zsxsoft d15d7d0962 fix(scripts/pr): shell-escape env file values to prevent command injection via branch names

2026-03-31 17:24:19 +09:00

..

clawdock

[ClawDock] Iteration on the first submission; bug fixes, UX improvements, etc (#23912)

2026-03-29 20:05:41 -04:00

dev

refactor(channels): route core through registered plugin capabilities

2026-03-30 01:03:42 +01:00

docker

Docker setup: force BuildKit for local builds

2026-03-28 20:46:35 -07:00

docs-i18n

feat(tts): add microsoft voice listing

2026-03-16 20:24:13 -07:00

e2e

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

k8s

docs: add Kubernetes install guide, setup script, and manifests (#34492)

2026-03-12 07:28:21 -04:00

lib

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

podman

update podman setup and docs (#55388)

2026-03-27 11:47:35 -04:00

pr-lib

fix(scripts/pr): shell-escape env file values to prevent command injection via branch names

2026-03-31 17:24:19 +09:00

pre-commit

…

repro

…

systemd

…

test-planner

fix(ci): shard fast extension checks

2026-03-31 15:58:50 +09:00

analyze-plugin-sdk-usage.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

audit-seams.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

auth-monitor.sh

…

bench-cli-startup.ts

tests: use multi-sample CLI startup baselines

2026-03-30 22:35:50 -04:00

bench-model.ts

…

build_icon.sh

…

build-and-run-mac.sh

…

build-docs-list.mjs

…

build-stamp.d.mts

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

build-stamp.mjs

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

bundle-a2ui.sh

fix(feishu): fetch thread context so AI can see bot replies in topic threads (#45254)

2026-03-14 18:01:59 -05:00

canvas-a2ui-copy.ts

…

changelog-to-html.sh

…

check-architecture-smells.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-channel-agnostic-boundaries.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-cli-startup-memory.mjs

test(ci): tighten startup memory thresholds

2026-03-19 16:28:00 -07:00

check-composite-action-input-interpolation.py

ci: harden workflow action input handling

2026-02-19 15:27:48 +01:00

check-docs-i18n-glossary.mjs

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

check-extension-plugin-sdk-boundary.mjs

fix: stabilize gate and extension boundary checks

2026-03-30 02:37:36 +01:00

check-file-utils.ts

fix(test): normalize path separators [skip ci]

2026-03-21 17:33:35 -07:00

check-gateway-watch-regression.mjs

CI: guard gateway watch against duplicate runtime regressions (#49048)

2026-03-17 10:55:55 -04:00

check-ingress-agent-owner-context.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-conflict-markers.mjs

ci: fix workflow sanity gate

2026-03-22 23:04:04 +00:00

check-no-extension-src-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-extension-test-core-imports.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-monolithic-plugin-sdk-entry-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-pairing-store-group-auth.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-no-random-messaging-tmp.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-raw-channel-fetch.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-raw-window-open.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-no-register-http-handler.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-pairing-account-scope.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-plugin-extension-import-boundary.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-plugin-sdk-exports.mjs

build(plugin-sdk): verify dist facade exports

2026-03-29 14:53:03 +01:00

check-plugin-sdk-subpath-exports.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-ts-max-loc.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

check-web-search-provider-boundaries.mjs

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

check-webhook-auth-body-order.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ci-changed-scope.d.mts

perf(ci): gate install smoke on changed-smoke (#52458)

2026-03-22 12:58:08 -07:00

ci-changed-scope.mjs

perf(ci): gate install smoke on changed-smoke (#52458)

2026-03-22 12:58:08 -07:00

ci-write-manifest-outputs.mjs

dev: speed up local check loop

2026-03-27 07:56:41 -05:00

claude-auth-status.sh

…

clawlog.sh

fix(security): harden clawlog command execution

2026-03-01 23:33:13 +00:00

clawtributors-map.json

…

codesign-mac-app.sh

…

codespell-dictionary.txt

docs: add custom spellcheck dictionary and fix docs typos (#22457)

2026-02-21 01:35:35 -05:00

codespell-ignore.txt

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

committer

test: fix portable stderr capture and env leakage (#55184)

2026-03-26 09:31:08 -05:00

copy-bundled-plugin-metadata.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

copy-bundled-plugin-metadata.mjs

fix(release): ship bundled plugins in pack artifacts

2026-03-23 08:22:00 -07:00

copy-export-html-templates.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-hook-metadata.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-plugin-sdk-root-alias.mjs

Gateway: sync runtime post-build artifacts

2026-03-15 20:44:15 +00:00

create-dmg.sh

…

cron_usage_report.ts

fix(ci): restore main lint/typecheck after direct merges

2026-02-16 23:26:11 +00:00

debug-claude-usage.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

docs-link-audit.d.mts

fix(docs): handle anchors in docs link audit

2026-03-21 19:58:36 +00:00

docs-link-audit.mjs

docs: fix English link audits (#57039)

2026-03-30 01:21:00 +02:00

docs-list.js

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

docs-spellcheck.sh

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

firecrawl-compare.ts

…

generate-base-config-schema.ts

refactor: harden generated-file guards and provider ids

2026-03-22 19:08:08 -07:00

generate-bundled-channel-config-metadata.ts

check: restore bundled channel config metadata gate

2026-03-27 00:11:15 -05:00

generate-bundled-provider-auth-env-vars.d.mts

Plugins: generate bundled auth env metadata

2026-03-18 10:53:48 -07:00

generate-bundled-provider-auth-env-vars.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

generate-config-doc-baseline.ts

Docs: add config drift baseline statefile (#45891)

2026-03-14 14:23:30 -07:00

generate-host-env-security-policy-swift.mjs

fix(exec): block dangerous override-only env pivots

2026-03-07 19:18:05 +00:00

generate-plugin-sdk-api-baseline.ts

Docs: prototype generated plugin SDK reference (#51877)

2026-03-22 09:19:00 -07:00

generate-plugin-sdk-facades.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

generate-secretref-credential-matrix.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

ghsa-patch.mjs

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

install.ps1

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

install.sh

refactor(config): drop obsolete legacy config aliases

2026-03-29 22:00:56 +01:00

ios-asc-keychain-setup.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-beta-archive.sh

feat(ios): add local beta release flow (#42991)

2026-03-11 12:32:28 +02:00

ios-beta-prepare.sh

feat(push): add iOS APNs relay gateway (#43369)

2026-03-12 18:15:35 +02:00

ios-beta-release.sh

feat(ios): add local beta release flow (#42991)

2026-03-11 12:32:28 +02:00

ios-configure-signing.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-team-id.sh

fix(ios): normalize team IDs before preferred match

2026-02-24 15:02:27 +00:00

ios-write-version-xcconfig.sh

chore: bump version to 2026.3.13

2026-03-13 04:38:32 +00:00

label-open-issues.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

load-channel-config-surface.ts

Fallback to Jiti when bun is unavailable

2026-03-27 15:16:19 -05:00

make_appcast.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

mobile-reauth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

notarize-mac-artifact.sh

…

openclaw-npm-postpublish-verify.ts

refactor: route plugin runtime through bundled seams

2026-03-27 16:40:27 +00:00

openclaw-npm-publish.sh

fix: keep beta on newer prereleases

2026-03-30 05:37:01 +09:00

openclaw-npm-release-check.ts

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

package-mac-app.sh

fix packaged control ui asset lookup (#53081)

2026-03-23 13:45:04 -05:00

package-mac-dist.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

plugin-npm-publish.sh

fix: stabilize ci and serial test gate

2026-03-30 00:43:01 +01:00

plugin-npm-release-check.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

plugin-npm-release-plan.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

postinstall-bundled-plugins.mjs

fix: harden ACP plugin tools bridge (#56867) (thanks @joe2643)

2026-03-30 05:09:59 +09:00

pr

Maintainer: split PR workflow script modules

2026-03-30 20:28:32 -04:00

pr-merge

…

pr-prepare

Revert "feat: add --no-test flag to prepare-gates"

2026-03-12 16:37:50 -07:00

pr-review

…

profile-extension-memory.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

protocol-gen-swift.ts

fix: stabilize swift protocol generation and flaky tests

2026-02-21 16:53:46 +01:00

protocol-gen.ts

…

readability-basic-compare.ts

…

recover-orphaned-processes.sh

…

release-check.ts

Build: mirror Matrix crypto WASM runtime deps (#57163)

2026-03-29 15:57:28 -04:00

restart-mac.sh

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

run-node.d.mts

Scripts: rebuild on extension and tsdown config changes (#47571)

2026-03-15 16:19:27 -04:00

run-node.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

run-openclaw-podman.sh

scripts: respect gateway.bind config when OPENCLAW_GATEWAY_BIND not set (#55453)

2026-03-29 22:00:21 -04:00

run-oxlint.mjs

fix(ci): default local low-memory checks

2026-03-31 15:05:04 +09:00

run-tsgo.mjs

fix(ci): default local low-memory checks

2026-03-31 15:05:04 +09:00

run-vitest-profile.mjs

test: avoid repo-root perf profile artifacts

2026-03-23 11:51:26 +00:00

runtime-postbuild-shared.mjs

Plugins: relocate bundled skill assets

2026-03-15 21:42:02 +00:00

runtime-postbuild.mjs

fix(runtime): stabilize image generation auth/runtime loading

2026-03-30 01:14:29 +01:00

sandbox-browser-entrypoint.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

sandbox-browser-setup.sh

…

sandbox-common-setup.sh

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

sandbox-setup.sh

…

setup-auth-system.sh

…

sparkle-build.ts

fix(release): unify sparkle build policy and defaults

2026-02-28 10:04:25 +05:30

sqlite-vec-smoke.mjs

…

stage-bundled-plugin-runtime-deps.mjs

fix: retry bundled runtime dependency staging

2026-03-31 01:40:55 +01:00

stage-bundled-plugin-runtime.d.mts

Plugins: stage local bundled runtime tree

2026-03-16 16:43:47 +00:00

stage-bundled-plugin-runtime.mjs

fix(runtime): make dist-runtime staging idempotent

2026-03-22 22:41:27 -07:00

sync-labels.ts

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

sync-moonshot-docs.ts

Docs: fix MDX markers blocking page refreshes (#46695)

2026-03-15 02:58:59 +01:00

sync-plugin-sdk-exports.mjs

build(plugin-sdk): enforce export sync in check

2026-03-16 02:11:19 +00:00

sync-plugin-versions.ts

fix(feishu): restore group command fallback and plugin deps

2026-02-22 19:13:19 +01:00

termux-auth-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-quick-auth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-sync-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-built-plugin-singleton.mjs

fix(build): suppress singleton smoke deprecation noise

2026-03-19 16:07:53 -07:00

test-cleanup-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-cli-startup-bench-budget.mjs

tests: standardize CLI startup benchmarks

2026-03-30 22:15:56 -04:00

test-extension.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

test-force.ts

Gateway: harden Compose-style gateway port parsing

2026-03-24 16:51:36 -07:00

test-hotspots.mjs

test: improve test runner help text (#55227)

2026-03-26 10:34:14 -05:00

test-install-sh-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-install-sh-e2e-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-live-acp-bind-docker.sh

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

test-live-cli-backend-docker.sh

test: add docker cli-backend smoke

2026-03-26 16:49:52 +00:00

test-live-gateway-models-docker.sh

test: narrow live transcript scaffolding strip

2026-03-23 07:41:18 +00:00

test-live-models-docker.sh

test: narrow live transcript scaffolding strip

2026-03-23 07:41:18 +00:00

test-live.mjs

fix: move Mistral compat into provider plugin

2026-03-28 04:08:37 +00:00

test-parallel-memory.mjs

fix(ci): parse GitHub Actions memory hotspot logs

2026-03-20 06:13:27 +00:00

test-parallel-utils.mjs

test: print failed test lane output tails

2026-03-23 19:36:44 -07:00

test-parallel.mjs

Add collect-all test failure planning

2026-03-27 23:23:31 -05:00

test-perf-budget.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

test-report-utils.mjs

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

test-runner-manifest.mjs

tests: standardize CLI startup benchmarks

2026-03-30 22:15:56 -04:00

test-shell-completion.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

test-update-cli-startup-bench.mjs

tests: use multi-sample CLI startup baselines

2026-03-30 22:35:50 -04:00

test-update-memory-hotspots-utils.mjs

perf: trim vitest hot imports and refresh manifests

2026-03-23 05:25:05 +00:00

test-update-memory-hotspots.mjs

test: improve test runner help text (#55227)

2026-03-26 10:34:14 -05:00

test-update-timings.mjs

perf: speed up test parallelism

2026-03-26 20:09:40 +00:00

test-voicecall-closedloop.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ts-topology.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

tsdown-build.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ui.js

fix(scripts): harden Windows UI spawn behavior

2026-02-16 20:49:09 -05:00

update-clawtributors.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

update-clawtributors.types.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

watch-node.d.mts

chore(gateway): ignore .test.ts changes in gateway:watch (#36211)

2026-03-15 11:14:28 -04:00

watch-node.mjs

Scripts: rebuild on extension and tsdown config changes (#47571)

2026-03-15 16:19:27 -04:00

write-build-info.ts

…

write-cli-compat.ts

…

write-cli-startup-metadata.ts

fix: restore lightweight root help startup

2026-03-30 03:08:53 +01:00

write-official-channel-catalog.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

write-official-channel-catalog.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

write-plugin-sdk-entry-dts.ts

build(plugin-sdk): verify dist facade exports

2026-03-29 14:53:03 +01:00

zai-fallback-repro.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00