Peter Steinberger e27bbe4982 fix(exec): block dangerous override-only env pivots

2026-03-07 19:18:05 +00:00

..

dev

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

docker

ci: fix install smoke docker helper path

2026-03-02 11:01:56 +00:00

docs-i18n

chore(security): bump qs and golang.org/x/net

2026-02-14 21:22:46 +01:00

e2e

fix(ci): handle disabled systemd units in docker doctor flow

2026-03-03 05:52:14 +00:00

lib

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

podman

fix: sed escaping and UID mismatch in Podman Quadlet setup (#26414)

2026-02-28 09:20:18 -08:00

pre-commit

refactor: centralize pre-commit file filtering

2026-02-16 03:42:11 +01:00

repro

…

shell-helpers

fix(clawdock): include docker-compose.extra.yml in helper commands (#17094)

2026-02-19 03:40:47 -08:00

systemd

…

auth-monitor.sh

…

bench-cli-startup.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

bench-model.ts

…

build_icon.sh

…

build-and-run-mac.sh

…

build-docs-list.mjs

…

bundle-a2ui.sh

Chore: harden A2UI bundle dependency resolution (#22507)

2026-02-21 13:16:31 +05:30

canvas-a2ui-copy.ts

…

changelog-to-html.sh

…

check-channel-agnostic-boundaries.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-composite-action-input-interpolation.py

ci: harden workflow action input handling

2026-02-19 15:27:48 +01:00

check-ingress-agent-owner-context.mjs

fix(security): enforce explicit ingress owner context

2026-03-02 23:50:36 +00:00

check-no-monolithic-plugin-sdk-entry-imports.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

check-no-pairing-store-group-auth.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-no-random-messaging-tmp.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-no-raw-channel-fetch.mjs

fix(discord): use fetch for voice upload slots

2026-03-03 10:22:28 -06:00

check-no-raw-window-open.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-no-register-http-handler.mjs

chore(lint): add registerHttpHandler usage guard script

2026-03-02 16:24:06 +00:00

check-pairing-account-scope.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-plugin-sdk-exports.mjs

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

check-ts-max-loc.ts

…

check-webhook-auth-body-order.mjs

refactor: split webhook ingress and policy guards

2026-03-02 18:02:21 +00:00

ci-changed-scope.d.mts

test: fix strict runtime mock types in channel tests

2026-03-03 03:06:22 +00:00

ci-changed-scope.mjs

CI: cover skill and extension tests

2026-03-06 11:21:03 -05:00

claude-auth-status.sh

…

clawlog.sh

fix(security): harden clawlog command execution

2026-03-01 23:33:13 +00:00

clawtributors-map.json

…

codesign-mac-app.sh

…

codespell-dictionary.txt

docs: add custom spellcheck dictionary and fix docs typos (#22457)

2026-02-21 01:35:35 -05:00

codespell-ignore.txt

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

committer

…

copy-export-html-templates.ts

refactor: bundle export-html templates instead of reading from node_modules

2026-02-17 00:00:57 +01:00

copy-hook-metadata.ts

…

copy-plugin-sdk-root-alias.mjs

Plugins: add root-alias shim and cache/docs updates

2026-03-04 01:20:48 -05:00

create-dmg.sh

…

cron_usage_report.ts

fix(ci): restore main lint/typecheck after direct merges

2026-02-16 23:26:11 +00:00

debug-claude-usage.ts

…

docs-link-audit.mjs

…

docs-list.js

…

docs-spellcheck.sh

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

firecrawl-compare.ts

…

generate-host-env-security-policy-swift.mjs

fix(exec): block dangerous override-only env pivots

2026-03-07 19:18:05 +00:00

generate-secretref-credential-matrix.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

ghsa-patch.mjs

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

install.ps1

fix: handle PowerShell execution policy on Windows install (#24794)

2026-03-02 11:09:01 -06:00

install.sh

refactor(runtime): unify node version guard parsing

2026-03-03 02:19:34 +00:00

ios-asc-keychain-setup.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-configure-signing.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-team-id.sh

fix(ios): normalize team IDs before preferred match

2026-02-24 15:02:27 +00:00

label-open-issues.ts

refactor: dedupe extension and ui helpers

2026-03-02 19:57:33 +00:00

make_appcast.sh

fix: support legacy and beta prerelease version formats

2026-02-24 02:05:37 +00:00

mobile-reauth.sh

…

notarize-mac-artifact.sh

…

package-mac-app.sh

fix(macos): derive canonical APP_BUILD after deps install

2026-02-28 10:04:25 +05:30

package-mac-dist.sh

fix(macos): set release bundle ID so Sparkle auto-update works (#19750)

2026-02-20 12:08:10 +05:30

pr

chore(pr): enforce changelog placement and reduce merge sync churn

2026-03-05 06:37:53 +00:00

pr-merge

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

pr-prepare

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

pr-review

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

protocol-gen-swift.ts

fix: stabilize swift protocol generation and flaky tests

2026-02-21 16:53:46 +01:00

protocol-gen.ts

…

readability-basic-compare.ts

…

recover-orphaned-processes.sh

fix: reset stale execution state after SIGUSR1 in-process restart (#15195)

2026-02-13 15:30:09 -05:00

release-check.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

restart-mac.sh

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

run-node.d.mts

chore: Fix types in tests 33/N.

2026-02-17 15:50:07 +09:00

run-node.mjs

fix(gateway): remove watch-mode build/start race (#18782)

2026-02-17 11:24:08 +09:00

run-openclaw-podman.sh

fix(podman): default run-openclaw-podman bind to loopback (land #27491, thanks @robbyczgw-cla)

2026-02-26 12:13:20 +00:00

sandbox-browser-entrypoint.sh

feat(security): Harden Docker browser container chromium flags (#23889) (#31504)

2026-03-02 11:28:27 -08:00

sandbox-browser-setup.sh

…

sandbox-common-setup.sh

refactor(sandbox): add sandbox-common dockerfile

2026-02-15 00:57:13 +01:00

sandbox-setup.sh

…

setup-auth-system.sh

…

sparkle-build.ts

fix(release): unify sparkle build policy and defaults

2026-02-28 10:04:25 +05:30

sqlite-vec-smoke.mjs

…

sync-labels.ts

…

sync-moonshot-docs.ts

…

sync-plugin-versions.ts

fix(feishu): restore group command fallback and plugin deps

2026-02-22 19:13:19 +01:00

termux-auth-widget.sh

…

termux-quick-auth.sh

…

termux-sync-widget.sh

…

test-cleanup-docker.sh

…

test-force.ts

…

test-hotspots.mjs

chore(test): add vitest hotspot reporter script

2026-03-03 00:43:01 +00:00

test-install-sh-docker.sh

Install Smoke: allow reusing prebuilt test images

2026-03-06 14:23:00 -05:00

test-install-sh-e2e-docker.sh

…

test-live-gateway-models-docker.sh

test: cap docker live model sweeps and harden timeouts

2026-02-25 02:48:34 +00:00

test-live-models-docker.sh

test: cap docker live model sweeps and harden timeouts

2026-02-25 02:48:34 +00:00

test-parallel.mjs

Tests: serialize low-memory test runner lanes

2026-03-06 17:45:44 -05:00

test-perf-budget.mjs

test(perf): slim ios team-id harness and add perf budget guard

2026-03-03 00:20:46 +00:00

test-shell-completion.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

ui.js

fix(scripts): harden Windows UI spawn behavior

2026-02-16 20:49:09 -05:00

update-clawtributors.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

update-clawtributors.types.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

watch-node.d.mts

chore: Fix types in tests 33/N.

2026-02-17 15:50:07 +09:00

watch-node.mjs

fix(gateway): remove watch-mode build/start race (#18782)

2026-02-17 11:24:08 +09:00

write-build-info.ts

…

write-cli-compat.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

write-cli-startup-metadata.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

write-plugin-sdk-entry-dts.ts

Plugin SDK: add full bundled subpath wiring

2026-03-04 02:35:12 -05:00

zai-fallback-repro.ts

…