ClawSweeper is the conservative maintenance bot for OpenClaw repositories. It
currently covers openclaw/openclaw, openclaw/clawhub, and self-review for
openclaw/clawsweeper.
It has two independent lanes:
- issue/PR sweeper: keeps one markdown report per open issue or PR, publishes one durable Codex automated review comment when useful, and only closes items when the evidence is strong
- commit sweeper: reviews code-bearing commits that land on
main, writes one canonical markdown report per commit, and optionally publishes a GitHub Check Run for that commit
- Repository profiles: per-repository rules live in
src/repository-profiles.ts, so OpenClaw, ClawHub, and ClawSweeper can share the same engine while keeping different apply limits. - Issue and PR intake: scheduled runs scan open issues and pull requests,
while target repositories can forward exact issue/PR events with
repository_dispatchfor low-latency one-item reviews. - Codex review reports: each issue or PR becomes
records/<repo-slug>/items/<number>.mdwith the decision, evidence, proposed maintainer-facing comment, runtime metadata, and GitHub snapshot hash. - Durable review comments: ClawSweeper syncs one marker-backed public review
comment per item and edits it in place instead of posting repeated comments.
When a review starts and no ClawSweeper comment exists yet, it posts a short
crustacean-friendly status placeholder first, then replaces that same comment
with the completed review. Completed comments include a dedicated security
review section for supply-chain, permission, secret-handling, and code
execution concerns. Pull request comments include hidden verdict markers, and
actionable PR follow-up includes a hidden
clawsweeper-action:fix-requiredmarker for the trusted ClawSweeper repair loop. Seedocs/pr-review-comments.md. - Guarded apply: apply mode re-fetches live GitHub state, checks labels, maintainer authorship, paired issue/PR state, snapshot drift, and repository profile rules before commenting or closing anything.
- Archive and reopen handling: closed or already-closed reports move to
records/<repo-slug>/closed/<number>.md; reopened archived items move back toitems/as stale work. - Dashboard: this README contains the generated fleet dashboard with current run state, cadence health, recent reviews, recent closes, and work candidates.
- Workflow status markers:
pnpm run statusupdates per-repository README status blocks so long-running workflows can publish progress without changing report data. - Audit:
pnpm run auditcompares live GitHub state with report storage and can publish Audit Health into this README without mutating issues or PRs. - Reconcile:
pnpm run reconcilerepairs report placement drift such as reopened archived records or closed items still sitting initems/. - Work candidates: valid, narrow items can be marked as
queue_fix_prcandidates for manual ClawSweeper repair promotion. - Commit review: push events on target
mainbranches can dispatch to.github/workflows/commit-review.yml, which expands the commit range, skips non-code-only commits cheaply, starts one Codex worker per code-bearing commit, and writesrecords/<repo-slug>/commits/<sha>.md. - Manual reruns and backfills: both lanes support manual workflow dispatch.
Commit review supports exact SHAs, historic ranges with
before_sha, and anadditional_promptinput for one-off review instructions. - Commit report queries:
pnpm commit-reports -- --since 24h,--findings,--non-clean,--repo, and--authormake the flat per-SHA commit storage easy to review by time window without date folders. - Optional commit checks: commit reports are the source of truth; target commit Check Runs are disabled by default and can be enabled per run or repo.
- ClawSweeper repair dispatch: commit reports with
result: findingscan dispatch to the repair intake, where an audit record is written and a PR is created only when the finding is narrow, non-security, and still relevant on latestmain.
ClawSweeper may propose a close only when the item is clearly one of these:
- implemented on current
main - not reproducible on current
main - better suited for ClawHub skill/plugin work than core
- duplicate or superseded by a canonical issue/PR
- concrete but not actionable in this source repo
- incoherent enough that no action can be taken
- stale issue older than 60 days with too little data to verify
Maintainer-authored items are never auto-closed. Everything else stays open.
Issues with an open PR that references them using GitHub closing syntax such as
Fixes #123 stay open until that PR merges or is closed.
Open issue/PR pairs from the same author stay open together unless the paired
item is already resolved or a maintainer explicitly asks to close one side.
Repository profiles can further narrow apply. ClawHub and ClawSweeper self-review
are intentionally stricter: they review issues and PRs, but apply may close only
PRs where current main already implements the proposed change with
source-backed evidence.
Maintainers can steer ClawSweeper from target-repo issue and PR comments. The
preferred form is @clawsweeper .... The router also accepts
@clawsweeper[bot] ..., @openclaw-clawsweeper ...,
@openclaw-clawsweeper[bot] ..., and legacy slash aliases such as
/clawsweeper ..., /review, /automerge, and /autoclose <reason>.
Common commands:
@clawsweeper status
@clawsweeper re-review
@clawsweeper review
@clawsweeper fix ci
@clawsweeper address review
@clawsweeper rebase
@clawsweeper autofix
@clawsweeper automerge
@clawsweeper approve
@clawsweeper explain
@clawsweeper stop
@clawsweeper why did automerge stop here?
statusandexplainpost a short target summary.reviewandre-reviewdispatch a fresh ClawSweeper issue/PR review without starting repair.- Command status replies are marker-backed and edited in place per issue/PR, intent, and head SHA, so repeated review nudges do not leave a trail of duplicate lobster notes.
- Freeform
@clawsweeper ...mentions dispatch a read-only assist review that answers the maintainer request in the next ClawSweeper comment. Action-looking prose still maps through existing safe markers and deterministic gates. fix ci,address review, andrebasedispatch the repair worker only for ClawSweeper PRs or PRs already opted intoclawsweeper:autofixorclawsweeper:automerge.autofixlabels an open PR, creates or reuses the adopted job, dispatches review, and enters the bounded review/fix loop without merging.automergelabels an open PR, creates or reuses the adopted job, dispatches review, and enters the bounded review/fix/merge loop. Draft PRs are fix-only until GitHub marks them ready for review.- User-facing OpenClaw
fix,feat, andperfautomerge PRs must include aCHANGELOG.mdentry before ClawSweeper will merge them. - Security-sensitive findings can be repaired only after explicit
autofix/automergeopt-in; ClawSweeper still will not merge until a later exact-head review is clean. approvelets a maintainer clear a ClawSweeper human-review pause and merge only after the normal exact-head, checks, mergeability, and gate checks pass.stopaddsclawsweeper:human-review;/autoclose <reason>closes the item and bounded linked same-repo targets with an explicit maintainer reason.
Only maintainers are accepted. The router checks repository collaborator
permission (admin, maintain, or write) and falls back to trusted
author_association values when permission lookup is unavailable. Contributor
commands are ignored without a reply. Scheduled comment routing is dry unless
CLAWSWEEPER_COMMENT_ROUTER_EXECUTE=1; workflow dispatch with execute=true
can be used for one-off live routing.
Last dashboard update: Apr 30, 2026, 16:24 UTC
| Metric | Count |
|---|---|
| Covered repositories | 3 |
| Open issues | 3807 |
| Open PRs | 3367 |
| Open items total | 7174 |
| Reviewed files | 7686 |
| Unreviewed open items | 57 |
| Due now by cadence | 2365 |
| Proposed closes awaiting apply | 0 |
| Work candidates awaiting promotion | 1484 |
| Closed by Codex apply | 11200 |
| Failed or stale reviews | 29 |
| Archived closed files | 15172 |
| Repository | Open | Reviewed | Unreviewed | Due | Proposed closes | Work candidates | Closed | Latest review | Latest close | Comments synced, 1h |
|---|---|---|---|---|---|---|---|---|---|---|
| OpenClaw | 6816 | 6759 | 57 | 2291 | 0 | 1438 | 11192 | Apr 30, 2026, 16:20 UTC | Apr 30, 2026, 16:18 UTC | 740 |
| ClawHub | 358 | 924 | 0 | 71 | 0 | 45 | 8 | Apr 29, 2026, 22:22 UTC | Apr 29, 2026, 17:17 UTC | 0 |
| ClawSweeper | 0 | 3 | 0 | 3 | 0 | 1 | 0 | Apr 29, 2026, 14:08 UTC | unknown | 0 |
| Repository | State | Updated | Run |
|---|---|---|---|
| OpenClaw | Review in progress | Apr 30, 2026, 16:24 UTC | run |
| ClawHub | Review publish complete | Apr 29, 2026, 22:23 UTC | run |
| ClawSweeper | Idle | unknown | none |
Latest review: Apr 30, 2026, 16:20 UTC. Latest close: Apr 30, 2026, 16:18 UTC. Latest comment sync: Apr 30, 2026, 16:21 UTC.
| Window | Reviews | Close decisions | Keep-open decisions | Failed/stale reviews | Closed | Comments synced | Apply skips |
|---|---|---|---|---|---|---|---|
| Last 15 minutes | 26 | 1 | 25 | 1 | 16 | 328 | 1 |
| Last hour | 734 | 39 | 695 | 7 | 50 | 740 | 2 |
| Last 24 hours | 5946 | 377 | 5569 | 27 | 718 | 2315 | 26 |
| Repository | Item | Title | Reason | Closed | Report |
|---|---|---|---|---|---|
| openclaw/openclaw | #75142 | docs: recommend apple-notes-native as low-friction alternative (#75123) | belongs on ClawHub | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/75142.md |
| openclaw/openclaw | #74849 | fix: stabilize SDK chat projection deltas and abort/wait snapshot durability | already implemented on main | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/74849.md |
| openclaw/openclaw | #73914 | [Bug]: WhatsApp inbound handler dead after 408 reconnect cycle — watchdog detects but reconnect doesn't restore (2026.4.26 regression) | already implemented on main | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73914.md |
| openclaw/openclaw | #73805 | prewarmConfiguredPrimaryModel blocks 30s on startup (openai-codex provider name mismatch) | already implemented on main | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73805.md |
| openclaw/openclaw | #73763 | [Bug]: session_status tool-call loop not hard-aborted — agent repeats 30+ identical calls despite loop detector warnings | duplicate or superseded | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73763.md |
| openclaw/openclaw | #73696 | fix(config): allow per-agent verbose and elevated defaults | duplicate or superseded | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73696.md |
| openclaw/openclaw | #73263 | fix(gateway): allow internal agent channel hints | already implemented on main | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73263.md |
| openclaw/openclaw | #73227 | fix: dashboard command missing token hint in headless/WSL (#72081) | duplicate or superseded | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73227.md |
| openclaw/openclaw | #73217 | fix(media): surface image optimization failure cause | already implemented on main | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73217.md |
| openclaw/openclaw | #73189 | [Bug]: cron systemEvent payload.text lost in main-session handoff — agent receives bare heartbeat poll without payload (regression from 4.25 transient runtime context) | already implemented on main | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73189.md |
| Repository | Item | Title | Priority | Status | Reviewed | Report |
|---|---|---|---|---|---|---|
| openclaw/openclaw | #75156 | [Bug]: Telegram first assistant reply can deliver text but drop attachment when reply contains text + MEDIA: | high | candidate | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/items/75156.md |
| openclaw/openclaw | #62763 | openclaw doctor --fix corrupts signal multi-account config by inventing a phantom accounts.default block | high | candidate | Apr 30, 2026, 16:09 UTC | records/openclaw-openclaw/items/62763.md |
| openclaw/openclaw | #72139 | Control UI auth retry loop + blocking chat.history causes Slack Socket Mode disconnects | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72139.md |
| openclaw/openclaw | #71849 | Realtime voice consult is too slow/fragile for live calls; add fast memory context path | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/71849.md |
| openclaw/openclaw | #72273 | Make DISCORD_GATEWAY_READY_TIMEOUT_MS configurable (15s too short for multi-account stagger) |
high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72273.md |
| openclaw/openclaw | #72044 | DeepSeek-v4-pro thinking mode breaks on multi-turn tool-call flows (4.24 fix is incomplete) | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72044.md |
| openclaw/openclaw | #72208 | [Bug]: 4.24版本全局安装后卡死，无法使用 | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72208.md |
| openclaw/openclaw | #68774 | fix(memory-core): prevent staged dream candidates from leaking into MEMORY.md | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/68774.md |
| openclaw/openclaw | #71784 | Bug: memory search live embedding fails ~20–40% with fetch failed | other side closed (provider-agnostic; upstream healthy) |
high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/71784.md |
| openclaw/openclaw | #72345 | voice-call: CLI voicecall call cannot run when gateway is owning the webhook port |
high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72345.md |
| openclaw/openclaw | #71865 | Auth login blocked by size-drop guard when openclaw.json was created by PowerShell (verbose/BOM format) | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/71865.md |
| openclaw/openclaw | #73796 | Browser screenshot delivery to chat fails — MEDIA:~/... paths rejected by media-source validator | high | candidate | Apr 30, 2026, 16:05 UTC | records/openclaw-openclaw/items/73796.md |
| openclaw/openclaw | #71710 | [Bug]: openclaw-agent ignores SIGTERM under cron, accumulates hung process chains and exhausts host RAM/swap | high | candidate | Apr 30, 2026, 16:01 UTC | records/openclaw-openclaw/items/71710.md |
| openclaw/openclaw | #75151 | [Bug]: Context overflow reset can map sessionFile to nonexistent transcript, orphaning real session history | high | candidate | Apr 30, 2026, 16:01 UTC | records/openclaw-openclaw/items/75151.md |
| openclaw/openclaw | #73104 | fix(telegram): handle edited message updates | high | candidate | Apr 30, 2026, 15:58 UTC | records/openclaw-openclaw/items/73104.md |
Recently Reviewed Across Repos
| Repository | Item | Title | Outcome | Status | Reviewed |
|---|---|---|---|---|---|
| openclaw/openclaw | #75143 | fix(exec): enforce allowlist argument patterns | keep_open / kept_open | complete | Apr 30, 2026, 16:20 UTC |
| openclaw/openclaw | #58675 | feat(github-copilot): auto-discover models via /models API | keep_open / kept_open | complete | Apr 30, 2026, 16:20 UTC |
| openclaw/openclaw | #74716 | Route Codex Computer Use through the Mac app node host | keep_open / kept_open | complete | Apr 30, 2026, 16:19 UTC |
| openclaw/openclaw | #74360 | fix(ssrf): restrict dangerouslyAllowPrivateNetwork to self-hosted providers only | keep_open / kept_open | complete | Apr 30, 2026, 16:19 UTC |
| openclaw/openclaw | #75156 | [Bug]: Telegram first assistant reply can deliver text but drop attachment when reply contains text + MEDIA: | keep_open / kept_open | complete | Apr 30, 2026, 16:18 UTC |
| openclaw/openclaw | #75157 | fix(ui): use catalog display names for agent models | keep_open / kept_open | complete | Apr 30, 2026, 16:17 UTC |
| openclaw/openclaw | #75078 | fix(feishu): media-aware dedupe key prevents dropping audio with reused message_id | keep_open / kept_open | failed | Apr 30, 2026, 16:16 UTC |
| openclaw/openclaw | #75075 | feat(gateway): surface built-in tool calls as function_call output items on /v1/responses | keep_open / kept_open | complete | Apr 30, 2026, 16:15 UTC |
| openclaw/openclaw | #62599 | [Bug]: openclaw status loads memory plugins locally and can report false vector state | keep_open / kept_open | complete | Apr 30, 2026, 16:14 UTC |
| openclaw/openclaw | #71947 | Architecture audit: concrete agchk scan leads for OpenClaw | keep_open / kept_open | complete | Apr 30, 2026, 16:13 UTC |
OpenClaw (openclaw/openclaw)
Workflow status
Repository: openclaw/openclaw
Updated: Apr 30, 2026, 16:24 UTC
State: Review in progress
Planned 500 items across 100 shards. Capacity is 500 items. Review shards are starting; publish will merge artifacts when they finish. Run: https://github.com/openclaw/clawsweeper/actions/runs/25176726514
| Metric | Count |
|---|---|
| Target repository | openclaw/openclaw |
| Open issues | 3467 |
| Open PRs | 3349 |
| Open items total | 6816 |
| Reviewed files | 6759 |
| Unreviewed open items | 57 |
| Archived closed files | 15146 |
| Metric | Count |
|---|---|
| Fresh reviewed issues in the last 7 days | 3448 |
| Proposed issue closes | 0 (0% of reviewed issues) |
| Fresh reviewed PRs in the last 7 days | 3295 |
| Proposed PR closes | 0 (0% of reviewed PRs) |
| Fresh verified reviews in the last 7 days | 6743 |
| Proposed closes awaiting apply | 0 (0% of fresh reviews) |
| Work candidates awaiting promotion | 1438 |
| Closed by Codex apply | 11192 |
| Failed or stale reviews | 16 |
| Metric | Coverage |
|---|---|
| Hourly cadence coverage | 445/1452 current (1007 due, 30.6%) |
| Hourly hot item cadence (<7d) | 445/1452 current (1007 due, 30.6%) |
| Daily cadence coverage | 2300/3522 current (1222 due, 65.3%) |
| Daily PR cadence | 1545/2461 current (916 due, 62.8%) |
| Daily new issue cadence (<30d) | 755/1061 current (306 due, 71.2%) |
| Weekly older issue cadence | 1780/1785 current (5 due, 99.7%) |
| Due now by cadence | 2291 |
Repository: openclaw/openclaw
Last audit: Apr 30, 2026, 12:49 UTC
Status: Action needed
Targeted review input: 72522,72527,72529,72531,72532,72535,72537,72539,72541,72543
| Metric | Count |
|---|---|
| Scan complete | yes |
| Open items seen | 6932 |
| Missing eligible open records | 279 |
| Missing maintainer-authored open records | 33 |
| Missing protected open records | 22 |
| Missing recently-created open records | 30 |
| Archived records that are open again | 0 |
| Stale item records | 2 |
| Duplicate records | 0 |
| Protected proposed closes | 0 |
| Stale reviews | 4 |
| Item | Category | Title | Detail |
|---|---|---|---|
| #72522 | Missing eligible open | fix(control-ui): keep chat UI mounted across transient reconnects | eligible |
| #72527 | Missing eligible open | [Bug]: Downgrading from 2026.4.x to 2026.3.2 leaves openclaw.json in invalid/broken state with no warning | eligible |
| #72529 | Missing eligible open | Feature Request: Allow cron jobs to route to subagent persistent sessions | eligible |
Latest review: Apr 30, 2026, 16:20 UTC. Latest close: Apr 30, 2026, 16:18 UTC. Latest comment sync: Apr 30, 2026, 16:21 UTC.
| Window | Reviews | Close decisions | Keep-open decisions | Failed/stale reviews | Closed | Comments synced | Apply skips |
|---|---|---|---|---|---|---|---|
| Last 15 minutes | 26 | 1 | 25 | 1 | 16 | 328 | 1 |
| Last hour | 734 | 39 | 695 | 7 | 50 | 740 | 2 |
| Last 24 hours | 5022 | 377 | 4645 | 14 | 716 | 1915 | 26 |
| Item | Title | Reason | Closed | Report |
|---|---|---|---|---|
| #75142 | docs: recommend apple-notes-native as low-friction alternative (#75123) | belongs on ClawHub | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/75142.md |
| #74849 | fix: stabilize SDK chat projection deltas and abort/wait snapshot durability | already implemented on main | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/74849.md |
| #73914 | [Bug]: WhatsApp inbound handler dead after 408 reconnect cycle — watchdog detects but reconnect doesn't restore (2026.4.26 regression) | already implemented on main | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73914.md |
| #73805 | prewarmConfiguredPrimaryModel blocks 30s on startup (openai-codex provider name mismatch) | already implemented on main | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73805.md |
| #73763 | [Bug]: session_status tool-call loop not hard-aborted — agent repeats 30+ identical calls despite loop detector warnings | duplicate or superseded | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73763.md |
| #73696 | fix(config): allow per-agent verbose and elevated defaults | duplicate or superseded | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/closed/73696.md |
| #73263 | fix(gateway): allow internal agent channel hints | already implemented on main | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73263.md |
| #73227 | fix: dashboard command missing token hint in headless/WSL (#72081) | duplicate or superseded | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73227.md |
| #73217 | fix(media): surface image optimization failure cause | already implemented on main | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73217.md |
| #73189 | [Bug]: cron systemEvent payload.text lost in main-session handoff — agent receives bare heartbeat poll without payload (regression from 4.25 transient runtime context) | already implemented on main | Apr 30, 2026, 16:17 UTC | records/openclaw-openclaw/closed/73189.md |
| Item | Title | Priority | Status | Reviewed | Report |
|---|---|---|---|---|---|
| #75156 | [Bug]: Telegram first assistant reply can deliver text but drop attachment when reply contains text + MEDIA: | high | candidate | Apr 30, 2026, 16:18 UTC | records/openclaw-openclaw/items/75156.md |
| #62763 | openclaw doctor --fix corrupts signal multi-account config by inventing a phantom accounts.default block | high | candidate | Apr 30, 2026, 16:09 UTC | records/openclaw-openclaw/items/62763.md |
| #72139 | Control UI auth retry loop + blocking chat.history causes Slack Socket Mode disconnects | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72139.md |
| #71849 | Realtime voice consult is too slow/fragile for live calls; add fast memory context path | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/71849.md |
| #72273 | Make DISCORD_GATEWAY_READY_TIMEOUT_MS configurable (15s too short for multi-account stagger) |
high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72273.md |
| #72044 | DeepSeek-v4-pro thinking mode breaks on multi-turn tool-call flows (4.24 fix is incomplete) | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72044.md |
| #72208 | [Bug]: 4.24版本全局安装后卡死，无法使用 | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72208.md |
| #68774 | fix(memory-core): prevent staged dream candidates from leaking into MEMORY.md | high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/68774.md |
| #71784 | Bug: memory search live embedding fails ~20–40% with fetch failed | other side closed (provider-agnostic; upstream healthy) |
high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/71784.md |
| #72345 | voice-call: CLI voicecall call cannot run when gateway is owning the webhook port |
high | candidate | Apr 30, 2026, 16:08 UTC | records/openclaw-openclaw/items/72345.md |
| Item | Title | Outcome | Status | Reviewed |
|---|---|---|---|---|
| #75143 | fix(exec): enforce allowlist argument patterns | keep_open / kept_open | complete | Apr 30, 2026, 16:20 UTC |
| #58675 | feat(github-copilot): auto-discover models via /models API | keep_open / kept_open | complete | Apr 30, 2026, 16:20 UTC |
| #74716 | Route Codex Computer Use through the Mac app node host | keep_open / kept_open | complete | Apr 30, 2026, 16:19 UTC |
| #74360 | fix(ssrf): restrict dangerouslyAllowPrivateNetwork to self-hosted providers only | keep_open / kept_open | complete | Apr 30, 2026, 16:19 UTC |
| #75156 | [Bug]: Telegram first assistant reply can deliver text but drop attachment when reply contains text + MEDIA: | keep_open / kept_open | complete | Apr 30, 2026, 16:18 UTC |
| #75157 | fix(ui): use catalog display names for agent models | keep_open / kept_open | complete | Apr 30, 2026, 16:17 UTC |
| #75078 | fix(feishu): media-aware dedupe key prevents dropping audio with reused message_id | keep_open / kept_open | failed | Apr 30, 2026, 16:16 UTC |
| #75075 | feat(gateway): surface built-in tool calls as function_call output items on /v1/responses | keep_open / kept_open | complete | Apr 30, 2026, 16:15 UTC |
| #62599 | [Bug]: openclaw status loads memory plugins locally and can report false vector state | keep_open / kept_open | complete | Apr 30, 2026, 16:14 UTC |
| #71947 | Architecture audit: concrete agchk scan leads for OpenClaw | keep_open / kept_open | complete | Apr 30, 2026, 16:13 UTC |
ClawHub (openclaw/clawhub)
Workflow status
Repository: openclaw/clawhub
Updated: Apr 29, 2026, 22:23 UTC
State: Review publish complete
Merged review artifacts for run 25135463730. Folder reconciliation moved tracked files to match current GitHub open/closed state, and the dashboard reflects completed shards. Run: https://github.com/openclaw/clawsweeper/actions/runs/25135463730
| Metric | Count |
|---|---|
| Target repository | openclaw/clawhub |
| Open issues | 340 |
| Open PRs | 18 |
| Open items total | 358 |
| Reviewed files | 924 |
| Unreviewed open items | 0 |
| Archived closed files | 26 |
| Metric | Count |
|---|---|
| Fresh reviewed issues in the last 7 days | 877 |
| Proposed issue closes | 0 (0% of reviewed issues) |
| Fresh reviewed PRs in the last 7 days | 34 |
| Proposed PR closes | 0 (0% of reviewed PRs) |
| Fresh verified reviews in the last 7 days | 911 |
| Proposed closes awaiting apply | 0 (0% of fresh reviews) |
| Work candidates awaiting promotion | 45 |
| Closed by Codex apply | 8 |
| Failed or stale reviews | 13 |
| Metric | Coverage |
|---|---|
| Hourly cadence coverage | 0/59 current (59 due, 0%) |
| Hourly hot item cadence (<7d) | 0/59 current (59 due, 0%) |
| Daily cadence coverage | 188/193 current (5 due, 97.4%) |
| Daily PR cadence | 18/18 current (0 due, 100%) |
| Daily new issue cadence (<30d) | 170/175 current (5 due, 97.1%) |
| Weekly older issue cadence | 662/669 current (7 due, 99%) |
| Due now by cadence | 71 |
Repository: openclaw/clawhub
Last audit: Apr 29, 2026, 18:44 UTC
Status: Passing
Targeted review input: 756
| Metric | Count |
|---|---|
| Scan complete | yes |
| Open items seen | 925 |
| Missing eligible open records | 0 |
| Missing maintainer-authored open records | 5 |
| Missing protected open records | 0 |
| Missing recently-created open records | 0 |
| Archived records that are open again | 0 |
| Stale item records | 0 |
| Duplicate records | 0 |
| Protected proposed closes | 0 |
| Stale reviews | 1 |
| Item | Category | Title | Detail |
|---|---|---|---|
| None |
Latest review: Apr 29, 2026, 22:22 UTC. Latest close: Apr 29, 2026, 17:17 UTC. Latest comment sync: Apr 29, 2026, 22:15 UTC.
| Window | Reviews | Close decisions | Keep-open decisions | Failed/stale reviews | Closed | Comments synced | Apply skips |
|---|---|---|---|---|---|---|---|
| Last 15 minutes | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Last hour | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Last 24 hours | 924 | 0 | 924 | 13 | 2 | 400 | 0 |
| Item | Title | Reason | Closed | Report |
|---|---|---|---|---|
| #1434 | Sonarbay-skill incorrectly flaged. | closed externally after review | Apr 29, 2026, 17:17 UTC | records/openclaw-clawhub/closed/1434.md |
| #1376 | False positive: openclaw-workspace-sync flagged as suspicious | closed externally after review | Apr 29, 2026, 17:06 UTC | records/openclaw-clawhub/closed/1376.md |
| #1812 | Skill be flagged as suspicious and being marked hidden | closed externally after review | Apr 29, 2026, 13:48 UTC | records/openclaw-clawhub/closed/1812.md |
| #1891 | [codex] remove card link hover underlines | kept open | Apr 29, 2026, 08:25 UTC | records/openclaw-clawhub/closed/1891.md |
| #1889 | fix: restore ClawHub public UI | closed externally after review | Apr 29, 2026, 07:52 UTC | records/openclaw-clawhub/closed/1889.md |
| #1881 | chore(ci): update package publish artifact action | closed externally after review | Apr 29, 2026, 05:31 UTC | records/openclaw-clawhub/closed/1881.md |
| #1880 | feat: add featured plugin curation | kept open | Apr 29, 2026, 05:13 UTC | records/openclaw-clawhub/closed/1880.md |
| #1871 | [codex] Add skills/plugins search typeahead | closed externally after review | Apr 29, 2026, 04:24 UTC | records/openclaw-clawhub/closed/1871.md |
| #1878 | feat: add ClawHub rescan guidance workflow | kept open | Apr 29, 2026, 03:02 UTC | records/openclaw-clawhub/closed/1878.md |
| #1875 | fix: move stars link into settings | closed externally after review | Apr 29, 2026, 02:50 UTC | records/openclaw-clawhub/closed/1875.md |
| Item | Title | Priority | Status | Reviewed | Report |
|---|---|---|---|---|---|
| #1226 | clawhub package publish fails with "openclaw.plugin.json required" error | high | candidate | Apr 29, 2026, 22:11 UTC | records/openclaw-clawhub/items/1226.md |
| #1170 | [Bug] [Blocking] ClawHub Cli publish bug | high | candidate | Apr 29, 2026, 22:09 UTC | records/openclaw-clawhub/items/1170.md |
| #1432 | False 'suspicious' flag: registry metadata not extracting openclaw.requires.env from published files | high | candidate | Apr 29, 2026, 22:05 UTC | records/openclaw-clawhub/items/1432.md |
| #1756 | Search results shift after initial render — high-relevance skills missing from top until scroll cycle | high | candidate | Apr 29, 2026, 22:04 UTC | records/openclaw-clawhub/items/1756.md |
| #1205 | clawhub publish fails: Convex multiple paginated queries in syncSkillSearchDigestsForOwnerPublisherId (CLI v0.9.0) | high | candidate | Apr 29, 2026, 22:03 UTC | records/openclaw-clawhub/items/1205.md |
| #1197 | publish fails: "multiple paginated queries" Convex error on first publish | high | candidate | Apr 29, 2026, 22:02 UTC | records/openclaw-clawhub/items/1197.md |
| #1176 | publish/sync fails for all skills: "multiple paginated queries" Convex error | high | candidate | Apr 29, 2026, 22:02 UTC | records/openclaw-clawhub/items/1176.md |
| #1195 | Publish fails: Convex paginated query error in syncSkillSearchDigestsForOwnerPublisherId | high | candidate | Apr 29, 2026, 22:02 UTC | records/openclaw-clawhub/items/1195.md |
| #937 | [Bug] clawhub update --all always reports 'local changes (no match)' after v0.8.0 — persists immediately after force-update | high | candidate | Apr 29, 2026, 22:01 UTC | records/openclaw-clawhub/items/937.md |
| #1683 | 显示 @yangzhichao814-cell/ apexsearch的重复项 | high | candidate | Apr 29, 2026, 21:42 UTC | records/openclaw-clawhub/items/1683.md |
| Item | Title | Outcome | Status | Reviewed |
|---|---|---|---|---|
| #1525 | shejian ClawHub Skill has been tagged as suspicious but everything looks fine in the scan results from VirusTotal Thanks | keep_open / kept_open | failed | Apr 29, 2026, 22:22 UTC |
| #1538 | clawhub dashboard is unavailable | keep_open / kept_open | failed | Apr 29, 2026, 22:21 UTC |
| #1818 | False positive: agenttrust-scanner flagged as suspicious | keep_open / kept_open | failed | Apr 29, 2026, 22:20 UTC |
| #1900 | accidently delete my account， cant create new one use github | keep_open / kept_open | complete | Apr 29, 2026, 22:15 UTC |
| #1862 | False positive: asr-hotwords flagged as suspicious | keep_open / kept_open | complete | Apr 29, 2026, 22:14 UTC |
| #1422 | ai-capability-analyzer has been incorrectly flagged | keep_open / kept_open | complete | Apr 29, 2026, 22:14 UTC |
| #1707 | Bug Summary: Missing Token in search and explore Commands | keep_open / kept_open | failed | Apr 29, 2026, 22:13 UTC |
| #1407 | Skill page shows stale SKILL.md content after publishing new versions | keep_open / kept_open | complete | Apr 29, 2026, 22:13 UTC |
| #1446 | False Positive: Skill [Memory Never Forget v2.2.2] incorrectly flagged as suspicious by OpenClaw Security Scan | keep_open / kept_open | failed | Apr 29, 2026, 22:13 UTC |
| #1503 | False positive: axonflow/governance-policies flagged as suspicious — security policy templates | keep_open / kept_open | complete | Apr 29, 2026, 22:12 UTC |
ClawSweeper (openclaw/clawsweeper)
Workflow status
Repository: openclaw/clawsweeper
Updated: unknown
State: Idle
No workflow status has been published yet.
| Metric | Count |
|---|---|
| Target repository | openclaw/clawsweeper |
| Open issues | 0 |
| Open PRs | 0 |
| Open items total | 0 |
| Reviewed files | 3 |
| Unreviewed open items | 0 |
| Archived closed files | 0 |
| Metric | Count |
|---|---|
| Fresh reviewed issues in the last 7 days | 0 |
| Proposed issue closes | 0 (- of reviewed issues) |
| Fresh reviewed PRs in the last 7 days | 3 |
| Proposed PR closes | 0 (0% of reviewed PRs) |
| Fresh verified reviews in the last 7 days | 3 |
| Proposed closes awaiting apply | 0 (0% of fresh reviews) |
| Work candidates awaiting promotion | 1 |
| Closed by Codex apply | 0 |
| Failed or stale reviews | 0 |
| Metric | Coverage |
|---|---|
| Hourly cadence coverage | 0/3 current (3 due, 0%) |
| Hourly hot item cadence (<7d) | 0/3 current (3 due, 0%) |
| Daily cadence coverage | 0/0 current (0 due, -) |
| Daily PR cadence | 0/0 current (0 due, -) |
| Daily new issue cadence (<30d) | 0/0 current (0 due, -) |
| Weekly older issue cadence | 0/0 current (0 due, -) |
| Due now by cadence | 3 |
No audit has been published yet. Run npm run audit -- --update-dashboard to refresh this section.
Latest review: Apr 29, 2026, 14:08 UTC. Latest close: unknown. Latest comment sync: Apr 29, 2026, 14:08 UTC.
| Window | Reviews | Close decisions | Keep-open decisions | Failed/stale reviews | Closed | Comments synced | Apply skips |
|---|---|---|---|---|---|---|---|
| Last 15 minutes | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Last hour | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Last 24 hours | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
| Item | Title | Reason | Closed | Report |
|---|---|---|---|---|
| None |
| Item | Title | Priority | Status | Reviewed | Report |
|---|---|---|---|---|---|
| #19 | test: exercise automerge repair smoke | high | candidate | Apr 29, 2026, 13:41 UTC | records/openclaw-clawsweeper/items/19.md |
| Item | Title | Outcome | Status | Reviewed |
|---|---|---|---|---|
| #20 | test: suppress duplicate remaining-risk prose | keep_open / kept_open | complete | Apr 29, 2026, 14:08 UTC |
| #19 | test: exercise automerge repair smoke | keep_open / kept_open | complete | Apr 29, 2026, 13:41 UTC |
| #18 | docs: document clawsweeper self smoke target | keep_open / kept_open | complete | Apr 29, 2026, 13:18 UTC |
ClawSweeper is split into two operational systems:
- issue/PR sweeper: scheduler, review lane, apply lane, audit, reconcile, and dashboard publishing
- commit sweeper: main-branch commit dispatch, cheap code/non-code classification, one Codex review worker per code-bearing commit, report publishing, and optional target commit checks
The issue/PR scheduler decides what to scan and how often. New and active items get more attention; older quiet items fall back to a slower cadence.
- hot/new and recently active items are checked hourly, with a 5-minute intake schedule for the newest queue edge
- target repositories can forward issue and PR events with
repository_dispatch; those exact item runs use a dedicated single job to review one item, sync the durable comment, and apply only safe close proposals for that same item - pull requests and issues younger than 30 days are checked daily once they leave the hot window
- older inactive issues are checked weekly
- apply wakes every 15 minutes and exits quickly when there are no unchanged high-confidence close proposals
Review is proposal-only. It never closes items.
- A planner scans open issues and PRs, then assigns exact item numbers to shards.
- Manual runs can pass
item_numberor comma-separateditem_numbersto review exact Audit Health findings without scanning for a normal batch. - Each shard checks out the selected target repository at
main. - Codex reviews with
gpt-5.5, high reasoning, fast service tier, and a 10-minute per-item timeout. - Each item becomes a flat report under
records/<repo-slug>/items/<number>.mdwith the decision, evidence, Codex/review-style PR findings, suggested comment, runtime metadata, and GitHub snapshot hash. - High-confidence allowed close decisions become
proposed_close. - After publish, the lane checks the selected items' single marker-backed Codex review comment. Missing comments and missing metadata are synced immediately; existing comments are refreshed only when stale, currently weekly.
- PR review comments keep the top-level note concise, put source links and full
evidence in collapsed details, and use hidden verdict/action markers for the
trusted ClawSweeper repair loop; see
docs/pr-review-comments.md.
Apply reads existing reports and mutates GitHub only when the stored review is still valid.
- Updates the single marker-backed Codex automated review comment in place.
- Closes only unchanged high-confidence proposals.
- Reuses the review comment when closing; no duplicate close comment.
- Moves closed or already-closed reports to
records/<repo-slug>/closed/<number>.md. - Moves reopened archived reports back to the repo’s
items/folder as stale. - Commits checkpoints and dashboard heartbeats during long runs.
Apply wakes every 15 minutes, no-ops when there are no unchanged high-confidence close proposals, and narrows scheduled runs to the currently eligible proposal list so idle runs do not scan unrelated keep-open records. It defaults to all item kinds, no age floor, a 2-second close delay, and 50 fresh closes per checkpoint. If it reaches the requested limit, it queues another apply run with the same settings.
Exact event runs skip the bulk planner, shard matrix, artifact upload, and
separate publish job. They still use the same review and apply code paths, but
only for the selected item number and only with immediate-safe reasons enabled
by default: implemented_on_main and duplicate_or_superseded.
stale_insufficient_info is never applied to young items; apply requires those
issue reports to be at least 30 days old unless a manual run explicitly changes
the threshold.
The README dashboard is fleet-scoped. Each configured repository gets its own record folder, workflow status marker, audit-health marker, cadence counts, and recent activity section. The top dashboard aggregates those repository snapshots so event runs from one repo do not hide the state of another.
There is still one deterministic apply path for writes. Review can propose and sync stale public review comments, but closing remains guarded by apply so a fresh GitHub snapshot, labels, maintainer-authorship, and unchanged item state are checked immediately before mutation.
Commit review is intentionally separate from issue/PR cleanup. It never closes items, writes comments, or fixes code.
- Target repositories forward
pushevents frommainwithrepository_dispatch. - Manual runs can pass
commit_sha, optionalbefore_sha, optionaladditional_prompt,enabled, andcreate_checks. - The receiver verifies the selected commits are reachable from
origin/main. - Before selecting and reviewing commits, the receiver waits 15 minutes by
default (
CLAWSWEEPER_COMMIT_REVIEW_SETTLE_SECONDS=900) so a push range has time to settle across GitHub and the runner. - The plan job expands ranges, pages large backfills at GitHub's matrix limit, and classifies each commit before Codex starts.
- Pure documentation, changelog, README/license, and asset-only commits get a skipped report without spending Codex time.
- Mixed commits and code-bearing commits start one Codex worker per commit. The
worker checks out current target
mainand reviews the selected commit by SHA/range instead of detaching the whole repository at that commit. - Codex is prompted to read beyond the diff: changed files, callers/callees, runtime entry points, adjacent tests/docs, dependency manifests, release notes, advisories, web sources, and focused live tests when useful.
- Each commit writes exactly one report at
records/<repo-slug>/commits/<40-char-sha>.md. - Reruns overwrite the same report, including reruns with an
additional_prompt. - Report results are
nothing_found,findings,inconclusive,failed, orskipped_non_code. - Optional GitHub Checks use the
ClawSweeper Commit Reviewname on the target commit. Clean or skipped reports are green; high-confidence high/critical findings fail; lower-severity, inconclusive, and failed reviews are neutral. - Finding reports are dispatched to the repair intake when
CLAWSWEEPER_COMMIT_FINDINGS_ENABLEDis notfalse. ClawSweeper owns the audit log and any repair PR.
Use pnpm commit-reports -- --since 24h to review recent reports and add
--findings, --non-clean, --repo, or --author to narrow the list. The
storage stays flat so a rerun can overwrite exactly one file for a commit
without rediscovering a date bucket.
- Maintainer-authored items are excluded from automated closes.
- Protected labels block close proposals.
- Open PRs with GitHub closing references block issue closes until the PR is resolved.
- Open same-author issue/PR pairs block one-sided closes.
- Codex runs without GitHub write tokens.
- Issue/PR event jobs create target write and report-push credentials only after Codex exits.
- Commit review workers give Codex only a read-scoped target token as
GH_TOKENso it can inspect mentioned issues, PRs, workflow runs, and commit metadata. - Commit write/check credentials are created only after Codex exits.
- CI makes the target checkout read-only for reviews.
- Reviews fail if Codex leaves tracked or untracked changes behind.
- Snapshot changes block apply unless the only change is the bot’s own review comment.
- Commit Check Runs are optional and disabled by default.
pnpm run audit compares live GitHub state with generated records without moving
files. It reports missing open records, archived open records, stale records,
duplicates, protected-label proposed closes, and stale review-status records.
Protected proposed closes are reported only for active repo items/ records
because archived repo closed/ records are historical and cannot be applied.
Missing open records are classified as eligible, maintainer-authored, protected,
or recently created so strict audit mode can flag actionable drift without
treating expected queue lag or excluded items as failures.
Use --update-dashboard to publish the latest audit health into this README
without making every normal dashboard heartbeat scan all open GitHub items.
Audit Health includes a copyable item_numbers input for reviewable findings
such as missing eligible records, reopened archived records, and stale reviews.
The workflow refreshes Audit Health on a separate six-hour schedule, and it can
be run manually with audit_dashboard=true.
Requires Node 24.
Issue/PR sweeper:
source ~/.profile
corepack enable
pnpm install
pnpm run build
pnpm run plan -- --target-repo openclaw/openclaw --batch-size 5 --shard-count 100 --max-pages 250 --codex-model gpt-5.5 --codex-reasoning-effort high --codex-service-tier fast
pnpm run review -- --target-repo openclaw/openclaw --target-dir ../openclaw --batch-size 5 --max-pages 250 --artifact-dir artifacts/reviews --codex-model gpt-5.5 --codex-reasoning-effort high --codex-service-tier fast --codex-timeout-ms 600000
pnpm run apply-artifacts -- --target-repo openclaw/openclaw --artifact-dir artifacts/reviews
pnpm run audit -- --target-repo openclaw/openclaw --max-pages 250 --sample-limit 25 --update-dashboard
pnpm run reconcile -- --target-repo openclaw/openclaw --dry-runApply unchanged proposals later:
source ~/.profile
corepack enable
pnpm run apply-decisions -- --target-repo openclaw/openclaw --limit 20 --apply-kind allSync durable review comments without closing:
source ~/.profile
corepack enable
pnpm run apply-decisions -- --target-repo openclaw/openclaw --sync-comments-only --comment-sync-min-age-days 7 --processed-limit 1000 --limit 0List commit reports:
source ~/.profile
corepack enable
pnpm run build
pnpm commit-reports -- --since 24h
pnpm commit-reports -- --since 24h --findings
pnpm commit-reports -- --repo openclaw/openclaw --author steipete --since 7dManually rerun commit review through GitHub Actions:
gh workflow run commit-review.yml \
--repo openclaw/clawsweeper \
--ref main \
-f target_repo=openclaw/openclaw \
-f commit_sha=<commit-sha> \
-f before_sha=<parent-or-range-start-sha> \
-f create_checks=false \
-f enabled=true \
-f additional_prompt='Optional extra review focus.'Omit before_sha for a single-commit review. Pass before_sha to review the
historic range before_sha..commit_sha.
Manual review runs are proposal-only. Use apply_existing=true to apply unchanged
proposals later. Scheduled apply runs process both issues and pull requests by
default, subject to the selected repository profile; pass target_repo,
apply_kind=issue, or apply_kind=pull_request to narrow a manual run.
Scheduled runs cover the configured product profiles. openclaw/openclaw keeps
the existing cadence; openclaw/clawhub runs on offset review/apply/audit crons
so its reports live under records/openclaw-clawhub/ without colliding with
default repo records. openclaw/clawsweeper is available for manual and event
self-review smoke tests.
Target repositories can opt into event-level latency by installing the
dispatcher workflow in docs/target-dispatcher.md.
The dispatcher sends repository_dispatch events to this repository with the
target repo and exact item number; ClawSweeper then runs one event job that
reviews, comments, and checks immediate safe apply instead of waiting for the
next hot-intake cron or bulk publish lane.
Target repositories can opt into main-branch commit review with docs/commit-dispatcher.md. That dispatcher sends push ranges to this repository, where ClawSweeper expands the range and writes one commit report per SHA.
pnpm run check
pnpm run oxformatoxformat is an alias for oxfmt; there is no separate oxformat pnpm package.
The CI GitHub Actions workflow runs pnpm run check on pushes, pull requests,
and manual dispatches.
Required secrets:
OPENAI_API_KEY: OpenAI API key used to log Codex in before review shards run.CLAWSWEEPER_APP_CLIENT_ID: public GitHub App client ID forclawsweeper. CurrentlyIv23liOECG0slfuhz093.CLAWSWEEPER_APP_PRIVATE_KEY: private key forclawsweeper; plan/review jobs use a short-lived GitHub App installation token for read-heavy target API calls, commit review uses a read-scoped target token while Codex runs, and apply/comment-sync/check jobs use the app token for comments, closes, and optional checks. Keep App credentials scoped to theactions/create-github-app-tokenstep. Review shards run Codex over attacker-controlled issue/PR text, socodexEnv()also strips these App variables before spawning Codex.
Token flow:
- Review shards log Codex in with
OPENAI_API_KEY, then run without OpenAI or Codex token environment variables. - ClawSweeper uses the
clawsweeperGitHub App token for read-heavy target context. - Apply mode uses the same app token for review comments and closes, so GitHub attributes mutations to the app bot account instead of a PAT user.
- Commit review passes Codex only a read-scoped target token as
GH_TOKENfor issue/PR/workflow/commit hydration, then creates write/check credentials only after Codex exits. - The built-in
GITHUB_TOKENcommits generated reports back to this repo.
Required clawsweeper app permissions:
- Contents: read/write, for report commits, repair branches, and repository dispatch inputs that need a contents-scoped installation token.
- Issues: read/write, for issue comments, labels, closes, and maintainer command authorization context.
- Pull requests: read/write, for PR comments, labels, merge readiness, repair PRs, and guarded automerge.
- Actions: read/write on
openclaw/clawsweeper, for run cancellation, manual dispatch, self-heal, and commit-review continuations. - Checks: write on target repositories when commit Check Runs should be published.
ClawSweeper no longer falls back to PAT-based write tokens. If the GitHub App installation does not grant the requested permission set, the workflow fails at token creation instead of silently switching identity.
Target repository setup:
- install the issue/PR dispatcher from docs/target-dispatcher.md for exact item event reviews
- install the commit dispatcher from
docs/commit-dispatcher.md for
maincommit reviews - set
CLAWSWEEPER_COMMIT_REVIEW_ENABLED=falseto disable commit dispatch without code changes - set
CLAWSWEEPER_COMMIT_REVIEW_CREATE_CHECKS=trueonly if commit Check Runs should be published - optionally set
CLAWSWEEPER_COMMIT_REVIEW_SETTLE_SECONDS=0for manual backfills where the target commit range is already settled; the default is900