clawsweeper[bot] 2bec2caf0c fix(channel): harden local setup trust (#92175) ...

Summary:
- The PR extends channel setup trust enforcement and trusted catalog fallback from workspace-origin plugins to ... nfigured load paths into catalog discovery, and adds focused regression plus Docker/package proof coverage.
- PR surface: Source +190, Tests +892, Other +324. Total +1406 across 13 files.
- Reproducibility: yes. The source PR provides a concrete clean-main Docker/package path where an explicitly t ... ns unresolved, while the patched package resolves it and still blocks untrusted module and setup execution.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(channel): stabilize trusted catalog dts typing
- PR branch already contained follow-up commit before automerge: fix(channel): repair trusted catalog exclusions typing
- PR branch already contained follow-up commit before automerge: test(channel): cover local channel plugin trust
- PR branch already contained follow-up commit before automerge: chore(deps): refresh plugin shrinkwraps
- PR branch already contained follow-up commit before automerge: test(channel): route trust regression in command shard
- PR branch already contained follow-up commit before automerge: test(channel): remove e2e-named trust regression

Validation:
- ClawSweeper review passed for head eabee04d54.
- Required merge gates passed before the squash merge.

Prepared head SHA: eabee04d54
Review: https://github.com/openclaw/openclaw/pull/92175#issuecomment-4680798117

Co-authored-by: Mason Huang <masonxhuang@tencent.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com>

2026-06-11 13:48:41 +00:00

..

lib

fix: repair origin main CI failures

2026-06-10 23:49:41 +01:00

parallels

fix(build): fall back to Corepack for pnpm

2026-06-10 18:03:15 +09:00

agent-bundle-mcp-tools-docker-client.ts

fix(e2e): clean generated docker client state

2026-06-02 01:30:10 +02:00

agent-bundle-mcp-tools-docker.sh

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

agents-delete-shared-workspace-docker.sh

test(e2e): repair release docker smoke fixtures

2026-05-30 00:04:06 +10:00

browser-cdp-snapshot-docker.sh

…

build-image.sh

…

bun-global-install-smoke.sh

fix(e2e): preserve dist during bun restore

2026-06-07 07:54:05 +02:00

bundled-plugin-install-uninstall-docker.sh

fix(e2e): bound bundled plugin lifecycle commands

2026-06-01 19:18:26 +02:00

channel-plugin-trust-docker.sh

fix(channel): harden local setup trust (#92175)

2026-06-11 13:48:41 +00:00

codex-media-path-docker.sh

test: add codex media path docker e2e

2026-05-18 13:45:35 +01:00

codex-npm-plugin-live-docker.sh

fix(e2e): bound codex live failure logs

2026-06-07 10:44:06 +02:00

codex-on-demand-docker.sh

fix(e2e): bound package cli scenarios

2026-05-27 04:00:55 +02:00

commitments-safety-docker-client.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

commitments-safety-docker.sh

fix(e2e): route named container cleanup through helper

2026-05-26 11:32:25 +02:00

config-reload-source-docker.sh

…

crestodian-first-run-docker-client.ts

fix(e2e): clean generated docker client state

2026-06-02 01:30:10 +02:00

crestodian-first-run-docker.sh

fix(e2e): route named container cleanup through helper

2026-05-26 11:32:25 +02:00

crestodian-first-run-spec.json

…

crestodian-planner-docker-client.mjs

chore(lint): enable stricter error rules

2026-06-01 01:12:21 +01:00

crestodian-planner-docker.sh

fix(e2e): route named container cleanup through helper

2026-05-26 11:32:25 +02:00

crestodian-rescue-docker-client.ts

fix(e2e): clean generated docker client state

2026-06-02 01:30:10 +02:00

crestodian-rescue-docker.sh

fix(e2e): route named container cleanup through helper

2026-05-26 11:32:25 +02:00

cron-mcp-cleanup-docker-client.ts

fix(e2e): require cron cleanup success status

2026-06-07 07:43:33 +02:00

cron-mcp-cleanup-docker.sh

fix(e2e): bound mcp client logs

2026-06-07 11:44:55 +02:00

cron-mcp-cleanup-seed.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

docker-openai-seed.ts

…

Dockerfile

fix(docker): refresh Node base image digests (#84988)

2026-05-31 18:55:33 +01:00

Dockerfile.qr-import

fix(docker): refresh Node base image digests (#84988)

2026-05-31 18:55:33 +01:00

doctor-install-switch-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

gateway-network-docker.sh

fix(e2e): require gateway network TCP readiness

2026-06-06 16:46:57 +02:00

kitchen-sink-plugin-docker.sh

fix(e2e): report resource breaches on failed runs

2026-06-07 07:34:21 +02:00

kitchen-sink-rpc-docker.sh

fix(e2e): report resource breaches on failed runs

2026-06-07 07:34:21 +02:00

kitchen-sink-rpc-walk.mjs

test(e2e): widen kitchen sink RPC coverage

2026-06-10 16:42:47 +09:00

live-plugin-tool-docker.sh

fix(e2e): bound live plugin agent output

2026-06-07 05:09:31 +02:00

mcp-channel-limits.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-channels-docker-client.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-channels-docker.sh

fix(e2e): bound mcp client logs

2026-06-07 11:44:55 +02:00

mcp-channels-harness.ts

fix(e2e): share gateway websocket request handling

2026-06-04 08:29:33 +02:00

mcp-channels-seed.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-client-temp-state.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-code-mode-gateway-client.ts

test(e2e): share mcp code mode validation

2026-06-06 18:16:57 +02:00

mcp-code-mode-gateway-docker.sh

fix(e2e): bound mcp client logs

2026-06-07 11:44:55 +02:00

mcp-code-mode-gateway-live-docker.sh

fix(e2e): bound mcp client logs

2026-06-07 11:44:55 +02:00

mcp-code-mode-gateway-seed.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-connect-timeout.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-websocket-open.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mock-openai-server.mjs

docs: document e2e helpers

2026-06-05 00:04:03 -04:00

multi-node-update-docker.sh

fix(e2e): isolate multi-node artifacts

2026-06-03 09:36:43 +02:00

npm-onboard-channel-agent-docker.sh

fix(e2e): isolate release scenario mock state

2026-06-02 10:42:22 +02:00

npm-telegram-live-docker.sh

fix(e2e): bound telegram docker logs

2026-06-07 11:54:47 +02:00

npm-telegram-live-runner.ts

fix(test): gate package telegram on summary failures

2026-06-07 02:57:24 +02:00

npm-telegram-rtt-config.mjs

fix(e2e): require causal telegram rtt canary

2026-06-07 08:25:11 +02:00

npm-telegram-rtt-credentials.mjs

fix(e2e): bound credential payload chunks

2026-06-07 04:24:35 +02:00

npm-telegram-rtt-docker.sh

fix(e2e): bound telegram docker logs

2026-06-07 11:54:47 +02:00

npm-telegram-rtt-driver.mjs

fix(e2e): require causal telegram rtt canary

2026-06-07 08:25:11 +02:00

onboard-docker.sh

fix(e2e): report resource breaches on failed runs

2026-06-07 07:34:21 +02:00

openai-chat-tools-docker.sh

fix(e2e): preflight openai chat tools auth

2026-05-31 05:20:33 +02:00

openai-image-auth-docker-client.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

openai-image-auth-docker.sh

…

openai-web-search-minimal-docker.sh

…

openwebui-docker.sh

fix(e2e): guard openwebui docker resources

2026-06-07 05:48:01 +02:00

openwebui-probe.mjs

docs: document e2e helpers

2026-06-05 00:04:03 -04:00

parallels-linux-smoke.sh

fix(release): harden Parallels smoke validation

2026-06-10 08:27:59 +09:00

parallels-macos-smoke.sh

fix(release): harden Parallels smoke validation

2026-06-10 08:27:59 +09:00

parallels-npm-update-smoke.sh

fix(release): harden Parallels smoke validation

2026-06-10 08:27:59 +09:00

parallels-windows-smoke.sh

fix(release): harden Parallels smoke validation

2026-06-10 08:27:59 +09:00

plugin-binding-command-escape-docker.sh

fix(e2e): keep plugin binding escape smoke focused

2026-05-31 13:37:41 +02:00

plugin-binding-command-escape.Dockerfile

fix(docker): refresh Node base image digests (#84988)

2026-05-31 18:55:33 +01:00

plugin-lifecycle-matrix-docker.sh

fix(e2e): fail lifecycle resource spikes

2026-06-07 06:11:15 +02:00

plugin-update-unchanged-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

plugins-docker.sh

fix(e2e): show plugins docker sweep progress

2026-05-31 15:57:19 +02:00

qr-import-docker.sh

fix(e2e): route focused docker smokes through run helper

2026-05-26 11:24:15 +02:00

release-media-memory-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

release-plugin-marketplace-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

release-typed-onboarding-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

release-upgrade-user-journey-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

release-user-journey-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

secret-provider-integrations.mjs

fix(e2e): require secret probe success

2026-06-07 11:22:43 +02:00

session-runtime-context-docker-client.ts

chore(lint): enable stricter oxlint rules

2026-05-31 18:59:02 +01:00

session-runtime-context-docker.sh

fix(e2e): route named container cleanup through helper

2026-05-26 11:32:25 +02:00

skill-install-docker.sh

fix(e2e): make plugin sweep wrappers executable

2026-05-31 10:42:50 +02:00

status-corrupt-plugin-deps.sh

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

telegram-bot-api.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

telegram-user-crabbox-proof.ts

fix(e2e): bound telegram desktop proof logs

2026-06-07 10:42:28 +02:00

telegram-user-credential-io.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

telegram-user-credential-paths.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

telegram-user-credential.ts

fix(e2e): bound credential payload chunks

2026-06-07 04:24:35 +02:00

telegram-user-driver.py

fix(telegram): repair desktop proof login

2026-05-18 09:49:21 +05:30

update-channel-switch-docker.sh

fix(e2e): bound update channel logs

2026-06-07 10:33:14 +02:00

update-corrupt-plugin-docker.sh

fix(e2e): clean package docker artifacts on setup failure

2026-05-26 11:06:29 +02:00

upgrade-survivor-docker.sh

fix(e2e): bound upgrade survivor logs

2026-06-07 10:38:29 +02:00