Vincent Koc f0207d3ea0 fix(security): bound prod audit registry responses

2026-05-28 23:02:24 +02:00

..

arg-utils.test.ts

fix(scripts): ignore forwarded arg separator

2026-05-24 18:13:14 +02:00

audit-seams.test.ts

…

barnacle-auto-response.test.ts

fix(github): preserve sufficient proof against negative relabel (#85567)

2026-05-22 19:13:33 -07:00

bench-cli-startup.test.ts

fix(perf): preserve gateway health benchmark auth

2026-05-28 20:29:24 +01:00

bench-gateway-child-test-support.ts

test: dedupe gateway benchmark teardown tests

2026-05-28 23:00:29 +02:00

bench-gateway-restart.test.ts

test: dedupe gateway benchmark teardown tests

2026-05-28 23:00:29 +02:00

bench-gateway-startup.test.ts

test: dedupe gateway benchmark teardown tests

2026-05-28 23:00:29 +02:00

build-all.test.ts

fix(install): harden Windows git installs

2026-05-28 11:47:05 +02:00

bundled-plugin-assets.test.ts

test: tighten bundled plugin asset assertions

2026-05-09 09:33:20 +01:00

bundled-plugin-build-entries.test.ts

fix(release): keep private test helpers out of npm pack

2026-05-28 20:05:50 +01:00

bundled-plugin-install-uninstall-probe.test.ts

fix(test): detect signaled bundled smoke exits

2026-05-28 14:46:39 +02:00

bundled-plugin-source-utils.test.ts

test: share fs scan assertions

2026-05-17 01:35:39 +08:00

changed-lanes.test.ts

fix(scripts): short-circuit helper help

2026-05-27 06:20:39 +02:00

channel-contract-test-plan.test.ts

ci: reduce aggregate runner jobs

2026-05-18 04:53:40 +01:00

channel-message-flows.test.ts

Add Telegram progress preview flows (#83847)

2026-05-18 21:23:55 -07:00

check-changelog-attributions.test.ts

fix(changelog): reject bot/app handles as Thanks attribution and require explicit human credit (#81357)

2026-05-14 15:04:43 +00:00

check-channel-agnostic-boundaries.test.ts

test: tighten script empty array assertions

2026-05-09 05:03:42 +01:00

check-cli-bootstrap-imports.test.ts

fix(ci): recognize gateway run command chunk

2026-05-18 01:35:04 +01:00

check-cli-startup-memory.test.ts

fix(perf): keep startup memory budgets active

2026-05-28 05:07:34 +02:00

check-deadcode-unused-files.test.ts

test: tighten deadcode unused file assertions

2026-05-09 09:54:06 +01:00

check-dependency-pins.test.ts

refactor: use Rastermill for image processing (#86621)

2026-05-26 02:54:49 +01:00

check-deprecated-api-usage.test.ts

test: derive deprecated sdk usage guard (#86403)

2026-05-25 13:45:08 +01:00

check-dynamic-import-warts.test.ts

test: tighten script empty array assertions

2026-05-09 04:48:47 +01:00

check-extension-package-tsc-boundary.test.ts

fix(scripts): bound boundary check output

2026-05-28 16:09:12 +02:00

check-extension-wildcard-reexports.test.ts

test: tighten script empty array assertions

2026-05-09 05:03:42 +01:00

check-file-utils.test.ts

…

check-gateway-cpu-scenarios.test.ts

fix(qa): reject loose gateway CPU numeric flags

2026-05-28 04:38:41 +02:00

check-gateway-watch-regression.test.ts

fix(scripts): bound gateway watch log capture

2026-05-28 08:45:18 +02:00

check-memory-fd-repro.test.ts

fix(test): detect signaled memory fd gateway exits

2026-05-28 15:17:23 +02:00

check-no-conflict-markers.test.ts

fix(scripts): prefilter conflict marker scans

2026-05-24 23:25:05 +02:00

check-no-random-messaging-tmp.test.ts

test: tighten script empty array assertions

2026-05-09 04:48:47 +01:00

check-no-raw-window-open.test.ts

test: tighten script empty array assertions

2026-05-09 04:48:47 +01:00

check-openclaw-package-tarball.test.ts

perf(plugins) refactor plugin SDK declarations for flat package types (#87165)

2026-05-27 19:22:32 -07:00

check-opengrep-rule-metadata.test.ts

test: tighten script empty array assertions

2026-05-09 04:48:47 +01:00

check-package-patches.test.ts

build: refresh dependency pins (#86628)

2026-05-25 21:55:46 +01:00

check-plugin-sdk-wildcard-reexports.test.ts

test: tighten script empty array assertions

2026-05-09 05:03:42 +01:00

check-runtime-sidecar-loaders.test.ts

test: tighten script empty array assertions

2026-05-09 04:48:47 +01:00

check.test.ts

fix(scripts): route check stages through managed runner

2026-05-23 21:20:52 +02:00

ci-docker-pull-retry.test.ts

fix(ci): preserve docker pull retry failures

2026-05-26 23:30:07 +02:00

ci-node-test-plan.test.ts

ci: consolidate Blacksmith runner defaults (#87503)

2026-05-28 13:28:22 -07:00

ci-run-timings.test.ts

test: tighten ci run timing selection assertions

2026-05-09 09:40:27 +01:00

ci-workflow-guards.test.ts

perf(ci): instrument build artifacts phases (#87514)

2026-05-27 22:31:32 -07:00

claude-auth-status.test.ts

fix(scripts): format auth expiries on macos

2026-05-26 09:32:24 +02:00

cli-startup-bench-spawner.test.ts

fix(test): harden startup benchmark harness

2026-05-28 06:53:58 +02:00

close-duplicate-prs-after-merge.test.ts

test: tighten duplicate PR close plan assertions

2026-05-09 09:48:52 +01:00

codesign-mac-app.test.ts

fix(mac): remove unused codesign entitlements

2026-05-26 12:19:42 +02:00

codex-app-server-protocol-source.test.ts

fix(codex): harden Windows protocol formatting

2026-05-24 15:37:13 +02:00

codex-media-path-client.test.ts

fix(test): bound codex media path log polling

2026-05-27 10:55:00 +02:00

committer.test.ts

test: speed up tooling tests

2026-05-27 03:33:36 +01:00

config-reload-log-scanner.test.ts

fix(test): bound config reload log polling

2026-05-27 11:23:50 +02:00

control-ui-i18n.test.ts

fix(scripts): bound control UI i18n process output

2026-05-28 17:32:58 +02:00

crabbox-wrapper.test.ts

fix(sessions): preserve Matrix room-id case in session keys (#75670) (#87366)

2026-05-28 00:26:49 +01:00

create-dmg.test.ts

fix(mac): fail closed on dmg plist reads

2026-05-26 11:54:47 +02:00

dependency-change-awareness-workflow.test.ts

fix: cover plugin package locks in dependency review

2026-05-22 12:56:10 +01:00

dependency-changes-report.test.ts

fix: cover plugin package locks in dependency review

2026-05-22 12:56:10 +01:00

dependency-ownership-surface-report.test.ts

Add dependency release safety evidence and PR awareness (#81325)

2026-05-13 03:05:09 -05:00

dependency-vulnerability-gate.test.ts

Add dependency release safety evidence and PR awareness (#81325)

2026-05-13 03:05:09 -05:00

dev-tooling-safety.test.ts

fix(dev): bound Claude usage debug fetches

2026-05-27 14:10:15 +02:00

docker-all-scheduler.test.ts

fix(scripts): bound docker preflight capture

2026-05-28 09:59:51 +02:00

docker-build-helper.test.ts

fix(test): escalate e2e watchdog termination

2026-05-28 13:03:29 +02:00

docker-e2e-helper-cli.test.ts

fix(scripts): handle helper cli help

2026-05-27 06:11:57 +02:00

docker-e2e-plan.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

docker-stats-resource-ceiling.test.ts

fix(test): harden Docker resource ceilings

2026-05-24 13:38:50 +02:00

e2e-agent-turn-output.test.ts

fix(e2e): bound agent turn assertion logs

2026-05-27 18:04:43 +02:00

e2e-run-with-pty.test.ts

fix(test): harden macos onboarding e2e

2026-05-26 00:02:41 +02:00

e2e-shell-tempfiles.test.ts

fix(e2e): check onboarding systemd noise

2026-05-27 06:48:27 +02:00

embedded-run-abort-leak.test.ts

fix(perf): keep abort leak thresholds active

2026-05-28 05:29:40 +02:00

ensure-cli-startup-build.test.ts

fix(test): bound startup build helpers

2026-05-28 14:25:06 +02:00

ensure-extension-memory-build.test.ts

fix(test): bound startup build helpers

2026-05-28 14:25:06 +02:00

ensure-playwright-chromium.test.ts

fix(ui): harden control e2e browser setup

2026-05-25 23:19:55 +02:00

extension-source-classifier.test.ts

test: tighten extension source classifier assertions

2026-05-09 09:31:47 +01:00

format-generated-module.test.ts

fix(scripts): harden Windows generated formatting

2026-05-24 20:50:07 +02:00

gateway-network-client.test.ts

fix(test): harden gateway network ws timeout

2026-05-27 10:59:50 +02:00

generate-dependency-release-evidence.test.ts

Add dependency release safety evidence and PR awareness (#81325)

2026-05-13 03:05:09 -05:00

generate-npm-shrinkwrap.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

gh-read.test.ts

fix(scripts): bound gh read error bodies

2026-05-28 09:47:07 +02:00

github-activity-helper.test.ts

…

install-cli.test.ts

fix(installer): reject stale cli node runtimes

2026-05-27 05:31:03 +02:00

install-ps1.test.ts

fix(install): harden Windows git installs

2026-05-28 11:47:05 +02:00

install-sh.test.ts

fix(install): skip Homebrew until macOS packages need it

2026-05-27 09:48:04 +01:00

ios-pin-version.test.ts

…

ios-team-id.test.ts

test: simplify ios team candidate parsing

2026-05-08 23:47:17 +01:00

ios-version.test-support.ts

…

ios-version.test.ts

test: tighten ios version resolution assertions

2026-05-09 09:34:22 +01:00

kitchen-sink-plugin-assertions.test.ts

fix(e2e): isolate kitchen sink log scans

2026-05-27 18:45:11 +02:00

kitchen-sink-rpc-walk.test.ts

fix(e2e): bound kitchen sink rpc probe bodies

2026-05-28 19:00:45 +02:00

kova-ci-summary.test.ts

fix(scripts): handle helper cli help

2026-05-27 06:11:57 +02:00

label-open-issues.test.ts

fix(scripts): bound labeler error bodies

2026-05-28 09:24:40 +02:00

lint-suppressions.test.ts

fix(whatsapp): strip control characters from outbound document fileName (#77114)

2026-05-28 01:17:52 -03:00

list-prod-store-packages.test.ts

fix(docker): seed lockfile packages before prune

2026-05-24 09:33:34 +01:00

live-docker-auth.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

live-docker-stage.test.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

live-plugin-tool-assertions.test.ts

fix(e2e): stream live plugin transcripts

2026-05-27 19:36:43 +02:00

local-heavy-check-runtime.test.ts

fix(lint): cap oxlint helper memory locally

2026-05-27 10:32:53 +02:00

managed-child-process.test.ts

test: speed up slow test suite (#87611)

2026-05-28 13:20:19 +01:00

mantis-build-telegram-desktop-proof-evidence.test.ts

fix(sessions): preserve compatible auth overrides (#85014)

2026-05-21 16:17:50 +00:00

mantis-build-telegram-evidence.test.ts

feat: add telegram mantis evidence builder

2026-05-10 06:39:54 +01:00

mantis-publish-pr-evidence.test.ts

fix(mantis): suppress auto no-proof comments

2026-05-18 21:11:21 +05:30

mantis-telegram-desktop-proof-workflow.test.ts

ci(mantis): route telegram proof runs to us-east-1

2026-05-28 10:10:32 +05:30

mcp-connect-timeout.test.ts

fix(test): await mcp timeout cleanup

2026-05-27 11:04:09 +02:00

mcp-websocket-open.test.ts

fix(test): harden mcp channel ws timeout

2026-05-27 11:01:52 +02:00

notarize-mac-artifact.test.ts

fix(mac): fail closed on missing staple app

2026-05-26 12:13:04 +02:00

npm-runner.test.ts

…

npm-telegram-live.test.ts

fix(e2e): bound telegram live hot path

2026-05-27 04:29:06 +02:00

npm-telegram-rtt-driver.test.ts

fix(e2e): bound Telegram RTT driver API bodies

2026-05-28 21:48:45 +02:00

npm-verify-exec.test.ts

fix(release): bound npm verifier commands

2026-05-28 14:06:46 +02:00

openai-chat-tools-client.test.ts

fix(e2e): bound openai chat tools client

2026-05-27 05:58:15 +02:00

openai-web-search-minimal-assertions.test.ts

fix(e2e): stream OpenAI web search request logs

2026-05-27 19:09:32 +02:00

openclaw-cross-os-release-checks.test.ts

ci: pin macOS runner labels

2026-05-28 20:52:52 +02:00

openclaw-cross-os-release-workflow.test.ts

ci(release): normalize Windows loader npm paths

2026-05-10 02:14:00 +01:00

openclaw-e2e-instance.test.ts

fix(test): escalate e2e watchdog termination

2026-05-28 13:03:29 +02:00

openclaw-performance-workflow.test.ts

fix(ci): bound optional performance report publishing

2026-05-28 07:01:55 +01:00

openclaw-test-state.test.ts

fix(test): harden macos onboarding e2e

2026-05-26 00:02:41 +02:00

openwebui-probe.test.ts

fix(e2e): bound OpenWebUI probe response bodies

2026-05-28 19:35:12 +02:00

oxlint-config.test.ts

feat: split diffs language pack

2026-05-27 18:08:40 +01:00

package-acceptance-workflow.test.ts

ci: warm pnpm store before node fanout (#87518)

2026-05-28 13:11:20 -07:00

package-mac-app.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

package-mac-dist.test.ts

fix(mac): harden restart and dSYM packaging

2026-05-26 22:01:35 +02:00

package-openclaw-for-docker.test.ts

test: speed up slow test suite (#87611)

2026-05-28 13:20:19 +01:00

parallels-npm-update-smoke.test.ts

fix(parallels): guard release target harness mismatch

2026-05-28 10:11:40 +01:00

parallels-smoke-model.test.ts

fix(e2e): bound Parallels host server stderr

2026-05-28 21:11:44 +02:00

parallels-update-job-timeout.test.ts

fix(e2e): backstop Parallels update jobs

2026-05-27 07:20:19 +02:00

plugin-boundary-report.test.ts

test: tighten plugin boundary report assertions

2026-05-09 09:30:40 +01:00

plugin-contract-test-plan.test.ts

ci: reduce aggregate runner jobs

2026-05-18 04:53:40 +01:00

plugin-gateway-gauntlet.test.ts

fix(qa): reject loose gauntlet numeric flags

2026-05-28 04:24:13 +02:00

plugin-lifecycle-measure.test.ts

fix(e2e): bound docker lifecycle hangs

2026-05-26 21:22:01 +02:00

plugin-prerelease-test-plan.test.ts

fix(ci): align release and image tests

2026-05-27 15:44:56 -04:00

plugin-update-unchanged-docker.test.ts

fix(e2e): bound corrupt plugin update runs

2026-05-26 19:54:05 +02:00

plugins-assertions.test.ts

fix(e2e): bound ClawHub preflight response bodies

2026-05-28 21:24:18 +02:00

pnpm-audit-prod.test.ts

fix(security): bound prod audit registry responses

2026-05-28 23:02:24 +02:00

pnpm-runner.test.ts

fix(install): harden Windows git installs

2026-05-28 11:47:05 +02:00

postinstall-bundled-plugins.test.ts

fix(package): omit unpacked test helpers from inventory

2026-05-27 10:32:53 +02:00

preinstall-package-manager-warning.test.ts

test: guard tooling mock call fallbacks

2026-05-11 23:28:57 +01:00

prepare-extension-package-boundary-artifacts.test.ts

fix(scripts): give boundary root shims macos headroom

2026-05-28 19:00:45 +02:00

prepare-git-hooks.test.ts

fix(scripts): harden Windows install checks

2026-05-24 07:03:49 +02:00

print-cli-backend-live-metadata.test.ts

test: speed up slow CI regressions

2026-05-26 13:13:19 +01:00

profile-extension-memory.test.ts

fix(test): handle extension memory spawn errors

2026-05-28 14:27:59 +02:00

prompt-snapshots.test.ts

fix(codex): ensure codex subagent bootstrap parity with pi subagents - only inject AGENTS.md and TOOLS.md (#85811)

2026-05-24 02:48:03 +01:00

qa-e2e.test.ts

fix(qa): enable private self-check runtime

2026-05-21 17:42:42 +08:00

qa-lab-up.test.ts

fix(scripts): short-circuit helper help

2026-05-27 06:20:39 +02:00

qa-otel-smoke.test.ts

fix(test): bound qa otel receiver bodies

2026-05-27 12:26:49 +02:00

real-behavior-proof-check.test.ts

fix(ci): bound real behavior proof API waits

2026-05-27 15:12:53 +02:00

real-behavior-proof-policy.test.ts

fix(ci): bound real behavior proof API waits

2026-05-27 15:12:53 +02:00

release-beta-smoke.test.ts

fix(release): reject empty beta smoke runs

2026-05-27 10:34:06 +02:00

release-beta-verifier.test.ts

ci: keep ClawHub advisory for alpha publish

2026-05-20 01:57:00 +01:00

release-candidate-checklist.test.ts

ci: harden release publish evidence

2026-05-17 06:34:58 +01:00

release-check.test.ts

…

release-media-memory-scenario.test.ts

test(e2e): harden release media memory smoke

2026-05-26 10:58:49 +02:00

release-scenarios-assertions.test.ts

fix(e2e): stream release scenario log checks

2026-05-27 19:23:11 +02:00

release-user-journey-assertions.test.ts

fix(e2e): bound release fixture response bodies

2026-05-28 21:36:25 +02:00

release-workflow-matrix-plan.test.ts

ci: filter release workflow matrices (#87508)

2026-05-28 13:12:54 -07:00

resolve-openclaw-package-candidate-ip-bypass.test.ts

fix: harden package URL downloads (#85578)

2026-05-23 17:28:29 +01:00

resolve-openclaw-package-candidate.test.ts

fix(test): bound package candidate command output

2026-05-28 13:26:16 +02:00

restart-mac.test.ts

fix(mac): harden restart and dSYM packaging

2026-05-26 22:01:35 +02:00

root-dependency-ownership-audit.test.ts

[codex] Use clawpdf for PDF extraction (#87670)

2026-05-28 17:35:39 +01:00

root-package-overrides.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

rtt-harness.test.ts

fix(e2e): bound RTT credential broker bodies

2026-05-28 20:58:01 +02:00

run-additional-boundary-checks.test.ts

fix(ci): bound additional boundary checks

2026-05-27 10:42:22 +02:00

run-opengrep.test.ts

…

run-oxlint.test.ts

fix(ci): serialize oxlint on constrained runners

2026-05-28 20:42:37 +01:00

run-tsgo.test.ts

fix(ui): move control ui chunking helper out of runtime source

2026-05-25 14:31:38 +02:00

run-vitest-profile.test.ts

test: improve test profiling helpers

2026-05-25 23:36:34 +01:00

run-vitest.test.ts

fix(test): fail explicit empty vitest runs

2026-05-27 09:41:53 +02:00

run-with-env.test.ts

fix(scripts): launch env package scripts on Windows

2026-05-25 01:15:49 +02:00

runtime-postbuild-stamp.test.ts

…

runtime-postbuild.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

sandbox-common-smoke-workflow.test.ts

fix(ci): bound docker pull smoke steps

2026-05-26 17:28:37 +02:00

secret-scanning-maintainer.test.ts

fix(maintainer): gate body notifications after redaction (#81993)

2026-05-16 19:50:26 +08:00

setup-pnpm-store-cache-ensure-node.test.ts

fix: isolate npm plugin installs per package (#87647)

2026-05-28 21:16:07 +01:00

source-file-scan-cache.test.ts

fix(scripts): bound source scan file reads

2026-05-26 01:43:43 +02:00

stage-bundled-plugin-runtime.test.ts

…

targeted-docker-lane-groups.test.ts

…

telegram-bot-api.test.ts

fix(e2e): bound Telegram Bot API helper bodies

2026-05-28 22:01:36 +02:00

telegram-user-crabbox-proof.test.ts

fix(e2e): bound Telegram proof log polling

2026-05-27 16:59:35 +02:00

telegram-user-credential.test.ts

fix(e2e): bound telegram credential broker bodies

2026-05-28 20:29:16 +02:00

test-built-status-message-runtime.test.ts

test: share fs scan assertions

2026-05-17 01:35:39 +08:00

test-extension.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

test-group-report.test.ts

test: speed up slow test suite (#87611)

2026-05-28 13:20:19 +01:00

test-helpers.ts

…

test-install-sh-docker.test.ts

test: harden docker smoke portability

2026-05-27 00:19:07 -04:00

test-live-cli-backend-docker.test.ts

ci: avoid pnpm prompts in live docker tests

2026-05-13 03:46:33 +01:00

test-live-codex-harness-docker.test.ts

fix(codex): bridge cli api-key auth into app-server

2026-05-26 17:19:50 +02:00

test-live-media.test.ts

fix(test): reject unknown live media providers

2026-05-27 10:29:24 +02:00

test-live-shard.test.ts

fix(scripts): handle helper cli help

2026-05-27 06:11:57 +02:00

test-projects.test.ts

fix(scripts): bound Z.AI fallback repro output

2026-05-28 18:19:34 +02:00

test-report-utils.test.ts

test: enforce per-test ci threshold

2026-05-26 04:35:20 +01:00

tool-search-gateway-e2e.test.ts

fix(e2e): bound tool search fetch bodies

2026-05-28 22:14:46 +02:00

transitive-manifest-risk-report.test.ts

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

ts-guard-utils.test.ts

…

ts-topology.test.ts

fix: harden clawpatch-reported edge cases

2026-05-18 03:18:55 +01:00

tsdown-build.test.ts

fix(install): harden Windows git installs

2026-05-28 11:47:05 +02:00

ui.test.ts

fix(install): harden Windows git installs

2026-05-28 11:47:05 +02:00

upgrade-survivor-assertions.test.ts

test(release): tolerate package validation drift

2026-05-17 03:33:54 +08:00

upgrade-survivor-baselines.test.ts

…

upgrade-survivor-config-recipe.test.ts

fix(scripts): harden Windows upgrade survivor recipe

2026-05-24 16:05:24 +02:00

upgrade-survivor-probe-gateway.test.ts

fix(e2e): bound upgrade survivor probes

2026-05-27 05:57:18 +02:00

verify-docker-attestations.test.ts

test: tighten script empty array assertions

2026-05-09 05:03:42 +01:00

verify-plugin-npm-published-runtime.test.ts

fix(release): verify large plugin npm packs

2026-05-24 15:33:17 +01:00

vitest-local-scheduling.test.ts

…

vitest-process-group.test.ts

…

vitest-shard-timings.test.ts

test: tighten vitest shard timing assertions

2026-05-09 09:49:55 +01:00

website-installer-sync-workflow.test.ts

ci: pin macOS runner labels

2026-05-28 20:52:52 +02:00

write-cli-startup-metadata.test.ts

perf(cli): cache stable subcommand help (#84786)

2026-05-21 18:01:32 +08:00

zai-fallback-repro.test.ts

fix(scripts): bound Z.AI fallback repro output

2026-05-28 18:19:34 +02:00