Mason Huang 004835f4c7 fix(plugins): block untrusted workspace setup-only channel loads (#86953) ...

Summary:
- This PR blocks disabled workspace-origin channel plugins from setup-only scoped imports, rejects their channel registrations at registry assembly, documents the trust rule, and adds regression coverage.
- PR surface: Source +46, Tests +610, Docs +13. Total +669 across 22 files.
- Reproducibility: yes. source inspection gives a high-confidence reproduction path: current main's setup-only ... ce channel plugin can be imported before this PR. I did not run the repro locally in this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: test(plugins): cover workspace channel registry guard
- PR branch already contained follow-up commit before automerge: fix(plugins): isolate setup channel registration errors
- PR branch already contained follow-up commit before automerge: fix(channels): mark raw catalog listing internal
- PR branch already contained follow-up commit before automerge: test(channels): cover trusted catalog filtering
- PR branch already contained follow-up commit before automerge: test(channels): mock raw catalog helper
- PR branch already contained follow-up commit before automerge: docs(changelog): credit setup channel hardening

Validation:
- ClawSweeper review passed for head 11438bc1a0.
- Required merge gates passed before the squash merge.

Prepared head SHA: 11438bc1a0
Review: https://github.com/openclaw/openclaw/pull/86953#issuecomment-4545730044

Co-authored-by: masonxhuang <masonxhuang@tencent.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Mason Huang <masonxhuang@tencent.com>
Co-authored-by: Sebastien Tardif <sebtardif@ncf.ca>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>

2026-06-01 09:25:56 +00:00

..

agent

test: fix main ci expectations

2026-05-27 07:55:01 +01:00

channel-setup

fix(plugins): block untrusted workspace setup-only channel loads (#86953)

2026-06-01 09:25:56 +00:00

channels

fix(plugins): block untrusted workspace setup-only channel loads (#86953)

2026-06-01 09:25:56 +00:00

doctor

fix(plugins): block untrusted workspace setup-only channel loads (#86953)

2026-06-01 09:25:56 +00:00

gateway-status

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

migrate

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

models

fix(auth): add force re-login recovery and fallback auth skips

2026-05-31 19:01:51 +01:00

onboard-non-interactive

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

setup/__tests__

…

status-all

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

agent-command.test-mocks.ts

fix(memory): rehydrate daily list promotions

2026-05-31 22:08:35 -04:00

agent-via-gateway.test.ts

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

agent-via-gateway.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

agent.acp.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

agent.delivery.test.ts

test: dedupe command helper mock reads

2026-05-13 02:05:55 +01:00

agent.runtime-config.test.ts

perf: speed up local TUI startup

2026-05-25 20:30:00 +01:00

agent.session.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

agent.test.ts

fix(agents): clear legacy auto fallback pins (#87484)

2026-06-01 01:03:31 -04:00

agent.ts

…

agents.add.test.ts

fix(cli): avoid catalog validation in agents add (#88314)

2026-05-31 19:22:16 +01:00

agents.bind.commands.test.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

agents.bind.matrix.integration.test.ts

test: tighten command empty array assertions

2026-05-09 05:32:52 +01:00

agents.bind.test-support.ts

fix(config): return persisted config write responses (#81445)

2026-05-15 00:35:15 +03:00

agents.binding-format.ts

…

agents.bindings.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

agents.command-shared.ts

…

agents.commands.add.ts

fix(cli): avoid catalog validation in agents add (#88314)

2026-05-31 19:22:16 +01:00

agents.commands.bind.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

agents.commands.delete.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

agents.commands.identity.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

agents.commands.list.test.ts

test: clean up context warmup timing

2026-05-11 17:35:11 +01:00

agents.commands.list.ts

…

agents.config.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

agents.delete.test.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

agents.identity.test.ts

perf(cli): lazy-load agents actions for help (#84483)

2026-05-21 12:35:37 +08:00

agents.providers.test.ts

test: tighten small command assertions

2026-05-10 00:28:15 +01:00

agents.providers.ts

…

agents.test.ts

perf(cli): lazy-load agents actions for help (#84483)

2026-05-21 12:35:37 +08:00

auth-choice-legacy.test.ts

refactor: make OpenAI Codex legacy doctor-only (#88605)

2026-05-31 12:58:01 +01:00

auth-choice-legacy.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

auth-choice-options.static.ts

feat(onboarding): featured provider tier in interactive picker (#80798)

2026-05-11 17:09:32 -07:00

auth-choice-options.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

auth-choice-options.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

auth-choice-prompt.ts

fix(cli): prioritize auth provider picker

2026-05-16 23:40:49 +01:00

auth-choice.apply-helpers.ts

…

auth-choice.apply.api-providers.test.ts

…

auth-choice.apply.api-providers.ts

…

auth-choice.apply.plugin-provider.test.ts

test(auth): mock locked auth profile upserts

2026-05-16 20:59:57 +08:00

auth-choice.apply.ts

refactor: unify OpenAI provider identity

2026-05-30 11:48:41 +02:00

auth-choice.apply.types.ts

…

auth-choice.model-check.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

auth-choice.model-check.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

auth-choice.preferred-provider.test.ts

test: dedupe auth choice provider mock read

2026-05-13 01:36:27 +01:00

auth-choice.preferred-provider.ts

…

auth-choice.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

auth-choice.ts

…

auth-token.ts

…

backup-shared.ts

docs: absorb documentation PR sweep

2026-05-23 10:23:34 +01:00

backup-verify.test.ts

fix(backup): cap verify manifest extraction

2026-05-28 15:48:51 +02:00

backup-verify.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

backup.atomic.test.ts

test: tighten small command matcher assertions

2026-05-10 00:32:13 +01:00

backup.create-verify.test.ts

test: dedupe backup verify mock read

2026-05-13 01:12:49 +01:00

backup.test-support.ts

…

backup.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

backup.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

channel-account-context.test.ts

test: cover channel diagnostic text

2026-05-11 19:11:46 +01:00

channel-account-context.ts

…

channel-test-registry.ts

…

channels.add.test.ts

fix(plugins): block untrusted workspace setup-only channel loads (#86953)

2026-06-01 09:25:56 +00:00

channels.adds-non-default-telegram-account.test.ts

test(channels): avoid catalog scan in command account tests

2026-05-17 06:30:09 +01:00

channels.config-only-status-output.test.ts

test: dedupe channels config mock read

2026-05-13 01:37:53 +01:00

channels.list.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

channels.logs.test.ts

fix(cli): reject loose webhook and directory numeric options

2026-05-27 07:35:02 -04:00

channels.mock-harness.ts

…

channels.plugin-install.test-helpers.ts

…

channels.remove.test.ts

fix(plugins): block untrusted workspace setup-only channel loads (#86953)

2026-06-01 09:25:56 +00:00

channels.resolve.test.ts

test: guard channel command mock calls

2026-05-11 23:22:13 +01:00

channels.status.command-flow.test.ts

fix(cli): reject malformed timeout values

2026-05-27 13:06:17 -04:00

channels.status.external-env.test.ts

test: tighten channel status task assertions

2026-05-10 00:34:42 +01:00

channels.surfaces-signal-runtime-errors-channels-status-output.test.ts

fix(status): add gateway delivery health telemetry (#85016)

2026-05-21 16:55:29 +00:00

channels.ts

…

chutes-oauth.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

chutes-oauth.ts

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

cleanup-command.test-support.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

cleanup-plan.ts

…

cleanup-utils.test.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

cleanup-utils.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

codex-runtime-plugin-install.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

commitments.test.ts

fix(commitments): tolerate invalid due timestamps

2026-05-30 06:36:49 -04:00

commitments.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

config-validation.test.ts

fix(cli): route plugin packaging recovery hints

2026-05-26 01:13:20 +01:00

config-validation.ts

fix(cli): route plugin packaging recovery hints

2026-05-26 01:13:20 +01:00

configure.channels.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

configure.channels.ts

chore(lint): enable object and reassignment rules

2026-05-31 09:32:52 +01:00

configure.commands.ts

fix(cli): clarify operator command errors

2026-05-09 08:11:34 +08:00

configure.daemon.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

configure.daemon.ts

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

configure.gateway-auth.prompt-auth-config.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

configure.gateway-auth.test.ts

…

configure.gateway-auth.ts

chore(lint): enable additional cleanup rules

2026-05-31 08:16:11 +01:00

configure.gateway.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

configure.gateway.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

configure.shared.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

configure.ts

…

configure.wizard.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

configure.wizard.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

copilot-runtime-plugin-install.ts

refactor: share runtime plugin install flow

2026-05-30 10:43:33 +02:00

daemon-install-auth-profiles-source.runtime.ts

…

daemon-install-auth-profiles-store.runtime.ts

…

daemon-install-helpers.test.ts

test(secrets): secure plugin exec fixtures

2026-06-01 07:11:28 +01:00

daemon-install-helpers.ts

fix(daemon): preserve container service env across regen

2026-05-31 22:22:24 +01:00

daemon-install-plan.shared.test.ts

fix(gateway): include openclaw bin in service PATH (#84475)

2026-05-22 21:28:50 +08:00

daemon-install-plan.shared.ts

fix(gateway): include openclaw bin in service PATH (#84475)

2026-05-22 21:28:50 +08:00

daemon-install-runtime-warning.test.ts

…

daemon-install-runtime-warning.ts

…

daemon-runtime.ts

…

dashboard.links.test.ts

fix: gate dashboard on gateway readiness

2026-05-16 12:11:56 +01:00

dashboard.test.ts

fix: gate dashboard on gateway readiness

2026-05-16 12:11:56 +01:00

dashboard.ts

fix: gate dashboard on gateway readiness

2026-05-16 12:11:56 +01:00

docs.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

docs.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-auth-canonical-api-key-alias.test.ts

fix(doctor): rewrite non-canonical api_key auth profiles

2026-05-28 00:29:28 +01:00

doctor-auth-flat-profiles.test.ts

fix: migrate legacy OpenAI Codex lastGood auth state

2026-06-01 03:47:43 -04:00

doctor-auth-flat-profiles.ts

fix: migrate legacy OpenAI Codex lastGood auth state

2026-06-01 03:47:43 -04:00

doctor-auth-legacy-oauth.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-auth-oauth-sidecar.test.ts

fix(auth): emit one-shot doctor-pointer warning for Keychain-only legacy Codex OAuth profiles (#86220)

2026-05-25 11:39:32 -07:00

doctor-auth-oauth-sidecar.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-auth-profile-config.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor-auth.deprecated-cli-profiles.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-auth.hints.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

doctor-auth.profile-health.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-auth.ts

refactor(openai): confine legacy codex repair to doctor

2026-05-31 14:03:17 +01:00

doctor-bootstrap-size.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-bootstrap-size.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-browser.facade.test.ts

fix(doctor): archive legacy clawd browser profile residue (#83230)

2026-05-17 19:45:03 -07:00

doctor-browser.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-claude-cli.test.ts

fix(command): stabilize claude-cli transcript resume (#81048)

2026-05-29 22:56:09 +05:30

doctor-claude-cli.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-command-owner.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-command-owner.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-completion.test.ts

Doctor: expose shell completion health findings (#85566)

2026-05-25 08:39:41 -07:00

doctor-completion.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor-config-analysis.test.ts

Preserve authored config metadata in doctor (#82687)

2026-05-16 21:23:32 -07:00

doctor-config-analysis.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor-config-audit-scrub.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-config-flow.include-warning.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-config-flow.missing-default-account-bindings.integration.test.ts

test: verify default account warning copy

2026-05-11 15:14:43 +01:00

doctor-config-flow.missing-default-account-bindings.test.ts

test: verify default account warnings

2026-05-11 19:46:31 +01:00

doctor-config-flow.missing-explicit-default-account.test.ts

test: single default account warning output

2026-05-12 22:14:59 +01:00

doctor-config-flow.safe-bins.test.ts

test: tighten doctor empty config assertions

2026-05-09 03:55:42 +01:00

doctor-config-flow.test-utils.ts

…

doctor-config-flow.test.ts

test(release): repair stale e2e mocks

2026-06-01 00:20:10 +01:00

doctor-config-flow.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor-config-preflight.state-migration.test.ts

fix(infra): guard against overwriting corrupt target session store during migration (#88018)

2026-05-31 10:31:59 +01:00

doctor-config-preflight.test.ts

fix(update): skip plugin validation during package repair reads

2026-05-16 12:44:33 +08:00

doctor-config-preflight.ts

fix(infra): guard against overwriting corrupt target session store during migration (#88018)

2026-05-31 10:31:59 +01:00

doctor-cron.ts

Refactor cron migrations under doctor (#88455)

2026-05-30 23:09:09 +01:00

doctor-device-pairing.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-device-pairing.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-disk-space.test.ts

feat(doctor): add disk space health check

2026-05-31 22:09:36 +01:00

doctor-disk-space.ts

feat(doctor): add disk space health check

2026-05-31 22:09:36 +01:00

doctor-format.test.ts

fix(status): surface systemd gateway hygiene (#86976)

2026-05-26 22:29:20 +01:00

doctor-format.ts

fix(status): surface systemd gateway hygiene (#86976)

2026-05-26 22:29:20 +01:00

doctor-gateway-auth-token.test.ts

fix(doctor): handle gateway SecretRefs in auth checks

2026-05-29 02:07:50 +01:00

doctor-gateway-auth-token.ts

fix(doctor): handle gateway SecretRefs in auth checks

2026-05-29 02:07:50 +01:00

doctor-gateway-daemon-flow.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-gateway-daemon-flow.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

doctor-gateway-health.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-gateway-health.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor-gateway-services.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-gateway-services.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

doctor-heartbeat-main-session-repair.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-heartbeat-session-target.test.ts

Revert "Fix bundled channel dist-runtime setup roots" (#82612)

2026-05-16 07:07:39 -07:00

doctor-heartbeat-session-target.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-heartbeat-template-repair.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-heartbeat-template-repair.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-install.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-install.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-legacy-config.migrations.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

doctor-legacy-config.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

doctor-legacy-config.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

doctor-lint.test.ts

[codex] Surface disabled Codex plugin routes in doctor lint (#88761)

2026-05-31 13:34:53 -07:00

doctor-lint.ts

fix(doctor): handle gateway SecretRefs in auth checks

2026-05-29 02:07:50 +01:00

doctor-memory-search.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor-memory-search.ts

chore(lint): enable readability lint rules

2026-05-31 07:17:57 +01:00

doctor-platform-notes.launchctl-env-overrides.test.ts

fix(update): recognize manual-update launchd jobs (#88764)

2026-05-31 22:39:37 +01:00

doctor-platform-notes.startup-optimization.test.ts

fix(gateway): keep unmanaged restarts in-process (#83138)

2026-05-17 21:19:05 +00:00

doctor-platform-notes.ts

fix(update): recognize manual-update launchd jobs (#88764)

2026-05-31 22:39:37 +01:00

doctor-plugin-manifests.test.ts

fix: migrate plugin tool contracts in doctor

2026-05-16 13:22:24 +01:00

doctor-plugin-manifests.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-plugin-registry.test.ts

fix(plugins): scope startup metadata manifest reads

2026-05-31 11:58:56 +01:00

doctor-plugin-registry.ts

chore(lint): enable readability lint rules

2026-05-31 07:17:57 +01:00

doctor-post-upgrade.test.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

doctor-post-upgrade.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

doctor-post-upgrade.types.ts

fix(doctor): keep post-upgrade JSON stable

2026-05-31 22:12:38 +01:00

doctor-prompter.test.ts

…

doctor-prompter.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-repair-mode.ts

…

doctor-sandbox.ts

chore(lint): enable additional cleanup rules

2026-05-31 08:16:11 +01:00

doctor-sandbox.warns-sandbox-enabled-without-docker.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-security.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-security.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-service-audit.test-helpers.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-service-repair-policy.ts

…

doctor-session-locks.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-session-locks.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

doctor-session-snapshots.test.ts

fix(doctor): repair stale session snapshot paths

2026-05-31 17:24:29 +01:00

doctor-session-snapshots.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

doctor-session-state-providers.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

doctor-session-state-providers.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-session-transcripts.test.ts

refactor(openai): confine legacy codex repair to doctor

2026-05-31 14:03:17 +01:00

doctor-session-transcripts.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

doctor-skills-core.ts

refactor: organize skills subsystem layout

2026-05-29 17:35:02 +01:00

doctor-skills.test.ts

refactor: organize skills subsystem layout

2026-05-29 17:35:02 +01:00

doctor-skills.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-state-integrity.cloud-storage.test.ts

…

doctor-state-integrity.linux-storage.test.ts

test: guard command object helpers

2026-05-11 20:59:38 +01:00

doctor-state-integrity.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

doctor-state-integrity.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

doctor-state-migrations.test.ts

Persist plugin install index in SQLite (#88794)

2026-05-31 20:51:33 -04:00

doctor-state-migrations.ts

refactor: move task state to shared sqlite

2026-05-30 04:54:37 +02:00

doctor-ui.test.ts

feat(doctor): expose UI freshness health findings

2026-05-31 10:20:12 +01:00

doctor-ui.ts

feat(doctor): expose UI freshness health findings

2026-05-31 10:20:12 +01:00

doctor-update.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-update.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

doctor-whatsapp-responsiveness.test.ts

feat: add internal code mode namespaces (#88043)

2026-05-30 22:42:57 +01:00

doctor-whatsapp-responsiveness.ts

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

doctor-workspace-status.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-workspace-status.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-workspace.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor-workspace.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor.e2e-harness.ts

Persist plugin install index in SQLite (#88794)

2026-05-31 20:51:33 -04:00

doctor.fast-path-mocks.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

doctor.note-test-helpers.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

doctor.runs-legacy-state-migrations-yes-mode-without.e2e.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

doctor.test.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

doctor.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

doctor.types.ts

feat(doctor): branch into post-upgrade probe runner when --post-upgrade

2026-05-31 22:12:38 +01:00

doctor.warns-per-agent-sandbox-docker-browser-prune.e2e.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

doctor.warns-state-directory-is-missing.e2e.test.ts

test(doctor): cache default command in e2e

2026-05-31 17:50:38 +02:00

export-trajectory.test.ts

fix(export): preserve explicit trajectory session keys (#83308)

2026-05-18 16:48:23 -07:00

export-trajectory.ts

fix(export): preserve explicit trajectory session keys (#83308)

2026-05-18 16:48:23 -07:00

flows.test.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

flows.ts

fix: harden CLI and plugin edge cases (#88896)

2026-06-01 00:30:12 -04:00

gateway-install-token.persist.runtime.ts

…

gateway-install-token.test.ts

Add plugin manifest contract for SecretRef provider integrations (#82326)

2026-05-29 18:20:45 -04:00

gateway-install-token.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

gateway-presence.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

gateway-readiness.test.ts

fix: accept device identity dashboard probes

2026-05-16 17:42:16 +01:00

gateway-readiness.ts

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

gateway-status.test.ts

test: dedupe gateway status mock reads

2026-05-12 20:02:55 +01:00

gateway-status.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

health-format.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

health.snapshot.test.ts

fix(health): clamp probe timeout

2026-05-31 01:37:44 -04:00

health.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

health.ts

chore(lint): enable more readability rules

2026-05-31 07:38:33 +01:00

health.types.ts

fix(context-engine): quarantine broken plugin engines

2026-05-29 02:32:06 +01:00

message-format.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

message.test.ts

Expose messageId in message CLI JSON output (#84191)

2026-05-19 23:30:24 +00:00

message.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

migrate.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

migrate.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

model-picker.runtime.ts

…

model-picker.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

model-picker.ts

Revert "Install Codex plugin on OpenAI model selection (#78799)" (#78878)

2026-05-07 18:13:59 +09:00

models.auth.provider-resolution.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

models.list.e2e.test.ts

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

models.set.e2e.test.ts

fix(models): resolve set aliases from runtime config [AI-assisted] (#83262)

2026-05-22 06:31:44 +00:00

node-daemon-install-helpers.test.ts

[Fix] Keep node systemd tokens out of unit files (#84815)

2026-05-21 06:48:15 +00:00

node-daemon-install-helpers.ts

[Fix] Keep node systemd tokens out of unit files (#84815)

2026-05-21 06:48:15 +00:00

node-daemon-runtime.ts

…

non-interactive-prompter.ts

chore: dedupe non-interactive setup prompters

2026-05-18 18:02:56 +08:00

oauth-env.ts

…

oauth-tls-preflight.doctor.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

oauth-tls-preflight.test.ts

refactor: make OpenAI Codex legacy doctor-only (#88605)

2026-05-31 12:58:01 +01:00

oauth-tls-preflight.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

onboard-auth.config-shared.test.ts

fix(onboard): preserve configured default model (#87000)

2026-05-27 02:52:41 +01:00

onboard-auth.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

onboard-channels.e2e.test.ts

fix(plugins): block untrusted workspace setup-only channel loads (#86953)

2026-06-01 09:25:56 +00:00

onboard-channels.post-write.test.ts

…

onboard-channels.ts

…

onboard-config.test.ts

fix(onboard): preserve agents.list and bindings on rerun

2026-05-27 10:45:14 +01:00

onboard-config.ts

…

onboard-core-auth-flags.ts

…

onboard-custom-config.test.ts

fix: preserve custom provider context limits (#79911)

2026-05-10 04:51:45 -04:00

onboard-custom-config.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

onboard-custom.test.ts

test: verify doctor and identity output

2026-05-11 17:29:32 +01:00

onboard-custom.ts

feat(wizard): localize onboarding flows

2026-05-15 15:33:27 +01:00

onboard-helpers.test.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

onboard-helpers.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

onboard-hooks.test.ts

feat(wizard): localize onboarding flows

2026-05-15 15:33:27 +01:00

onboard-hooks.ts

feat(wizard): localize onboarding flows

2026-05-15 15:33:27 +01:00

onboard-interactive.test.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

onboard-interactive.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

onboard-non-interactive.gateway-health-auth.test.ts

test: verify gateway SecretRef errors

2026-05-11 19:13:24 +01:00

onboard-non-interactive.gateway.test.ts

fix(onboard): preserve rerun config migrations

2026-05-27 18:05:07 +01:00

onboard-non-interactive.test-helpers.ts

…

onboard-non-interactive.ts

chore: dedupe non-interactive setup prompters

2026-05-18 18:02:56 +08:00

onboard-remote.test.ts

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

onboard-remote.ts

fix: reject partial numeric parsing

2026-05-28 10:51:32 -04:00

onboard-search.providers.test.ts

test: onboard search provider notes

2026-05-12 22:04:49 +01:00

onboard-search.test.ts

test: tighten onboard search assertions

2026-05-10 00:26:53 +01:00

onboard-search.ts

…

onboard-skills.test.ts

refactor: organize skills subsystem layout

2026-05-29 17:35:02 +01:00

onboard-skills.ts

refactor: centralize skills subsystem

2026-05-29 17:35:02 +01:00

onboard-types.ts

fix(docker): avoid printing gateway token

2026-05-23 11:54:53 +02:00

onboard.test.ts

test: assert onboard option errors

2026-05-11 13:19:12 +01:00

onboard.ts

fix(cli): clarify operator command errors

2026-05-09 08:11:34 +08:00

onboarding-plugin-install.test.ts

fix: fall back from official ClawHub artifact blocks (#83566)

2026-05-18 13:00:05 +01:00

onboarding-plugin-install.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

openai-model-default.test.ts

fix: normalize gemini 3.1 config writes

2026-05-08 07:26:42 +01:00

plugin-control-plane-cold-imports.test.ts

test: tighten small command matcher assertions

2026-05-10 00:32:13 +01:00

provider-auth-guidance.ts

refactor: unify OpenAI provider identity

2026-05-30 11:48:41 +02:00

provider-setup-cold-imports.test.ts

…

random-token.ts

…

reset.test.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

reset.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

runtime-plugin-install.ts

refactor: share runtime plugin install flow

2026-05-30 10:43:33 +02:00

sandbox-display.ts

…

sandbox-explain.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

sandbox-explain.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

sandbox-formatters.test.ts

…

sandbox-formatters.ts

…

sandbox.test.ts

test: dedupe sandbox mock read

2026-05-13 01:21:33 +01:00

sandbox.ts

fix(cli): clarify operator command errors

2026-05-09 08:11:34 +08:00

search-setup-cold-imports.test.ts

…

session-store-targets.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

session-store-targets.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

sessions-cleanup.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

sessions-cleanup.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

sessions-display-model.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

sessions-table.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

sessions-tail.test.ts

chore(lint): enable no-promise-executor-return

2026-05-31 23:06:13 +01:00

sessions-tail.ts

fix: persist ACP metadata in SQLite (#88724)

2026-05-31 18:38:51 +01:00

sessions.acp-model-display.test.ts

fix: persist ACP metadata in SQLite (#88724)

2026-05-31 18:38:51 +01:00

sessions.acp-runtime-metadata.test.ts

chore: remove more unused internal helpers

2026-05-30 23:26:29 +01:00

sessions.default-agent-store.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

sessions.kind-classification.test.ts

fix(sessions): classify spawn-child sessions correctly

2026-05-13 16:39:04 -07:00

sessions.model-resolution.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

sessions.test-helpers.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

sessions.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

sessions.ts

fix: persist ACP metadata in SQLite (#88724)

2026-05-31 18:38:51 +01:00

setup.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

setup.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status-all.ts

…

status-json-command.test.ts

…

status-json-command.ts

…

status-json-payload.test.ts

test: tighten command assertions

2026-05-11 15:59:03 +01:00

status-json-payload.ts

…

status-json-runtime.test.ts

test: dedupe status json mock read

2026-05-13 01:23:49 +01:00

status-json-runtime.ts

…

status-json.test.ts

test: speed up slow test suite (#87611)

2026-05-28 13:20:19 +01:00

status-json.ts

chore(lint): enable readability lint rules

2026-05-31 07:17:57 +01:00

status-overview-rows.test.ts

fix: surface update restart and plugin repair guidance

2026-05-15 07:32:29 +01:00

status-overview-rows.ts

fix: surface update restart and plugin repair guidance

2026-05-15 07:32:29 +01:00

status-overview-surface.test.ts

…

status-overview-surface.ts

fix: surface model pricing health degradation

2026-05-10 15:27:07 +01:00

status-overview-values.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status-overview-values.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status-runtime-shared.test.ts

fix(status): bound deep docker audit probes (#85476)

2026-05-23 12:08:48 +01:00

status-runtime-shared.ts

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

status-update-restart.test.ts

fix: surface update restart and plugin repair guidance

2026-05-15 07:32:29 +01:00

status-update-restart.ts

fix: surface update restart and plugin repair guidance

2026-05-15 07:32:29 +01:00

status.agent-local.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status.command-report-data.test.ts

fix(status): tolerate invalid retained task cleanup

2026-05-30 05:45:18 -04:00

status.command-report-data.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

status.command-report.test.ts

fix: quiet retained lost task noise (#86475)

2026-05-25 13:28:23 +01:00

status.command-report.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

status.command-sections.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

status.command-sections.ts

refactor: extract normalization core package

2026-05-31 01:33:00 +01:00

status.command.text-runtime.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

status.command.ts

chore(lint): enable readability lint rules

2026-05-31 07:17:57 +01:00

status.daemon.test.ts

fix(status): surface systemd gateway hygiene (#86976)

2026-05-26 22:29:20 +01:00

status.daemon.ts

…

status.format.test.ts

…

status.format.ts

chore(lint): enable no-useless-assignment

2026-05-31 22:40:48 +01:00

status.gateway-connection.test.ts

test: verify gateway fallback detail

2026-05-11 19:21:52 +01:00

status.gateway-connection.ts

…

status.gateway-probe.ts

…

status.link-channel.test.ts

…

status.link-channel.ts

…

status.node-mode.test.ts

…

status.node-mode.ts

…

status.scan-execute.test.ts

test: tighten channel status task assertions

2026-05-10 00:34:42 +01:00

status.scan-execute.ts

…

status.scan-memory.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status.scan-memory.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status.scan-overview.test.ts

test: dedupe status scan mock reads

2026-05-12 22:20:02 +01:00

status.scan-overview.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

status.scan-result.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status.scan-result.ts

…

status.scan.bootstrap-shared.ts

feat(gateway): support Tailscale Serve service names

2026-05-31 20:05:02 +01:00

status.scan.config-shared.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

status.scan.config-shared.ts

fix(doctor): warn when OPENCLAW_GATEWAY_TOKEN env overrides gateway.auth.token config (#74433)

2026-05-05 14:54:15 -04:00

status.scan.deps.runtime.ts

…

status.scan.fast-json.test.ts

fix(status): keep default JSON scan lean

2026-05-28 02:28:49 +01:00

status.scan.fast-json.ts

fix(status): keep default JSON scan lean

2026-05-28 02:28:49 +01:00

status.scan.runtime.ts

…

status.scan.shared.test.ts

feat(gateway): support Tailscale Serve service names

2026-05-31 20:05:02 +01:00

status.scan.shared.ts

feat(gateway): support Tailscale Serve service names

2026-05-31 20:05:02 +01:00

status.scan.test-helpers.ts

chore(lint): enable readability lint rules

2026-05-31 07:17:57 +01:00

status.scan.test.ts

fix(status): keep default status fast path bounded

2026-05-27 13:49:51 +01:00

status.scan.ts

fix(status): keep default status fast path bounded

2026-05-27 13:49:51 +01:00

status.service-summary.test.ts

test: dedupe status service mock read

2026-05-13 01:09:16 +01:00

status.service-summary.ts

…

status.summary.redaction.test.ts

fix(gateway): reject RPCs from invalidated device-token clients durin… (#70707)

2026-05-26 23:09:56 +01:00

status.summary.runtime.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

status.summary.runtime.ts

fix: persist ACP metadata in SQLite (#88724)

2026-05-31 18:38:51 +01:00

status.summary.test.ts

refactor: unify OpenAI provider identity (#88451)

2026-05-31 00:29:44 +01:00

status.summary.ts

refactor(cron): clarify sqlite store internals

2026-05-31 16:38:49 +01:00

status.test-support.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

status.test.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

status.ts

…

status.types.ts

fix: quiet retained lost task noise (#86475)

2026-05-25 13:28:23 +01:00

status.update.test.ts

…

status.update.ts

…

systemd-linger.ts

refactor: move terminal core into package (#88279)

2026-05-30 11:07:45 +02:00

tasks-audit-system.ts

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

tasks-json.test.ts

fix: make task persistence failures explicit

2026-06-01 00:12:28 +01:00

tasks-json.ts

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

tasks.test.ts

fix: make task persistence failures explicit

2026-06-01 00:12:28 +01:00

tasks.ts

refactor(cron): clarify sqlite store internals

2026-05-31 16:38:49 +01:00

test-runtime-config-helpers.ts

…

test-wizard-helpers.ts

…

text-format.test.ts

…

text-format.ts

…

uninstall.test.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00

uninstall.ts

fix(agents): guard vanished workspaces

2026-05-31 21:14:54 -04:00