Vendor OpenClaw source as Adolf fork baseline

Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11),
free to diverge. Tree copied sans upstream .git; upstream remote added for
future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19.
Preserves docs/ARCHITECTURE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

.agents/skills/openclaw-secret-scanning-maintainer/SKILL.md

@@ -0,0 +1,236 @@
+---
+name: openclaw-secret-scanning-maintainer
+description: Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.
+---
+
+# OpenClaw Secret Scanning Maintainer
+
+**Maintainer-only.** This skill requires repo admin / maintainer permissions to edit or delete other users' comments and resolve secret scanning alerts.
+
+Use this skill when processing alerts from `https://github.com/openclaw/openclaw/security/secret-scanning`.
+
+**Language rule:** All notification comments and replacement comments MUST be written in English.
+
+## Script
+
+All mechanical operations (API calls, temp file management, security enforcements) are handled by:
+
+```
+$REPO_ROOT/.agents/skills/openclaw-secret-scanning-maintainer/scripts/secret-scanning.mjs
+```
+
+The script enforces:
+
+- `hide_secret=true` on all alert fetches (no plaintext secrets in stdout)
+- `mktemp` with random UUIDs for all temp files
+- `-F body=@file` for all body uploads (no inline shell quoting)
+- Notification templates branched by location type
+- Never prints `.secret` or `.body` to stdout
+
+## Overall Flow
+
+Supports single or multiple alerts. For multiple alerts, process in ascending order.
+
+For each alert:
+
+1. **Identify** — `fetch-alert` + `fetch-content` to get metadata and body
+2. **Decide** — Agent reads the body file, identifies whether plaintext secrets remain, and produces a redacted version only when needed
+3. **Redact** — `redact-body-if-needed` for issue/PR body; skip for comments (delete directly)
+4. **Purge** — `delete-comment` + `recreate-comment` for comments; cannot purge body history
+5. **Notify** — `notify` posts the right template per location type, unless the current issue/PR body is already redacted
+6. **Resolve** — `resolve` closes the alert
+7. **Summary** — `summary` prints formatted results
+
+## Step 1: Identify
+
+```bash
+# List all open alerts
+node secret-scanning.mjs list-open
+
+# Fetch specific alert metadata + locations
+node secret-scanning.mjs fetch-alert <NUMBER>
+
+# Fetch content for each location (saves body to temp file)
+node secret-scanning.mjs fetch-content '<location-json>'
+```
+
+The `fetch-content` output includes:
+
+- `body_file`: path to temp file with full body content
+- `author`: who posted it
+- `issue_number` / `pr_number`: where it is
+- `edit_history_count`: number of existing edits
+- `type`: location type for routing
+- For `discussion_comment`, it also includes `comment_node_id`, `discussion_node_id`, and `reply_to_node_id` when the original comment was a reply.
+
+### Location type routing
+
+| type                          | Flow                                          |
+| ----------------------------- | --------------------------------------------- |
+| `issue_comment`               | Comment: delete+recreate                      |
+| `pull_request_comment`        | Comment: delete+recreate                      |
+| `pull_request_review_comment` | Comment: delete+recreate                      |
+| `discussion_comment`          | Discussion comment: delete+recreate (GraphQL) |
+| `issue_body`                  | Body: redact in place                         |
+| `pull_request_body`           | Body: redact in place                         |
+| `commit`                      | Notify only                                   |
+| _other_                       | Skip and report                               |
+
+## Step 2: Decide (Agent)
+
+The agent reads the body file from `fetch-content` output and:
+
+1. Identifies ALL secrets in the content (there may be more than the alert flagged)
+2. Determines whether any plaintext credential remains in the current body
+3. Replaces each remaining secret with `[REDACTED <secret_type>]` — **no partial values, no prefix/suffix**
+4. Saves the redacted content to a new temp file
+
+This is the only step that requires semantic understanding. Everything else is mechanical.
+
+For `issue_body` and `pull_request_body`: if the current body has already been redacted by the author and no plaintext credential remains, **do not post a public notification comment**. Resolve the alert with a maintainer-only resolution comment such as:
+
+```bash
+node secret-scanning.mjs resolve <ALERT_NUMBER> revoked "Current issue/PR body is already redacted; no public notification posted."
+```
+
+This avoids creating a fresh public pointer to historical sensitive content.
+
+## Step 3: Redact
+
+### For comments (issue_comment / PR comments)
+
+**Do NOT redact.** Skip directly to Step 4 (delete + recreate). PATCHing before DELETE creates an unnecessary edit history revision.
+
+### For issue_body / pull_request_body
+
+```bash
+node secret-scanning.mjs redact-body-if-needed <issue|pr> <NUMBER> <current-body-file> <redacted-body-file> <result-file>
+```
+
+Use the `body_file` from `fetch-content` as `<current-body-file>`. The command writes `notify_required` to `<result-file>` and only PATCHes the body when the redacted file differs from the current body.
+
+## Step 4: Purge Edit History
+
+### Comments — Delete and Recreate
+
+For issue/PR comments:
+
+```bash
+# Delete original (all edit history gone)
+node secret-scanning.mjs delete-comment <COMMENT_ID>
+
+# Recreate with redacted content
+node secret-scanning.mjs recreate-comment <ISSUE_NUMBER> <body-file>
+```
+
+For discussion comments (uses GraphQL):
+
+```bash
+# Delete original
+node secret-scanning.mjs delete-discussion-comment <COMMENT_NODE_ID>
+
+# Recreate with redacted content
+node secret-scanning.mjs recreate-discussion-comment <DISCUSSION_NODE_ID> <body-file> [REPLY_TO_NODE_ID]
+```
+
+The `fetch-content` output for `discussion_comment` includes `comment_node_id` and `discussion_node_id` for these commands. When the original discussion comment was a reply, it also includes `reply_to_node_id`; pass that optional third argument so the redacted replacement stays in the original thread.
+
+The recreated comment should follow this format:
+
+```
+> **Note:** The original comment by @<AUTHOR> has been removed due to secret leakage. Below is the redacted version of the original content.
+
+---
+
+<redacted original content>
+```
+
+### issue_body / pull_request_body — Cannot Purge Edit History
+
+Editing creates an edit history revision with the pre-edit plaintext. This cannot be cleared via API.
+
+Do not advise authors publicly to delete/recreate issues or close/reopen PRs. That can draw attention to historical content. Keep purge guidance maintainer-only.
+
+**Output to maintainer terminal only (never in public comments):**
+
+```
+⚠️ Issue/PR body edit history still contains plaintext secrets.
+Contact GitHub Support to purge: https://support.github.com/contact
+Request purge of issue/PR #{NUMBER} userContentEdits.
+```
+
+> **CRITICAL:** Do NOT mention edit history or the "edited" button in any public comment or resolution_comment.
+
+### Commits
+
+Cannot clean. Notify author to delete branch or force-push (for unmerged PRs).
+
+## Step 5: Notify
+
+```bash
+node secret-scanning.mjs notify <TARGET> <AUTHOR> <LOCATION_TYPE> <SECRET_TYPES> [REPLY_TO_NODE_ID|BODY_REDACTION_RESULT_FILE]
+```
+
+- For non-discussion types, `<TARGET>` is the issue/PR number.
+- For `discussion_comment`, `<TARGET>` is the `discussion_node_id` returned by `fetch-content`.
+- For reply-style `discussion_comment` locations, pass the optional `reply_to_node_id` from `fetch-content` so the notification stays in the same thread.
+- For `issue_body` and `pull_request_body`, pass the `<result-file>` from `redact-body-if-needed`. The script skips notification when `notify_required` is `false` and refuses body notifications without this file.
+
+Secret types are comma-separated: `"Discord Bot Token,Feishu App Secret"`
+
+The script picks the right template:
+
+- **comment types**: "your comment … removed and replaced"
+- **body types**: "your issue/PR description … redacted in place"
+- **commit**: "code you committed"
+
+For `issue_body` and `pull_request_body`, only notify when the current body still contained plaintext and maintainers redacted it. If the user already redacted the current body, skip this step and resolve silently.
+
+## Step 6: Resolve
+
+```bash
+node secret-scanning.mjs resolve <ALERT_NUMBER>
+# or with custom resolution:
+node secret-scanning.mjs resolve <ALERT_NUMBER> revoked "Custom comment"
+```
+
+Resolution is `revoked` by default. As maintainers we cannot control whether users rotate — our responsibility is to remove current plaintext exposure and notify only when public notification is useful. The `revoked` means "this secret should be considered leaked", not "I confirmed it was revoked".
+
+## Step 7: Summary
+
+After processing, create a JSON results file and pass it to the summary command:
+
+```bash
+node secret-scanning.mjs summary /tmp/results.json
+```
+
+The script outputs a block delimited by `---BEGIN SUMMARY---` and `---END SUMMARY---`. **You MUST output the content between these markers verbatim to the user. Do NOT rephrase, reformat, abbreviate, or create your own summary.** The script already includes full URLs for every alert and location.
+
+The JSON format:
+
+```json
+[
+  {
+    "number": 72,
+    "secret_type": "Discord Bot Token",
+    "location_label": "Issue #63101 comment",
+    "location_url": "https://github.com/openclaw/openclaw/issues/63101#issuecomment-xxx",
+    "actions": "Deleted+Recreated+Notified",
+    "history_cleared": true
+  }
+]
+```
+
+For unsupported types, add `"skipped": true, "unsupported_type": "<type>"`.
+
+## Safety Rules
+
+- **Agent reads content, identifies secrets, produces redaction.** Script handles all API calls.
+- **Never include any portion of a secret** in public comments, redaction markers, or terminal output.
+- **Never include alert URLs or numbers** in public comments.
+- **For comments, skip PATCH — go directly to DELETE + recreate.**
+- **Never mention edit history, "edited" button, or commit SHAs** in any public content.
+- **Ask for confirmation** before deleting any comment.
+- **One alert at a time** unless user requests batch.
+- **All public comments in English.**
+- **Skip unsupported location types** and report in summary.

.agents/skills/openclaw-secret-scanning-maintainer/scripts/secret-scanning.mjs

@@ -0,0 +1,938 @@
+#!/usr/bin/env node
+/**
+ * Secret scanning alert handler for OpenClaw maintainers.
+ * Usage: node secret-scanning.mjs <command> [options]
+ */
+
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { spawnPlainGh } from "../../../../scripts/lib/plain-gh.mjs";
+
+const REPO = "openclaw/openclaw";
+const REPO_URL = `https://github.com/${REPO}`;
+
+// ─── Helpers ────────────────────────────────────────────────────────────────
+
+function fail(message) {
+  console.error(`error: ${message}`);
+  process.exit(1);
+}
+
+function tmpFile(purpose) {
+  const filePath = path.join(os.tmpdir(), `secretscan-${purpose}-${crypto.randomUUID()}`);
+  // 预创建文件，限制权限为 owner-only
+  fs.writeFileSync(filePath, "", { mode: 0o600 });
+  return filePath;
+}
+
+function gh(args, { json = true, allowFailure = false } = {}) {
+  const proc = spawnPlainGh(args, { encoding: "utf8", maxBuffer: 10 * 1024 * 1024 });
+  if (proc.status !== 0 && !allowFailure) {
+    fail(`gh ${args.slice(0, 3).join(" ")} failed:\n${(proc.stderr || proc.stdout || "").trim()}`);
+  }
+  if (proc.status !== 0) {
+    return {
+      gh_failed: true,
+      status: proc.status,
+      stdout: proc.stdout,
+      stderr: proc.stderr,
+    };
+  }
+  if (!json) {
+    return proc.stdout;
+  }
+  try {
+    return JSON.parse(proc.stdout);
+  } catch {
+    return proc.stdout;
+  }
+}
+
+function ghGraphQL(query, options = {}) {
+  return gh(["api", "graphql", "-f", `query=${query}`], options);
+}
+
+function isBodyLocationType(locationType) {
+  return locationType === "issue_body" || locationType === "pull_request_body";
+}
+
+/** Decides whether redacting an issue/PR body requires notifying the reporter. */
+export function decideBodyRedaction(currentBody, redactedBody) {
+  const bodyChanged = String(currentBody) !== String(redactedBody);
+  return {
+    body_changed: bodyChanged,
+    notify_required: bodyChanged,
+  };
+}
+
+/** Loads redaction-result metadata for issue/PR body secret locations. */
+export function loadBodyRedactionResult(locationType, resultFile) {
+  if (!isBodyLocationType(locationType)) {
+    return { notify_required: true };
+  }
+  if (!resultFile) {
+    fail("Body notifications require a redaction result file from redact-body-if-needed");
+  }
+  if (!fs.existsSync(resultFile)) {
+    fail(`File not found: ${resultFile}`);
+  }
+
+  const result = JSON.parse(fs.readFileSync(resultFile, "utf8"));
+  if (typeof result.notify_required !== "boolean") {
+    fail(`Invalid redaction result file: missing boolean notify_required in ${resultFile}`);
+  }
+  return result;
+}
+
+function failOnGraphQLFailure(result, message) {
+  if (result?.gh_failed) {
+    const details = (
+      result.stderr ||
+      result.stdout ||
+      `gh exited with status ${result.status}`
+    ).trim();
+    fail(`${message}: ${details}`);
+  }
+  if (Array.isArray(result?.errors) && result.errors.length > 0) {
+    fail(`${message}: ${JSON.stringify(result.errors)}`);
+  }
+}
+
+function escapeGraphQLString(value) {
+  return String(value)
+    .replace(/\\/g, "\\\\")
+    .replace(/"/g, '\\"')
+    .replace(/\r/g, "\\r")
+    .replace(/\n/g, "\\n");
+}
+
+function formatGraphQLAfterClause(cursor) {
+  return cursor ? `, after: "${escapeGraphQLString(cursor)}"` : "";
+}
+
+function findDiscussionCommentNode(nodes, discussionCommentDbId) {
+  return nodes.find((node) => String(node.databaseId) === String(discussionCommentDbId)) || null;
+}
+
+function fetchDiscussionReplyPage(commentNodeId, cursor) {
+  const afterClause = formatGraphQLAfterClause(cursor);
+  return ghGraphQL(`{
+    node(id: "${escapeGraphQLString(commentNodeId)}") {
+      ... on DiscussionComment {
+        replies(first: 100${afterClause}) {
+          pageInfo { hasNextPage endCursor }
+          nodes {
+            id
+            databaseId
+            author { login }
+            body
+            url
+            replyTo { id }
+            userContentEdits(first: 50) {
+              totalCount
+            }
+          }
+        }
+      }
+    }
+  }}`);
+}
+
+function fetchDiscussionComment(discussionNumber, discussionCommentDbId) {
+  const [owner, name] = REPO.split("/");
+  let discussionId = null;
+  let cursor = null;
+  let hasNextPage = true;
+
+  while (hasNextPage) {
+    const afterClause = formatGraphQLAfterClause(cursor);
+    const gql = ghGraphQL(
+      `{
+        repository(owner: "${owner}", name: "${name}") {
+          discussion(number: ${discussionNumber}) {
+            id
+            comments(first: 50${afterClause}) {
+              pageInfo { hasNextPage endCursor }
+              nodes {
+                id
+                databaseId
+                author { login }
+                body
+                url
+                replyTo { id }
+                userContentEdits(first: 50) {
+                  totalCount
+                }
+                replies(first: 100) {
+                  pageInfo { hasNextPage endCursor }
+                  nodes {
+                    id
+                    databaseId
+                    author { login }
+                    body
+                    url
+                    replyTo { id }
+                    userContentEdits(first: 50) {
+                      totalCount
+                    }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }`,
+      { allowFailure: true },
+    );
+    failOnGraphQLFailure(gql, `Failed to fetch discussion #${discussionNumber}`);
+
+    const discussion = gql?.data?.repository?.discussion;
+    if (!discussion) {
+      fail(
+        `Discussion #${discussionNumber} not found — it may have been deleted. The alert cannot be processed via this skill.`,
+      );
+    }
+
+    discussionId = discussion.id;
+
+    for (const topLevelComment of discussion.comments.nodes) {
+      if (String(topLevelComment.databaseId) === String(discussionCommentDbId)) {
+        return { discussionId, comment: topLevelComment };
+      }
+
+      let reply = findDiscussionCommentNode(topLevelComment.replies.nodes, discussionCommentDbId);
+      let replyCursor = topLevelComment.replies.pageInfo.endCursor;
+      let hasMoreReplies = topLevelComment.replies.pageInfo.hasNextPage;
+
+      while (!reply && hasMoreReplies) {
+        const replyPage = fetchDiscussionReplyPage(topLevelComment.id, replyCursor);
+        failOnGraphQLFailure(
+          replyPage,
+          `Failed to fetch replies for discussion comment ${topLevelComment.id}`,
+        );
+        const replies = replyPage?.data?.node?.replies;
+        if (!replies) {
+          fail(`Failed to paginate replies for discussion comment ${topLevelComment.id}`);
+        }
+
+        reply = findDiscussionCommentNode(replies.nodes, discussionCommentDbId);
+        hasMoreReplies = replies.pageInfo.hasNextPage;
+        replyCursor = replies.pageInfo.endCursor;
+      }
+
+      if (reply) {
+        return { discussionId, comment: reply };
+      }
+    }
+
+    hasNextPage = discussion.comments.pageInfo.hasNextPage;
+    cursor = discussion.comments.pageInfo.endCursor;
+  }
+
+  return { discussionId, comment: null };
+}
+
+function createDiscussionComment(discussionNodeId, body, replyToNodeId) {
+  const replyToClause = replyToNodeId ? `, replyToId: "${escapeGraphQLString(replyToNodeId)}"` : "";
+  const result = ghGraphQL(
+    `mutation { addDiscussionComment(input: { discussionId: "${escapeGraphQLString(discussionNodeId)}"${replyToClause}, body: "${escapeGraphQLString(body)}" }) { comment { id url } } }`,
+  );
+  if (result?.errors) {
+    fail(`Failed to create discussion comment: ${JSON.stringify(result.errors)}`);
+  }
+  return result?.data?.addDiscussionComment?.comment;
+}
+
+// ─── Commands ───────────────────────────────────────────────────────────────
+
+/**
+ * fetch-alert <number>
+ * Fetch alert metadata + locations. Never exposes .secret.
+ */
+function cmdFetchAlert(alertNumber) {
+  if (!alertNumber) {
+    fail("Usage: fetch-alert <number>");
+  }
+
+  const alert = gh(["api", `repos/${REPO}/secret-scanning/alerts/${alertNumber}?hide_secret=true`]);
+
+  const locations = gh([
+    "api",
+    `repos/${REPO}/secret-scanning/alerts/${alertNumber}/locations`,
+    "--paginate",
+    "--slurp",
+  ]);
+  // --paginate + --slurp 确保多页结果合并为一个 JSON 数组
+  const flatLocations = Array.isArray(locations?.[0])
+    ? locations.flat()
+    : Array.isArray(locations)
+      ? locations
+      : [];
+
+  const result = {
+    number: alert.number,
+    state: alert.state,
+    secret_type: alert.secret_type,
+    secret_type_display_name: alert.secret_type_display_name,
+    validity: alert.validity,
+    html_url: alert.html_url,
+    locations: flatLocations.map((loc) => ({
+      type: loc.type,
+      details: loc.details,
+    })),
+  };
+
+  console.log(JSON.stringify(result, null, 2));
+}
+
+/**
+ * fetch-content <location-json>
+ * Fetch the content and metadata for a specific location.
+ * Saves full body to a temp file. Prints metadata + file path to stdout.
+ */
+function cmdFetchContent(locationJson) {
+  if (!locationJson) {
+    fail("Usage: fetch-content '<location-json>'");
+  }
+  const location = JSON.parse(locationJson);
+  const type = location.type;
+  const details = location.details;
+
+  if (type === "discussion_comment") {
+    const commentUrl = details.discussion_comment_url;
+    if (!commentUrl) {
+      fail("No discussion_comment_url in location details");
+    }
+
+    const urlMatch = commentUrl.match(/discussions\/(\d+)#discussioncomment-(\d+)/);
+    if (!urlMatch) {
+      fail(`Cannot parse discussion comment URL: ${commentUrl}`);
+    }
+    const discussionNumber = urlMatch[1];
+    const discussionCommentDbId = urlMatch[2];
+
+    const { discussionId, comment } = fetchDiscussionComment(
+      discussionNumber,
+      discussionCommentDbId,
+    );
+    if (!comment) {
+      fail(
+        `Discussion comment #${discussionCommentDbId} not found in discussion #${discussionNumber}`,
+      );
+    }
+
+    const bodyFile = tmpFile("body.md");
+    fs.writeFileSync(bodyFile, comment.body || "");
+
+    console.log(
+      JSON.stringify(
+        {
+          type,
+          comment_node_id: comment.id,
+          discussion_node_id: discussionId,
+          reply_to_node_id: comment.replyTo?.id ?? null,
+          discussion_number: Number(discussionNumber),
+          discussion_comment_db_id: Number(discussionCommentDbId),
+          author: comment.author?.login,
+          html_url: comment.url || commentUrl,
+          edit_history_count: comment.userContentEdits?.totalCount ?? 0,
+          body_file: bodyFile,
+        },
+        null,
+        2,
+      ),
+    );
+  } else if (
+    type === "issue_comment" ||
+    type === "pull_request_comment" ||
+    type === "pull_request_review_comment"
+  ) {
+    // Extract comment ID from URL
+    const commentUrl =
+      details.issue_comment_url ||
+      details.pull_request_comment_url ||
+      details.pull_request_review_comment_url;
+    if (!commentUrl) {
+      fail(`No comment URL in location details`);
+    }
+
+    const comment = gh(["api", commentUrl]);
+    const bodyFile = tmpFile("body.md");
+    fs.writeFileSync(bodyFile, comment.body || "");
+
+    // Fetch edit history
+    const nodeId = comment.node_id;
+    const typeName =
+      type === "pull_request_review_comment" ? "PullRequestReviewComment" : "IssueComment";
+    const gql = ghGraphQL(`{
+      node(id: "${nodeId}") {
+        ... on ${typeName} {
+          userContentEdits(first: 50) {
+            totalCount
+          }
+        }
+      }
+    }`);
+    const editCount = gql?.data?.node?.userContentEdits?.totalCount ?? 0;
+
+    // Extract issue number from html_url
+    const htmlUrl = comment.html_url || details.html_url || "";
+    const issueMatch = htmlUrl.match(/\/(issues|pull)\/(\d+)/);
+    const issueNumber = issueMatch ? issueMatch[2] : null;
+
+    console.log(
+      JSON.stringify(
+        {
+          type,
+          comment_id: comment.id,
+          node_id: nodeId,
+          author: comment.user?.login,
+          issue_number: issueNumber,
+          html_url: htmlUrl,
+          edit_history_count: editCount,
+          body_file: bodyFile,
+        },
+        null,
+        2,
+      ),
+    );
+  } else if (type === "issue_body") {
+    const issueUrl = details.issue_body_url || details.issue_url;
+    if (!issueUrl) {
+      fail("No issue URL in location details");
+    }
+
+    const issue = gh(["api", issueUrl]);
+    const bodyFile = tmpFile("body.md");
+    fs.writeFileSync(bodyFile, issue.body || "");
+
+    const nodeId = issue.node_id;
+    const number = issue.number;
+    const gql = ghGraphQL(`{
+      node(id: "${nodeId}") {
+        ... on Issue {
+          userContentEdits(first: 50) {
+            totalCount
+          }
+        }
+      }
+    }`);
+    const editCount = gql?.data?.node?.userContentEdits?.totalCount ?? 0;
+
+    console.log(
+      JSON.stringify(
+        {
+          type,
+          issue_number: number,
+          node_id: nodeId,
+          author: issue.user?.login,
+          html_url: issue.html_url,
+          edit_history_count: editCount,
+          body_file: bodyFile,
+        },
+        null,
+        2,
+      ),
+    );
+  } else if (type === "pull_request_body") {
+    const prUrl = details.pull_request_body_url || details.pull_request_url;
+    if (!prUrl) {
+      fail("No PR URL in location details");
+    }
+
+    const pr = gh(["api", prUrl]);
+    const bodyFile = tmpFile("body.md");
+    fs.writeFileSync(bodyFile, pr.body || "");
+
+    const nodeId = pr.node_id;
+    const number = pr.number;
+    const gql = ghGraphQL(`{
+      node(id: "${nodeId}") {
+        ... on PullRequest {
+          userContentEdits(first: 50) {
+            totalCount
+          }
+        }
+      }
+    }`);
+    const editCount = gql?.data?.node?.userContentEdits?.totalCount ?? 0;
+
+    console.log(
+      JSON.stringify(
+        {
+          type,
+          pr_number: number,
+          node_id: nodeId,
+          author: pr.user?.login,
+          merged: pr.merged,
+          state: pr.state,
+          html_url: pr.html_url,
+          edit_history_count: editCount,
+          body_file: bodyFile,
+        },
+        null,
+        2,
+      ),
+    );
+  } else if (type === "commit") {
+    console.log(
+      JSON.stringify(
+        {
+          type,
+          commit_sha: details.commit_sha,
+          path: details.path,
+          start_line: details.start_line,
+          end_line: details.end_line,
+          html_url: details.html_url || details.commit_url || details.blob_url || null,
+          // No body file for commits
+          body_file: null,
+        },
+        null,
+        2,
+      ),
+    );
+  } else {
+    console.log(
+      JSON.stringify(
+        {
+          type,
+          unsupported: true,
+          details,
+        },
+        null,
+        2,
+      ),
+    );
+  }
+}
+
+/**
+ * redact-body <issue|pr> <number> <redacted-body-file>
+ * PATCH the issue or PR body with redacted content from a file.
+ */
+function cmdRedactBody(kind, number, bodyFile) {
+  if (!kind || !number || !bodyFile) {
+    fail("Usage: redact-body <issue|pr> <number> <redacted-body-file>");
+  }
+  if (!fs.existsSync(bodyFile)) {
+    fail(`File not found: ${bodyFile}`);
+  }
+
+  const endpoint =
+    kind === "pr" ? `repos/${REPO}/pulls/${number}` : `repos/${REPO}/issues/${number}`;
+
+  gh(["api", endpoint, "-X", "PATCH", "-F", `body=@${bodyFile}`]);
+  console.log(JSON.stringify({ ok: true, kind, number: Number(number) }));
+}
+
+/**
+ * redact-body-if-needed <issue|pr> <number> <current-body-file> <redacted-body-file> <result-file>
+ * PATCH only when the agent-produced redacted body differs from the current body.
+ */
+function cmdRedactBodyIfNeeded(kind, number, currentBodyFile, redactedBodyFile, resultFile) {
+  if (!kind || !number || !currentBodyFile || !redactedBodyFile || !resultFile) {
+    fail(
+      "Usage: redact-body-if-needed <issue|pr> <number> <current-body-file> <redacted-body-file> <result-file>",
+    );
+  }
+  if (!fs.existsSync(currentBodyFile)) {
+    fail(`File not found: ${currentBodyFile}`);
+  }
+  if (!fs.existsSync(redactedBodyFile)) {
+    fail(`File not found: ${redactedBodyFile}`);
+  }
+
+  const currentBody = fs.readFileSync(currentBodyFile, "utf8");
+  const redactedBody = fs.readFileSync(redactedBodyFile, "utf8");
+  const decision = decideBodyRedaction(currentBody, redactedBody);
+  const result = {
+    ok: true,
+    kind,
+    number: Number(number),
+    ...decision,
+  };
+
+  if (decision.body_changed) {
+    const endpoint =
+      kind === "pr" ? `repos/${REPO}/pulls/${number}` : `repos/${REPO}/issues/${number}`;
+    gh(["api", endpoint, "-X", "PATCH", "-F", `body=@${redactedBodyFile}`]);
+    result.redacted = true;
+  } else {
+    result.redacted = false;
+    result.reason = "current_body_already_redacted";
+  }
+
+  fs.writeFileSync(resultFile, `${JSON.stringify(result, null, 2)}\n`, { mode: 0o600 });
+  console.log(JSON.stringify(result));
+}
+
+/**
+ * delete-comment <comment-id>
+ * Delete a comment (and all its edit history).
+ */
+function cmdDeleteComment(commentId) {
+  if (!commentId) {
+    fail("Usage: delete-comment <comment-id>");
+  }
+  gh(["api", `repos/${REPO}/issues/comments/${commentId}`, "-X", "DELETE"], { json: false });
+  console.log(JSON.stringify({ ok: true, deleted_comment_id: Number(commentId) }));
+}
+
+/**
+ * delete-discussion-comment <node-id>
+ * Delete a discussion comment via GraphQL (and all its edit history).
+ */
+function cmdDeleteDiscussionComment(nodeId) {
+  if (!nodeId) {
+    fail("Usage: delete-discussion-comment <node-id>");
+  }
+  const result = ghGraphQL(
+    `mutation { deleteDiscussionComment(input: { id: "${nodeId}" }) { comment { id } } }`,
+  );
+  if (result?.errors) {
+    fail(`Failed to delete discussion comment: ${JSON.stringify(result.errors)}`);
+  }
+  console.log(JSON.stringify({ ok: true, deleted_node_id: nodeId }));
+}
+
+/**
+ * recreate-discussion-comment <discussion-node-id> <body-file> [reply-to-node-id]
+ * Create a new discussion comment via GraphQL.
+ */
+function cmdRecreateDiscussionComment(discussionNodeId, bodyFile, replyToNodeId) {
+  if (!discussionNodeId || !bodyFile) {
+    fail("Usage: recreate-discussion-comment <discussion-node-id> <body-file> [reply-to-node-id]");
+  }
+  if (!fs.existsSync(bodyFile)) {
+    fail(`File not found: ${bodyFile}`);
+  }
+
+  const body = fs.readFileSync(bodyFile, "utf8");
+  const newComment = createDiscussionComment(discussionNodeId, body, replyToNodeId);
+  console.log(
+    JSON.stringify({
+      ok: true,
+      node_id: newComment?.id,
+      html_url: newComment?.url,
+    }),
+  );
+}
+
+/**
+ * recreate-comment <issue-number> <body-file>
+ * Create a new comment from a file.
+ */
+function cmdRecreateComment(issueNumber, bodyFile) {
+  if (!issueNumber || !bodyFile) {
+    fail("Usage: recreate-comment <issue-number> <body-file>");
+  }
+  if (!fs.existsSync(bodyFile)) {
+    fail(`File not found: ${bodyFile}`);
+  }
+
+  const result = gh([
+    "api",
+    `repos/${REPO}/issues/${issueNumber}/comments`,
+    "-X",
+    "POST",
+    "-F",
+    `body=@${bodyFile}`,
+  ]);
+
+  console.log(
+    JSON.stringify({
+      ok: true,
+      comment_id: result.id,
+      html_url: result.html_url,
+    }),
+  );
+}
+
+/**
+ * notify <target> <author> <location-type> <secret-types> [reply-to-node-id]
+ * Post a notification comment with the correct template for the location type.
+ * target = issue/PR number for non-discussion types, discussion node ID for discussion_comment.
+ */
+function cmdNotify(target, author, locationType, secretTypes, replyToNodeId) {
+  if (!target || !author || !locationType || !secretTypes) {
+    fail(
+      "Usage: notify <target> <author> <location-type> <secret-types-comma-sep> [reply-to-node-id]",
+    );
+  }
+
+  const types = secretTypes.split(",").map((s) => s.trim());
+  const typeList = types.map((t, i) => `${i + 1}. **${t}**`).join("\n");
+  const redactionResult = loadBodyRedactionResult(locationType, replyToNodeId);
+  if (isBodyLocationType(locationType) && !redactionResult.notify_required) {
+    console.log(
+      JSON.stringify({
+        ok: true,
+        skipped: true,
+        reason: "current_body_already_redacted",
+      }),
+    );
+    return;
+  }
+
+  let locationDesc;
+  let actionDesc;
+  if (
+    locationType === "issue_comment" ||
+    locationType === "pull_request_comment" ||
+    locationType === "pull_request_review_comment" ||
+    locationType === "discussion_comment"
+  ) {
+    locationDesc = "your comment";
+    actionDesc = "The affected comment has been removed and replaced with a redacted version.";
+  } else if (locationType === "issue_body") {
+    locationDesc = "your issue description";
+    actionDesc = "The affected content has been redacted in place.";
+  } else if (locationType === "pull_request_body") {
+    locationDesc = "your pull request description";
+    actionDesc = "The affected content has been redacted in place.";
+  } else if (locationType === "commit") {
+    locationDesc = "code you committed";
+    actionDesc = "";
+  } else {
+    locationDesc = "your content";
+    actionDesc = "";
+  }
+
+  const body = [
+    `> **Note:** This is an automated message sent by the OpenClaw maintainer team. **NO_REPLY.**`,
+    "",
+    `@${author} :warning: **Security Notice: Secret Leakage Detected**`,
+    "",
+    `GitHub Secret Scanning detected the following exposed secret types in ${locationDesc}:`,
+    "",
+    typeList,
+    "",
+    actionDesc,
+    "",
+    "**Please rotate these credentials immediately.**",
+    "",
+    "These secrets were publicly exposed and should be considered compromised.",
+  ]
+    .filter((line) => line !== undefined)
+    .join("\n");
+
+  // Discussion comments must be notified via GraphQL
+  if (locationType === "discussion_comment") {
+    const newComment = createDiscussionComment(target, body, replyToNodeId);
+    console.log(
+      JSON.stringify({
+        ok: true,
+        node_id: newComment?.id,
+        html_url: newComment?.url,
+      }),
+    );
+    return;
+  }
+
+  // Issue/PR comments via REST
+  const bodyFile = tmpFile("notify.md");
+  fs.writeFileSync(bodyFile, body);
+
+  const result = gh([
+    "api",
+    `repos/${REPO}/issues/${target}/comments`,
+    "-X",
+    "POST",
+    "-F",
+    `body=@${bodyFile}`,
+  ]);
+
+  console.log(
+    JSON.stringify({
+      ok: true,
+      comment_id: result.id,
+      html_url: result.html_url,
+    }),
+  );
+}
+
+/**
+ * resolve <alert-number> [resolution] [comment]
+ * Close a secret scanning alert.
+ */
+function cmdResolve(alertNumber, resolution, comment) {
+  if (!alertNumber) {
+    fail("Usage: resolve <alert-number> [resolution] [comment]");
+  }
+
+  const res = resolution || "revoked";
+  const resComment = comment || "Content redacted and author notified to rotate credentials.";
+
+  const result = gh([
+    "api",
+    `repos/${REPO}/secret-scanning/alerts/${alertNumber}`,
+    "-X",
+    "PATCH",
+    "-f",
+    `state=resolved`,
+    "-f",
+    `resolution=${res}`,
+    "-f",
+    `resolution_comment=${resComment}`,
+  ]);
+
+  console.log(
+    JSON.stringify({
+      ok: true,
+      number: result.number,
+      state: result.state,
+      resolution: result.resolution,
+      resolved_at: result.resolved_at,
+    }),
+  );
+}
+
+/**
+ * list-open
+ * List all open secret scanning alerts.
+ */
+function cmdListOpen() {
+  const alerts = gh([
+    "api",
+    `repos/${REPO}/secret-scanning/alerts?hide_secret=true&state=open`,
+    "--paginate",
+    "--slurp",
+  ]);
+
+  // --slurp 将分页结果合并为 [[page1], [page2], ...] 需要 flat
+  const flat = Array.isArray(alerts?.[0]) ? alerts.flat() : Array.isArray(alerts) ? alerts : [];
+  const rows = flat.map((a) => ({
+    number: a.number,
+    secret_type_display_name: a.secret_type_display_name,
+    html_url: a.html_url,
+    first_location_html_url: a.first_location_detected?.html_url || null,
+  }));
+
+  console.log(JSON.stringify(rows, null, 2));
+}
+
+/**
+ * summary <json-file>
+ * Print a formatted summary table from a JSON results file.
+ */
+function cmdSummary(jsonFile) {
+  if (!jsonFile) {
+    fail("Usage: summary <json-file>");
+  }
+  if (!fs.existsSync(jsonFile)) {
+    fail(`File not found: ${jsonFile}`);
+  }
+
+  const results = JSON.parse(fs.readFileSync(jsonFile, "utf8"));
+  const lines = [];
+
+  lines.push("---BEGIN SUMMARY---");
+  lines.push("");
+  lines.push("## Secret Scanning Results");
+  lines.push("");
+  lines.push("| Alert | Type | Location | Actions | Edit History |");
+  lines.push("|-------|------|----------|---------|--------------|");
+
+  const needsPurge = [];
+
+  for (const r of results) {
+    const alertLink = `#${r.number} ${REPO_URL}/security/secret-scanning/${r.number}`;
+    const locationLink = r.location_url
+      ? `${r.location_label} ${r.location_url}`
+      : r.location_label;
+    const history = r.history_cleared ? "Cleared" : "⚠️ History remains";
+
+    lines.push(`| ${alertLink} | ${r.secret_type} | ${locationLink} | ${r.actions} | ${history} |`);
+
+    if (!r.history_cleared && r.location_url) {
+      needsPurge.push(r);
+    }
+  }
+
+  if (needsPurge.length > 0) {
+    lines.push("");
+    lines.push("Issues requiring GitHub Support to purge edit history:");
+    for (const r of needsPurge) {
+      lines.push(`- ${r.location_label} ${r.location_url} — ${r.secret_type}`);
+    }
+    lines.push(
+      `Contact: https://support.github.com/contact — request purge of userContentEdits for the above issues.`,
+    );
+  }
+
+  const skipped = results.filter((r) => r.skipped);
+  if (skipped.length > 0) {
+    lines.push("");
+    lines.push(
+      "⚠️ The following alerts were skipped because their location type is not supported:",
+    );
+    for (const r of skipped) {
+      lines.push(
+        `- Alert #${r.number}: unsupported type "${r.unsupported_type}" — ${REPO_URL}/security/secret-scanning/${r.number}`,
+      );
+    }
+    lines.push("Please update the skill to define handling for these types.");
+  }
+
+  lines.push("");
+  lines.push("---END SUMMARY---");
+
+  console.log(lines.join("\n"));
+}
+
+// ─── Dispatch ───────────────────────────────────────────────────────────────
+
+const args = [];
+
+export const commands = {
+  "fetch-alert": () => cmdFetchAlert(args[0]),
+  "fetch-content": () => cmdFetchContent(args[0]),
+  "redact-body": () => cmdRedactBody(args[0], args[1], args[2]),
+  "redact-body-if-needed": () => cmdRedactBodyIfNeeded(args[0], args[1], args[2], args[3], args[4]),
+  "delete-comment": () => cmdDeleteComment(args[0]),
+  "delete-discussion-comment": () => cmdDeleteDiscussionComment(args[0]),
+  "recreate-comment": () => cmdRecreateComment(args[0], args[1]),
+  "recreate-discussion-comment": () => cmdRecreateDiscussionComment(args[0], args[1], args[2]),
+  notify: () => cmdNotify(args[0], args[1], args[2], args[3], args[4]),
+  resolve: () => cmdResolve(args[0], args[1], args[2]),
+  "list-open": () => cmdListOpen(),
+  summary: () => cmdSummary(args[0]),
+};
+
+function main(argv = process.argv.slice(2)) {
+  const [command, ...commandArgs] = argv;
+  args.length = 0;
+  args.push(...commandArgs);
+
+  if (!command || !commands[command]) {
+    console.error(
+      [
+        "Usage: node secret-scanning.mjs <command> [args]",
+        "",
+        "Commands:",
+        "  fetch-alert <number>             Fetch alert metadata + locations",
+        "  fetch-content '<location-json>'   Fetch content for a location",
+        "  redact-body <issue|pr> <n> <file> PATCH body with redacted file",
+        "  redact-body-if-needed <issue|pr> <n> <current-file> <redacted-file> <result-file> PATCH body only if redaction changed it",
+        "  delete-comment <comment-id>       Delete a comment",
+        "  delete-discussion-comment <node-id> Delete a discussion comment (GraphQL)",
+        "  recreate-comment <issue-n> <file> Create replacement comment",
+        "  recreate-discussion-comment <disc-node-id> <file> [reply-to-node-id] Create discussion comment (GraphQL)",
+        "  notify <target> <author> <type> <types> [reply-to-node-id|body-result-file] Post notification",
+        "  resolve <n> [resolution] [comment] Close alert",
+        "  list-open                          List open alerts",
+        "  summary <json-file>               Print formatted summary",
+      ].join("\n"),
+    );
+    process.exit(1);
+  }
+
+  commands[command]();
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  main();
+}