Robin Waslander 31112d5985 fix(security): audit web search keys for all bundled providers (#56540) ...

hasWebSearchKey() was hardcoded to only check Brave and Perplexity
credentials. Replace with provider-aware check using
resolveBundledPluginWebSearchProviders() so Gemini, Grok/XAI, Kimi,
Moonshot, and OpenRouter credentials are recognized by the audit.

Add focused regression tests for each provider.

Fixes #34509

2026-03-28 18:55:38 +01:00

..

dev

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

docker

refactor: clarify docker setup cli phases

2026-03-24 16:46:12 -07:00

docs-i18n

feat(tts): add microsoft voice listing

2026-03-16 20:24:13 -07:00

e2e

refactor: split mcp channel bridge internals

2026-03-28 04:58:34 +00:00

k8s

docs: add Kubernetes install guide, setup script, and manifests (#34492)

2026-03-12 07:28:21 -04:00

lib

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

podman

update podman setup and docs (#55388)

2026-03-27 11:47:35 -04:00

pre-commit

refactor: centralize pre-commit file filtering

2026-02-16 03:42:11 +01:00

repro

fix: run cli scripts via node build runner

2026-01-18 18:43:39 +00:00

shell-helpers

docs(install): update container setup paths

2026-03-19 13:40:26 -07:00

systemd

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

test-planner

ci: align bun shard counts with windows (#56429)

2026-03-28 09:36:59 -05:00

analyze-plugin-sdk-usage.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

audit-seams.mjs

test: audit subagent seam coverage inventory

2026-03-24 00:09:36 -05:00

auth-monitor.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

bench-cli-startup.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

bench-model.ts

chore: apply local workspace updates (#9911)

2026-02-05 16:54:44 -05:00

build_icon.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

build-and-run-mac.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

build-docs-list.mjs

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

build-stamp.d.mts

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

build-stamp.mjs

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

bundle-a2ui.sh

fix(feishu): fetch thread context so AI can see bot replies in topic threads (#45254)

2026-03-14 18:01:59 -05:00

canvas-a2ui-copy.ts

chore: Also format scripts and skills.

2026-01-31 21:21:25 +09:00

changelog-to-html.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

check-architecture-smells.mjs

refactor: generate plugin sdk facades

2026-03-27 20:20:31 +00:00

check-channel-agnostic-boundaries.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-cli-startup-memory.mjs

test(ci): tighten startup memory thresholds

2026-03-19 16:28:00 -07:00

check-composite-action-input-interpolation.py

ci: harden workflow action input handling

2026-02-19 15:27:48 +01:00

check-docs-i18n-glossary.mjs

Docs: move release runbook to maintainer repo (#47532)

2026-03-15 20:42:39 +01:00

check-extension-plugin-sdk-boundary.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-file-utils.ts

fix(test): normalize path separators [skip ci]

2026-03-21 17:33:35 -07:00

check-gateway-watch-regression.mjs

CI: guard gateway watch against duplicate runtime regressions (#49048)

2026-03-17 10:55:55 -04:00

check-ingress-agent-owner-context.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-no-conflict-markers.mjs

ci: fix workflow sanity gate

2026-03-22 23:04:04 +00:00

check-no-extension-src-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-extension-test-core-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-monolithic-plugin-sdk-entry-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-pairing-store-group-auth.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-no-random-messaging-tmp.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-no-raw-channel-fetch.mjs

Remove Qwen OAuth integration (qwen-portal-auth) (#52709)

2026-03-26 16:32:34 +08:00

check-no-raw-window-open.mjs

refactor(scripts): dedupe guard checks and smoke helpers

2026-03-02 08:54:20 +00:00

check-no-register-http-handler.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-pairing-account-scope.mjs

refactor(scripts): share guard runners and paged select UI

2026-03-02 14:36:41 +00:00

check-plugin-extension-import-boundary.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-plugin-sdk-exports.mjs

fix(plugin-sdk): restore root diagnostic compat

2026-03-20 09:27:37 -07:00

check-plugin-sdk-subpath-exports.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-ts-max-loc.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

check-web-search-provider-boundaries.mjs

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

check-webhook-auth-body-order.mjs

Feishu: validate webhook signatures before parsing (#55083)

2026-03-26 10:29:22 +00:00

ci-changed-scope.d.mts

perf(ci): gate install smoke on changed-smoke (#52458)

2026-03-22 12:58:08 -07:00

ci-changed-scope.mjs

perf(ci): gate install smoke on changed-smoke (#52458)

2026-03-22 12:58:08 -07:00

ci-write-manifest-outputs.mjs

dev: speed up local check loop

2026-03-27 07:56:41 -05:00

claude-auth-status.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

clawlog.sh

fix(security): harden clawlog command execution

2026-03-01 23:33:13 +00:00

clawtributors-map.json

🤖 Feishu: expand channel support

2026-02-05 12:29:04 -08:00

codesign-mac-app.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

codespell-dictionary.txt

docs: add custom spellcheck dictionary and fix docs typos (#22457)

2026-02-21 01:35:35 -05:00

codespell-ignore.txt

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

committer

test: fix portable stderr capture and env leakage (#55184)

2026-03-26 09:31:08 -05:00

copy-bundled-plugin-metadata.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

copy-bundled-plugin-metadata.mjs

fix(release): ship bundled plugins in pack artifacts

2026-03-23 08:22:00 -07:00

copy-export-html-templates.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-hook-metadata.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-plugin-sdk-root-alias.mjs

Gateway: sync runtime post-build artifacts

2026-03-15 20:44:15 +00:00

create-dmg.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

cron_usage_report.ts

fix(ci): restore main lint/typecheck after direct merges

2026-02-16 23:26:11 +00:00

debug-claude-usage.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

docs-link-audit.d.mts

fix(docs): handle anchors in docs link audit

2026-03-21 19:58:36 +00:00

docs-link-audit.mjs

Docs: unify link audit entrypoint (#55912)

2026-03-27 18:31:19 +01:00

docs-list.js

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

docs-spellcheck.sh

fix(ci): make docs spellcheck fallback deterministic

2026-02-21 15:08:28 +01:00

firecrawl-compare.ts

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

generate-base-config-schema.ts

refactor: harden generated-file guards and provider ids

2026-03-22 19:08:08 -07:00

generate-bundled-channel-config-metadata.ts

check: restore bundled channel config metadata gate

2026-03-27 00:11:15 -05:00

generate-bundled-plugin-metadata.d.mts

refactor: collapse bundled channel metadata into plugin manifests

2026-03-27 02:29:19 +00:00

generate-bundled-plugin-metadata.mjs

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

generate-bundled-provider-auth-env-vars.d.mts

Plugins: generate bundled auth env metadata

2026-03-18 10:53:48 -07:00

generate-bundled-provider-auth-env-vars.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

generate-config-doc-baseline.ts

Docs: add config drift baseline statefile (#45891)

2026-03-14 14:23:30 -07:00

generate-host-env-security-policy-swift.mjs

fix(exec): block dangerous override-only env pivots

2026-03-07 19:18:05 +00:00

generate-plugin-sdk-api-baseline.ts

Docs: prototype generated plugin SDK reference (#51877)

2026-03-22 09:19:00 -07:00

generate-plugin-sdk-facades.mjs

refactor: generate plugin sdk facades

2026-03-27 20:20:31 +00:00

generate-secretref-credential-matrix.ts

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

ghsa-patch.mjs

refactor(security): enforce v1 node exec approval binding

2026-02-26 18:09:01 +01:00

install.ps1

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

install.sh

fix(runtime): support Node 22.14 installs

2026-03-25 06:22:18 -07:00

ios-asc-keychain-setup.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-beta-archive.sh

feat(ios): add local beta release flow (#42991)

2026-03-11 12:32:28 +02:00

ios-beta-prepare.sh

feat(push): add iOS APNs relay gateway (#43369)

2026-03-12 18:15:35 +02:00

ios-beta-release.sh

feat(ios): add local beta release flow (#42991)

2026-03-11 12:32:28 +02:00

ios-configure-signing.sh

feat(ios): prepare app store connect release assets

2026-03-07 17:21:07 +02:00

ios-team-id.sh

fix(ios): normalize team IDs before preferred match

2026-02-24 15:02:27 +00:00

ios-write-version-xcconfig.sh

chore: bump version to 2026.3.13

2026-03-13 04:38:32 +00:00

label-open-issues.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

load-channel-config-surface.ts

Fallback to Jiti when bun is unavailable

2026-03-27 15:16:19 -05:00

make_appcast.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

mobile-reauth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

notarize-mac-artifact.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

openclaw-npm-postpublish-verify.ts

refactor: route plugin runtime through bundled seams

2026-03-27 16:40:27 +00:00

openclaw-npm-publish.sh

build: tag correction npm publishes as latest

2026-03-23 17:42:43 -07:00

openclaw-npm-release-check.ts

build: prepare 2026.3.24-beta.1

2026-03-25 04:41:26 -07:00

package-mac-app.sh

fix packaged control ui asset lookup (#53081)

2026-03-23 13:45:04 -05:00

package-mac-dist.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

plugin-npm-publish.sh

build: tag correction npm publishes as latest

2026-03-23 17:42:43 -07:00

plugin-npm-release-check.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

plugin-npm-release-plan.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

pr

test: lower prepare unit-fast batch target

2026-03-27 00:12:49 -04:00

pr-merge

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

pr-prepare

Revert "feat: add --no-test flag to prepare-gates"

2026-03-12 16:37:50 -07:00

pr-review

chore: fix root_dir resolution/stale scripts during PR review

2026-02-13 15:09:39 -05:00

profile-extension-memory.mjs

Perf: add extension memory profiling command

2026-03-17 15:59:08 -07:00

protocol-gen-swift.ts

fix: stabilize swift protocol generation and flaky tests

2026-02-21 16:53:46 +01:00

protocol-gen.ts

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

readability-basic-compare.ts

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

recover-orphaned-processes.sh

fix: reset stale execution state after SIGUSR1 in-process restart (#15195)

2026-02-13 15:30:09 -05:00

release-check.ts

build: harden local release verification

2026-03-23 17:38:08 -07:00

restart-mac.sh

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

run-node.d.mts

Scripts: rebuild on extension and tsdown config changes (#47571)

2026-03-15 16:19:27 -04:00

run-node.mjs

fix(dev): rebuild dist after HEAD changes (#56510)

2026-03-28 11:49:09 -05:00

run-openclaw-podman.sh

update podman setup and docs (#55388)

2026-03-27 11:47:35 -04:00

run-vitest-profile.mjs

test: avoid repo-root perf profile artifacts

2026-03-23 11:51:26 +00:00

runtime-postbuild-shared.mjs

Plugins: relocate bundled skill assets

2026-03-15 21:42:02 +00:00

runtime-postbuild.mjs

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

sandbox-browser-entrypoint.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

sandbox-browser-setup.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

sandbox-common-setup.sh

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

sandbox-setup.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

setup-auth-system.sh

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

sparkle-build.ts

fix(release): unify sparkle build policy and defaults

2026-02-28 10:04:25 +05:30

sqlite-vec-smoke.mjs

chore: Also format scripts and skills.

2026-01-31 21:21:25 +09:00

stage-bundled-plugin-runtime-deps.mjs

fix(build): make bundled runtime-deps staging incremental

2026-03-27 00:51:38 -05:00

stage-bundled-plugin-runtime.d.mts

Plugins: stage local bundled runtime tree

2026-03-16 16:43:47 +00:00

stage-bundled-plugin-runtime.mjs

fix(runtime): make dist-runtime staging idempotent

2026-03-22 22:41:27 -07:00

sync-labels.ts

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

sync-moonshot-docs.ts

Docs: fix MDX markers blocking page refreshes (#46695)

2026-03-15 02:58:59 +01:00

sync-plugin-sdk-exports.mjs

build(plugin-sdk): enforce export sync in check

2026-03-16 02:11:19 +00:00

sync-plugin-versions.ts

fix(feishu): restore group command fallback and plugin deps

2026-02-22 19:13:19 +01:00

termux-auth-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-quick-auth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-sync-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-built-plugin-singleton.mjs

fix(build): suppress singleton smoke deprecation noise

2026-03-19 16:07:53 -07:00

test-cleanup-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-extension.mjs

feat(discord): add autoThreadName 'generated' strategy (#43366)

2026-03-24 16:27:19 +01:00

test-force.ts

Gateway: harden Compose-style gateway port parsing

2026-03-24 16:51:36 -07:00

test-hotspots.mjs

test: improve test runner help text (#55227)

2026-03-26 10:34:14 -05:00

test-install-sh-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-install-sh-e2e-docker.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-live-acp-bind-docker.sh

test(gateway): add live docker ACP bind coverage

2026-03-28 05:23:55 +00:00

test-live-cli-backend-docker.sh

test: add docker cli-backend smoke

2026-03-26 16:49:52 +00:00

test-live-gateway-models-docker.sh

test: narrow live transcript scaffolding strip

2026-03-23 07:41:18 +00:00

test-live-models-docker.sh

test: narrow live transcript scaffolding strip

2026-03-23 07:41:18 +00:00

test-live.mjs

fix: move Mistral compat into provider plugin

2026-03-28 04:08:37 +00:00

test-parallel-memory.mjs

fix(ci): parse GitHub Actions memory hotspot logs

2026-03-20 06:13:27 +00:00

test-parallel-utils.mjs

test: print failed test lane output tails

2026-03-23 19:36:44 -07:00

test-parallel.mjs

Add collect-all test failure planning

2026-03-27 23:23:31 -05:00

test-perf-budget.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

test-report-utils.mjs

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

test-runner-manifest.mjs

perf: speed up test parallelism

2026-03-26 20:09:40 +00:00

test-shell-completion.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

test-update-memory-hotspots-utils.mjs

perf: trim vitest hot imports and refresh manifests

2026-03-23 05:25:05 +00:00

test-update-memory-hotspots.mjs

test: improve test runner help text (#55227)

2026-03-26 10:34:14 -05:00

test-update-timings.mjs

perf: speed up test parallelism

2026-03-26 20:09:40 +00:00

ts-topology.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

tsdown-build.mjs

msteams: implement Teams AI agent UX best practices (#51808)

2026-03-23 22:03:39 -07:00

ui.js

fix(scripts): harden Windows UI spawn behavior

2026-02-16 20:49:09 -05:00

update-clawtributors.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

update-clawtributors.types.ts

fix: agent-only announce path, BB message IDs, sender identity, SSRF allowlist (#23970)

2026-03-01 22:52:11 -08:00

watch-node.d.mts

chore(gateway): ignore .test.ts changes in gateway:watch (#36211)

2026-03-15 11:14:28 -04:00

watch-node.mjs

Scripts: rebuild on extension and tsdown config changes (#47571)

2026-03-15 16:19:27 -04:00

write-build-info.ts

chore: Enable linting in scripts.

2026-01-31 21:29:14 +09:00

write-cli-compat.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

write-cli-startup-metadata.ts

fix: avoid source imports in cli startup metadata build

2026-03-27 20:31:28 +05:30

write-official-channel-catalog.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

write-official-channel-catalog.mjs

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

write-plugin-sdk-entry-dts.ts

fix: keep bundled runtime deps out of release pack

2026-03-18 23:18:36 +00:00

zai-fallback-repro.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00