

shiloong
authored and
samchu-zsl
committed
feat(memory): add openclaw memory-anolisa plugin

shiloong
authored and
samchu-zsl
committed
chore(cosh): release v2.4.1

samchu-zsl
authored and
kongche-jbw
committed
fix(ckpt): register workspace to plugin config

Ziqi002
authored and
Yuanhong Peng
committed
chore(ckpt): release v0.3.1

Ziqi002
authored and
Yuanhong Peng
committed

Commits on May 28, 2026

fix(memory): normalize openclaw state dir handling and fix RPM build

shiloong
authored and
samchu-zsl
committed
chore(memory): bump to v0.1.0-3

shiloong
authored and
samchu-zsl
committed
chore(ckpt): update spec changelog

Ziqi002
authored and
samchu-zsl
committed
fix(ckpt): optimize refuse parent path as workspace rules

Ziqi002
authored and
samchu-zsl
committed
fix(ckpt): uninstall openclaw with tool whitelist remove

Ziqi002
authored and
samchu-zsl
committed
feat(ci): install npm dependencies for the ws-ckpt plugin in package-source action

Ziqi002
authored and
samchu-zsl
committed
chore(ckpt): release v0.3.2

Ziqi002
authored and
samchu-zsl
committed

Commits on Jun 2, 2026

fix(tokenless): drop TOON wrapper prefix and slim diagnostic tags

Shile Zhang
authored and
Forrest-ly
committed
fix(tokenless): unify rtk rewrite exit code 3 handling across adapters

shiloong
authored and
Forrest-ly
committed
fix(sight): decode HPACK Huffman headers

authored and
Daydreamer-Li
committed
chore(sight): drop dead code + deprecated APIs

authored and
Daydreamer-Li
committed
chore(sight): silence generated-code warnings

authored and
Daydreamer-Li
committed
docs(sight): sync probe/Event/test-index docs

authored and
Daydreamer-Li
committed
add input delta ffi

beartyson-tech
authored and
Daydreamer-Li
committed

Commits on Jun 3, 2026

fix(cosh): show visible cursor in provider/auth config inputs

kongche-jbw
authored and
samchu-zsl
committed
fix(tokenless): secure shell variable interpolation in env-fix and hooks

shiloong
authored and
Forrest-ly
committed
fix(tokenless): add subprocess returncode checks and extract shared hook utilities

shiloong
authored and
Forrest-ly
committed
fix(tokenless): secure resolveBinaryPath and improve binary cache invalidation

shiloong
authored and
Forrest-ly
committed
chore(tokenless): add tokenizer tests, improve chrono config, warn on poison clear

shiloong
authored and
Forrest-ly
committed
fix(tokenless): use mktemp in tests and safe home expansion

shiloong
authored and
Forrest-ly
committed
fix(tokenless): bound SchemaCompressor recursion to prevent stack overflow

shiloong
authored and
Forrest-ly
committed
fix(tokenless): propagate env-fix subprocess failures instead of returning stdout

shiloong
authored and
Forrest-ly
committed
fix(tokenless): anchor home lookup on getpwuid_r and trust-check candidate binaries

shiloong
authored and
Forrest-ly
committed
fix(tokenless): harden env-fix install paths with uid trust check and divert stderr to log

shiloong
authored and
Forrest-ly
committed
fix(tokenless): recover from poisoned mutex in stats recorder instead of failing

shiloong
authored and
Forrest-ly
committed
fix(tokenless): add input size limit and validate db path

shiloong
authored and
Forrest-ly
committed
fix(tokenless): reserve truncation marker length in response compressor

shiloong
authored and
Forrest-ly
committed
chore(tokenless): misc cleanups — serialization, permissions, dual trust

shiloong
authored and
Forrest-ly
committed
chore(tokenless): fix formatting and clippy warnings after cherry-pick

shiloong
authored and
Forrest-ly
committed
refactor(tokenless): rename openclaw plugin Name to Tokenless and ID to tokenless

shiloong
authored and
Forrest-ly
committed
temp
Ziqi002
committed
feat(sight): support HTTP wildcard capture (*) for unknown IP/port targets

Daydreamer-Li
authored and
chengshuyi
committed
feat(sight): add BPF-layer HTTP protocol filter for wildcard capture

Daydreamer-Li
authored and
chengshuyi
committed
feat(sec-core): add daemon process for agent-sec-cli

RemindD
authored and
edonyzpc
committed
Revert "temp"
samchu-zsl
committed
chore(sec-core): store hash in requirements
yangdao479
committed