Repository navigation
test: stabilize platform vitest main checks - #4122
Conversation
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Enterprise Run ID: 📒 Files selected for processing (2)
📝 WalkthroughWalkthroughThe PR extends the credential-back test harness to support dynamic multi-step provider selection flows by introducing menu-aware prompt matching and state tracking, while also guarding a platform-specific CLI test to run only on Linux. ChangesMulti-step Menu Selection in Credential-Back Tests
CLI Platform-Specific Test Guard
Estimated code review effort🎯 2 (Simple) | ⏱️ ~12 minutes Possibly related PRs
Suggested labels
Suggested reviewers
Poem
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Warning There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure. 🔧 ESLint
ESLint skipped: no ESLint configuration detected in root package.json. To enable, add Comment |
E2E Advisor RecommendationRequired E2E: None Full advisor summaryE2E Recommendation AdvisorBase: Required E2E
Optional E2E
New E2E recommendations
|
E2E Scenario Advisor RecommendationRequired scenario E2E: None Full scenario advisor summaryE2E Scenario AdvisorBase: Required scenario E2E
Optional scenario E2E
Relevant changed files
|
PR Review AdvisorFindings: 0 needs attention, 0 worth checking, 0 nice ideas This is an automated advisory review. A human maintainer must make the final merge decision. |
## Failure `cargo deny check advisories` reports RUSTSEC-2026-0333 in `noyalib` 0.0.28, which OpenShell's `openshell-policy-schema` pins exactly. The fix, `noyalib` 0.0.53, is in OpenShell #4348 and was released in v0.1.3. NemoClaw pins its OpenShell crates, images, Helm chart, and docs to one release, so the dependency can't move on its own. v0.1.3 also includes sandbox and policy fixes that apply to NemoClaw: full binary scope for uninspected credentials (#4171), removal of privileged control-socket filters (#4279), audit of every endpoint in a proposal (#4313), Rust and Rego sharing endpoint path matching (#4336), and canonical profile revision hashing (#4122). ## Decision Move everything pinned to v0.1.2 to v0.1.3, tag commit `e1f3c82caa3e`: - **Crates:** `openshell-core`, `openshell-sdk`, and `openshell-policy`. `Cargo.lock` changes by about 20 lines, including `noyalib` 0.0.53. - **Vendored SDK:** re-copied from v0.1.3 and identical to upstream except for its manifest. It is still needed because upstream still enables `openshell-core` telemetry. - **`versions.json`:** OpenShell version, revision, and the gateway, supervisor, sandbox, and Helm chart digests. GHCR's v0.1.2 tags matched the old pins. - **Examples, fixtures, generated schema, and configuration reference:** the new default gateway digest. - **Docs:** pinned links and version statements. I checked the changes that could affect NemoClaw: - **Helm values:** #3384 moves gateway settings under `gatewayConfig`, but the new chart maps every legacy `server.*` value NemoClaw sets: OIDC, workspace mode, and storage size. Unauthenticated access stays off. `gateway.rs` is unchanged; Live / Kind exercises the real chart. - **New protocol fields:** sandbox restart policy and service authorization mode default to the previous behavior when unset, and NemoClaw doesn't set them. - **Doc claims:** the SDK limits table, CLI gateway selectors, TLS modes, upstream proxy chaining, example profiles, and GPU write-back all still hold at v0.1.3. - **Profile annotations:** the comment on NemoClaw's single-annotation workaround now notes that v0.1.3 canonicalizes profile hashes. Splitting the annotation would change stored state, so it's left for a follow-up to #12458. ## Validation - `cargo ci` passed: 1,309 workspace tests and all 112 lifecycle tests. Clippy needed no code changes. - `cargo ci schema` passes, so the regenerated schema and reference match. - Live / Docker and Live / Kind are running on `run-live-docker/openshell-0.1.3` and `run-live-kind/openshell-0.1.3`, which exercise the v0.1.3 images and chart.
Summary
Validation
Note: local pre-push full CLI coverage failed before push on unrelated local artifact setup (
nemoclaw/dist/blueprint/private-networks.jsandnemoclaw/node_modules/json5missing), plus existing macOS-local CLI test noise. The targeted failures from Platform Vitest Main Watch are covered above.Summary by CodeRabbit
Tests