fix: keep text transform runtime imports hashed - #95081
openclaw-clownfish[bot] merged 1 commit into
Conversation
|
Codex review: needs maintainer review before merge. Reviewed June 21, 2026, 5:44 PM ET / 21:44 UTC. Summary PR surface: Tests +54, Other +9. Total +63 across 2 files. Reproducibility: Do we have a high-confidence way to reproduce the issue? Partly: package tarball inspection reproduces the import/export mismatch, but this review did not run the full macOS LaunchAgent upgrade crash path. Review metrics: 1 noteworthy metric.
Stored data model Root-cause cluster Members:
Proposal only: this assessment does not dispatch repair, suppress jobs, mutate sibling items, close, or merge anything. Merge readiness Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch. Rank-up moves:
Risk before merge
Maintainer options:
Next step before merge
Security Review detailsBest possible solution: Land the narrow generator fix after CI plus either a package-upgrade smoke or an explicit maintainer decision to accept the focused generated-dist proof for this release regression. Do we have a high-confidence way to reproduce the issue? Do we have a high-confidence way to reproduce the issue? Partly: package tarball inspection reproduces the import/export mismatch, but this review did not run the full macOS LaunchAgent upgrade crash path. Is this the best way to solve the issue? Is this the best way to solve the issue? Yes: skipping only AGENTS.md: found and applied where relevant. Codex review notes: model internal, reasoning high; reviewed against 108d6d7eca00. Label changesLabel justifications:
Evidence reviewedPR surface: Tests +54, Other +9. Total +63 across 2 files. View PR surface stats
What I checked:
Likely related people:
What the crustacean ranks mean
Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics. How this review workflow works
|
c51933d
into
openclaw:main
Summary
text-transforms.runtimeimports on the hashed runtime chunk while still generating the stable wrapper for old chunks.Linked context
Closes #95057
Related #95057
Was this requested by a maintainer or owner?
Real behavior proof (required for external PRs)
n/i/a/r/tfrom./text-transforms.runtime.jsbut the live process has an older stable wrapper cached that only exposedt.openclaw@2026.5.22andopenclaw@2026.6.8.node scripts/runtime-postbuild.mjsafter a source build had produceddist; then inspected generated importers withrg -n "text-transforms\.runtime\.js|text-transforms\.runtime-[A-Za-z0-9_-]+\.js" dist/provider-runtime*.js dist/cli-backends*.js dist/prepare.runtime*.js dist/execute.runtime*.js dist/selection*.js dist/compact*.jsand inspecteddist/text-transforms.runtime-D9-SpAmI.jsplusdist/text-transforms.runtime-sEqsN4pN.js.text-transforms.runtime.jsmodule namespace for expanded exports, while old shipped hashed runtime names still resolve through compat wrappers.openclaw@2026.5.22to this unpublished branch package.pnpm buildcompletedtsdownandruntime-postbuildbut timed out at 15 minutes during the later plugin SDK d.ts stage, so the package-level proof is based on the completed generateddistruntime-postbuild output plus focused tests rather than a full build command exit 0.Tests and validation
Which commands did you run?
pnpm install --frozen-lockfilenode scripts/run-vitest.mjs test/scripts/runtime-postbuild.test.tspnpm exec oxfmt --check --threads=1 scripts/runtime-postbuild.mjs test/scripts/runtime-postbuild.test.tsnode scripts/runtime-postbuild.mjs.agents/skills/autoreview/scripts/autoreview --mode localgit diff --checkWhat regression coverage was added or updated?
What failed before this fix, if known?
t, while the new released chunks import more aliases through the same stable module path. That can fail in a live process with a cached older wrapper namespace.If no test was added, why not?
Risk checklist
Did user-visible behavior change? (
Yes/No)Did config, environment, or migration behavior change? (
Yes/No)Did security, auth, secrets, network, or tool execution behavior change? (
Yes/No)What is the highest-risk area?
How is that risk mitigated?
distproof that old compat wrappers and new hashed importers coexist.Current review state
What is the next action?
What is still waiting on author, maintainer, CI, or external proof?
Which bot or reviewer comments were addressed?