Pavan Kumar Gondhi 2d126fc623 fix(infra): expand host env security policy denylist [AI] (#63277) ...

* fix: address issue

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: close host env inherited sanitization gap

* fix: enforce host env reported baseline coverage

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge

2026-04-10 11:36:39 +05:30

..

clawdock

…

dev

…

docker

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

docs-i18n

docs-i18n: avoid ambiguous body-only wrapper unwrap (#63808)

2026-04-10 00:01:17 +08:00

e2e

test: harden macOS npm update smoke fallback

2026-04-09 04:07:45 +01:00

k8s

…

lib

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

podman

…

pr-lib

…

pre-commit

…

repro

plugin-sdk: drop investigative weixin repro harness

2026-04-09 01:35:15 +01:00

systemd

…

test-planner

…

analyze-plugin-sdk-usage.ts

…

anthropic-prompt-probe.ts

feat(agents): add prompt override and heartbeat controls

2026-04-07 07:34:50 +01:00

audit-seams.mjs

…

auth-monitor.sh

…

bench-cli-startup.ts

…

bench-model.ts

…

bench-test-changed.mjs

…

build_icon.sh

…

build-all.mjs

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

build-and-run-mac.sh

…

build-docs-list.mjs

…

build-stamp.d.mts

…

build-stamp.mjs

…

bundle-a2ui.mjs

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

bundle-a2ui.sh

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

canvas-a2ui-copy.ts

…

changelog-add-unreleased.ts

…

changelog-to-html.sh

…

check-architecture-smells.mjs

…

check-channel-agnostic-boundaries.mjs

…

check-cli-startup-memory.mjs

…

check-composite-action-input-interpolation.py

…

check-docs-i18n-glossary.mjs

…

check-extension-package-tsc-boundary.mjs

perf(plugins): report slow boundary compiles

2026-04-08 08:52:51 +01:00

check-extension-plugin-sdk-boundary.mjs

perf(test): split support boundary shard

2026-04-07 09:12:26 +01:00

check-file-utils.ts

…

check-gateway-watch-regression.mjs

…

check-import-cycles.ts

ci: add runtime import cycle guard

2026-04-09 03:56:22 +01:00

check-ingress-agent-owner-context.mjs

…

check-live-cache.ts

…

check-no-conflict-markers.mjs

…

check-no-extension-src-imports.ts

…

check-no-extension-test-core-imports.ts

…

check-no-monolithic-plugin-sdk-entry-imports.ts

…

check-no-pairing-store-group-auth.mjs

…

check-no-random-messaging-tmp.mjs

…

check-no-raw-channel-fetch.mjs

fix(ci): clear check-additional follow-up regressions (#63934)

2026-04-09 23:47:59 +01:00

check-no-raw-window-open.mjs

…

check-no-register-http-handler.mjs

…

check-pairing-account-scope.mjs

…

check-plugin-extension-import-boundary.mjs

…

check-plugin-sdk-exports.mjs

…

check-plugin-sdk-subpath-exports.mjs

…

check-sdk-package-extension-import-boundary.mjs

test(boundary): guard sdk and package imports from bundled plugin paths

2026-04-09 09:10:05 +01:00

check-src-extension-import-boundary.mjs

test(boundary): guard src imports from bundled plugin paths

2026-04-09 09:30:45 +01:00

check-ts-max-loc.ts

…

check-web-fetch-provider-boundaries.mjs

…

check-web-search-provider-boundaries.mjs

…

check-webhook-auth-body-order.mjs

…

ci-changed-scope.d.mts

…

ci-changed-scope.mjs

…

claude-auth-status.sh

…

clawlog.sh

…

clawtributors-map.json

…

codesign-mac-app.sh

…

codespell-dictionary.txt

…

codespell-ignore.txt

…

committer

…

control-ui-i18n.ts

…

copy-bundled-plugin-metadata.d.mts

…

copy-bundled-plugin-metadata.mjs

…

copy-export-html-templates.ts

…

copy-hook-metadata.ts

…

copy-plugin-sdk-root-alias.mjs

…

create-dmg.sh

…

cron_usage_report.ts

…

debug-claude-usage.ts

refactor: dedupe bluebubbles and zalouser readers

2026-04-07 08:40:34 +01:00

docs-link-audit.d.mts

…

docs-link-audit.mjs

…

docs-list.js

…

docs-spellcheck.sh

…

docs-sync-publish.mjs

…

firecrawl-compare.ts

…

generate-base-config-schema.ts

…

generate-bundled-channel-config-metadata.ts

…

generate-bundled-provider-auth-env-vars.d.mts

…

generate-config-doc-baseline.ts

…

generate-host-env-security-policy-swift.mjs

fix(infra): expand host env security policy denylist [AI] (#63277)

2026-04-10 11:36:39 +05:30

generate-plugin-sdk-api-baseline.ts

…

generate-runtime-sidecar-paths-baseline.ts

…

generate-secretref-credential-matrix.ts

…

gh-read

feat: add gh-read GitHub app helper

2026-04-08 00:09:07 +01:00

gh-read.ts

feat: add gh-read GitHub app helper

2026-04-08 00:09:07 +01:00

ghsa-patch.mjs

…

install.ps1

…

install.sh

fix: keep installer doctor non-interactive

2026-04-08 11:47:59 +01:00

ios-asc-keychain-setup.sh

…

ios-beta-archive.sh

…

ios-beta-prepare.sh

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-beta-release.sh

…

ios-configure-signing.sh

…

ios-pin-version.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-sync-versioning.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-team-id.sh

…

ios-version.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-write-version-xcconfig.sh

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

label-open-issues.ts

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

live-docker-normalize-config.ts

…

load-channel-config-surface.ts

…

make_appcast.sh

…

mobile-reauth.sh

…

notarize-mac-artifact.sh

…

npm-runner.mjs

…

openclaw-npm-postpublish-verify.ts

fix: harden bundled plugin dependency release checks

2026-04-08 15:15:44 +01:00

openclaw-npm-publish.sh

…

openclaw-npm-release-check.ts

…

openclaw-prepack.ts

add bundled channel prepack smoke

2026-04-07 23:09:26 -05:00

package-mac-app.sh

…

package-mac-dist.sh

…

plugin-clawhub-publish.sh

…

plugin-clawhub-release-check.ts

…

plugin-clawhub-release-plan.ts

…

plugin-npm-publish.sh

…

plugin-npm-release-check.ts

…

plugin-npm-release-plan.ts

…

pnpm-runner.d.ts

…

pnpm-runner.mjs

…

postinstall-bundled-plugins.mjs

fix(build): honor postinstall disable flag

2026-04-08 21:01:53 +05:30

pr

…

pr-merge

…

pr-prepare

…

pr-review

…

prepare-extension-package-boundary-artifacts.mjs

build: narrow plugin SDK declaration build

2026-04-08 20:00:51 +01:00

prepush-ci.sh

…

print-cli-backend-live-metadata.ts

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

process-warning-filter.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

profile-extension-memory.mjs

…

protocol-gen-swift.ts

…

protocol-gen.ts

…

qa-e2e.ts

…

qa-lab-up.ts

feat: add fast qa lab ui refresh mode

2026-04-07 09:45:11 +01:00

readability-basic-compare.ts

…

recover-orphaned-processes.sh

…

release-check.ts

fix: harden bundled plugin dependency release checks

2026-04-08 15:15:44 +01:00

restart-mac.sh

…

run-bundled-extension-oxlint.mjs

…

run-extension-channel-oxlint.mjs

…

run-node.d.mts

…

run-node.mjs

…

run-openclaw-podman.sh

…

run-oxlint.mjs

…

run-tsgo.mjs

…

run-vitest-profile.mjs

…

run-vitest.mjs

fix(test): suppress vitest plugin timing noise

2026-04-07 10:54:20 +01:00

runtime-postbuild-shared.mjs

…

runtime-postbuild.mjs

…

sandbox-browser-entrypoint.sh

fix: prevent sandbox browser CDP startup hangs (#62873) (thanks @Syysean)

2026-04-10 10:26:38 +05:30

sandbox-browser-setup.sh

…

sandbox-common-setup.sh

…

sandbox-setup.sh

…

setup-auth-system.sh

…

sparkle-build.ts

…

sqlite-vec-smoke.mjs

…

stage-bundled-plugin-runtime-deps.mjs

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

stage-bundled-plugin-runtime.d.mts

…

stage-bundled-plugin-runtime.mjs

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

sync-labels.ts

…

sync-moonshot-docs.ts

…

sync-plugin-sdk-exports.mjs

…

sync-plugin-versions.ts

…

termux-auth-widget.sh

…

termux-quick-auth.sh

…

termux-sync-widget.sh

…

test-built-bundled-channel-entry-smoke.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

test-built-plugin-singleton.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

test-cleanup-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-cli-startup-bench-budget.mjs

…

test-extension-batch.mjs

…

test-extension.mjs

…

test-force.ts

…

test-hotspots.mjs

…

test-install-sh-docker.sh

fix: keep installer doctor non-interactive

2026-04-08 11:47:59 +01:00

test-install-sh-e2e-docker.sh

test: harden Docker install e2e agent lane

2026-04-08 07:15:51 +01:00

test-live-acp-bind-docker.sh

test: add gemini acp bind docker coverage

2026-04-07 07:59:45 +01:00

test-live-build-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live-cli-backend-docker.sh

fix: harden claude-cli live switch smoke

2026-04-07 16:05:54 +01:00

test-live-gateway-models-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live-media.ts

…

test-live-models-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live.mjs

…

test-perf-budget.mjs

…

test-projects.mjs

test: keep local full suite serial by default

2026-04-09 03:23:00 +01:00

test-projects.test-support.d.mts

…

test-projects.test-support.mjs

test: run local full suite project shards in parallel

2026-04-09 02:26:22 +01:00

test-report-utils.mjs

…

test-shell-completion.ts

…

test-unit-fast-audit.mjs

Tests: add unit-fast Vitest lane

2026-04-07 10:03:42 +01:00

test-update-cli-startup-bench.mjs

…

test-voicecall-closedloop.mjs

…

tool-display.ts

…

ts-topology.ts

…

tsdown-build.mjs

fix(build): keep tsdown prune best-effort

2026-04-08 21:16:49 +05:30

ui.js

…

update-clawtributors.ts

…

update-clawtributors.types.ts

…

vitest-process-group.mjs

…

watch-node.d.mts

…

watch-node.mjs

…

windows-cmd-helpers.mjs

…

write-build-info.ts

…

write-cli-compat.ts

…

write-cli-startup-metadata.ts

test: allow slower CLI metadata help rendering

2026-04-09 10:13:20 +01:00

write-official-channel-catalog.d.mts

…

write-official-channel-catalog.mjs

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

write-plugin-sdk-entry-dts.ts

perf(plugins): skip fresh boundary dts prep

2026-04-07 12:19:49 +01:00

zai-fallback-repro.ts

…