Josh Avant 0ffcc308f2 Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417) ...

* Secrets: gate exec dry-run resolution behind --allow-exec

* Secrets: fix dry-run completeness and skipped exec audit semantics

* Secrets: require --allow-exec for exec-containing apply writes

* Docs: align secrets exec consent behavior

* Changelog: note secrets exec consent gating

2026-03-17 23:24:34 -05:00

..

browser-cli-actions-input

refactor(browser): dedupe browser and cli command wiring

2026-03-02 21:31:36 +00:00

cron-cli

feat(cron): support custom session IDs and auto-bind to current session (#16511)

2026-03-14 16:48:46 +11:00

daemon-cli

fix: address 6 review comments on PR #47719

2026-03-15 22:32:36 -07:00

gateway-cli

fix: land SIGUSR1 orphan recovery regressions (#47719) (thanks @joeykrug)

2026-03-15 22:32:36 -07:00

node-cli

refactor: share daemon install cli setup

2026-03-14 01:41:17 +00:00

nodes-cli

refactor: share cli install helpers

2026-03-14 00:30:14 +00:00

program

Agents: run bundle MCP tools in embedded Pi (#48611)

2026-03-16 21:46:05 -07:00

send-runtime

refactor: bundle lazy runtime surfaces

2026-03-17 00:00:45 -07:00

shared

refactor: centralize strict numeric parsing

2026-03-08 03:02:25 +00:00

update-cli

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

acp-cli.option-collisions.test.ts

test: deduplicate cli option collision fixtures

2026-03-10 20:34:54 +00:00

acp-cli.ts

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

argv.test.ts

CLI: unify routed config positional parsing

2026-03-02 21:11:53 -05:00

argv.ts

CLI: unify routed config positional parsing

2026-03-02 21:11:53 -05:00

banner-config-lite.ts

perf(cli): trim help startup imports

2026-03-15 18:20:52 -07:00

banner.test.ts

perf(cli): trim help startup imports

2026-03-15 18:20:52 -07:00

banner.ts

perf(cli): trim help startup imports

2026-03-15 18:20:52 -07:00

browser-cli-actions-input.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

browser-cli-actions-observe.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli-debug.ts

refactor: dedupe agent and browser cli helpers

2026-03-03 00:15:00 +00:00

browser-cli-examples.ts

fix(security): harden archive extraction (#16203)

2026-02-14 14:42:08 +01:00

browser-cli-inspect.test.ts

test(cli): dedupe inspect runner and cover snapshot/screenshot mode defaults

2026-02-21 21:40:39 +00:00

browser-cli-inspect.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

browser-cli-manage.test.ts

Browser: support non-Chrome existing-session profiles via userDataDir (#48170)

2026-03-16 14:21:22 +01:00

browser-cli-manage.timeout-option.test.ts

fix: stabilize browser existing-session control

2026-03-13 22:41:17 +00:00

browser-cli-manage.ts

Browser: support non-Chrome existing-session profiles via userDataDir (#48170)

2026-03-16 14:21:22 +01:00

browser-cli-resize.ts

refactor(cli): share browser resize output helper

2026-02-15 18:25:47 +00:00

browser-cli-shared.ts

refactor(cli): share browser resize request

2026-02-15 05:08:08 +00:00

browser-cli-state.cookies-storage.ts

refactor(browser): dedupe browser and cli command wiring

2026-03-02 21:31:36 +00:00

browser-cli-state.option-collisions.test.ts

refactor(browser): dedupe browser and cli command wiring

2026-03-02 21:31:36 +00:00

browser-cli-state.ts

CLI: resolve parent/subcommand option collisions (#18725)

2026-02-17 20:57:09 -05:00

browser-cli-test-helpers.ts

refactor(browser): dedupe browser and cli command wiring

2026-03-02 21:31:36 +00:00

browser-cli.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

browser-cli.ts

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

channel-auth.test.ts

fix: stop hardcoded channel fallback and auto-pick sole configured channel (#23357) (thanks @lbo728)

2026-02-22 11:21:43 +01:00

channel-auth.ts

fix: stop hardcoded channel fallback and auto-pick sole configured channel (#23357) (thanks @lbo728)

2026-02-22 11:21:43 +01:00

channel-options.test.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

channel-options.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

channels-cli.ts

feat: add nostr setup and unify channel setup discovery

2026-03-15 19:58:22 -07:00

clawbot-cli.ts

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

cli-name.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

cli-utils.test.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

cli-utils.ts

refactor: consolidate duplicate utility functions (#12439)

2026-02-08 23:59:43 -08:00

command-format.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

command-options.test.ts

test(cli): extend command option inheritance edge coverage

2026-02-21 21:40:39 +00:00

command-options.ts

CLI: resolve parent/subcommand option collisions (#18725)

2026-02-17 20:57:09 -05:00

command-secret-gateway.test.ts

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

command-secret-gateway.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

command-secret-resolution.coverage.test.ts

fix: restore full gate

2026-03-17 07:47:28 +00:00

command-secret-targets.test.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

command-secret-targets.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

completion-cli.test.ts

CLI/completion: fix generator OOM and harden plugin registries (#45537)

2026-03-15 12:14:30 -07:00

completion-cli.ts

CLI/completion: fix generator OOM and harden plugin registries (#45537)

2026-03-15 12:14:30 -07:00

completion-fish.test.ts

refactor(cli): extract fish completion line builders

2026-02-22 07:44:56 +00:00

completion-fish.ts

refactor(cli): extract fish completion line builders

2026-02-22 07:44:56 +00:00

config-cli.integration.test.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-cli.test.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-cli.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-set-dryrun.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-set-input.test.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

config-set-input.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-set-mode.test.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

config-set-parser.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

cron-cli.test.ts

fix(cron): consolidate announce delivery, fire-and-forget trigger, and minimal prompt mode (#40204)

2026-03-08 14:46:33 -07:00

cron-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

daemon-cli-compat.test.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

daemon-cli-compat.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

daemon-cli.coverage.test.ts

test(cli): update daemon coverage restart contract

2026-03-12 01:43:27 +00:00

daemon-cli.ts

refactor(cli): share gateway service subcommands

2026-02-15 04:44:23 +00:00

deps.test.ts

refactor: bundle lazy runtime surfaces

2026-03-17 00:00:45 -07:00

deps.ts

refactor: consolidate lazy runtime surfaces

2026-03-17 00:59:20 -07:00

devices-cli.test.ts

test(core): reduce mock reset overhead in targeted suites

2026-02-22 08:40:29 +00:00

devices-cli.ts

fix(terminal): stabilize skills table width across Terminal.app and iTerm (#42849)

2026-03-11 09:13:10 -04:00

directory-cli.ts

fix(terminal): stabilize skills table width across Terminal.app and iTerm (#42849)

2026-03-11 09:13:10 -04:00

dns-cli.ts

fix(terminal): stabilize skills table width across Terminal.app and iTerm (#42849)

2026-03-11 09:13:10 -04:00

docs-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

dotenv.ts

perf: reduce status json startup memory

2026-03-16 21:51:24 +05:30

exec-approvals-cli.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

exec-approvals-cli.ts

fix(terminal): stabilize skills table width across Terminal.app and iTerm (#42849)

2026-03-11 09:13:10 -04:00

gateway-cli.coverage.test.ts

test(cli): fix gateway coverage mock signature

2026-03-02 13:00:21 +00:00

gateway-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

gateway-rpc.ts

fix(cron): fix timeout, add timestamp validation, enable file sync

2026-02-04 01:03:59 -08:00

help-format.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

hooks-cli.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

hooks-cli.ts

fix(terminal): stabilize skills table width across Terminal.app and iTerm (#42849)

2026-03-11 09:13:10 -04:00

install-spec.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

log-level-option.test.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

log-level-option.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

logs-cli.test.ts

test(cli): use lightweight clear for logs gateway mock

2026-02-22 07:35:54 +00:00

logs-cli.ts

fix(logs): respect TZ env var for timestamp display, fix Windows timezone (#21859)

2026-03-02 08:44:37 -06:00

mcp-cli.test.ts

Agents: run bundle MCP tools in embedded Pi (#48611)

2026-03-16 21:46:05 -07:00

mcp-cli.ts

Commands: add /plugins chat command (#48765)

2026-03-16 22:57:44 -07:00

memory-cli.test.ts

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

memory-cli.ts

docs(cli): improve memory command examples (#31803)

2026-03-07 19:03:23 +03:00

message-secret-scope.test.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

message-secret-scope.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

models-cli.test.ts

refactor(plugins): simplify provider auth choice metadata

2026-03-15 23:01:12 -07:00

models-cli.ts

refactor(plugins): simplify provider auth choice metadata

2026-03-15 23:01:12 -07:00

node-cli.ts

fix: resolve ci failures

2026-01-18 08:45:29 +00:00

nodes-camera.test.ts

refactor(nodes): dedupe camera payload and node resolve helpers

2026-03-02 23:32:41 +00:00

nodes-camera.ts

refactor(nodes): dedupe camera payload and node resolve helpers

2026-03-02 23:32:41 +00:00

nodes-canvas.ts

refactor(cli): extract shared node media helpers

2026-02-18 23:34:15 +00:00

nodes-cli.coverage.test.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

nodes-cli.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

nodes-media-utils.test.ts

refactor(cli): extract shared node media helpers

2026-02-18 23:34:15 +00:00

nodes-media-utils.ts

Security: harden tool media paths

2026-02-20 13:32:49 -06:00

nodes-run.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

nodes-screen.ts

refactor(cli): extract shared node media helpers

2026-02-18 23:34:15 +00:00

npm-resolution.test.ts

refactor(cli): share pinned npm install record helper

2026-02-22 07:44:56 +00:00

npm-resolution.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

outbound-send-deps.ts

refactor: make OutboundSendDeps dynamic with channel-ID keys (#45517)

2026-03-14 02:42:21 -07:00

outbound-send-mapping.test.ts

refactor: make OutboundSendDeps dynamic with channel-ID keys (#45517)

2026-03-14 02:42:21 -07:00

outbound-send-mapping.ts

refactor: make OutboundSendDeps dynamic with channel-ID keys (#45517)

2026-03-14 02:42:21 -07:00

pairing-cli.test.ts

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

pairing-cli.ts

fix(terminal): stabilize skills table width across Terminal.app and iTerm (#42849)

2026-03-11 09:13:10 -04:00

parse-bytes.ts

fix: unify session maintenance and cron run pruning (#13083)

2026-02-09 20:42:35 -08:00

parse-duration.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

parse-timeout.test.ts

refactor: share gateway timeout parsing

2026-03-14 01:41:16 +00:00

parse-timeout.ts

refactor: share gateway timeout parsing

2026-03-14 01:41:16 +00:00

plugin-install-plan.test.ts

fix: prefer bundled channel plugins over npm duplicates (#40094)

2026-03-08 13:00:24 -05:00

plugin-install-plan.ts

fix: prefer bundled channel plugins over npm duplicates (#40094)

2026-03-08 13:00:24 -05:00

plugin-registry.test.ts

fix(plugins): late-binding subagent runtime for non-gateway load paths (#46648)

2026-03-16 14:27:54 -07:00

plugin-registry.ts

Plugins: share channel plugin id resolution

2026-03-16 13:31:20 +00:00

plugins-cli.ts

Plugins: centralize compatibility formatting

2026-03-17 20:33:12 -07:00

plugins-config.test.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

plugins-config.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

ports.test.ts

fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831)

2026-03-03 21:31:12 -06:00

ports.ts

fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831)

2026-03-03 21:31:12 -06:00

profile-utils.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

profile.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

profile.ts

fix(paths): respect OPENCLAW_HOME for all internal path resolution (#12091)

2026-02-08 16:20:13 -05:00

program.force.test.ts

fix(gateway): add Windows-compatible port detection using netstat fallback (openclaw#29239) thanks @ajay99511

2026-03-02 08:33:59 -06:00

program.nodes-basic.e2e.test.ts

test: move integration-heavy suites to e2e lane

2026-03-02 05:33:07 +00:00

program.nodes-media.e2e.test.ts

fix(security): fail-close node camera URL downloads

2026-03-02 23:23:39 +00:00

program.nodes-test-helpers.test.ts

test(cli): share nodes ios fixture helpers

2026-02-22 07:44:56 +00:00

program.nodes-test-helpers.ts

test(cli): share nodes ios fixture helpers

2026-02-22 07:44:56 +00:00

program.smoke.test.ts

fix: accept schtasks Last Result key on Windows (#47844) (thanks @MoerAI)

2026-03-15 22:20:34 -07:00

program.test-mocks.ts

test: fix setup wizard smoke mocks

2026-03-16 05:54:58 +00:00

program.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

progress.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

progress.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

prompt.test.ts

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

prompt.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

qr-cli.test.ts

test: share qr cli setup code helpers

2026-03-14 00:30:14 +00:00

qr-cli.ts

refactor: unify gateway SecretRef auth resolution paths

2026-03-07 23:27:50 +00:00

qr-dashboard.integration.test.ts

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

requirements-test-fixtures.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

respawn-policy.ts

perf(cli): speed up help/config paths and route config get/unset

2026-02-14 00:27:35 +00:00

route.test.ts

perf(status): defer heavy startup loading

2026-03-15 18:20:53 -07:00

route.ts

perf: lazy-load status route startup helpers

2026-03-16 22:07:59 +05:30

run-main.exit.test.ts

perf: reduce status json startup memory

2026-03-16 21:51:24 +05:30

run-main.profile-env.test.ts

perf: reduce status json startup memory

2026-03-16 21:51:24 +05:30

run-main.test.ts

CLI: reduce channels add startup memory (#46784)

2026-03-15 09:10:40 -07:00

run-main.ts

perf: reduce status json startup memory

2026-03-16 21:51:24 +05:30

sandbox-cli.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

secrets-cli.test.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

secrets-cli.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

security-cli.test.ts

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

security-cli.ts

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

skills-cli.commands.test.ts

refactor(cli): dedupe skills command report loading

2026-02-22 07:44:56 +00:00

skills-cli.format.ts

Merge remote-tracking branch 'origin/vincentkoc-code/fix-terminal-table-width'

2026-03-12 04:56:21 -04:00

skills-cli.formatting.test.ts

test: move local cli and config scenario suites out of e2e

2026-02-22 10:58:04 +00:00

skills-cli.test.ts

fix(terminal): sanitize skills JSON and fallback on legacy Windows (#43520)

2026-03-11 19:53:07 -04:00

skills-cli.ts

refactor(cli): dedupe skills command report loading

2026-02-22 07:44:56 +00:00

system-cli.test.ts

refactor(cli): dedupe system gateway action handling

2026-02-21 21:40:39 +00:00

system-cli.ts

refactor(cli): dedupe system gateway action handling

2026-02-21 21:40:39 +00:00

tagline.test.ts

feat(cli): add configurable banner tagline mode

2026-03-03 00:31:51 +00:00

tagline.ts

feat(cli): add configurable banner tagline mode

2026-03-03 00:31:51 +00:00

test-runtime-capture.ts

fix(cli): align runtime capture helper with RuntimeEnv signature

2026-02-18 13:34:03 +00:00

tui-cli.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

update-cli.option-collisions.test.ts

test: deduplicate cli option collision fixtures

2026-03-10 20:34:54 +00:00

update-cli.test.ts

test: stabilize full gate

2026-03-17 16:21:59 +00:00

update-cli.ts

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

wait.ts

chore: format to 2-space and bump changelog

2025-11-26 00:53:53 +01:00

webhooks-cli.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

windows-argv.ts

refactor(cli): share windows argv normalization

2026-02-14 15:39:46 +00:00