Haitao Pan
cccd72686b
fix: recover bridge tokens during native deploy
2026-06-07 07:04:38 +08:00
Haitao Pan
919addfd11
fix(ci): accept OpenClaw session without native task record
2026-06-06 19:23:55 +08:00
Haitao Pan
c19631fd9c
fix: deploy bridge native service as ubuntu user
2026-06-06 14:30:26 +08:00
Haitao Pan
772f47a5fe
fix(ci): support base64 ssh deploy key
2026-06-06 14:21:59 +08:00
Haitao Pan
9180e9258d
Pass OpenClaw artifact prepare context
2026-06-06 11:37:20 +08:00
Haitao Pan
86cd52bf21
Fix OpenClaw smoke recovery on main
2026-06-06 11:26:22 +08:00
Haitao Pan
9c91d0d6ee
Fix OpenClaw smoke task polling contract
2026-06-06 08:16:28 +08:00
Haitao Pan
0dd73a2c2e
Allow no-output OpenClaw smoke contract
2026-06-06 06:27:36 +08:00
Haitao Pan
d7cf863fd5
fix(test): add appThreadKey to validate-openclaw-session.sh to pass plugin validation
...
Since the OpenClaw plugins now enforce appThreadKey to prevent disconnected task maps, the smoke test must supply this key as well.
2026-06-06 06:09:28 +08:00
Haitao Pan
3f4cee5783
Fix OpenClaw session smoke result parsing
2026-06-05 21:37:26 +08:00
Haitao Pan
2ace2722de
Fix OpenClaw artifact dirs protocol boundary
2026-06-05 21:23:19 +08:00
Haitao Pan
57ab5711e1
fix(ci): add openclaw session contract check to validate stage
...
The OpenClaw session contract smoke and SSE long-task stream checks used to
live in the Ansible validate role and ran during the Deploy stage. They depend
on the public OpenClaw gateway producing a 'pong' reply, which the bridge
itself cannot guarantee end-to-end. When the gateway returned an empty
completion envelope (CI run 27010307958), the entire Deploy job failed even
though the bridge binary had been installed and was healthy.
Move the lightweight session contract check into the GitHub Actions validate
stage as a new script. Deploy now only asserts the bridge's own state
(binary, ports, /api/ping, /acp/rpc capabilities, routing.resolve), and the
OpenClaw contract check runs in validate where the release-blocking failure
belongs.
2026-06-05 19:29:53 +08:00
Haitao Pan
0b31ccf461
fix: report native bridge runtime version
2026-06-01 13:48:43 +08:00
Haitao Pan
26560afa5c
fix: align bridge review token deployment
2026-06-01 10:02:13 +08:00
Haitao Pan
a2d255d3ef
fix: wait for native bridge service executable
2026-05-18 17:00:47 +08:00
Haitao Pan
c08d5d6472
fix: deploy native bridge binary
2026-05-08 13:31:46 +08:00
Haitao Pan
8fbc0e51be
ci: scope bridge deploy role
2026-05-05 15:16:13 +08:00
Haitao Pan
9ecb420223
Align public RPC contract validation
2026-04-28 17:16:33 +08:00
Haitao Pan
2bded72346
Accept native bridge metadata in deploy validation
2026-04-28 17:02:37 +08:00
Haitao Pan
1c79d1ad01
Fix pipeline pipeline validation by providing auth token to ping endpoints
2026-04-27 11:00:55 +08:00
Haitao Pan
17c0fa6f16
Refine bridge routing and remove fallback paths
2026-04-23 15:58:37 +08:00
Haitao Pan
1d89c17ef6
fix hermes acp adapter responses
2026-04-22 16:57:54 +08:00
Haitao Pan
f7b8076a84
add traced bridge version output
2026-04-22 12:28:16 +08:00
Haitao Pan
bf1fcac528
fix hermes provider command dispatch
2026-04-22 11:51:07 +08:00
Haitao Pan
fe13604703
fix: make acp.capabilities public and update verification script
2026-04-21 20:05:50 +08:00
Haitao Pan
34782eabd6
fix: enforce authentication check in validation script and update tests
2026-04-21 20:01:54 +08:00
Haitao Pan
3047f818aa
fix: improve bridge endpoint robustness and deployment reporting
2026-04-21 18:13:26 +08:00
Haitao Pan
8e24b697a7
Tighten bridge endpoint and auth contracts
2026-04-21 10:34:44 +08:00
Haitao Pan
1e6c644a92
Add Hermes ACP adapter
2026-04-20 16:54:40 +08:00
Haitao Pan
729da27179
Make public RPC contract probe provider-agnostic
2026-04-20 14:10:10 +08:00
Haitao Pan
e043480418
fix(ci): update rpc contract validation and remove internal service token
2026-04-20 12:31:16 +08:00
Haitao Pan
104ab26356
refactor(acp): unify ingress topology and migrate all services to xworkmate-bridge.svc.plus
2026-04-20 11:30:42 +08:00
Haitao Pan
939a1b6c87
refactor(acp): remove hardcoded endpoints and migrate to path-based routing
2026-04-20 09:34:11 +08:00
Haitao Pan
55bfda225e
fix(ci): normalize bridge rpc endpoints
2026-04-20 09:08:25 +08:00
Haitao Pan
f99758a040
ci: update validation scripts to support JSON root status and new gateway URL
2026-04-18 09:41:15 +08:00
Haitao Pan
f30c8d4816
fix(security): enforce mandatory authentication and update deployment
...
Enforce strict Bearer token validation even when the bridge auth token is not explicitly configured in the environment. This ensures unauthenticated requests are rejected with a 401 status code by default. Updated deployment scripts to pass the required auth token and adjusted the test suite to align with the new security requirements.
2026-04-16 18:50:47 +08:00
Haitao Pan
eaf0a6255f
test: lock bridge provider contract smoke checks
2026-04-14 13:56:58 +08:00
Haitao Pan
1059cc7f86
ci: probe providers through bridge runtime
2026-04-14 11:51:11 +08:00
Haitao Pan
a205547677
runtime: extend external acp timeout budget
2026-04-14 11:07:52 +08:00
Haitao Pan
e3bf2063a2
ci: harden deploy validation retries
2026-04-14 10:56:53 +08:00
Haitao Pan
425a38f1e8
ci: fail fast on validate curl timeouts
2026-04-14 10:37:45 +08:00
Haitao Pan
9ab24fbe53
ci: deploy every push from build output
2026-04-12 18:33:04 +08:00
Haitao Pan
b8b1d83802
ci: align release with validated production bridge
2026-04-12 17:42:10 +08:00
Haitao Pan
991ecb0ae2
ci: authorize ping validation
2026-04-12 16:15:50 +08:00
Haitao Pan
0ef3cb8757
Extract xworkmate bridge workflow scripts
2026-04-12 15:22:13 +08:00
Haitao Pan
0fcaa845e1
ci: ship bridge via image ref artifact
2026-04-12 14:23:23 +08:00
Haitao Pan
19a72e32e9
Send auth header for safe validate checks
2026-04-10 18:21:15 +08:00
Haitao Pan
578683c91e
Harden validate stage with safe ACP checks
2026-04-10 18:14:14 +08:00
Haitao Pan
54523d6269
Require build artifact for deploy job
2026-04-10 18:04:56 +08:00
Haitao Pan
9ad76f760e
Use playbooks ansible.cfg directly
2026-04-10 17:58:33 +08:00
