docs: record Forge fork deltas + plugin-surface constraint in CLAUDE/README#3
Open
jestyr27 wants to merge 4 commits into
Open
docs: record Forge fork deltas + plugin-surface constraint in CLAUDE/README#3jestyr27 wants to merge 4 commits into
jestyr27 wants to merge 4 commits into
Conversation
Document the plan to give OpenClaw's web_fetch a Firecrawl fallback for JS-rendered/bot-protected pages without a Nous subscription, while preserving deny-by-default egress. Uses the plugins.entries.firecrawl.config.webFetch shape (avoids the openclaw#20442 strict-schema rejection, mirroring the existing Brave web-search fix), routes through host.openshell.internal, and keeps Firecrawl's own egress allow-listed.
Commit messages, PR text, and committed artifacts attribute to the human author only — no Claude/Anthropic mentions or Co-Authored-By trailers.
Re-scoped, security-gated implementation plan for the "Forge" project/workflow assistant, synthesized from a five-discipline panel (architecture, AI engineering, NemoClaw dev, security, networking) plus an adversarial red-team. Key corrections vs the original 10-feature draft, all verified against the tree: registerCommand handlers cannot make HTTP calls and run in the gateway, not the proxy-governed sandbox (so network work must use the agent's native tools in a turn); no event/reaction hook, cron execution engine, or destructive-action gate exists; the policy schema only supports rest/websocket (SSH/IMAP/Podman-socket are inexpressible); redact() is a secret redactor, not an injection filter. Captures 6 gating decisions, feasibility tiers (A/B/C/D with cuts), a layer map, inline security controls, and a phased sequence with an empirical "start here" verification step.
…README Update CLAUDE.md's "Fork changes" table with the in-flight Forge groundwork (runtime-context trust boundary, multi-provider OAuth device-code, NocoDB read preset template) and add a "plugin surface is observe-and-annotate" note: registerCommand has no HTTP and cannot seed an agent turn, so behavior changes go through hooks/runtime-context or agent-native tools. Add a brief uhstray-io fork note to the README pointing to CLAUDE.md. Signed-off-by: Joseph A. Wisneski IV <stray@uhstray.io>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (4)
📝 WalkthroughWalkthroughThis PR establishes the uhstray-io fork's public identity, contributor rules, and documents two major implementation proposals: a Firecrawl web-fetch enhancement and a comprehensive Forge assistant security plan grounded in verified architecture constraints and phased gating. ChangesFork foundation and implementation groundwork
Estimated code review effort🎯 2 (Simple) | ⏱️ ~12 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Refresh the fork docs with the latest context: record the in-flight Forge groundwork in CLAUDE.md and note the fork's purpose in the README.
Changes
registerCommandhas no HTTP and cannot seed an agent turn, so agent-behavior changes go through hooks /runtime-context.tsor agent-native tools, not commands.Type of Change
Verification
markdownlint-cli2passes (pre-commit hook)Signed-off-by: Joseph A. Wisneski IV stray@uhstray.io
Summary by CodeRabbit
Documentation
Proposals