100menotu001 a1d0b2709a Add security audit suppressions (#76949) ...

* Add security audit suppressions

* docs: list audit suppression dangerous flag

* fix(security): keep audit suppressions visible

* docs(changelog): thank audit suppression contributor

---------

Co-authored-by: Craig <froelich@craigs.mac.studio.froho>
Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-05-16 22:57:04 +01:00

..

cron-cli

Add wait mode for manual cron runs (#81929)

2026-05-15 20:17:48 -07:00

daemon-cli

fix(gateway): trace restart intent reasons

2026-05-16 21:23:06 +01:00

gateway-cli

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

node-cli

test: dedupe node cli mock read

2026-05-13 10:20:51 +01:00

nodes-cli

test: dedupe nodes approval timeout mock reads

2026-05-12 19:57:38 +01:00

program

fix(config): add --dry-run support to unset (#81895)

2026-05-16 11:09:42 -07:00

send-runtime

fix(cli): preserve lazy sender formatting

2026-05-14 14:39:23 +05:30

shared

…

update-cli

fix(update): preserve channel config across package repair

2026-05-17 01:32:37 +08:00

acp-cli.option-collisions.test.ts

test: dedupe acp cli mock reads

2026-05-12 21:58:47 +01:00

acp-cli.ts

fix(cli): clarify remaining required options

2026-05-09 09:24:59 +08:00

argv-invocation.test.ts

…

argv-invocation.ts

fix(cli): skip startup work for positional help

2026-04-27 00:24:06 -04:00

argv.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

argv.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

banner-config-lite.ts

…

banner.test.ts

fix: hide decorative emoji on unsupported terminals (#82556)

2026-05-16 12:39:13 +01:00

banner.ts

fix: hide decorative emoji on unsupported terminals (#82556)

2026-05-16 12:39:13 +01:00

capability-cli.test.ts

test: coalesce capability cli errors

2026-05-12 22:10:25 +01:00

capability-cli.ts

Make OpenAI auth login use ChatGPT by default (#80790)

2026-05-12 08:17:14 +09:00

channel-auth.test.ts

test: dedupe channel auth mock reads

2026-05-12 19:52:39 +01:00

channel-auth.ts

fix(cli): improve terminal error guidance

2026-05-10 10:28:47 +08:00

channel-options.test.ts

perf(cli): keep channel option help lightweight

2026-05-14 16:13:28 +08:00

channel-options.ts

perf(cli): keep channel option help lightweight

2026-05-14 16:13:28 +08:00

channels-cli.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

channels-cli.ts

fix: add channel status filtering (#80706)

2026-05-11 18:44:54 +01:00

clawbot-cli.ts

…

cli-name.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

cli-utils.test.ts

test: dedupe cli utility mock read

2026-05-13 06:11:23 +01:00

cli-utils.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

command-bootstrap.test.ts

chore: clean up plugin dependency leftovers

2026-05-01 21:37:08 +01:00

command-bootstrap.ts

refactor: unify lazy import loaders

2026-05-02 10:55:59 +01:00

command-catalog.ts

perf(cli): route plugin list json directly

2026-05-14 16:29:21 +08:00

command-config-resolution.runtime.ts

perf(commands): lazy-load agent secret resolution

2026-04-13 20:56:03 +01:00

command-config-resolution.test.ts

…

command-config-resolution.ts

…

command-execution-startup.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

command-execution-startup.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

command-format.ts

…

command-options.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

command-options.ts

chore(lint): enable unnecessary type parameter rule

2026-04-18 18:31:13 +01:00

command-path-matches.test.ts

…

command-path-matches.ts

refactor: trim local type exports

2026-05-02 01:44:51 +01:00

command-path-policy.test.ts

perf(cli): route plugin list json directly

2026-05-14 16:29:21 +08:00

command-path-policy.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

command-registration-policy.test.ts

fix(cli): keep help paths configless

2026-05-10 10:28:47 +08:00

command-registration-policy.ts

fix(cli): keep plugin help registration reachable

2026-05-10 04:03:45 +01:00

command-secret-gateway.test.ts

test: dedupe command secret gateway mock read

2026-05-13 10:23:44 +01:00

command-secret-gateway.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

command-secret-resolution.coverage.test.ts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

command-secret-targets.import.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

command-secret-targets.test.ts

test: check scoped command secret targets

2026-05-12 05:25:10 +01:00

command-secret-targets.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

command-source.test-helpers.test.ts

…

command-source.test-helpers.ts

…

command-startup-policy.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

command-startup-policy.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

completion-cli.test.ts

…

completion-cli.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

completion-cli.write-state.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

completion-fish.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

completion-fish.ts

…

completion-runtime.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

config-cli.integration.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

config-cli.test.ts

fix(config): add --dry-run support to unset (#81895)

2026-05-16 11:09:42 -07:00

config-cli.ts

fix(config): add --dry-run support to unset (#81895)

2026-05-16 11:09:42 -07:00

config-recovery-hints.ts

fix(gateway): clarify invalid config recovery hints

2026-05-12 19:01:59 -07:00

config-set-dryrun.ts

fix(config): add --dry-run support to unset (#81895)

2026-05-16 11:09:42 -07:00

config-set-input.test.ts

…

config-set-input.ts

docs(types): mark legacy aliases deprecated

2026-04-28 23:10:10 -07:00

config-set-mode.test.ts

test: tighten config set mode assertions

2026-05-11 04:46:48 +01:00

config-set-parser.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

container-target.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

container-target.ts

refactor: trim cli shape exports

2026-05-01 22:08:43 +01:00

cron-cli.test.ts

Add wait mode for manual cron runs (#81929)

2026-05-15 20:17:48 -07:00

cron-cli.ts

…

daemon-cli-compat.test.ts

perf(cli): narrow daemon and gateway cold paths

2026-04-14 17:35:26 +01:00

daemon-cli-compat.ts

Add Codex happy path prompt snapshots (#75807)

2026-05-03 00:59:55 +09:00

daemon-cli.coverage.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

daemon-cli.ts

…

deps.test.ts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

deps.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

deps.types.ts

…

devices-cli.lazy.test.ts

refactor(cli): lazy-load devices runtime

2026-05-14 16:02:42 +08:00

devices-cli.runtime.ts

fix(gateway): land linked diagnostics fixes

2026-05-17 02:05:02 +08:00

devices-cli.test.ts

fix(gateway): land linked diagnostics fixes

2026-05-17 02:05:02 +08:00

devices-cli.ts

refactor(cli): lazy-load devices runtime

2026-05-14 16:02:42 +08:00

directory-cli.test.ts

test: dedupe directory cli mock reads

2026-05-12 18:46:03 +01:00

directory-cli.ts

fix(slack): use live directory readers in cli

2026-05-02 03:04:29 +01:00

dns-cli.ts

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

docs-cli.ts

…

dotenv.ts

…

error-format.ts

fix(cli): compact gateway command failures

2026-05-10 15:37:57 +08:00

exec-approvals-cli.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

exec-approvals-cli.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

exec-policy-cli.test.ts

chore: update dependencies

2026-05-15 07:28:28 +01:00

exec-policy-cli.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

failure-output.test.ts

test: display cli output text

2026-05-12 21:54:12 +01:00

failure-output.ts

fix(cli): clarify startup failures

2026-05-09 08:05:05 +08:00

gateway-cli.coverage.test.ts

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

gateway-cli.ts

…

gateway-rpc.runtime.ts

fix(ci): stabilize full release validation

2026-04-28 20:14:14 +01:00

gateway-rpc.ts

refactor: unify lazy import loaders

2026-05-02 10:55:59 +01:00

gateway-rpc.types.ts

…

gateway-run-argv.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

gateway-secret-options.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

help-format.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

hooks-cli.test.ts

…

hooks-cli.ts

fix: hide decorative emoji on unsupported terminals (#82556)

2026-05-16 12:39:13 +01:00

install-spec.ts

…

log-level-option.test.ts

…

log-level-option.ts

…

logs-cli.runtime.ts

…

logs-cli.test.ts

test: check logs follow notices

2026-05-12 09:45:01 +01:00

logs-cli.ts

feat(cli/logs): announce --follow gateway reconnect and add JSON notice parity (#75372)

2026-05-03 17:55:58 +08:00

mcp-cli.test.ts

test: dedupe mcp cli mock reads

2026-05-13 03:25:53 +01:00

mcp-cli.ts

fix(cli): guide lookup misses

2026-05-09 08:05:06 +08:00

message-secret-scope.test.ts

test: tighten command empty result assertions

2026-05-09 03:57:18 +01:00

message-secret-scope.ts

…

model-auth-runtime-boundary.test.ts

fix(cli): lazy-load model auth runtime

2026-04-25 23:49:06 -07:00

models-cli.lazy.test.ts

refactor(cli): lazy-load models runtime

2026-05-14 15:48:11 +08:00

models-cli.runtime.ts

refactor(cli): lazy-load models runtime

2026-05-14 15:48:11 +08:00

models-cli.test.ts

fix: honor Codex auth order for OpenAI PI (#82605)

2026-05-16 15:26:27 +01:00

models-cli.ts

fix: honor Codex auth order for OpenAI PI (#82605)

2026-05-16 15:26:27 +01:00

native-hook-relay-cli.test.ts

feat(plugins): add before agent finalize hook (#71765)

2026-04-25 17:21:17 -07:00

native-hook-relay-cli.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

node-cli.ts

…

nodes-camera.test.ts

test: tighten nodes camera assertion

2026-05-09 12:57:03 +01:00

nodes-camera.ts

…

nodes-cli.coverage.test.ts

test: tighten cli assertion checks

2026-05-11 14:56:43 +01:00

nodes-cli.ts

…

nodes-media-utils.test.ts

test: tighten model picker empty assertions

2026-05-09 03:54:12 +01:00

nodes-media-utils.ts

…

nodes-screen.ts

…

npm-resolution.test.ts

test: tighten cli empty array assertions

2026-05-09 05:31:22 +01:00

npm-resolution.ts

…

outbound-send-deps.ts

…

outbound-send-mapping.test.ts

…

outbound-send-mapping.ts

refactor: trim auth cli type exports

2026-05-02 01:54:25 +01:00

pairing-cli.test.ts

test: guard pairing cli mock calls

2026-05-12 03:16:01 +01:00

pairing-cli.ts

fix(cli): improve terminal error guidance

2026-05-10 10:28:47 +08:00

parse-bytes.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

parse-duration.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

parse-timeout.test.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

parse-timeout.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

plugin-install-config-policy.ts

Refactor file access to use fs-safe primitives (#78255)

2026-05-06 05:03:11 +01:00

plugin-install-plan.test.ts

fix(plugins): quiet official npm install scan warnings

2026-05-04 02:40:55 -07:00

plugin-install-plan.ts

fix(plugins): quiet official npm install scan warnings

2026-05-04 02:40:55 -07:00

plugin-registry-loader.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

plugin-registry-loader.ts

refactor: unify lazy import loaders

2026-05-02 10:55:59 +01:00

plugin-registry.test.ts

test: dedupe cli plugin registry mock read

2026-05-13 05:55:05 +01:00

plugin-registry.ts

…

plugins-cli-test-helpers.ts

Remove codex-cli backend and migrate to Codex runtime

2026-05-14 10:07:18 +01:00

plugins-cli.install.test.ts

fix(channel): refresh wecom onboarding install

2026-05-13 13:52:05 +01:00

plugins-cli.lazy.test.ts

refactor(cli): lazy-load plugins runtime

2026-05-14 15:57:07 +08:00

plugins-cli.list.test.ts

refactor(gateway): collapse method metadata shims

2026-05-15 12:25:31 +01:00

plugins-cli.policy.test.ts

test: dedupe plugin policy mock read

2026-05-13 04:50:28 +01:00

plugins-cli.runtime.ts

refactor(cli): lazy-load plugins runtime

2026-05-14 15:57:07 +08:00

plugins-cli.ts

refactor(cli): lazy-load plugins runtime

2026-05-14 15:57:07 +08:00

plugins-cli.uninstall.test.ts

test: dedupe plugin uninstall mock read

2026-05-13 05:35:45 +01:00

plugins-cli.update.test.ts

Revert "Check ClawHub trust before plugin installs (#81307)" (#81363)

2026-05-13 19:34:18 +10:00

plugins-command-helpers.ts

feat(plugins): support npm pack installs

2026-05-06 09:16:49 +01:00

plugins-config.test.ts

…

plugins-config.ts

…

plugins-inspect-command.ts

fix(plugins): tolerate legacy inspect reports

2026-05-15 12:25:31 +01:00

plugins-install-command.ts

fix: repair source-only official plugin installs (#82425)

2026-05-15 23:04:15 -05:00

plugins-install-config.test.ts

fix: repair source-only official plugin installs (#82425)

2026-05-15 23:04:15 -05:00

plugins-install-persist.test.ts

test: display cli output text

2026-05-12 21:54:12 +01:00

plugins-install-persist.ts

fix(plugins): clean replaced managed installs

2026-05-04 03:28:53 -07:00

plugins-install-record-commit.test.ts

fix(config): return persisted config write responses (#81445)

2026-05-15 00:35:15 +03:00

plugins-install-record-commit.ts

fix(config): return persisted config write responses (#81445)

2026-05-15 00:35:15 +03:00

plugins-install-records.ts

…

plugins-list-command.ts

fix(cli): explain plugin and secrets failures

2026-05-09 08:08:26 +08:00

plugins-list-format.test.ts

fix(plugins): label registry list state as enabled

2026-04-25 10:35:34 -07:00

plugins-list-format.ts

fix(plugins): label registry list state as enabled

2026-04-25 10:35:34 -07:00

plugins-location-bridges.test.ts

test: tighten cli empty array assertions

2026-05-09 05:31:22 +01:00

plugins-location-bridges.ts

fix(plugins): catalog externalized npm installs

2026-05-02 13:30:07 -07:00

plugins-registry-refresh.ts

fix: hot reload plugin management changes (#75976)

2026-05-02 13:19:24 +00:00

plugins-search-command.test.ts

[codex] add Crestodian plugin management (#75869)

2026-05-02 03:12:38 +00:00

plugins-search-command.ts

perf: bound plugin and doctor selections

2026-05-08 08:14:29 +01:00

plugins-uninstall-command.ts

config: stop automatic writes and guard Nix mutators (#78047)

2026-05-06 14:43:32 +02:00

plugins-uninstall-selection.test.ts

…

plugins-uninstall-selection.ts

…

plugins-update-command.ts

Revert "Check ClawHub trust before plugin installs (#81307)" (#81363)

2026-05-13 19:34:18 +10:00

plugins-update-outcomes.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

plugins-update-selection.test.ts

fix(plugins): skip unchanged npm updates

2026-04-23 01:23:03 +01:00

plugins-update-selection.ts

fix(plugins): skip unchanged npm updates

2026-04-23 01:23:03 +01:00

ports.test.ts

test: tighten port probe assertions

2026-05-11 10:15:48 +01:00

ports.ts

perf(gateway): skip force port scan when free

2026-05-03 15:52:57 +01:00

profile-utils.ts

…

profile.test.ts

fix(cli): preserve Matrix QA profile flag

2026-04-27 05:57:37 +01:00

profile.ts

refactor: trim cli shape exports

2026-05-01 22:08:43 +01:00

program.force.test.ts

test: count cli command calls

2026-05-12 05:13:33 +01:00

program.nodes-basic.e2e.test.ts

test: dedupe nodes cli mock reads

2026-05-13 03:23:24 +01:00

program.nodes-media.e2e.test.ts

test: dedupe node media log mock read

2026-05-13 06:17:56 +01:00

program.nodes-test-helpers.test.ts

…

program.nodes-test-helpers.ts

…

program.smoke.test.ts

test: dedupe cli program mock reads

2026-05-12 22:05:30 +01:00

program.test-mocks.ts

refactor: trim cli program test exports

2026-05-01 12:39:10 +01:00

program.ts

…

progress.test.ts

test: check progress log output

2026-05-12 09:29:45 +01:00

progress.ts

fix(cli): avoid progress spinners in active TUI input (#75003)

2026-04-30 12:31:05 +02:00

prompt.test.ts

test: count prompt readline close

2026-05-12 04:45:41 +01:00

prompt.ts

fix(cli): handle closed plugin uninstall prompt (#73566)

2026-05-05 23:05:20 +08:00

proxy-cli.runtime.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

proxy-cli.runtime.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

proxy-cli.test.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

proxy-cli.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

qr-cli.test.ts

test: dedupe qr cli mock reads

2026-05-13 03:20:26 +01:00

qr-cli.ts

fix(media): default terminal QR to full-block output (#77820)

2026-05-12 07:03:12 +01:00

qr-dashboard.integration.test.ts

fix: gate dashboard on gateway readiness

2026-05-16 12:11:56 +01:00

requirements-test-fixtures.ts

refactor: trim cli test helper exports

2026-05-01 12:31:52 +01:00

respawn-policy.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

root-help-metadata.ts

fix(cli): keep startup help metadata on fast path

2026-04-26 21:11:23 -07:00

root-option-forward.ts

…

root-option-scan.ts

refactor: trim cli shape exports

2026-05-01 22:08:43 +01:00

root-option-value.ts

…

route.test.ts

test: dedupe cli route mock reads

2026-05-12 23:59:23 +01:00

route.ts

fix(cli): keep route-first json stdout clean

2026-04-27 20:51:50 +01:00

run-main-policy.ts

refactor(cli): mark parent help in descriptors

2026-05-14 15:11:33 +08:00

run-main.exit.test.ts

Adopt Proxyline for managed proxy routing

2026-05-15 22:51:36 +01:00

run-main.profile-env.test.ts

test: update run-main env mock

2026-04-28 01:59:25 +01:00

run-main.test.ts

refactor(cli): mark parent help in descriptors

2026-05-14 15:11:33 +08:00

run-main.ts

fix(cli): keep plugin json output parseable

2026-05-14 19:44:38 +08:00

sandbox-cli.ts

…

secrets-cli.test.ts

test: count secrets configure prompt

2026-05-12 04:28:15 +01:00

secrets-cli.ts

fix(cli): clarify terminal recovery errors

2026-05-10 14:23:15 +08:00

security-cli.test.ts

test: dedupe security cli mock reads

2026-05-13 03:19:01 +01:00

security-cli.ts

Add security audit suppressions (#76949)

2026-05-16 22:57:04 +01:00

skills-cli.commands.test.ts

test: tighten cli output assertions

2026-05-12 05:16:58 +01:00

skills-cli.format.ts

fix: hide decorative emoji on unsupported terminals (#82556)

2026-05-16 12:39:13 +01:00

skills-cli.formatting.test.ts

test: check skills json formatting

2026-05-12 10:01:24 +01:00

skills-cli.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

skills-cli.ts

Add agent visibility to skills check (#75983)

2026-05-02 20:50:38 +02:00

startup-metadata.test.ts

fix(cli): keep startup help metadata on fast path

2026-04-26 21:11:23 -07:00

startup-metadata.ts

perf: cache startup package metadata

2026-05-02 16:11:05 +01:00

system-cli.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

system-cli.ts

feat(wake): expose typed sessionKey on wake protocol + system event CLI

2026-05-11 17:24:30 +01:00

tagline.test.ts

test: assert indexed tagline

2026-05-12 04:52:12 +01:00

tagline.ts

refactor: trim cli tagline exports

2026-05-02 01:11:18 +01:00

test-runtime-capture.ts

test: guard runtime capture mock calls

2026-05-12 08:15:26 +01:00

test-runtime-mock.ts

test: share CLI runtime mock helper

2026-04-23 18:46:43 +01:00

tui-cli.ts

fix: avoid CLI startup warmup leaks

2026-04-26 10:41:03 +01:00

update-cli.option-collisions.test.ts

feat: add update finalization command

2026-05-15 01:09:06 +01:00

update-cli.test-helpers.test.ts

…

update-cli.test-helpers.ts

…

update-cli.test.ts

fix(update): preserve channel config across package repair

2026-05-17 01:32:37 +08:00

update-cli.ts

feat: add update finalization command

2026-05-15 01:09:06 +01:00

wait.ts

…

webhooks-cli.ts

fix(cli): clarify remaining required options

2026-05-09 09:24:59 +08:00

windows-argv.ts

…