Agustin Rivera fa82193c72 fix(env): align inherited host exec env filtering (#59119) ...

* fix(env): block inherited host exec config vars

* fix(env): preserve trusted inherited proxy env

* fix(env): preserve inherited host exec vars

* fix(env): refresh host env policy parity artifacts

* test(env): align blocked override ordering

* docs(changelog): add host env policy parity entry

---------

Co-authored-by: Devin Robison <drobison@nvidia.com>

2026-04-07 15:50:32 -06:00

..

clawdock

[ClawDock] Iteration on the first submission; bug fixes, UX improvements, etc (#23912)

2026-03-29 20:05:41 -04:00

dev

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

docker

fix: stabilize qa lab docker builds

2026-04-07 06:06:29 +01:00

docs-i18n

docs: relocalize stale locale links (#61796)

2026-04-06 22:37:35 +08:00

e2e

test: harden parallels smoke reruns

2026-04-07 13:30:46 +01:00

k8s

…

lib

Docs: document approval adapter subpaths

2026-04-07 16:06:02 -04:00

podman

update podman setup and docs (#55388)

2026-03-27 11:47:35 -04:00

pr-lib

scripts: expose PR URL in review workflow output

2026-04-05 12:56:27 -04:00

pre-commit

…

repro

…

systemd

…

test-planner

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

analyze-plugin-sdk-usage.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

anthropic-prompt-probe.ts

feat(agents): add prompt override and heartbeat controls

2026-04-07 07:34:50 +01:00

audit-seams.mjs

Revert "refactor(cli): remove bundled cli text providers"

2026-04-06 13:40:41 +01:00

auth-monitor.sh

…

bench-cli-startup.ts

tests: use multi-sample CLI startup baselines

2026-03-30 22:35:50 -04:00

bench-model.ts

chore(lint): type script and test helpers

2026-04-06 16:55:50 +01:00

bench-test-changed.mjs

perf(test): trim runtime lookups and add changed bench

2026-04-06 16:49:28 +01:00

build_icon.sh

…

build-and-run-mac.sh

…

build-docs-list.mjs

…

build-stamp.d.mts

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

build-stamp.mjs

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

bundle-a2ui.sh

build(a2ui): allow sparse core builds

2026-04-05 07:34:33 +01:00

canvas-a2ui-copy.ts

build(a2ui): allow sparse core builds

2026-04-05 07:34:33 +01:00

changelog-add-unreleased.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

changelog-to-html.sh

…

check-architecture-smells.mjs

refactor: remove plugin sdk facade generator

2026-04-05 09:23:55 +01:00

check-channel-agnostic-boundaries.mjs

…

check-cli-startup-memory.mjs

test(ci): tighten startup memory thresholds

2026-03-19 16:28:00 -07:00

check-composite-action-input-interpolation.py

…

check-docs-i18n-glossary.mjs

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

check-extension-package-tsc-boundary.mjs

fix(plugins): restore shared boundary sdk prep

2026-04-07 13:11:30 +01:00

check-extension-plugin-sdk-boundary.mjs

perf(test): split support boundary shard

2026-04-07 09:12:26 +01:00

check-file-utils.ts

Config: separate core/plugin baseline entries (#60162)

2026-04-03 18:26:23 +09:00

check-gateway-watch-regression.mjs

fix(ci): skip acpx runtime in watch regression

2026-04-06 23:37:04 +01:00

check-ingress-agent-owner-context.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-live-cache.ts

ci: gate releases on live cache floors

2026-04-04 15:44:34 +09:00

check-no-conflict-markers.mjs

ci: fix workflow sanity gate

2026-03-22 23:04:04 +00:00

check-no-extension-src-imports.ts

refactor: centralize update targets and extension guardrails

2026-04-03 23:26:31 +09:00

check-no-extension-test-core-imports.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-monolithic-plugin-sdk-entry-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-pairing-store-group-auth.mjs

…

check-no-random-messaging-tmp.mjs

Media: secure image temp dirs (#58270)

2026-03-31 11:12:47 +01:00

check-no-raw-channel-fetch.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-raw-window-open.mjs

…

check-no-register-http-handler.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-pairing-account-scope.mjs

…

check-plugin-extension-import-boundary.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-plugin-sdk-exports.mjs

refactor: remove plugin sdk facade generator

2026-04-05 09:23:55 +01:00

check-plugin-sdk-subpath-exports.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-ts-max-loc.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

check-web-fetch-provider-boundaries.mjs

feat: add Fireworks provider and simplify plugin setup loading

2026-04-05 07:43:14 +01:00

check-web-search-provider-boundaries.mjs

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

check-webhook-auth-body-order.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ci-changed-scope.d.mts

fix(ci): patch main regression surfaces

2026-04-06 04:17:52 +01:00

ci-changed-scope.mjs

fix(ci): patch main regression surfaces

2026-04-06 04:17:52 +01:00

claude-auth-status.sh

…

clawlog.sh

…

clawtributors-map.json

…

codesign-mac-app.sh

…

codespell-dictionary.txt

…

codespell-ignore.txt

…

committer

test: fix portable stderr capture and env leakage (#55184)

2026-03-26 09:31:08 -05:00

control-ui-i18n.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

copy-bundled-plugin-metadata.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

copy-bundled-plugin-metadata.mjs

refactor(extensions): split channel runtime helper seams

2026-04-04 07:39:53 +01:00

copy-export-html-templates.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-hook-metadata.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-plugin-sdk-root-alias.mjs

Gateway: sync runtime post-build artifacts

2026-03-15 20:44:15 +00:00

create-dmg.sh

…

cron_usage_report.ts

…

debug-claude-usage.ts

refactor: dedupe bluebubbles and zalouser readers

2026-04-07 08:40:34 +01:00

docs-link-audit.d.mts

fix(docs): handle anchors in docs link audit

2026-03-21 19:58:36 +00:00

docs-link-audit.mjs

docs: fix English link audits (#57039)

2026-03-30 01:21:00 +02:00

docs-list.js

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

docs-spellcheck.sh

…

docs-sync-publish.mjs

feat(i18n): add Ukrainian docs and control UI locale

2026-04-05 18:31:02 +01:00

firecrawl-compare.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

generate-base-config-schema.ts

fix(config): cap generated schema export types

2026-04-05 07:58:02 +01:00

generate-bundled-channel-config-metadata.ts

check: restore bundled channel config metadata gate

2026-03-27 00:11:15 -05:00

generate-bundled-provider-auth-env-vars.d.mts

Plugins: generate bundled auth env metadata

2026-03-18 10:53:48 -07:00

generate-config-doc-baseline.ts

refactor: replace 156k-line generated baselines with SHA-256 hash files

2026-04-04 16:49:21 +09:00

generate-host-env-security-policy-swift.mjs

fix(env): align inherited host exec env filtering (#59119)

2026-04-07 15:50:32 -06:00

generate-plugin-sdk-api-baseline.ts

refactor: replace 156k-line generated baselines with SHA-256 hash files

2026-04-04 16:49:21 +09:00

generate-runtime-sidecar-paths-baseline.ts

test: baseline bundled runtime sidecar paths

2026-04-03 14:26:01 +01:00

generate-secretref-credential-matrix.ts

…

ghsa-patch.mjs

…

install.ps1

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

install.sh

refactor(config): drop obsolete legacy config aliases

2026-03-29 22:00:56 +01:00

ios-asc-keychain-setup.sh

…

ios-beta-archive.sh

…

ios-beta-prepare.sh

…

ios-beta-release.sh

…

ios-configure-signing.sh

fix(ios): harden watch exec approval review (#61757)

2026-04-06 17:42:42 +03:00

ios-team-id.sh

…

ios-write-version-xcconfig.sh

chore: bump version to 2026.3.13

2026-03-13 04:38:32 +00:00

label-open-issues.ts

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

live-docker-normalize-config.ts

fix: stabilize docker live tests

2026-04-06 19:31:16 +01:00

load-channel-config-surface.ts

Fallback to Jiti when bun is unavailable

2026-03-27 15:16:19 -05:00

make_appcast.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

mobile-reauth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

notarize-mac-artifact.sh

…

npm-runner.mjs

refactor: dedupe windows cmd runner helpers

2026-04-06 16:52:41 +01:00

openclaw-npm-postpublish-verify.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

openclaw-npm-publish.sh

build: make npm release tag configurable

2026-04-02 19:06:37 +01:00

openclaw-npm-release-check.ts

Config: separate core/plugin baseline entries (#60162)

2026-04-03 18:26:23 +09:00

openclaw-prepack.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

package-mac-app.sh

fix packaged control ui asset lookup (#53081)

2026-03-23 13:45:04 -05:00

package-mac-dist.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

plugin-clawhub-publish.sh

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-clawhub-release-check.ts

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-clawhub-release-plan.ts

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-npm-publish.sh

fix(ci): allow plugin npm preview without publish token (#58929)

2026-04-01 19:16:46 +09:00

plugin-npm-release-check.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

plugin-npm-release-plan.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

pnpm-runner.d.ts

build: type live media runner

2026-04-06 19:52:42 +01:00

pnpm-runner.mjs

fix(test): clean up vitest child process groups

2026-04-06 18:10:44 +01:00

postinstall-bundled-plugins.mjs

fix: harden bundled plugin runtime deps

2026-04-01 08:55:00 +01:00

pr

Maintainer: split PR workflow script modules

2026-03-30 20:28:32 -04:00

pr-merge

…

pr-prepare

Revert "feat: add --no-test flag to prepare-gates"

2026-03-12 16:37:50 -07:00

pr-review

…

prepare-extension-package-boundary-artifacts.mjs

fix(plugins): track package boundary dts freshness

2026-04-07 13:11:30 +01:00

prepush-ci.sh

fix: use pnpm exec for scripted vitest runs

2026-04-04 01:07:28 +09:00

print-cli-backend-live-metadata.ts

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

profile-extension-memory.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

protocol-gen-swift.ts

…

protocol-gen.ts

…

qa-e2e.ts

refactor: remove qa-e2e compatibility facade

2026-04-06 17:23:35 +01:00

qa-lab-up.ts

feat: add fast qa lab ui refresh mode

2026-04-07 09:45:11 +01:00

readability-basic-compare.ts

…

recover-orphaned-processes.sh

…

release-check.ts

Config: separate core/plugin baseline entries (#60162)

2026-04-03 18:26:23 +09:00

restart-mac.sh

…

run-bundled-extension-oxlint.mjs

refactor(plugins): share extension oxlint runner

2026-04-06 15:25:34 +01:00

run-extension-channel-oxlint.mjs

refactor(plugins): share extension oxlint runner

2026-04-06 15:25:34 +01:00

run-node.d.mts

fix(dev): forward run-node wrapper signals

2026-04-05 17:05:20 +01:00

run-node.mjs

fix(ci): stabilize ui i18n and gateway watch checks

2026-04-05 23:20:17 +01:00

run-openclaw-podman.sh

remove noisy podman output from launch script and update doc (#59368)

2026-04-01 23:28:11 -04:00

run-oxlint.mjs

chore(checks): serialize local heavy gates

2026-04-03 01:46:28 +09:00

run-tsgo.mjs

chore(checks): serialize local heavy gates

2026-04-03 01:46:28 +09:00

run-vitest-profile.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

run-vitest.mjs

fix(test): suppress vitest plugin timing noise

2026-04-07 10:54:20 +01:00

runtime-postbuild-shared.mjs

Plugins: relocate bundled skill assets

2026-03-15 21:42:02 +00:00

runtime-postbuild.mjs

chore(acpx): clarify runtime asset packaging

2026-04-06 17:51:21 +01:00

sandbox-browser-entrypoint.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

sandbox-browser-setup.sh

…

sandbox-common-setup.sh

…

sandbox-setup.sh

…

setup-auth-system.sh

…

sparkle-build.ts

…

sqlite-vec-smoke.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

stage-bundled-plugin-runtime-deps.mjs

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

stage-bundled-plugin-runtime.d.mts

Plugins: stage local bundled runtime tree

2026-03-16 16:43:47 +00:00

stage-bundled-plugin-runtime.mjs

fix(runtime): make dist-runtime staging idempotent

2026-03-22 22:41:27 -07:00

sync-labels.ts

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

sync-moonshot-docs.ts

Docs: fix MDX markers blocking page refreshes (#46695)

2026-03-15 02:58:59 +01:00

sync-plugin-sdk-exports.mjs

build(plugin-sdk): enforce export sync in check

2026-03-16 02:11:19 +00:00

sync-plugin-versions.ts

chore(plugins): sync versions to 2026.4.4

2026-04-04 20:03:01 +01:00

termux-auth-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-quick-auth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-sync-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-built-plugin-singleton.mjs

fix(ci): repair contract and interaction drift

2026-04-03 19:57:35 +01:00

test-cleanup-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-cli-startup-bench-budget.mjs

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

test-extension-batch.mjs

refactor: dedupe script and matrix send helpers

2026-04-06 17:21:52 +01:00

test-extension.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

test-force.ts

ci: align vitest entrypoints with root config

2026-04-04 05:57:27 +01:00

test-hotspots.mjs

test: improve test runner help text (#55227)

2026-03-26 10:34:14 -05:00

test-install-sh-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-install-sh-e2e-docker.sh

fix: stabilize docker e2e lanes

2026-04-05 07:15:24 +01:00

test-live-acp-bind-docker.sh

test: add gemini acp bind docker coverage

2026-04-07 07:59:45 +01:00

test-live-build-docker.sh

test: stabilize docker test lanes

2026-04-02 15:59:23 +01:00

test-live-cli-backend-docker.sh

fix: harden claude-cli live switch smoke

2026-04-07 16:05:54 +01:00

test-live-gateway-models-docker.sh

fix: stabilize docker live tests

2026-04-06 19:31:16 +01:00

test-live-media.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

test-live-models-docker.sh

fix: stabilize docker live tests

2026-04-06 19:31:16 +01:00

test-live.mjs

test: isolate MCP live cache probe

2026-04-04 14:39:51 +09:00

test-perf-budget.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

test-projects.mjs

fix(test): clean up vitest child process groups

2026-04-06 18:10:44 +01:00

test-projects.test-support.d.mts

perf(test): restore scoped vitest routing

2026-04-06 15:16:17 +01:00

test-projects.test-support.mjs

Tests: add unit-fast Vitest lane

2026-04-07 10:03:42 +01:00

test-report-utils.mjs

fix: use pnpm exec for scripted vitest runs

2026-04-04 01:07:28 +09:00

test-shell-completion.ts

…

test-unit-fast-audit.mjs

Tests: add unit-fast Vitest lane

2026-04-07 10:03:42 +01:00

test-update-cli-startup-bench.mjs

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

test-voicecall-closedloop.mjs

ci: align vitest entrypoints with root config

2026-04-04 05:57:27 +01:00

tool-display.ts

fix(tool-display): generate swift snapshot from core config

2026-04-05 10:34:02 +01:00

ts-topology.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

tsdown-build.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ui.js

fix: install devDependencies during ui:build (#59267) (thanks @juliabush)

2026-04-02 14:35:05 +05:30

update-clawtributors.ts

chore(lint): type script and test helpers

2026-04-06 16:55:50 +01:00

update-clawtributors.types.ts

…

vitest-process-group.mjs

fix(test): clean up vitest child process groups

2026-04-06 18:10:44 +01:00

watch-node.d.mts

chore(gateway): ignore .test.ts changes in gateway:watch (#36211)

2026-03-15 11:14:28 -04:00

watch-node.mjs

fix: prevent duplicate gateway watchers

2026-04-05 23:24:27 +01:00

windows-cmd-helpers.mjs

refactor: dedupe windows cmd runner helpers

2026-04-06 16:52:41 +01:00

write-build-info.ts

…

write-cli-compat.ts

…

write-cli-startup-metadata.ts

fix(tooling): relax cli startup metadata render timeout

2026-04-07 01:44:10 +01:00

write-official-channel-catalog.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

write-official-channel-catalog.mjs

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

write-plugin-sdk-entry-dts.ts

perf(plugins): skip fresh boundary dts prep

2026-04-07 12:19:49 +01:00

zai-fallback-repro.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00