Jesse Merhi 87eb450047 Check ClawHub trust before plugin installs (#81307) ...

Merged via squash.

Prepared head SHA: 273fd7c20e
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
Reviewed-by: @jesse-merhi

2026-05-13 16:31:52 +10:00

..

cron-cli

test: concatenate cron list logs

2026-05-12 22:08:58 +01:00

daemon-cli

fix(update): suppress handoff newer-config warning (#81235)

2026-05-12 22:01:21 -07:00

gateway-cli

test: dedupe gateway cli mock reads

2026-05-13 00:02:45 +01:00

node-cli

test: guard node cli mock calls

2026-05-12 07:29:54 +01:00

nodes-cli

test: dedupe nodes approval timeout mock reads

2026-05-12 19:57:38 +01:00

program

test: dedupe cli help mock read

2026-05-13 05:42:52 +01:00

send-runtime

test: dedupe outbound send mock read

2026-05-13 06:12:32 +01:00

shared

…

update-cli

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

acp-cli.option-collisions.test.ts

test: dedupe acp cli mock reads

2026-05-12 21:58:47 +01:00

acp-cli.ts

fix(cli): clarify remaining required options

2026-05-09 09:24:59 +08:00

argv-invocation.test.ts

…

argv-invocation.ts

fix(cli): skip startup work for positional help

2026-04-27 00:24:06 -04:00

argv.test.ts

fix(cli): skip startup work for positional help

2026-04-27 00:24:06 -04:00

argv.ts

fix(cli): skip startup work for positional help

2026-04-27 00:24:06 -04:00

banner-config-lite.ts

refactor: dedupe cli tagline mode parser

2026-04-06 22:21:01 +01:00

banner.test.ts

refactor: dedupe cli tagline mode parser

2026-04-06 22:21:01 +01:00

banner.ts

refactor: dedupe cli tagline mode parser

2026-04-06 22:21:01 +01:00

capability-cli.test.ts

test: coalesce capability cli errors

2026-05-12 22:10:25 +01:00

capability-cli.ts

Make OpenAI auth login use ChatGPT by default (#80790)

2026-05-12 08:17:14 +09:00

channel-auth.test.ts

test: dedupe channel auth mock reads

2026-05-12 19:52:39 +01:00

channel-auth.ts

fix(cli): improve terminal error guidance

2026-05-10 10:28:47 +08:00

channel-options.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

channel-options.ts

fix(cli): keep startup help metadata on fast path

2026-04-26 21:11:23 -07:00

channels-cli.test.ts

fix(cli): fast-path bare channels help (#77659)

2026-05-05 16:02:39 -07:00

channels-cli.ts

fix: add channel status filtering (#80706)

2026-05-11 18:44:54 +01:00

clawbot-cli.ts

…

clawhub-risk-acknowledgement.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

cli-name.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

cli-utils.test.ts

test: dedupe cli utility mock read

2026-05-13 06:11:23 +01:00

cli-utils.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

command-bootstrap.test.ts

chore: clean up plugin dependency leftovers

2026-05-01 21:37:08 +01:00

command-bootstrap.ts

refactor: unify lazy import loaders

2026-05-02 10:55:59 +01:00

command-catalog.ts

fix: reserve legacy tool cli token

2026-05-02 04:06:46 +01:00

command-config-resolution.runtime.ts

perf(commands): lazy-load agent secret resolution

2026-04-13 20:56:03 +01:00

command-config-resolution.test.ts

…

command-config-resolution.ts

…

command-execution-startup.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

command-execution-startup.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

command-format.ts

Reply: surface OAuth reauth failures (#63217)

2026-04-08 18:03:03 +02:00

command-options.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

command-options.ts

chore(lint): enable unnecessary type parameter rule

2026-04-18 18:31:13 +01:00

command-path-matches.test.ts

…

command-path-matches.ts

refactor: trim local type exports

2026-05-02 01:44:51 +01:00

command-path-policy.test.ts

test: exercise command policy resolvers

2026-05-11 15:22:20 +01:00

command-path-policy.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

command-registration-policy.test.ts

fix(cli): keep help paths configless

2026-05-10 10:28:47 +08:00

command-registration-policy.ts

fix(cli): keep plugin help registration reachable

2026-05-10 04:03:45 +01:00

command-secret-gateway.test.ts

test: guard command secret mock calls

2026-05-12 07:36:47 +01:00

command-secret-gateway.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

command-secret-resolution.coverage.test.ts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

command-secret-targets.import.test.ts

test: guard command secret target mock calls

2026-05-12 07:49:19 +01:00

command-secret-targets.test.ts

test: check scoped command secret targets

2026-05-12 05:25:10 +01:00

command-secret-targets.ts

fix(secretrefs): resolve external channel contracts (#76449)

2026-05-02 23:48:11 -05:00

command-source.test-helpers.test.ts

…

command-source.test-helpers.ts

…

command-startup-policy.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

command-startup-policy.ts

fix: simplify bundled runtime dependency repair (#75183)

2026-05-01 07:49:02 +00:00

completion-cli.test.ts

Tests: fix boundary and late-run drift

2026-04-07 19:59:51 +08:00

completion-cli.ts

fix(cli): fast-path bare channels help (#77659)

2026-05-05 16:02:39 -07:00

completion-cli.write-state.test.ts

test: tighten gateway response assertions

2026-05-11 12:54:28 +01:00

completion-fish.test.ts

…

completion-fish.ts

…

completion-runtime.ts

fix(cli/completion): re-apply shell-profile source-line guard (re-#78659) (#80797)

2026-05-11 16:01:00 -07:00

config-cli.integration.test.ts

test: tighten cli gateway assertions

2026-05-11 15:08:14 +01:00

config-cli.test.ts

fix(config): reject auto-managed meta.lastTouched* paths in config set/unset (#80856)

2026-05-13 12:09:25 +08:00

config-cli.ts

fix(config): reject auto-managed meta.lastTouched* paths in config set/unset (#80856)

2026-05-13 12:09:25 +08:00

config-recovery-hints.ts

fix(gateway): clarify invalid config recovery hints

2026-05-12 19:01:59 -07:00

config-set-dryrun.ts

…

config-set-input.test.ts

…

config-set-input.ts

docs(types): mark legacy aliases deprecated

2026-04-28 23:10:10 -07:00

config-set-mode.test.ts

test: tighten config set mode assertions

2026-05-11 04:46:48 +01:00

config-set-parser.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

container-target.test.ts

test: dedupe container target mock read

2026-05-13 04:49:36 +01:00

container-target.ts

refactor: trim cli shape exports

2026-05-01 22:08:43 +01:00

cron-cli.test.ts

test: display cli output text

2026-05-12 21:54:12 +01:00

cron-cli.ts

…

daemon-cli-compat.test.ts

perf(cli): narrow daemon and gateway cold paths

2026-04-14 17:35:26 +01:00

daemon-cli-compat.ts

Add Codex happy path prompt snapshots (#75807)

2026-05-03 00:59:55 +09:00

daemon-cli.coverage.test.ts

test: guard daemon cli mock calls

2026-05-12 08:07:34 +01:00

daemon-cli.ts

…

deps.test.ts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

deps.ts

fix(heartbeat): type wake scheduling intent

2026-05-02 14:52:18 +01:00

deps.types.ts

fix(cycles): bulk extract leaf type surfaces

2026-04-11 13:26:50 +01:00

devices-cli.test.ts

test: guard cli null helpers

2026-05-11 21:07:53 +01:00

devices-cli.ts

fix(cli): clarify remaining required options

2026-05-09 09:24:59 +08:00

directory-cli.test.ts

test: dedupe directory cli mock reads

2026-05-12 18:46:03 +01:00

directory-cli.ts

fix(slack): use live directory readers in cli

2026-05-02 03:04:29 +01:00

dns-cli.ts

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

docs-cli.ts

…

dotenv.ts

…

error-format.ts

fix(cli): compact gateway command failures

2026-05-10 15:37:57 +08:00

exec-approvals-cli.test.ts

test: dedupe exec approvals cli mock reads

2026-05-12 22:02:03 +01:00

exec-approvals-cli.ts

fix(cli): exit 0 when invoking parent commands without a subcommand (#73077)

2026-04-28 02:40:44 +01:00

exec-policy-cli.test.ts

test: dedupe exec policy mock reads

2026-05-13 03:26:58 +01:00

exec-policy-cli.ts

fix(cycles): bulk extract leaf type surfaces

2026-04-11 13:26:50 +01:00

failure-output.test.ts

test: display cli output text

2026-05-12 21:54:12 +01:00

failure-output.ts

fix(cli): clarify startup failures

2026-05-09 08:05:05 +08:00

gateway-cli.coverage.test.ts

test: dedupe gateway cli mock reads

2026-05-12 22:03:46 +01:00

gateway-cli.ts

…

gateway-rpc.runtime.ts

fix(ci): stabilize full release validation

2026-04-28 20:14:14 +01:00

gateway-rpc.ts

refactor: unify lazy import loaders

2026-05-02 10:55:59 +01:00

gateway-rpc.types.ts

fix(cycles): split small runtime seams

2026-04-10 09:00:19 +01:00

gateway-run-argv.ts

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

gateway-secret-options.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

help-format.ts

refactor: trim cli helper exports

2026-05-01 22:05:19 +01:00

hooks-cli.test.ts

…

hooks-cli.ts

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

install-spec.ts

…

log-level-option.test.ts

…

log-level-option.ts

…

logs-cli.runtime.ts

…

logs-cli.test.ts

test: check logs follow notices

2026-05-12 09:45:01 +01:00

logs-cli.ts

feat(cli/logs): announce --follow gateway reconnect and add JSON notice parity (#75372)

2026-05-03 17:55:58 +08:00

mcp-cli.test.ts

test: dedupe mcp cli mock reads

2026-05-13 03:25:53 +01:00

mcp-cli.ts

fix(cli): guide lookup misses

2026-05-09 08:05:06 +08:00

message-secret-scope.test.ts

test: tighten command empty result assertions

2026-05-09 03:57:18 +01:00

message-secret-scope.ts

refactor: dedupe trim string helpers

2026-04-07 09:44:53 +01:00

model-auth-runtime-boundary.test.ts

fix(cli): lazy-load model auth runtime

2026-04-25 23:49:06 -07:00

models-cli.test.ts

test: dedupe models cli mock read

2026-05-13 05:54:01 +01:00

models-cli.ts

fix(cli): explain plugin and secrets failures

2026-05-09 08:08:26 +08:00

native-hook-relay-cli.test.ts

feat(plugins): add before agent finalize hook (#71765)

2026-04-25 17:21:17 -07:00

native-hook-relay-cli.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

node-cli.ts

…

nodes-camera.test.ts

test: tighten nodes camera assertion

2026-05-09 12:57:03 +01:00

nodes-camera.ts

…

nodes-cli.coverage.test.ts

test: tighten cli assertion checks

2026-05-11 14:56:43 +01:00

nodes-cli.ts

…

nodes-media-utils.test.ts

test: tighten model picker empty assertions

2026-05-09 03:54:12 +01:00

nodes-media-utils.ts

refactor: dedupe shared string readers

2026-04-07 02:03:33 +01:00

nodes-screen.ts

…

npm-resolution.test.ts

test: tighten cli empty array assertions

2026-05-09 05:31:22 +01:00

npm-resolution.ts

…

outbound-send-deps.ts

fix(cycles): repair broken type surfaces

2026-04-11 13:42:17 +01:00

outbound-send-mapping.test.ts

…

outbound-send-mapping.ts

refactor: trim auth cli type exports

2026-05-02 01:54:25 +01:00

pairing-cli.test.ts

test: guard pairing cli mock calls

2026-05-12 03:16:01 +01:00

pairing-cli.ts

fix(cli): improve terminal error guidance

2026-05-10 10:28:47 +08:00

parse-bytes.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

parse-duration.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

parse-timeout.test.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

parse-timeout.ts

fix(cli): add parser value examples

2026-05-09 08:05:05 +08:00

plugin-install-config-policy.ts

Refactor file access to use fs-safe primitives (#78255)

2026-05-06 05:03:11 +01:00

plugin-install-plan.test.ts

fix(plugins): quiet official npm install scan warnings

2026-05-04 02:40:55 -07:00

plugin-install-plan.ts

fix(plugins): quiet official npm install scan warnings

2026-05-04 02:40:55 -07:00

plugin-registry-loader.test.ts

refactor: simplify plugin dependency handling

2026-05-01 21:32:22 +01:00

plugin-registry-loader.ts

refactor: unify lazy import loaders

2026-05-02 10:55:59 +01:00

plugin-registry.test.ts

test: dedupe cli plugin registry mock read

2026-05-13 05:55:05 +01:00

plugin-registry.ts

…

plugins-cli-test-helpers.ts

config: stop automatic writes and guard Nix mutators (#78047)

2026-05-06 14:43:32 +02:00

plugins-cli.install.test.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

plugins-cli.list.test.ts

test: dedupe plugin cli mock reads

2026-05-13 06:13:46 +01:00

plugins-cli.policy.test.ts

test: dedupe plugin policy mock read

2026-05-13 04:50:28 +01:00

plugins-cli.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

plugins-cli.uninstall.test.ts

test: dedupe plugin uninstall mock read

2026-05-13 05:35:45 +01:00

plugins-cli.update.test.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

plugins-command-helpers.ts

feat(plugins): support npm pack installs

2026-05-06 09:16:49 +01:00

plugins-config.test.ts

…

plugins-config.ts

…

plugins-inspect-command.ts

build: enable stricter TypeScript checks

2026-05-11 02:04:17 +01:00

plugins-install-command.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

plugins-install-config.test.ts

test: count plugin install config reads

2026-05-12 04:36:27 +01:00

plugins-install-persist.test.ts

test: display cli output text

2026-05-12 21:54:12 +01:00

plugins-install-persist.ts

fix(plugins): clean replaced managed installs

2026-05-04 03:28:53 -07:00

plugins-install-record-commit.test.ts

fix: hot reload plugin management changes (#75976)

2026-05-02 13:19:24 +00:00

plugins-install-record-commit.ts

fix: hot reload plugin management changes (#75976)

2026-05-02 13:19:24 +00:00

plugins-install-records.ts

test: move plugin update selection to pure tests

2026-04-11 08:08:41 +01:00

plugins-list-command.ts

fix(cli): explain plugin and secrets failures

2026-05-09 08:08:26 +08:00

plugins-list-format.test.ts

fix(plugins): label registry list state as enabled

2026-04-25 10:35:34 -07:00

plugins-list-format.ts

fix(plugins): label registry list state as enabled

2026-04-25 10:35:34 -07:00

plugins-location-bridges.test.ts

test: tighten cli empty array assertions

2026-05-09 05:31:22 +01:00

plugins-location-bridges.ts

fix(plugins): catalog externalized npm installs

2026-05-02 13:30:07 -07:00

plugins-registry-refresh.ts

fix: hot reload plugin management changes (#75976)

2026-05-02 13:19:24 +00:00

plugins-search-command.test.ts

[codex] add Crestodian plugin management (#75869)

2026-05-02 03:12:38 +00:00

plugins-search-command.ts

perf: bound plugin and doctor selections

2026-05-08 08:14:29 +01:00

plugins-uninstall-command.ts

config: stop automatic writes and guard Nix mutators (#78047)

2026-05-06 14:43:32 +02:00

plugins-uninstall-selection.test.ts

test: move plugin uninstall selection to pure tests

2026-04-11 08:12:34 +01:00

plugins-uninstall-selection.ts

fix(cycles): bulk extract leaf type surfaces

2026-04-11 13:26:50 +01:00

plugins-update-command.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

plugins-update-outcomes.ts

refactor: trim cli helper type exports

2026-05-02 00:55:11 +01:00

plugins-update-selection.test.ts

fix(plugins): skip unchanged npm updates

2026-04-23 01:23:03 +01:00

plugins-update-selection.ts

fix(plugins): skip unchanged npm updates

2026-04-23 01:23:03 +01:00

ports.test.ts

test: tighten port probe assertions

2026-05-11 10:15:48 +01:00

ports.ts

perf(gateway): skip force port scan when free

2026-05-03 15:52:57 +01:00

profile-utils.ts

refactor: dedupe cli lowercase helpers

2026-04-07 17:50:38 +01:00

profile.test.ts

fix(cli): preserve Matrix QA profile flag

2026-04-27 05:57:37 +01:00

profile.ts

refactor: trim cli shape exports

2026-05-01 22:08:43 +01:00

program.force.test.ts

test: count cli command calls

2026-05-12 05:13:33 +01:00

program.nodes-basic.e2e.test.ts

test: dedupe nodes cli mock reads

2026-05-13 03:23:24 +01:00

program.nodes-media.e2e.test.ts

test: dedupe node media log mock read

2026-05-13 06:17:56 +01:00

program.nodes-test-helpers.test.ts

…

program.nodes-test-helpers.ts

…

program.smoke.test.ts

test: dedupe cli program mock reads

2026-05-12 22:05:30 +01:00

program.test-mocks.ts

refactor: trim cli program test exports

2026-05-01 12:39:10 +01:00

program.ts

…

progress.test.ts

test: check progress log output

2026-05-12 09:29:45 +01:00

progress.ts

fix(cli): avoid progress spinners in active TUI input (#75003)

2026-04-30 12:31:05 +02:00

prompt.test.ts

test: count prompt readline close

2026-05-12 04:45:41 +01:00

prompt.ts

fix(cli): handle closed plugin uninstall prompt (#73566)

2026-05-05 23:05:20 +08:00

proxy-cli.runtime.test.ts

test: guard proxy cli mock calls

2026-05-12 07:40:36 +01:00

proxy-cli.runtime.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

proxy-cli.test.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

proxy-cli.ts

fix: proxy direct APNs HTTP2 sessions (#74905)

2026-05-04 11:04:17 +00:00

qr-cli.test.ts

test: dedupe qr cli mock reads

2026-05-13 03:20:26 +01:00

qr-cli.ts

fix(media): default terminal QR to full-block output (#77820)

2026-05-12 07:03:12 +01:00

qr-dashboard.integration.test.ts

test: tighten cli empty array assertions

2026-05-09 05:31:22 +01:00

requirements-test-fixtures.ts

refactor: trim cli test helper exports

2026-05-01 12:31:52 +01:00

respawn-policy.ts

fix(tui): prevent orphaned terminal sessions (#77662)

2026-05-05 16:34:18 -07:00

root-guard.test.ts

fix(cli): improve guardrail messages

2026-05-09 08:05:05 +08:00

root-guard.ts

fix(cli): improve guardrail messages

2026-05-09 08:05:05 +08:00

root-help-metadata.ts

fix(cli): keep startup help metadata on fast path

2026-04-26 21:11:23 -07:00

root-option-forward.ts

…

root-option-scan.ts

refactor: trim cli shape exports

2026-05-01 22:08:43 +01:00

root-option-value.ts

…

route.test.ts

test: dedupe cli route mock reads

2026-05-12 23:59:23 +01:00

route.ts

fix(cli): keep route-first json stdout clean

2026-04-27 20:51:50 +01:00

run-main-policy.ts

fix(cli): avoid plugin allowlist hints for unknown commands

2026-05-10 03:21:11 -04:00

run-main.exit.test.ts

test: dedupe run main mock read

2026-05-13 04:57:39 +01:00

run-main.profile-env.test.ts

test: update run-main env mock

2026-04-28 01:59:25 +01:00

run-main.test.ts

test: guard cli null helpers

2026-05-11 21:07:53 +01:00

run-main.ts

fix(cli): avoid plugin allowlist hints for unknown commands

2026-05-10 03:21:11 -04:00

sandbox-cli.ts

…

secrets-cli.test.ts

test: count secrets configure prompt

2026-05-12 04:28:15 +01:00

secrets-cli.ts

fix(cli): clarify terminal recovery errors

2026-05-10 14:23:15 +08:00

security-cli.test.ts

test: dedupe security cli mock reads

2026-05-13 03:19:01 +01:00

security-cli.ts

fix(security): keep plain audit off plugin runtimes

2026-05-01 08:22:06 -07:00

skills-cli.commands.test.ts

test: tighten cli output assertions

2026-05-12 05:16:58 +01:00

skills-cli.format.ts

Add agent visibility to skills check (#75983)

2026-05-02 20:50:38 +02:00

skills-cli.formatting.test.ts

test: check skills json formatting

2026-05-12 10:01:24 +01:00

skills-cli.test.ts

test: tighten cli assertion checks

2026-05-11 14:56:43 +01:00

skills-cli.ts

Add agent visibility to skills check (#75983)

2026-05-02 20:50:38 +02:00

startup-metadata.test.ts

fix(cli): keep startup help metadata on fast path

2026-04-26 21:11:23 -07:00

startup-metadata.ts

perf: cache startup package metadata

2026-05-02 16:11:05 +01:00

system-cli.test.ts

test: dedupe system cli mock reads

2026-05-12 19:04:19 +01:00

system-cli.ts

feat(wake): expose typed sessionKey on wake protocol + system event CLI

2026-05-11 17:24:30 +01:00

tagline.test.ts

test: assert indexed tagline

2026-05-12 04:52:12 +01:00

tagline.ts

refactor: trim cli tagline exports

2026-05-02 01:11:18 +01:00

test-runtime-capture.ts

test: guard runtime capture mock calls

2026-05-12 08:15:26 +01:00

test-runtime-mock.ts

test: share CLI runtime mock helper

2026-04-23 18:46:43 +01:00

tui-cli.ts

fix: avoid CLI startup warmup leaks

2026-04-26 10:41:03 +01:00

update-cli.option-collisions.test.ts

test: dedupe update cli mock reads

2026-05-12 23:57:58 +01:00

update-cli.test-helpers.test.ts

…

update-cli.test-helpers.ts

…

update-cli.test.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

update-cli.ts

Check ClawHub trust before plugin installs (#81307)

2026-05-13 16:31:52 +10:00

wait.ts

…

webhooks-cli.ts

fix(cli): clarify remaining required options

2026-05-09 09:24:59 +08:00

windows-argv.ts

refactor: dedupe cli lowercase helpers

2026-04-07 17:50:38 +01:00