Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
188 lines
5.1 KiB
JavaScript
188 lines
5.1 KiB
JavaScript
// Runs oxlint over extension source roots with repo-local boundary artifacts.
|
|
import { spawnSync } from "node:child_process";
|
|
import fs from "node:fs";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
import {
|
|
acquireLocalHeavyCheckLockSync,
|
|
applyLocalOxlintPolicy,
|
|
} from "./local-heavy-check-runtime.mjs";
|
|
import { createManagedCommandInvocation } from "./managed-child-process.mjs";
|
|
|
|
function hasOxlintFormatArg(args) {
|
|
return args.some(
|
|
(arg) =>
|
|
arg === "--format" ||
|
|
arg.startsWith("--format=") ||
|
|
arg === "-f" ||
|
|
arg.startsWith("-f=") ||
|
|
(arg.startsWith("-f") && arg.length > 2),
|
|
);
|
|
}
|
|
|
|
function addOxlintFormatArg(args, value) {
|
|
const separatorIndex = args.indexOf("--");
|
|
const insertIndex = separatorIndex === -1 ? args.length : separatorIndex;
|
|
args.splice(insertIndex, 0, "--format", value);
|
|
}
|
|
|
|
/**
|
|
* Runs focused extension oxlint with a temp config and local heavy-check lock.
|
|
*/
|
|
export function runExtensionOxlint(params) {
|
|
const repoRoot = process.cwd();
|
|
const oxlintPath = path.resolve("node_modules", ".bin", "oxlint");
|
|
const releaseLock = acquireLocalHeavyCheckLockSync({
|
|
cwd: repoRoot,
|
|
env: process.env,
|
|
toolName: params.toolName,
|
|
lockName: params.lockName,
|
|
});
|
|
const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), params.tempDirPrefix));
|
|
const tempConfigPath = path.join(tempDir, "oxlint.json");
|
|
let exitCode = 0;
|
|
|
|
try {
|
|
prepareExtensionPackageBoundaryArtifacts(repoRoot);
|
|
|
|
const extensionFiles = params.roots.flatMap((root) =>
|
|
collectTypeScriptFiles(path.resolve(repoRoot, root)),
|
|
);
|
|
|
|
if (extensionFiles.length === 0) {
|
|
console.log(params.emptyMessage);
|
|
if (params.allowEmpty === true) {
|
|
return;
|
|
}
|
|
process.exit(1);
|
|
}
|
|
|
|
writeTempOxlintConfig(repoRoot, tempConfigPath);
|
|
|
|
const baseArgs = ["-c", tempConfigPath, ...process.argv.slice(2), ...extensionFiles];
|
|
const { args: finalArgs, env } = applyLocalOxlintPolicy(baseArgs, process.env);
|
|
if (env.GITHUB_ACTIONS === "true" && !hasOxlintFormatArg(finalArgs)) {
|
|
addOxlintFormatArg(finalArgs, "stylish");
|
|
}
|
|
const oxlint = createManagedCommandInvocation({
|
|
args: finalArgs,
|
|
bin: oxlintPath,
|
|
env,
|
|
});
|
|
const result = spawnSync(oxlint.command, oxlint.args, {
|
|
stdio: "inherit",
|
|
env,
|
|
shell: oxlint.shell,
|
|
windowsVerbatimArguments: oxlint.windowsVerbatimArguments,
|
|
});
|
|
|
|
if (result.error) {
|
|
throw result.error;
|
|
}
|
|
|
|
exitCode = result.status ?? 1;
|
|
} finally {
|
|
fs.rmSync(tempDir, { recursive: true, force: true });
|
|
releaseLock();
|
|
}
|
|
|
|
process.exitCode = exitCode;
|
|
}
|
|
|
|
function prepareExtensionPackageBoundaryArtifacts(repoRoot) {
|
|
const releaseLock = acquireLocalHeavyCheckLockSync({
|
|
cwd: repoRoot,
|
|
env: process.env,
|
|
toolName: "extension-package-boundary-artifacts",
|
|
lockName: "extension-package-boundary-artifacts",
|
|
});
|
|
let exitCode = 0;
|
|
|
|
try {
|
|
const result = spawnSync(
|
|
process.execPath,
|
|
[path.resolve(repoRoot, "scripts", "prepare-extension-package-boundary-artifacts.mjs")],
|
|
{
|
|
cwd: repoRoot,
|
|
stdio: "inherit",
|
|
env: process.env,
|
|
},
|
|
);
|
|
|
|
if (result.error) {
|
|
throw result.error;
|
|
}
|
|
|
|
exitCode = result.status ?? 1;
|
|
} finally {
|
|
releaseLock();
|
|
}
|
|
|
|
if (exitCode !== 0) {
|
|
process.exitCode = exitCode;
|
|
}
|
|
}
|
|
|
|
function writeTempOxlintConfig(repoRoot, configPath) {
|
|
const config = JSON.parse(fs.readFileSync(path.resolve(repoRoot, ".oxlintrc.json"), "utf8"));
|
|
|
|
delete config.$schema;
|
|
|
|
if (Array.isArray(config.ignorePatterns)) {
|
|
const extensionsIgnorePattern = config.ignorePatterns.find((pattern) =>
|
|
isTopLevelExtensionsIgnorePattern(pattern),
|
|
);
|
|
if (extensionsIgnorePattern) {
|
|
throw new Error(
|
|
`Refusing to run extension oxlint with .oxlintrc.json ignore pattern ${JSON.stringify(
|
|
extensionsIgnorePattern,
|
|
)}. Remove the top-level extensions ignore so root and focused lint agree.`,
|
|
);
|
|
}
|
|
}
|
|
|
|
fs.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\n`, "utf8");
|
|
}
|
|
|
|
function isTopLevelExtensionsIgnorePattern(pattern) {
|
|
const normalized = pattern
|
|
.trim()
|
|
.replaceAll("\\", "/")
|
|
.replaceAll(/^\.?\//g, "");
|
|
return (
|
|
normalized === "extensions" || normalized === "extensions/" || normalized === "extensions/**"
|
|
);
|
|
}
|
|
|
|
function collectTypeScriptFiles(directoryPath) {
|
|
const entries = fs.readdirSync(directoryPath, { withFileTypes: true });
|
|
const files = [];
|
|
|
|
for (const entry of entries.toSorted((a, b) => a.name.localeCompare(b.name))) {
|
|
const entryPath = path.join(directoryPath, entry.name);
|
|
if (entry.isDirectory()) {
|
|
if (shouldSkipExtensionLintDirectory(entry.name)) {
|
|
continue;
|
|
}
|
|
files.push(...collectTypeScriptFiles(entryPath));
|
|
continue;
|
|
}
|
|
|
|
if (!entry.isFile()) {
|
|
continue;
|
|
}
|
|
|
|
if (!entry.name.endsWith(".ts") && !entry.name.endsWith(".tsx")) {
|
|
continue;
|
|
}
|
|
|
|
files.push(path.relative(process.cwd(), entryPath).split(path.sep).join("/"));
|
|
}
|
|
|
|
return files;
|
|
}
|
|
|
|
function shouldSkipExtensionLintDirectory(name) {
|
|
return name === "node_modules";
|
|
}
|