Davanum Srinivas 08ae021d1f fix(qqbot): guard image-size probe against SSRF (#63495) ...

* fix(qqbot): replace raw fetch in image-size probe with SSRF-guarded fetchRemoteMedia

Replace the bare fetch() in getImageSizeFromUrl() with fetchRemoteMedia()
from the plugin SDK, closing the blind SSRF via markdown image dimension
probing (GHSA-2767-2q9v-9326).

fetchRemoteMedia options: maxBytes 65536, maxRedirects 0, generic
public-network-only SSRF policy (no hostname allowlist, blocks
private/reserved/loopback/link-local/metadata IPs after DNS resolution).

Also fixes the repo-root resolution in scripts/lib/ts-guard-utils.mjs
which caused lint:tmp:no-raw-channel-fetch to miss extension files
entirely. The guard now walks up to .git instead of hardcoding two parent
traversals, and the allowlist is refreshed with all pre-existing raw
fetch callsites that became visible.

* fix(qqbot): guard image-size probe against SSRF (#63495) (thanks @dims)

---------

Co-authored-by: sliverp <870080352@qq.com>

2026-04-09 16:48:04 +08:00

..

clawdock

[ClawDock] Iteration on the first submission; bug fixes, UX improvements, etc (#23912)

2026-03-29 20:05:41 -04:00

dev

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

docker

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

docs-i18n

docs: relocalize stale locale links (#61796)

2026-04-06 22:37:35 +08:00

e2e

test: harden macOS npm update smoke fallback

2026-04-09 04:07:45 +01:00

k8s

docs: add Kubernetes install guide, setup script, and manifests (#34492)

2026-03-12 07:28:21 -04:00

lib

fix(qqbot): guard image-size probe against SSRF (#63495)

2026-04-09 16:48:04 +08:00

podman

update podman setup and docs (#55388)

2026-03-27 11:47:35 -04:00

pr-lib

scripts: expose PR URL in review workflow output

2026-04-05 12:56:27 -04:00

pre-commit

refactor: centralize pre-commit file filtering

2026-02-16 03:42:11 +01:00

repro

plugin-sdk: drop investigative weixin repro harness

2026-04-09 01:35:15 +01:00

systemd

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

test-planner

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

analyze-plugin-sdk-usage.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

anthropic-prompt-probe.ts

feat(agents): add prompt override and heartbeat controls

2026-04-07 07:34:50 +01:00

audit-seams.mjs

Revert "refactor(cli): remove bundled cli text providers"

2026-04-06 13:40:41 +01:00

auth-monitor.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

bench-cli-startup.ts

tests: use multi-sample CLI startup baselines

2026-03-30 22:35:50 -04:00

bench-model.ts

chore(lint): type script and test helpers

2026-04-06 16:55:50 +01:00

bench-test-changed.mjs

perf(test): trim runtime lookups and add changed bench

2026-04-06 16:49:28 +01:00

build_icon.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

build-all.mjs

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

build-and-run-mac.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

build-docs-list.mjs

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

build-stamp.d.mts

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

build-stamp.mjs

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

bundle-a2ui.mjs

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

bundle-a2ui.sh

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

canvas-a2ui-copy.ts

build(a2ui): allow sparse core builds

2026-04-05 07:34:33 +01:00

changelog-add-unreleased.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

changelog-to-html.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

check-architecture-smells.mjs

refactor: remove plugin sdk facade generator

2026-04-05 09:23:55 +01:00

check-channel-agnostic-boundaries.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-cli-startup-memory.mjs

test(ci): tighten startup memory thresholds

2026-03-19 16:28:00 -07:00

check-composite-action-input-interpolation.py

ci: harden workflow action input handling

2026-02-19 15:27:48 +01:00

check-docs-i18n-glossary.mjs

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

check-extension-package-tsc-boundary.mjs

perf(plugins): report slow boundary compiles

2026-04-08 08:52:51 +01:00

check-extension-plugin-sdk-boundary.mjs

perf(test): split support boundary shard

2026-04-07 09:12:26 +01:00

check-file-utils.ts

Config: separate core/plugin baseline entries (#60162)

2026-04-03 18:26:23 +09:00

check-gateway-watch-regression.mjs

fix(ci): skip acpx runtime in watch regression

2026-04-06 23:37:04 +01:00

check-import-cycles.ts

ci: add runtime import cycle guard

2026-04-09 03:56:22 +01:00

check-ingress-agent-owner-context.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-live-cache.ts

ci: gate releases on live cache floors

2026-04-04 15:44:34 +09:00

check-no-conflict-markers.mjs

ci: fix workflow sanity gate

2026-03-22 23:04:04 +00:00

check-no-extension-src-imports.ts

refactor: centralize update targets and extension guardrails

2026-04-03 23:26:31 +09:00

check-no-extension-test-core-imports.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-monolithic-plugin-sdk-entry-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-pairing-store-group-auth.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-no-random-messaging-tmp.mjs

Media: secure image temp dirs (#58270)

2026-03-31 11:12:47 +01:00

check-no-raw-channel-fetch.mjs

fix(qqbot): guard image-size probe against SSRF (#63495)

2026-04-09 16:48:04 +08:00

check-no-raw-window-open.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-no-register-http-handler.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-pairing-account-scope.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-plugin-extension-import-boundary.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-plugin-sdk-exports.mjs

refactor: remove plugin sdk facade generator

2026-04-05 09:23:55 +01:00

check-plugin-sdk-subpath-exports.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-sdk-package-extension-import-boundary.mjs

test(boundary): guard sdk and package imports from bundled plugin paths

2026-04-09 09:10:05 +01:00

check-src-extension-import-boundary.mjs

test(boundary): guard src imports from bundled plugin paths

2026-04-09 09:30:45 +01:00

check-ts-max-loc.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

check-web-fetch-provider-boundaries.mjs

feat: add Fireworks provider and simplify plugin setup loading

2026-04-05 07:43:14 +01:00

check-web-search-provider-boundaries.mjs

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

check-webhook-auth-body-order.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ci-changed-scope.d.mts

fix(ci): patch main regression surfaces

2026-04-06 04:17:52 +01:00

ci-changed-scope.mjs

fix(ci): patch main regression surfaces

2026-04-06 04:17:52 +01:00

claude-auth-status.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

clawlog.sh

fix(security): harden clawlog command execution

2026-03-01 23:33:13 +00:00

clawtributors-map.json

🤖 Feishu: expand channel support

2026-02-05 12:29:04 -08:00

codesign-mac-app.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

codespell-dictionary.txt

docs: add custom spellcheck dictionary and fix docs typos (#22457)

2026-02-21 01:35:35 -05:00

codespell-ignore.txt

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

committer

test: fix portable stderr capture and env leakage (#55184)

2026-03-26 09:31:08 -05:00

control-ui-i18n.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

copy-bundled-plugin-metadata.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

copy-bundled-plugin-metadata.mjs

refactor(extensions): split channel runtime helper seams

2026-04-04 07:39:53 +01:00

copy-export-html-templates.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-hook-metadata.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-plugin-sdk-root-alias.mjs

Gateway: sync runtime post-build artifacts

2026-03-15 20:44:15 +00:00

create-dmg.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

cron_usage_report.ts

fix(ci): restore main lint/typecheck after direct merges

2026-02-16 23:26:11 +00:00

debug-claude-usage.ts

refactor: dedupe bluebubbles and zalouser readers

2026-04-07 08:40:34 +01:00

docs-link-audit.d.mts

fix(docs): handle anchors in docs link audit

2026-03-21 19:58:36 +00:00

docs-link-audit.mjs

docs: fix English link audits (#57039)

2026-03-30 01:21:00 +02:00

docs-list.js

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

docs-spellcheck.sh

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

docs-sync-publish.mjs

feat(i18n): add Ukrainian docs and control UI locale

2026-04-05 18:31:02 +01:00

firecrawl-compare.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

generate-base-config-schema.ts

fix(config): cap generated schema export types

2026-04-05 07:58:02 +01:00

generate-bundled-channel-config-metadata.ts

check: restore bundled channel config metadata gate

2026-03-27 00:11:15 -05:00

generate-bundled-provider-auth-env-vars.d.mts

Plugins: generate bundled auth env metadata

2026-03-18 10:53:48 -07:00

generate-config-doc-baseline.ts

refactor: replace 156k-line generated baselines with SHA-256 hash files

2026-04-04 16:49:21 +09:00

generate-host-env-security-policy-swift.mjs

fix(env): align inherited host exec env filtering (#59119)

2026-04-07 15:50:32 -06:00

generate-plugin-sdk-api-baseline.ts

refactor: replace 156k-line generated baselines with SHA-256 hash files

2026-04-04 16:49:21 +09:00

generate-runtime-sidecar-paths-baseline.ts

test: baseline bundled runtime sidecar paths

2026-04-03 14:26:01 +01:00

generate-secretref-credential-matrix.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

gh-read

feat: add gh-read GitHub app helper

2026-04-08 00:09:07 +01:00

gh-read.ts

feat: add gh-read GitHub app helper

2026-04-08 00:09:07 +01:00

ghsa-patch.mjs

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

install.ps1

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

install.sh

fix: keep installer doctor non-interactive

2026-04-08 11:47:59 +01:00

ios-asc-keychain-setup.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-beta-archive.sh

feat(ios): add local beta release flow (#42991)

2026-03-11 12:32:28 +02:00

ios-beta-prepare.sh

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-beta-release.sh

feat(ios): add local beta release flow (#42991)

2026-03-11 12:32:28 +02:00

ios-configure-signing.sh

fix(ios): harden watch exec approval review (#61757)

2026-04-06 17:42:42 +03:00

ios-pin-version.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-sync-versioning.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-team-id.sh

fix(ios): normalize team IDs before preferred match

2026-02-24 15:02:27 +00:00

ios-version.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-write-version-xcconfig.sh

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

label-open-issues.ts

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

live-docker-normalize-config.ts

fix: stabilize docker live tests

2026-04-06 19:31:16 +01:00

load-channel-config-surface.ts

Fallback to Jiti when bun is unavailable

2026-03-27 15:16:19 -05:00

make_appcast.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

mobile-reauth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

notarize-mac-artifact.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

npm-runner.mjs

refactor: dedupe windows cmd runner helpers

2026-04-06 16:52:41 +01:00

openclaw-npm-postpublish-verify.ts

fix: harden bundled plugin dependency release checks

2026-04-08 15:15:44 +01:00

openclaw-npm-publish.sh

build: make npm release tag configurable

2026-04-02 19:06:37 +01:00

openclaw-npm-release-check.ts

Config: separate core/plugin baseline entries (#60162)

2026-04-03 18:26:23 +09:00

openclaw-prepack.ts

add bundled channel prepack smoke

2026-04-07 23:09:26 -05:00

package-mac-app.sh

fix packaged control ui asset lookup (#53081)

2026-03-23 13:45:04 -05:00

package-mac-dist.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

plugin-clawhub-publish.sh

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-clawhub-release-check.ts

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-clawhub-release-plan.ts

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-npm-publish.sh

fix(ci): allow plugin npm preview without publish token (#58929)

2026-04-01 19:16:46 +09:00

plugin-npm-release-check.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

plugin-npm-release-plan.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

pnpm-runner.d.ts

build: type live media runner

2026-04-06 19:52:42 +01:00

pnpm-runner.mjs

fix(test): clean up vitest child process groups

2026-04-06 18:10:44 +01:00

postinstall-bundled-plugins.mjs

fix(build): honor postinstall disable flag

2026-04-08 21:01:53 +05:30

pr

Maintainer: split PR workflow script modules

2026-03-30 20:28:32 -04:00

pr-merge

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

pr-prepare

Revert "feat: add --no-test flag to prepare-gates"

2026-03-12 16:37:50 -07:00

pr-review

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

prepare-extension-package-boundary-artifacts.mjs

build: narrow plugin SDK declaration build

2026-04-08 20:00:51 +01:00

prepush-ci.sh

fix: use pnpm exec for scripted vitest runs

2026-04-04 01:07:28 +09:00

print-cli-backend-live-metadata.ts

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

process-warning-filter.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

profile-extension-memory.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

protocol-gen-swift.ts

fix: stabilize swift protocol generation and flaky tests

2026-02-21 16:53:46 +01:00

protocol-gen.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

qa-e2e.ts

refactor: remove qa-e2e compatibility facade

2026-04-06 17:23:35 +01:00

qa-lab-up.ts

feat: add fast qa lab ui refresh mode

2026-04-07 09:45:11 +01:00

readability-basic-compare.ts

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

recover-orphaned-processes.sh

fix: reset stale execution state after SIGUSR1 in-process restart (#15195)

2026-02-13 15:30:09 -05:00

release-check.ts

fix: harden bundled plugin dependency release checks

2026-04-08 15:15:44 +01:00

restart-mac.sh

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

run-bundled-extension-oxlint.mjs

refactor(plugins): share extension oxlint runner

2026-04-06 15:25:34 +01:00

run-extension-channel-oxlint.mjs

refactor(plugins): share extension oxlint runner

2026-04-06 15:25:34 +01:00

run-node.d.mts

fix(dev): forward run-node wrapper signals

2026-04-05 17:05:20 +01:00

run-node.mjs

fix(ci): stabilize ui i18n and gateway watch checks

2026-04-05 23:20:17 +01:00

run-openclaw-podman.sh

remove noisy podman output from launch script and update doc (#59368)

2026-04-01 23:28:11 -04:00

run-oxlint.mjs

chore(checks): serialize local heavy gates

2026-04-03 01:46:28 +09:00

run-tsgo.mjs

chore(checks): serialize local heavy gates

2026-04-03 01:46:28 +09:00

run-vitest-profile.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

run-vitest.mjs

fix(test): suppress vitest plugin timing noise

2026-04-07 10:54:20 +01:00

runtime-postbuild-shared.mjs

Plugins: relocate bundled skill assets

2026-03-15 21:42:02 +00:00

runtime-postbuild.mjs

chore(acpx): clarify runtime asset packaging

2026-04-06 17:51:21 +01:00

sandbox-browser-entrypoint.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

sandbox-browser-setup.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

sandbox-common-setup.sh

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

sandbox-setup.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

setup-auth-system.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

sparkle-build.ts

fix(release): unify sparkle build policy and defaults

2026-02-28 10:04:25 +05:30

sqlite-vec-smoke.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

stage-bundled-plugin-runtime-deps.mjs

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

stage-bundled-plugin-runtime.d.mts

Plugins: stage local bundled runtime tree

2026-03-16 16:43:47 +00:00

stage-bundled-plugin-runtime.mjs

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

sync-labels.ts

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

sync-moonshot-docs.ts

Docs: fix MDX markers blocking page refreshes (#46695)

2026-03-15 02:58:59 +01:00

sync-plugin-sdk-exports.mjs

build(plugin-sdk): enforce export sync in check

2026-03-16 02:11:19 +00:00

sync-plugin-versions.ts

chore(plugins): sync versions to 2026.4.4

2026-04-04 20:03:01 +01:00

termux-auth-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-quick-auth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-sync-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-built-bundled-channel-entry-smoke.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

test-built-plugin-singleton.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

test-cleanup-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-cli-startup-bench-budget.mjs

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

test-extension-batch.mjs

refactor: dedupe script and matrix send helpers

2026-04-06 17:21:52 +01:00

test-extension.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

test-force.ts

ci: align vitest entrypoints with root config

2026-04-04 05:57:27 +01:00

test-hotspots.mjs

test: improve test runner help text (#55227)

2026-03-26 10:34:14 -05:00

test-install-sh-docker.sh

fix: keep installer doctor non-interactive

2026-04-08 11:47:59 +01:00

test-install-sh-e2e-docker.sh

test: harden Docker install e2e agent lane

2026-04-08 07:15:51 +01:00

test-live-acp-bind-docker.sh

test: add gemini acp bind docker coverage

2026-04-07 07:59:45 +01:00

test-live-build-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live-cli-backend-docker.sh

fix: harden claude-cli live switch smoke

2026-04-07 16:05:54 +01:00

test-live-gateway-models-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live-media.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

test-live-models-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live.mjs

test: isolate MCP live cache probe

2026-04-04 14:39:51 +09:00

test-perf-budget.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

test-projects.mjs

test: keep local full suite serial by default

2026-04-09 03:23:00 +01:00

test-projects.test-support.d.mts

perf(test): restore scoped vitest routing

2026-04-06 15:16:17 +01:00

test-projects.test-support.mjs

test: run local full suite project shards in parallel

2026-04-09 02:26:22 +01:00

test-report-utils.mjs

fix: use pnpm exec for scripted vitest runs

2026-04-04 01:07:28 +09:00

test-shell-completion.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

test-unit-fast-audit.mjs

Tests: add unit-fast Vitest lane

2026-04-07 10:03:42 +01:00

test-update-cli-startup-bench.mjs

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

test-voicecall-closedloop.mjs

ci: align vitest entrypoints with root config

2026-04-04 05:57:27 +01:00

tool-display.ts

fix(tool-display): generate swift snapshot from core config

2026-04-05 10:34:02 +01:00

ts-topology.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

tsdown-build.mjs

fix(build): keep tsdown prune best-effort

2026-04-08 21:16:49 +05:30

ui.js

fix: install devDependencies during ui:build (#59267) (thanks @juliabush)

2026-04-02 14:35:05 +05:30

update-clawtributors.ts

chore(lint): type script and test helpers

2026-04-06 16:55:50 +01:00

update-clawtributors.types.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

vitest-process-group.mjs

fix(test): clean up vitest child process groups

2026-04-06 18:10:44 +01:00

watch-node.d.mts

chore(gateway): ignore .test.ts changes in gateway:watch (#36211)

2026-03-15 11:14:28 -04:00

watch-node.mjs

fix: prevent duplicate gateway watchers

2026-04-05 23:24:27 +01:00

windows-cmd-helpers.mjs

refactor: dedupe windows cmd runner helpers

2026-04-06 16:52:41 +01:00

write-build-info.ts

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

write-cli-compat.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

write-cli-startup-metadata.ts

fix(tooling): relax cli startup metadata render timeout

2026-04-07 01:44:10 +01:00

write-official-channel-catalog.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

write-official-channel-catalog.mjs

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

write-plugin-sdk-entry-dts.ts

perf(plugins): skip fresh boundary dts prep

2026-04-07 12:19:49 +01:00

zai-fallback-repro.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00