Vincent Koc 54cc90b1b1 fix(release): publish ClawHub bootstrap artifacts immutably (#103809) ...

* fix(release): harden ClawHub bootstrap

* fix(release): centralize publication artifact verification

* fix(release): harden publication artifact verification

* fix(release): lock ClawHub bootstrap toolchain

* test(release): assert locked ClawHub binary

* fix(release): pack with trusted ClawHub harness

* fix(release): bound beta verifier artifact reads

* fix(release): bind target and tooling identities

* fix(release): stabilize signed package ordering

* fix(release): bind ClawHub pretag proof

* fix(release): bind ClawHub OIDC readback

* fix(release): bind ClawHub OIDC readback

2026-07-10 13:33:20 -07:00

..

ts-topology

…

actions-artifact-archive.mjs

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

android-fastlane.sh

android: add play release upload lane

2026-06-16 19:13:44 +02:00

android-version.ts

refactor(deadcode): localize script helper types (#101917)

2026-07-07 16:59:51 -07:00

arg-utils.mjs

fix(qa): reject duplicate single-value flags

2026-06-23 14:01:29 +02:00

bounded-response.mjs

fix(scripts): reject unsafe bounded response lengths

2026-06-20 04:04:40 +08:00

bounded-response.ts

fix(scripts): reject unsafe bounded response lengths

2026-06-20 04:04:40 +08:00

budget-number-args.mjs

fix(qa): reject duplicate single-value flags

2026-06-23 14:01:29 +02:00

build-metadata.sh

feat: show build identity in About screens (#103595)

2026-07-10 10:42:36 +01:00

bundled-extension-manifest.ts

chore(deadcode): remove unused plugin version validator

2026-06-22 15:37:50 +08:00

bundled-plugin-build-entries-types.d.ts

fix(docker): package selected external plugins in source-built images (#103629)

2026-07-10 13:00:50 +01:00

bundled-plugin-build-entries.d.mts

…

bundled-plugin-build-entries.mjs

fix(docker): package selected external plugins in source-built images (#103629)

2026-07-10 13:00:50 +01:00

bundled-plugin-paths.mjs

…

bundled-plugin-source-utils.mjs

…

bundled-runtime-sidecar-paths.json

feat(plugins): externalize additional official plugins (#95683)

2026-06-22 16:12:51 +08:00

callsite-guard.mjs

…

changed-extensions.mjs

…

channel-contract-test-plan.mjs

…

check-timing-summary.mjs

…

ci-node-test-plan.mjs

perf(ci): shorten stalled gateway retry

2026-07-05 20:40:16 -04:00

clawhub-bootstrap-artifact.mjs

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

codex-app-server-protocol-source.ts

refactor(deadcode): localize test and tooling helpers (#101875)

2026-07-07 13:45:26 -07:00

config-boundary-guard.d.mts

…

config-boundary-guard.mjs

…

copy-assets.ts

refactor(deadcode): localize script helper types (#101917)

2026-07-07 16:59:51 -07:00

dependency-ownership.json

fix: improve agent runtime correctness from upstream Pi (#99949)

2026-07-04 09:08:37 -04:00

deprecated-config-api-guard.d.mts

…

deprecated-config-api-guard.mjs

…

deprecated-plugin-sdk-usage.mjs

…

dev-tooling-safety.ts

…

direct-run.mjs

…

docker-build.sh

test: speed up and stabilize full suite

2026-07-05 08:00:23 -04:00

docker-e2e-container.sh

fix(e2e): validate docker pids limits

2026-06-19 00:46:17 +02:00

docker-e2e-image.sh

fix(release): make validation proof no-write (#103737)

2026-07-10 08:18:44 -07:00

docker-e2e-json-artifacts.mjs

fix(scripts): share Docker E2E artifact bounds

2026-06-16 07:39:44 +02:00

docker-e2e-logs.sh

test: speed up and stabilize full suite

2026-07-05 08:00:23 -04:00

docker-e2e-package.sh

fix(release): contain installer artifact restores (#103608)

2026-07-10 08:27:24 -07:00

docker-e2e-plan.mjs

Scope agent cron operations to the calling agent (#96883)

2026-06-26 21:41:14 -05:00

docker-e2e-scenarios.mjs

fix(docker): package selected external plugins in source-built images (#103629)

2026-07-10 13:00:50 +01:00

docker-plugin-selection.mjs

fix(docker): package selected external plugins in source-built images (#103629)

2026-07-10 13:00:50 +01:00

error-format.mjs

…

extension-import-boundary-checker.mjs

…

extension-package-boundary.ts

refactor(qa): add canonical live channel adapters (#99707)

2026-07-06 09:24:34 -07:00

extension-source-classifier.d.mts

…

extension-source-classifier.mjs

…

extension-test-plan.mjs

perf(test): reuse extension test inventory

2026-07-06 23:23:09 -04:00

extension-vitest-paths.mjs

…

format-generated-module.mjs

…

gateway-bench-child.ts

refactor(deadcode): localize script helper types (#101917)

2026-07-07 16:59:51 -07:00

gateway-bench-probes.ts

refactor(deadcode): localize test and tooling helpers (#101875)

2026-07-07 13:45:26 -07:00

gateway-ws-client.ts

refactor(deadcode): localize script helper types (#101917)

2026-07-07 16:59:51 -07:00

generated-output-utils.mjs

refactor(scripts): remove dead helper exports

2026-06-18 16:29:56 +08:00

guard-inventory-utils.mjs

…

host-timeout.sh

fix(scripts): honor gtimeout in host setup wrappers

2026-06-20 20:07:50 +02:00

import-cycle-graph.ts

…

ios-fastlane.sh

feat: configure ios app store release upload

2026-06-15 19:27:55 +02:00

ios-version.ts

chore(ios): generate release artifacts locally

2026-07-01 22:05:26 -05:00

kova-report-gate.mjs

fix(ci): remove duplicate Kova gate helper (#103082)

2026-07-09 20:28:35 +01:00

kova-report-publish-files.mjs

fix(ci): harden release performance evidence (#103790)

2026-07-10 16:59:10 +01:00

kova-report-selector.mjs

fix(ci): select full Kova performance reports (#103863)

2026-07-10 19:01:30 +01:00

kova-workflow-evidence.mjs

fix(ci): harden release performance evidence (#103790)

2026-07-10 16:59:10 +01:00

list-test-files.mjs

…

live-docker-auth.sh

fix(live): validate docker pids limits

2026-06-19 00:54:57 +02:00

live-docker-stage.sh

…

local-build-metadata-paths.d.mts

…

local-build-metadata-paths.mjs

…

local-build-metadata.d.mts

…

local-build-metadata.mjs

…

local-heavy-check-runtime.mjs

refactor: remove dead code and consolidate repeated paths (#100650)

2026-07-06 02:24:37 -07:00

managed-child-process.mjs

fix(scripts): resolve Windows cmd shim launcher

2026-06-21 11:15:14 +02:00

merge-head-diff-base.mjs

fix(test): reject diff ref flag values

2026-06-21 19:59:55 +02:00

mintlify-accordion.mjs

…

npm-pack-budget.d.mts

…

npm-pack-budget.mjs

…

npm-publish-plan.mjs

ci(release): add plugin npm artifact preflight (#103759)

2026-07-10 09:39:10 -07:00

npm-verify-exec.ts

refactor(deadcode): localize script helper types (#101917)

2026-07-07 16:59:51 -07:00

numeric-options.mjs

…

official-external-channel-catalog.json

chore(catalog): bump Weixin plugin to 2.4.6 (#96801)

2026-06-27 08:12:12 +08:00

official-external-plugin-catalog.json

feat: add Control UI plugin management (#103176)

2026-07-10 11:56:44 +01:00

official-external-provider-catalog.json

fix(providers): align Meta Model API contract (#103680)

2026-07-10 05:24:14 -07:00

openclaw-e2e-instance.sh

refactor(e2e): remove unused shell wrappers

2026-06-23 05:56:31 +08:00

openclaw-release-clawhub-plan.ts

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

openclaw-test-state.mjs

refactor(deadcode): localize test and tooling helpers (#101875)

2026-07-07 13:45:26 -07:00

optional-bundled-clusters-types.d.ts

…

optional-bundled-clusters.d.mts

…

optional-bundled-clusters.mjs

feat(raft): add wake bridge channel

2026-06-22 14:36:12 +08:00

package-dist-imports.mjs

fix(release): track CommonJS package dist imports

2026-06-23 10:31:05 +02:00

package-root-args.mjs

fix(scripts): reject short flag package roots

2026-06-21 21:27:57 +02:00

pairing-guard-context.mjs

…

plain-gh.mjs

refactor(deadcode): localize script constants (#101892)

2026-07-07 15:17:41 -07:00

plain-gh.sh

fix(scripts): bypass gh wrapper shims

2026-06-26 07:51:07 +01:00

plistbuddy.sh

…

plugin-clawhub-release.ts

test: speed up and stabilize full suite

2026-07-05 08:00:23 -04:00

plugin-contract-test-plan.mjs

…

plugin-gateway-gauntlet.mjs

fix(qa): install gauntlet plugin requirements

2026-06-16 06:59:58 +02:00

plugin-npm-package-manifest.mjs

fix(release): validate plugin manifest runner args

2026-06-20 22:23:30 +02:00

plugin-npm-release.ts

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

plugin-npm-runtime-assets.mjs

…

plugin-npm-runtime-build.mjs

refactor(deadcode): localize test and tooling helpers (#101875)

2026-07-07 13:45:26 -07:00

plugin-package-dependencies.mjs

fix(test): route plugin dependency helpers

2026-06-21 17:32:43 +02:00

plugin-prerelease-test-plan.mjs

…

plugin-sdk-declaration-budget.mjs

feat: add Control UI plugin management (#103176)

2026-07-10 11:56:44 +01:00

plugin-sdk-deprecated-barrel-subpaths.json

…

plugin-sdk-deprecated-public-subpaths.json

…

plugin-sdk-doc-metadata.ts

refactor(plugin-sdk): consolidate tool result helpers (#99740)

2026-07-04 16:50:44 -07:00

plugin-sdk-entries.d.mts

…

plugin-sdk-entries.mjs

…

plugin-sdk-entrypoints.json

refactor(plugin-sdk): consolidate tool result helpers (#99740)

2026-07-04 16:50:44 -07:00

plugin-sdk-private-local-only-subpaths.json

fix(sdk): keep sqlite lifecycle helpers private

2026-06-19 01:20:06 +08:00

policy-config-coverage.jsonc

policy: track node deny command coverage

2026-07-04 15:06:10 -07:00

record-shared.mjs

…

regexp.mjs

refactor(scripts): share regexp literal escaping (#99778)

2026-07-03 20:20:28 -07:00

release-beta-verifier.ts

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

release-upgrade-baseline.mjs

fix(scripts): reject short flag boundary values

2026-06-21 22:26:44 +02:00

report-cli-helpers.mjs

fix(qa): reject duplicate report artifacts

2026-06-23 13:38:40 +02:00

restart-mac-gateway.sh

…

run-extension-oxlint.mjs

refactor: remove dead code and consolidate repeated paths (#100650)

2026-07-06 02:24:37 -07:00

session-accessor-debt-baseline.json

refactor(sessions): move parent-session forking behind the accessor boundary (#101699)

2026-07-07 10:47:02 -07:00

sleep.d.mts

refactor: consolidate async timing helpers (#99721)

2026-07-03 17:58:15 -07:00

sleep.mjs

refactor: consolidate async timing helpers (#99721)

2026-07-03 17:58:15 -07:00

source-file-scan-cache.mjs

refactor(deadcode): localize script constants (#101892)

2026-07-07 15:17:41 -07:00

stable-release-closeout.mjs

fix(release): keep validation evidence immutable across reruns (#103906)

2026-07-10 20:16:19 +01:00

static-extension-assets.mjs

…

swift-toolchain.sh

fix(mac): share Swift packaging preflight

2026-07-04 08:00:15 +02:00

test-group-report.mjs

fix(codeql): clean OpenClaw quality findings

2026-06-22 19:11:46 +08:00

ts-guard-utils.mjs

…

tsdown-output-roots.d.mts

…

tsdown-output-roots.mjs

refactor: extract reusable AI runtime package (#99059)

2026-07-05 01:56:40 -04:00

tsgo-sparse-guard.mjs

feat: refactor the Control UI architecture

2026-07-04 23:19:38 +01:00

version-script-args.ts

refactor(deadcode): localize script helper types (#101917)

2026-07-07 16:59:51 -07:00

vitest-batch-runner.mjs

fix(test): clean Vitest runner child groups on signal

2026-06-20 15:35:33 +02:00

vitest-local-scheduling.d.mts

fix(test): bound local full-suite RAM (#100437)

2026-07-05 12:16:41 -07:00

vitest-local-scheduling.mjs

fix(test): bound local full-suite RAM (#100437)

2026-07-05 12:16:41 -07:00

vitest-report-cli-utils.mjs

…

vitest-shard-timings.mjs

…

windows-taskkill.d.mts

fix(ci): filter ClawSweeper comment dispatches before token minting (#95308)

2026-06-21 19:05:08 +08:00

windows-taskkill.mjs

fix(scripts): resolve Windows cmd shim launcher

2026-06-21 11:15:14 +02:00

workspace-bootstrap-smoke.mjs

…