Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
160 lines
5.4 KiB
Swift
160 lines
5.4 KiB
Swift
import Foundation
|
|
|
|
enum ExecCommandToken {
|
|
static func basenameLower(_ token: String) -> String {
|
|
let trimmed = token.trimmingCharacters(in: .whitespacesAndNewlines)
|
|
guard !trimmed.isEmpty else { return "" }
|
|
let normalized = trimmed.replacingOccurrences(of: "\\", with: "/")
|
|
return normalized.split(separator: "/").last.map { String($0).lowercased() } ?? normalized.lowercased()
|
|
}
|
|
}
|
|
|
|
enum ExecEnvInvocationUnwrapper {
|
|
static let maxWrapperDepth = 4
|
|
|
|
struct UnwrapResult {
|
|
let command: [String]
|
|
let usesModifiers: Bool
|
|
}
|
|
|
|
private static func isEnvAssignment(_ token: String) -> Bool {
|
|
let pattern = #"^[A-Za-z_][A-Za-z0-9_]*=.*"#
|
|
return token.range(of: pattern, options: .regularExpression) != nil
|
|
}
|
|
|
|
static func unwrap(_ command: [String]) -> [String]? {
|
|
self.unwrapWithMetadata(command)?.command
|
|
}
|
|
|
|
static func unwrapWithMetadata(_ command: [String]) -> UnwrapResult? {
|
|
var idx = 1
|
|
var expectsOptionValue = false
|
|
var usesModifiers = false
|
|
while idx < command.count {
|
|
let token = command[idx].trimmingCharacters(in: .whitespacesAndNewlines)
|
|
if token.isEmpty {
|
|
idx += 1
|
|
continue
|
|
}
|
|
if expectsOptionValue {
|
|
expectsOptionValue = false
|
|
usesModifiers = true
|
|
idx += 1
|
|
continue
|
|
}
|
|
if token == "--" || token == "-" {
|
|
idx += 1
|
|
break
|
|
}
|
|
if self.isEnvAssignment(token) {
|
|
usesModifiers = true
|
|
idx += 1
|
|
continue
|
|
}
|
|
if token.hasPrefix("-"), token != "-" {
|
|
let lower = token.lowercased()
|
|
let flag = lower.split(separator: "=", maxSplits: 1).first.map(String.init) ?? lower
|
|
if ExecEnvOptions.flagOnly.contains(flag) {
|
|
usesModifiers = true
|
|
idx += 1
|
|
continue
|
|
}
|
|
if ExecEnvOptions.withValue.contains(flag) {
|
|
usesModifiers = true
|
|
if !lower.contains("=") {
|
|
expectsOptionValue = true
|
|
}
|
|
idx += 1
|
|
continue
|
|
}
|
|
if lower.hasPrefix("-u") ||
|
|
lower.hasPrefix("-c") ||
|
|
lower.hasPrefix("-s") ||
|
|
lower.hasPrefix("--unset=") ||
|
|
lower.hasPrefix("--chdir=") ||
|
|
lower.hasPrefix("--split-string=") ||
|
|
lower.hasPrefix("--default-signal=") ||
|
|
lower.hasPrefix("--ignore-signal=") ||
|
|
lower.hasPrefix("--block-signal=")
|
|
{
|
|
usesModifiers = true
|
|
idx += 1
|
|
continue
|
|
}
|
|
return nil
|
|
}
|
|
break
|
|
}
|
|
guard !expectsOptionValue, idx < command.count else { return nil }
|
|
return UnwrapResult(command: Array(command[idx...]), usesModifiers: usesModifiers)
|
|
}
|
|
|
|
static func unwrapDispatchWrappersForResolution(_ command: [String]) -> [String] {
|
|
var current = command
|
|
var depth = 0
|
|
while depth < self.maxWrapperDepth {
|
|
guard let token = current.first?.trimmingCharacters(in: .whitespacesAndNewlines), !token.isEmpty else {
|
|
break
|
|
}
|
|
guard ExecCommandToken.basenameLower(token) == "env" else {
|
|
break
|
|
}
|
|
guard let unwrapped = self.unwrapWithMetadata(current), !unwrapped.command.isEmpty else {
|
|
break
|
|
}
|
|
if unwrapped.usesModifiers {
|
|
break
|
|
}
|
|
current = unwrapped.command
|
|
depth += 1
|
|
}
|
|
return current
|
|
}
|
|
|
|
private static func unwrapTransparentEnvInvocation(_ command: [String]) -> [String]? {
|
|
var idx = 1
|
|
while idx < command.count {
|
|
let token = command[idx].trimmingCharacters(in: .whitespacesAndNewlines)
|
|
if token.isEmpty {
|
|
idx += 1
|
|
continue
|
|
}
|
|
if token == "--" {
|
|
idx += 1
|
|
break
|
|
}
|
|
if token == "-" {
|
|
return nil
|
|
}
|
|
if self.isEnvAssignment(token) {
|
|
return nil
|
|
}
|
|
if token.hasPrefix("-"), token != "-" {
|
|
return nil
|
|
}
|
|
break
|
|
}
|
|
guard idx < command.count else { return nil }
|
|
return Array(command[idx...])
|
|
}
|
|
|
|
static func unwrapTransparentDispatchWrappersForResolution(_ command: [String]) -> [String] {
|
|
var current = command
|
|
var depth = 0
|
|
while depth < self.maxWrapperDepth {
|
|
guard let token = current.first?.trimmingCharacters(in: .whitespacesAndNewlines), !token.isEmpty else {
|
|
break
|
|
}
|
|
guard ExecCommandToken.basenameLower(token) == "env" else {
|
|
break
|
|
}
|
|
guard let unwrapped = self.unwrapTransparentEnvInvocation(current), !unwrapped.isEmpty else {
|
|
break
|
|
}
|
|
current = unwrapped
|
|
depth += 1
|
|
}
|
|
return current
|
|
}
|
|
}
|