Onur 51606e9889 CI: fix release-check caller permissions (#67787) ...

* CI: fix release-check caller permissions

* CI: fix scheduled live and e2e checks

* CI: tighten release workflow permissions

* CI: restore release workflow caller permissions

* Actions: harden release check inputs

2026-04-16 21:41:21 +02:00

..

clawdock

[ClawDock] Iteration on the first submission; bug fixes, UX improvements, etc (#23912)

2026-03-29 20:05:41 -04:00

dev

chore: remove redundant discord smoke conversions

2026-04-10 22:48:35 +01:00

docker

fix(ci): make non-root installer smoke expect npm latest

2026-04-15 15:21:21 +01:00

docs-i18n

docs-i18n: harden behavior fixture path reads (#67046)

2026-04-15 17:32:59 +08:00

e2e

test: harden Parallels update smoke

2026-04-16 08:19:30 -07:00

k8s

…

lib

QA: fix private runtime source loading (#67428)

2026-04-15 21:59:16 -04:00

podman

update podman setup and docs (#55388)

2026-03-27 11:47:35 -04:00

pr-lib

fix(test): stop overriding host-aware vitest scheduling in prepare gates (#67213)

2026-04-15 22:06:41 +08:00

pre-commit

fix(ci): parse quoted pnpm snapshot keys

2026-04-14 21:15:43 -04:00

repro

plugin-sdk: drop investigative weixin repro harness

2026-04-09 01:35:15 +01:00

systemd

…

test-planner

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

AGENTS.md

docs(agents): split scoped workflow guidance (#65241)

2026-04-12 09:09:50 +01:00

analyze-plugin-sdk-usage.ts

Add reusable TypeScript topology analyzer for public surface usage

2026-03-28 08:37:26 -05:00

anthropic-prompt-probe.ts

chore: enable no-unnecessary-type-arguments

2026-04-10 20:14:49 +01:00

audit-seams.mjs

Revert "refactor(cli): remove bundled cli text providers"

2026-04-06 13:40:41 +01:00

auth-monitor.sh

…

bench-cli-startup.ts

tests: use multi-sample CLI startup baselines

2026-03-30 22:35:50 -04:00

bench-model.ts

chore(lint): type script and test helpers

2026-04-06 16:55:50 +01:00

bench-test-changed.mjs

perf(test): trim runtime lookups and add changed bench

2026-04-06 16:49:28 +01:00

build_icon.sh

…

build-all.mjs

fix(build): move compat sidecars into src

2026-04-15 13:22:04 +05:30

build-and-run-mac.sh

…

build-docs-list.mjs

…

build-stamp.d.mts

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

build-stamp.mjs

fix(ci): write dist build stamp after builds

2026-03-22 22:23:25 -07:00

bundle-a2ui.mjs

fix: narrow a2ui bundle hash inputs

2026-04-15 00:46:40 +01:00

bundle-a2ui.sh

fix: unblock windows update build

2026-04-08 07:18:31 +01:00

canvas-a2ui-copy.ts

build(a2ui): allow sparse core builds

2026-04-05 07:34:33 +01:00

changelog-add-unreleased.ts

refactor(browser): share lifecycle cleanup helpers

2026-04-04 12:17:46 +01:00

changelog-to-html.sh

…

check-architecture-smells.mjs

refactor: remove plugin sdk facade generator

2026-04-05 09:23:55 +01:00

check-channel-agnostic-boundaries.mjs

…

check-cli-startup-memory.mjs

test(ci): tighten startup memory thresholds

2026-03-19 16:28:00 -07:00

check-codex-app-server-protocol.ts

feat: add Codex app-server harness extension

2026-04-10 21:22:16 +01:00

check-composite-action-input-interpolation.py

…

check-docs-i18n-glossary.mjs

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

check-extension-package-tsc-boundary.mjs

test: trim heavy imports and harden ci checks

2026-04-10 19:23:10 +01:00

check-extension-plugin-sdk-boundary.mjs

perf(test): split support boundary shard

2026-04-07 09:12:26 +01:00

check-file-utils.ts

Config: separate core/plugin baseline entries (#60162)

2026-04-03 18:26:23 +09:00

check-gateway-watch-regression.mjs

ci: fix additional guard failures

2026-04-10 19:23:10 +01:00

check-import-cycles.ts

ci: add runtime import cycle guard

2026-04-09 03:56:22 +01:00

check-ingress-agent-owner-context.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-live-cache.ts

ci: gate releases on live cache floors

2026-04-04 15:44:34 +09:00

check-madge-import-cycles.ts

fix(ci): gate static import cycles with madge

2026-04-12 12:41:18 +01:00

check-no-conflict-markers.mjs

ci: fix workflow sanity gate

2026-03-22 23:04:04 +00:00

check-no-extension-src-imports.ts

refactor: centralize update targets and extension guardrails

2026-04-03 23:26:31 +09:00

check-no-extension-test-core-imports.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-no-monolithic-plugin-sdk-entry-imports.ts

refactor(test): dedupe shared test helpers

2026-03-21 23:07:51 +00:00

check-no-pairing-store-group-auth.mjs

…

check-no-random-messaging-tmp.mjs

Media: secure image temp dirs (#58270)

2026-03-31 11:12:47 +01:00

check-no-raw-channel-fetch.mjs

fix(bluebubbles): restore inbound image attachments and accept updated-message events (#67510)

2026-04-16 10:04:20 -07:00

check-no-raw-window-open.mjs

…

check-no-register-http-handler.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-pairing-account-scope.mjs

…

check-plugin-extension-import-boundary.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

check-plugin-sdk-exports.mjs

refactor: remove plugin sdk facade generator

2026-04-05 09:23:55 +01:00

check-plugin-sdk-subpath-exports.mjs

refactor: dedupe test and script helpers

2026-03-24 15:48:35 +00:00

check-sdk-package-extension-import-boundary.mjs

perf: prefilter extension boundary parsing

2026-04-11 13:02:56 +01:00

check-src-extension-import-boundary.mjs

perf: prefilter extension boundary parsing

2026-04-11 13:02:56 +01:00

check-test-helper-extension-import-boundary.mjs

test(boundary): route helper imports through bundled plugin surfaces

2026-04-10 08:05:56 +01:00

check-ts-max-loc.ts

Reduce script logging suppressions and Feishu any casts

2026-03-27 02:12:56 -05:00

check-web-fetch-provider-boundaries.mjs

CI: fix mainline regression blockers (#65269)

2026-04-13 06:18:37 +09:00

check-web-search-provider-boundaries.mjs

perf: share web boundary source scans

2026-04-11 12:50:45 +01:00

check-webhook-auth-body-order.mjs

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

ci-changed-scope.d.mts

fix(ci): patch main regression surfaces

2026-04-06 04:17:52 +01:00

ci-changed-scope.mjs

refactor: simplify cli conversions

2026-04-11 01:27:48 +01:00

ci-hydrate-live-auth.sh

CI: expand native release validation coverage (#67144)

2026-04-16 19:58:19 +02:00

claude-auth-status.sh

…

CLAUDE.md

docs(agents): split scoped workflow guidance (#65241)

2026-04-12 09:09:50 +01:00

clawlog.sh

…

clawtributors-map.json

docs: clean up clawtributors generator

2026-04-15 14:20:32 -04:00

codesign-mac-app.sh

…

codespell-dictionary.txt

…

codespell-ignore.txt

…

committer

fix(tooling): commit hook-restaged file contents

2026-04-12 05:19:56 +01:00

control-ui-i18n.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

copy-bundled-plugin-metadata.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

copy-bundled-plugin-metadata.mjs

build: exclude private QA from npm package

2026-04-15 09:39:51 -07:00

copy-export-html-templates.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-hook-metadata.ts

refactor: share build copy script helpers

2026-03-26 23:20:26 +00:00

copy-plugin-sdk-root-alias.mjs

Gateway: sync runtime post-build artifacts

2026-03-15 20:44:15 +00:00

create-dmg.sh

…

cron_usage_report.ts

…

debug-claude-usage.ts

refactor: simplify claude usage debug parsing

2026-04-10 23:37:23 +01:00

docs-link-audit.d.mts

fix(docs): handle anchors in docs link audit

2026-03-21 19:58:36 +00:00

docs-link-audit.mjs

refactor: simplify cli conversions

2026-04-11 01:27:48 +01:00

docs-list.js

[codex] Move internal development notes to maintainers (#57316)

2026-03-30 00:15:08 +02:00

docs-spellcheck.sh

…

docs-sync-publish.mjs

feat(i18n): add Ukrainian docs and control UI locale

2026-04-05 18:31:02 +01:00

firecrawl-compare.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

generate-base-config-schema.ts

fix(config): cap generated schema export types

2026-04-05 07:58:02 +01:00

generate-bundled-channel-config-metadata.ts

perf(config): use generated SecretRef policy metadata

2026-04-13 20:19:04 +01:00

generate-bundled-provider-auth-env-vars.d.mts

Plugins: generate bundled auth env metadata

2026-03-18 10:53:48 -07:00

generate-config-doc-baseline.ts

refactor: replace 156k-line generated baselines with SHA-256 hash files

2026-04-04 16:49:21 +09:00

generate-host-env-security-policy-swift.mjs

fix(infra): expand host env security policy denylist [AI] (#63277)

2026-04-10 11:36:39 +05:30

generate-plugin-sdk-api-baseline.ts

refactor: replace 156k-line generated baselines with SHA-256 hash files

2026-04-04 16:49:21 +09:00

generate-runtime-sidecar-paths-baseline.ts

test: baseline bundled runtime sidecar paths

2026-04-03 14:26:01 +01:00

generate-secretref-credential-matrix.ts

…

gh-read

feat: add gh-read GitHub app helper

2026-04-08 00:09:07 +01:00

gh-read.ts

chore: enable consistent-return

2026-04-10 20:56:43 +01:00

ghsa-patch.mjs

…

install.ps1

CI: expand native release validation coverage (#67144)

2026-04-16 19:58:19 +02:00

install.sh

CI: expand native release validation coverage (#67144)

2026-04-16 19:58:19 +02:00

ios-asc-keychain-setup.sh

…

ios-beta-archive.sh

…

ios-beta-prepare.sh

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-beta-release.sh

…

ios-configure-signing.sh

fix(ios): harden watch exec approval review (#61757)

2026-04-06 17:42:42 +03:00

ios-pin-version.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-sync-versioning.ts

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

ios-team-id.sh

…

ios-version.ts

refactor: simplify typed conversions

2026-04-11 01:01:30 +01:00

ios-write-version-xcconfig.sh

feat(ios): pin calver release versioning (#63001)

2026-04-08 11:25:35 +03:00

label-open-issues.ts

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

live-docker-normalize-config.ts

fix: stabilize docker live tests

2026-04-06 19:31:16 +01:00

load-channel-config-surface.ts

Config: stabilize bundled channel metadata loading

2026-04-13 00:26:44 +02:00

make_appcast.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

mobile-reauth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

notarize-mac-artifact.sh

…

npm-runner.mjs

refactor: dedupe windows cmd runner helpers

2026-04-06 16:52:41 +01:00

openclaw-cross-os-release-checks.ts

CI: expand native release validation coverage (#67144)

2026-04-16 19:58:19 +02:00

openclaw-npm-postpublish-verify.ts

fix(release): allow legacy qa sidecar verification

2026-04-15 20:49:30 +01:00

openclaw-npm-publish.sh

build: make npm release tag configurable

2026-04-02 19:06:37 +01:00

openclaw-npm-release-check.ts

fix(release): ignore leaf test filenames

2026-04-15 13:38:38 -04:00

openclaw-prepack.ts

fix(plugins): localize bundled runtime deps to extensions (#67099)

2026-04-15 12:04:31 +01:00

package-mac-app.sh

fix packaged control ui asset lookup (#53081)

2026-03-23 13:45:04 -05:00

package-mac-dist.sh

build: harden local release verification

2026-03-23 17:38:08 -07:00

plugin-clawhub-publish.sh

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-clawhub-release-check.ts

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-clawhub-release-plan.ts

CI: add ClawHub plugin release workflow (#59179)

2026-04-03 15:40:07 +02:00

plugin-npm-publish.sh

fix(ci): allow plugin npm preview without publish token (#58929)

2026-04-01 19:16:46 +09:00

plugin-npm-release-check.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

plugin-npm-release-plan.ts

Release: add plugin npm publish workflow (#47678)

2026-03-18 13:44:23 +01:00

pnpm-runner.d.ts

build: type live media runner

2026-04-06 19:52:42 +01:00

pnpm-runner.mjs

style: use non-capturing pnpm regex group

2026-04-15 10:35:43 +05:30

postinstall-bundled-plugins.mjs

build: exclude private QA from npm package

2026-04-15 09:39:51 -07:00

pr

Maintainer: split PR workflow script modules

2026-03-30 20:28:32 -04:00

pr-merge

…

pr-prepare

…

pr-review

…

preinstall-package-manager-warning.mjs

fix(plugins): localize bundled runtime deps to extensions (#67099)

2026-04-15 12:04:31 +01:00

prepare-extension-package-boundary-artifacts.mjs

ci: fix current main additional checks

2026-04-10 20:28:48 +01:00

prepush-ci.sh

fix(test): route raw vitest scripts through wrapper

2026-04-12 04:56:21 +01:00

print-cli-backend-live-metadata.ts

feat: unify live cli backend probes

2026-04-07 10:35:24 +01:00

process-warning-filter.mjs

chore: enable consistent-return

2026-04-10 20:56:43 +01:00

profile-extension-memory.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

protocol-gen-swift.ts

…

protocol-gen.ts

…

proxy-install-ca.mjs

feat(qa-lab): Add proxy capture stack and QA Lab inspector (#64895)

2026-04-11 12:34:57 -05:00

qa-e2e.ts

refactor: remove qa-e2e compatibility facade

2026-04-06 17:23:35 +01:00

qa-lab-up.ts

feat: add fast qa lab ui refresh mode

2026-04-07 09:45:11 +01:00

readability-basic-compare.ts

…

recover-orphaned-processes.sh

…

release-check.ts

build: exclude private QA from npm package

2026-04-15 09:39:51 -07:00

restart-mac.sh

…

root-dependency-ownership-audit.mjs

fix(plugins): localize bundled runtime deps to extensions (#67099)

2026-04-15 12:04:31 +01:00

run-bundled-extension-oxlint.mjs

refactor(plugins): share extension oxlint runner

2026-04-06 15:25:34 +01:00

run-extension-channel-oxlint.mjs

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

run-node.d.mts

fix(dev): forward run-node wrapper signals

2026-04-05 17:05:20 +01:00

run-node.mjs

QA: fix private dist freshness check

2026-04-16 03:44:40 -04:00

run-openclaw-podman.sh

remove noisy podman output from launch script and update doc (#59368)

2026-04-01 23:28:11 -04:00

run-oxlint.mjs

fix(lint): skip heavy-check lock for explicit oxlint files

2026-04-12 05:32:52 +01:00

run-tsgo.mjs

fix(tsgo): skip heavy-check lock for metadata commands

2026-04-12 05:35:52 +01:00

run-vitest-profile.mjs

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

run-vitest.mjs

fix(test): include vitest lane labels in timeout logs

2026-04-12 04:39:25 +01:00

runtime-postbuild-shared.mjs

Plugins: relocate bundled skill assets

2026-03-15 21:42:02 +00:00

runtime-postbuild.mjs

chore(acpx): clarify runtime asset packaging

2026-04-06 17:51:21 +01:00

sandbox-browser-entrypoint.sh

fix(sandbox): enforce CDP source-range restriction by default (#61404)

2026-04-10 14:59:25 -06:00

sandbox-browser-setup.sh

…

sandbox-common-setup.sh

…

sandbox-setup.sh

…

setup-auth-system.sh

…

sparkle-build.ts

…

sqlite-vec-smoke.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

stage-bundled-plugin-runtime-deps.mjs

Build: prune packaged runtime test cargo (#67275)

2026-04-15 13:18:03 -04:00

stage-bundled-plugin-runtime.d.mts

Plugins: stage local bundled runtime tree

2026-03-16 16:43:47 +00:00

stage-bundled-plugin-runtime.mjs

fix: copy SKILL.md as hard copy in dist-runtime to prevent realpath security check failure (#64166)

2026-04-10 15:41:28 +08:00

sync-labels.ts

docs: add beta blocker contributor guidance (#55199)

2026-03-26 09:31:59 -05:00

sync-moonshot-docs.ts

…

sync-plugin-sdk-exports.mjs

build(plugin-sdk): enforce export sync in check

2026-03-16 02:11:19 +00:00

sync-plugin-versions.ts

fix(plugins): preserve bundled host compatibility floor

2026-04-12 00:22:32 +01:00

termux-auth-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-quick-auth.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

termux-sync-widget.sh

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

test-built-bundled-channel-entry-smoke.mjs

build: fix bundled channel smoke layout

2026-04-15 19:28:49 +01:00

test-built-bundled-runtime-deps.mjs

fix(ci): verify bundled plugin runtime deps

2026-04-13 11:09:13 +01:00

test-built-plugin-singleton.mjs

refactor: dedupe test helpers and script warning filter

2026-04-08 15:58:45 +01:00

test-cleanup-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-cli-startup-bench-budget.mjs

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

test-extension-batch.mjs

refactor: dedupe script and matrix send helpers

2026-04-06 17:21:52 +01:00

test-extension.mjs

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

test-force.ts

fix(test): route force runner through project sharding

2026-04-12 04:54:36 +01:00

test-hotspots.mjs

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

test-install-sh-docker.sh

build: exclude private QA from npm package

2026-04-15 09:39:51 -07:00

test-install-sh-e2e-docker.sh

test: harden Docker install e2e agent lane

2026-04-08 07:15:51 +01:00

test-live-acp-bind-docker.sh

CI: fix release-check caller permissions (#67787)

2026-04-16 21:41:21 +02:00

test-live-build-docker.sh

CI: fix release-check caller permissions (#67787)

2026-04-16 21:41:21 +02:00

test-live-cli-backend-docker.sh

CI: fix release-check caller permissions (#67787)

2026-04-16 21:41:21 +02:00

test-live-codex-harness-docker.sh

docs: clarify codex harness validation

2026-04-11 00:13:08 +01:00

test-live-gateway-models-docker.sh

test(docker): quiet success-path e2e logs

2026-04-09 00:29:24 +01:00

test-live-media.ts

fix: bound live video generation smoke

2026-04-14 14:59:01 +01:00

test-live-models-docker.sh

test: isolate Docker live profile-key auth

2026-04-15 06:31:20 -07:00

test-live.mjs

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

test-perf-budget.mjs

test: move Vitest configs under test

2026-04-10 13:44:51 +01:00

test-projects.mjs

feat(test): use host-aware local full-suite defaults (#65264)

2026-04-12 12:46:20 +03:00

test-projects.test-support.d.mts

perf(test): restore scoped vitest routing

2026-04-06 15:16:17 +01:00

test-projects.test-support.mjs

feat(test): use host-aware local full-suite defaults (#65264)

2026-04-12 12:46:20 +03:00

test-report-utils.mjs

fix: use pnpm exec for scripted vitest runs

2026-04-04 01:07:28 +09:00

test-shell-completion.ts

…

test-unit-fast-audit.mjs

test(vitest): cut unit-ui startup overhead

2026-04-16 12:16:21 -07:00

test-update-cli-startup-bench.mjs

refactor: remove custom test planner runtime

2026-04-03 12:45:13 +01:00

test-voicecall-closedloop.mjs

fix(test): route raw vitest scripts through wrapper

2026-04-12 04:56:21 +01:00

tool-display.ts

fix(tool-display): generate swift snapshot from core config

2026-04-05 10:34:02 +01:00

ts-topology.ts

refactor: dedupe script error formatting

2026-04-07 05:06:54 +01:00

tsconfig.json

chore: update dependencies and oxc tooling

2026-04-10 19:28:42 +01:00

tsdown-build.mjs

fix: prune stale root chunks before rebuilds

2026-04-14 15:19:31 +01:00

ui.js

fix: install devDependencies during ui:build (#59267) (thanks @juliabush)

2026-04-02 14:35:05 +05:30

update-clawtributors.ts

docs: clean up clawtributors generator

2026-04-15 14:20:32 -04:00

update-clawtributors.types.ts

docs: clean up clawtributors generator

2026-04-15 14:20:32 -04:00

vitest-process-group.mjs

chore: update dependencies and oxc tooling

2026-04-10 19:28:42 +01:00

watch-node.d.mts

…

watch-node.mjs

fix: prevent duplicate gateway watchers

2026-04-05 23:24:27 +01:00

windows-cmd-helpers.mjs

refactor: dedupe windows cmd runner helpers

2026-04-06 16:52:41 +01:00

write-build-info.ts

…

write-cli-compat.ts

perf(cli): narrow daemon and gateway cold paths

2026-04-14 17:35:26 +01:00

write-cli-startup-metadata.ts

test: allow slower CLI metadata help rendering

2026-04-09 10:13:20 +01:00

write-npm-update-compat-sidecars.ts

fix(build): move compat sidecars into src

2026-04-15 13:22:04 +05:30

write-official-channel-catalog.d.mts

fix(release): preserve shipped channel surfaces in npm tar (#52913)

2026-03-23 17:39:22 +02:00

write-official-channel-catalog.mjs

refactor: dedupe record guards

2026-04-07 05:06:54 +01:00

write-package-dist-inventory.ts

build: exclude private QA from npm package

2026-04-15 09:39:51 -07:00

write-plugin-sdk-entry-dts.ts

perf(plugins): skip fresh boundary dts prep

2026-04-07 12:19:49 +01:00

zai-fallback-repro.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00