Devin Robison 6a79324802 Filter untrusted CWD .env entries before OpenClaw startup (#54631) ...

* Filter untrusted CWD .env entries before OpenClaw startup

* Add missing test file

* Fix missing and updated files

* Address feedback

* Feedback updates

* Feedback update

* Add test coverage

* Unit test fix

2026-03-25 15:49:26 -06:00

..

browser-cli-actions-input

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

cron-cli

fix: reject nonexistent zoned cron at-times

2026-03-23 21:14:55 -07:00

daemon-cli

refactor: align pairing replies, daemon hints, and feishu mention policy

2026-03-25 04:22:53 -07:00

gateway-cli

fix: audit clobbered config reads

2026-03-24 17:10:06 +00:00

node-cli

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

nodes-cli

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

program

fix: trigger compaction on LLM timeout with high context usage (#46417)

2026-03-25 12:51:36 -07:00

send-runtime

refactor: consolidate plugin sdk surface

2026-03-20 19:24:10 +00:00

shared

refactor: centralize strict numeric parsing

2026-03-08 03:02:25 +00:00

update-cli

fix(runtime): support Node 22.14 installs

2026-03-25 06:22:18 -07:00

acp-cli.option-collisions.test.ts

fix(cli): remove duplicate test runtime keys

2026-03-22 17:52:05 -07:00

acp-cli.ts

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

argv.test.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

argv.ts

fix: harden update channel switching

2026-03-22 15:09:38 -07:00

banner-config-lite.ts

fix: audit clobbered config reads

2026-03-24 17:10:06 +00:00

banner.test.ts

perf(cli): trim help startup imports

2026-03-15 18:20:52 -07:00

banner.ts

perf(cli): trim help startup imports

2026-03-15 18:20:52 -07:00

browser-cli-actions-input.ts

…

browser-cli-actions-observe.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-debug.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-examples.ts

…

browser-cli-inspect.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

browser-cli-inspect.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-manage.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

browser-cli-manage.timeout-option.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

browser-cli-manage.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-resize.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-shared.ts

…

browser-cli-state.cookies-storage.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-state.option-collisions.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

browser-cli-state.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

browser-cli-test-helpers.ts

refactor(browser): dedupe browser and cli command wiring

2026-03-02 21:31:36 +00:00

browser-cli.test.ts

…

browser-cli.ts

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

channel-auth.test.ts

fix: resolve catalog-backed channel login

2026-03-23 18:25:44 -07:00

channel-auth.ts

fix: resolve catalog-backed channel login

2026-03-23 18:25:44 -07:00

channel-options.test.ts

test: speed up cli and command suites

2026-03-24 22:17:12 +00:00

channel-options.ts

test: speed up cli and command suites

2026-03-24 22:17:12 +00:00

channels-cli.ts

feat: add nostr setup and unify channel setup discovery

2026-03-15 19:58:22 -07:00

clawbot-cli.ts

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

cli-name.ts

…

cli-utils.test.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

cli-utils.ts

…

command-format.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

command-options.test.ts

test(cli): extend command option inheritance edge coverage

2026-02-21 21:40:39 +00:00

command-options.ts

…

command-secret-gateway.test.ts

test: speed up cli and model command suites

2026-03-24 17:16:25 +00:00

command-secret-gateway.ts

fix(runtime): lazy-load setup shims and align contracts

2026-03-19 13:33:32 -07:00

command-secret-resolution.coverage.test.ts

fix: stabilize stale buffer sweep landing (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

command-secret-targets.test.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

command-secret-targets.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

command-source.test-helpers.test.ts

test: harden path resolution test helpers

2026-03-22 22:47:58 +00:00

command-source.test-helpers.ts

test: harden path resolution test helpers

2026-03-22 22:47:58 +00:00

completion-cli.test.ts

CLI/completion: fix generator OOM and harden plugin registries (#45537)

2026-03-15 12:14:30 -07:00

completion-cli.ts

CLI/completion: fix generator OOM and harden plugin registries (#45537)

2026-03-15 12:14:30 -07:00

completion-fish.test.ts

refactor(cli): extract fish completion line builders

2026-02-22 07:44:56 +00:00

completion-fish.ts

refactor(cli): extract fish completion line builders

2026-02-22 07:44:56 +00:00

config-cli.integration.test.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-cli.test.ts

test(models): refresh example model fixtures

2026-03-22 23:00:18 -07:00

config-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

config-set-dryrun.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-set-input.test.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

config-set-input.ts

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

config-set-mode.test.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

config-set-parser.ts

CLI: expand config set with SecretRef/provider builders and dry-run (#49296)

2026-03-17 18:15:49 -05:00

container-target.test.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

container-target.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

cron-cli.test.ts

fix: reject nonexistent zoned cron at-times

2026-03-23 21:14:55 -07:00

cron-cli.ts

…

daemon-cli-compat.test.ts

…

daemon-cli-compat.ts

…

daemon-cli.coverage.test.ts

refactor: clarify doctor repair flow

2026-03-23 22:12:56 -07:00

daemon-cli.ts

…

deps.test.ts

refactor: bundle lazy runtime surfaces

2026-03-17 00:00:45 -07:00

deps.ts

refactor: untangle whatsapp runtime boundary

2026-03-19 03:13:48 +00:00

devices-cli.test.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

devices-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

directory-cli.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

directory-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

dns-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

docs-cli.ts

…

dotenv.ts

Filter untrusted CWD .env entries before OpenClaw startup (#54631)

2026-03-25 15:49:26 -06:00

exec-approvals-cli.test.ts

…

exec-approvals-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

gateway-cli.coverage.test.ts

refactor: clarify doctor repair flow

2026-03-23 22:12:56 -07:00

gateway-cli.ts

…

gateway-rpc.ts

…

help-format.ts

…

hooks-cli.test.ts

feat(cli): unify hook pack installs under plugins

2026-03-22 11:20:50 -07:00

hooks-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

install-spec.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

log-level-option.test.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

log-level-option.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

logs-cli.test.ts

fix: unify log timestamp offsets (#38904) (thanks @sahilsatralkar)

2026-03-25 16:06:33 +05:30

logs-cli.ts

fix: unify log timestamp offsets (#38904) (thanks @sahilsatralkar)

2026-03-25 16:06:33 +05:30

mcp-cli.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

mcp-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

memory-cli.runtime.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

memory-cli.test.ts

test: centralize cli runtime capture helpers

2026-03-23 01:53:28 +00:00

memory-cli.ts

perf: lazy-load memory runtime surfaces

2026-03-22 22:06:45 +00:00

memory-cli.types.ts

perf: lazy-load memory runtime surfaces

2026-03-22 22:06:45 +00:00

message-secret-scope.test.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

message-secret-scope.ts

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

models-cli.test.ts

refactor(plugins): simplify provider auth choice metadata

2026-03-15 23:01:12 -07:00

models-cli.ts

refactor(plugins): simplify provider auth choice metadata

2026-03-15 23:01:12 -07:00

node-cli.ts

…

nodes-camera.test.ts

test: harden vitest no-isolate coverage

2026-03-22 10:48:21 -07:00

nodes-camera.ts

refactor(nodes): dedupe camera payload and node resolve helpers

2026-03-02 23:32:41 +00:00

nodes-canvas.ts

…

nodes-cli.coverage.test.ts

test: restore runtime-aware cli mocks

2026-03-22 18:35:37 -07:00

nodes-cli.ts

…

nodes-media-utils.test.ts

…

nodes-media-utils.ts

…

nodes-run.ts

…

nodes-screen.ts

…

npm-resolution.test.ts

refactor(cli): share pinned npm install record helper

2026-02-22 07:44:56 +00:00

npm-resolution.ts

refactor: dedupe cli config cron and install flows

2026-03-02 19:57:33 +00:00

outbound-send-deps.ts

refactor: make OutboundSendDeps dynamic with channel-ID keys (#45517)

2026-03-14 02:42:21 -07:00

outbound-send-mapping.test.ts

refactor: make OutboundSendDeps dynamic with channel-ID keys (#45517)

2026-03-14 02:42:21 -07:00

outbound-send-mapping.ts

refactor: make OutboundSendDeps dynamic with channel-ID keys (#45517)

2026-03-14 02:42:21 -07:00

pairing-cli.test.ts

test: speed up cli and model command suites

2026-03-24 17:16:25 +00:00

pairing-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

parse-bytes.ts

…

parse-duration.ts

Session/Cron maintenance hardening and cleanup UX (#24753)

2026-02-23 22:39:48 +00:00

parse-timeout.test.ts

refactor: share gateway timeout parsing

2026-03-14 01:41:16 +00:00

parse-timeout.ts

refactor: share gateway timeout parsing

2026-03-14 01:41:16 +00:00

plugin-install-config-policy.ts

refactor: centralize plugin install config policy

2026-03-23 23:07:40 -07:00

plugin-install-plan.test.ts

fix(channels): preserve external catalog overrides (#52988)

2026-03-23 18:08:17 +02:00

plugin-install-plan.ts

fix(channels): preserve external catalog overrides (#52988)

2026-03-23 18:08:17 +02:00

plugin-registry.test.ts

fix: ci

2026-03-24 09:25:28 -05:00

plugin-registry.ts

fix(plugins): fail strict bootstrap on plugin load errors

2026-03-19 16:07:53 -07:00

plugins-cli-test-helpers.ts

fix(plugins): address review feedback for Matrix recovery paths (#52899)

2026-03-23 22:16:10 -07:00

plugins-cli.install.test.ts

refactor: centralize plugin install config policy

2026-03-23 23:07:40 -07:00

plugins-cli.ts

fix(plugins): accept clawhub uninstall specs

2026-03-23 13:52:27 -07:00

plugins-cli.uninstall.test.ts

fix(plugins): accept clawhub uninstall specs

2026-03-23 13:52:27 -07:00

plugins-cli.update.test.ts

test(cli): split plugin cli test coverage by surface

2026-03-22 12:02:53 -07:00

plugins-command-helpers.ts

refactor(cli): extract hook pack update flow

2026-03-22 12:02:52 -07:00

plugins-config.test.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

plugins-config.ts

fix: sync built-in channel enablement across config paths

2026-02-23 19:40:42 +00:00

plugins-install-command.ts

refactor: centralize plugin install config policy

2026-03-23 23:07:40 -07:00

plugins-install-config.test.ts

refactor: centralize plugin install config policy

2026-03-23 23:07:40 -07:00

plugins-install-persist.ts

refactor(cli): share plugin install persistence

2026-03-22 12:02:52 -07:00

plugins-update-command.ts

refactor(cli): extract hook pack update flow

2026-03-22 12:02:52 -07:00

ports.test.ts

fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831)

2026-03-03 21:31:12 -06:00

ports.ts

fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831)

2026-03-03 21:31:12 -06:00

profile-utils.ts

…

profile.test.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

profile.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

program.force.test.ts

fix(gateway): add Windows-compatible port detection using netstat fallback (openclaw#29239) thanks @ajay99511

2026-03-02 08:33:59 -06:00

program.nodes-basic.e2e.test.ts

fix: sync agent and autoreply e2e updates

2026-03-23 01:33:40 -07:00

program.nodes-media.e2e.test.ts

fix(security): fail-close node camera URL downloads

2026-03-02 23:23:39 +00:00

program.nodes-test-helpers.test.ts

test(cli): share nodes ios fixture helpers

2026-02-22 07:44:56 +00:00

program.nodes-test-helpers.ts

test(cli): share nodes ios fixture helpers

2026-02-22 07:44:56 +00:00

program.smoke.test.ts

fix: accept schtasks Last Result key on Windows (#47844) (thanks @MoerAI)

2026-03-15 22:20:34 -07:00

program.test-mocks.ts

test: fix setup wizard smoke mocks

2026-03-16 05:54:58 +00:00

program.ts

…

progress.test.ts

…

progress.ts

…

prompt.test.ts

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

prompt.ts

…

qr-cli.test.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

qr-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

qr-dashboard.integration.test.ts

test: fix ci docs drift and bun qr exit handling

2026-03-23 07:41:23 +00:00

requirements-test-fixtures.ts

…

respawn-policy.ts

…

root-option-value.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

route.test.ts

fix(cli): route plugin logs to stderr during --json output

2026-03-22 21:51:08 -07:00

route.ts

fix(cli): route plugin logs to stderr during --json output

2026-03-22 21:51:08 -07:00

run-main.exit.test.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

run-main.profile-env.test.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

run-main.test.ts

CLI: reduce channels add startup memory (#46784)

2026-03-15 09:10:40 -07:00

run-main.ts

fixes for cli-containerized (#54223)

2026-03-25 00:51:55 -04:00

sandbox-cli.ts

…

secrets-cli.test.ts

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

secrets-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

security-cli.test.ts

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

security-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

skills-cli.commands.test.ts

feat: add native clawhub install flows

2026-03-22 17:03:49 +00:00

skills-cli.format.ts

fix(security): resolve Aisle findings — skill installer validation, terminal sanitization, URL scheme allowlisting (#53471) thanks @BunsDev

2026-03-24 01:43:48 -05:00

skills-cli.formatting.test.ts

test: move local cli and config scenario suites out of e2e

2026-02-22 10:58:04 +00:00

skills-cli.test.ts

feat(ui): Control UI polish — skills revamp, markdown preview, agent workspace, macOS config tree (#53411) thanks @BunsDev

2026-03-24 01:21:13 -05:00

skills-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

system-cli.test.ts

feat(cli): support targeting running containerized openclaw instances (#52651)

2026-03-24 10:17:17 -04:00

system-cli.ts

refactor(cli): separate json payload output from logging

2026-03-22 23:19:17 +00:00

tagline.test.ts

feat(cli): add configurable banner tagline mode

2026-03-03 00:31:51 +00:00

tagline.ts

feat(cli): add configurable banner tagline mode

2026-03-03 00:31:51 +00:00

test-runtime-capture.ts

test: centralize cli runtime capture helpers

2026-03-23 01:53:28 +00:00

tui-cli.ts

…

update-cli.option-collisions.test.ts

refactor: reuse shared cli runtime test mocks

2026-03-23 01:53:28 +00:00

update-cli.test.ts

fix(runtime): support Node 22.14 installs

2026-03-25 06:22:18 -07:00

update-cli.ts

fix: harden update channel switching

2026-03-22 15:09:38 -07:00

wait.ts

…

webhooks-cli.ts

…

windows-argv.ts

…