alvis/adolf
1
0
Fork 0
Code Issues 1 Pull Requests Actions 8 Packages Projects Releases Wiki Activity
Files
df2071d5ee172e6f2673b79b6bb619119b5027a6
adolf/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift
alvis bedb527145
Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
Details
CodeQL / Security High (actions) (push) Has been cancelled
Details
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
Details
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
Details
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
Details
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
Details
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
Details
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Details
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Details
Docs / docs (push) Has been cancelled
Details
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
Details
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Details
Workflow Sanity / no-tabs (push) Has been cancelled
Details
Workflow Sanity / actionlint (push) Has been cancelled
Details
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
Details
CI / runner-admission (push) Has been cancelled
Details
CI / preflight (push) Has been cancelled
Details
CI / security-fast (push) Has been cancelled
Details
CI / pnpm-store-warmup (push) Has been cancelled
Details
CI / build-artifacts (push) Has been cancelled
Details
CI / native-i18n (push) Has been cancelled
Details
CI / ${{ matrix.check_name }} (push) Has been cancelled
Details
CI / ${{ matrix.checkName }} (push) Has been cancelled
Details
CI / checks-node-compat-node22 (push) Has been cancelled
Details
CI / check-bundled-channel-config-metadata (push) Has been cancelled
Details
CI / check-dependencies (push) Has been cancelled
Details
CI / check-guards (push) Has been cancelled
Details
CI / check-lint (push) Has been cancelled
Details
CI / check-prod-types (push) Has been cancelled
Details
CI / check-shrinkwrap (push) Has been cancelled
Details
CI / check-test-types (push) Has been cancelled
Details
CI / check-additional-boundaries-a (push) Has been cancelled
Details
CI / check-additional-boundaries-bcd (push) Has been cancelled
Details
CI / check-additional-extension-bundled (push) Has been cancelled
Details
CI / check-additional-extension-channels (push) Has been cancelled
Details
CI / check-additional-extension-package-boundary (push) Has been cancelled
Details
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
Details
CI / check-session-accessor-boundary (push) Has been cancelled
Details
CI / check-session-transcript-reader-boundary (push) Has been cancelled
Details
CI / check-docs (push) Has been cancelled
Details
CI / skills-python (push) Has been cancelled
Details
CI / macos-swift (push) Has been cancelled
Details
CI / ios-build (push) Has been cancelled
Details
CI / ci-timings-summary (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Details
Control UI Locale Refresh / plan (push) Has been cancelled
Details
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Details
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Details
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Details
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Details
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Details
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Details
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Details
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Details
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Details
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Details
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Details
Website Installer Sync / static (push) Has been cancelled
Details
Website Installer Sync / linux-docker (push) Has been cancelled
Details
Website Installer Sync / macos-installer (push) Has been cancelled
Details
Website Installer Sync / windows-installer (push) Has been cancelled
Details
Website Installer Sync / sync-website (push) Has been cancelled
Details
Vendor OpenClaw source as Adolf fork baseline 
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11),
free to diverge. Tree copied sans upstream .git; upstream remote added for
future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19.
Preserves docs/ARCHITECTURE.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
2026-07-05 09:36:54 +00:00

507 lines
12 KiB
Swift
Raw Blame History

// Generated file. Do not edit directly.
// Source: src/infra/host-env-security-policy.json
// Regenerate: node scripts/generate-host-env-security-policy-swift.mjs --write
import Foundation
enum HostEnvSecurityPolicy {
static let blockedInheritedKeys: Set<String> = [
"AMQP_URL",
"ANSIBLE_CALLBACK_PLUGINS",
"ANSIBLE_COLLECTIONS_PATH",
"ANSIBLE_CONFIG",
"ANSIBLE_CONNECTION_PLUGINS",
"ANSIBLE_FILTER_PLUGINS",
"ANSIBLE_INVENTORY_PLUGINS",
"ANSIBLE_LIBRARY",
"ANSIBLE_LOOKUP_PLUGINS",
"ANSIBLE_MODULE_UTILS",
"ANSIBLE_REMOTE_TEMP",
"ANSIBLE_ROLES_PATH",
"ANSIBLE_STRATEGY_PLUGINS",
"ANT_OPTS",
"AWS_ACCESS_KEY_ID",
"AWS_CONTAINER_CREDENTIALS_FULL_URI",
"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",
"AWS_SECRET_ACCESS_KEY",
"AWS_SECURITY_TOKEN",
"AWS_SESSION_TOKEN",
"AZURE_CLIENT_ID",
"AZURE_CLIENT_SECRET",
"BASHOPTS",
"BASH_ENV",
"BROWSER",
"BUNDLE_GEMFILE",
"BUN_CONFIG_REGISTRY",
"BZR_EDITOR",
"BZR_PLUGIN_PATH",
"BZR_SSH",
"CARGO_BUILD_RUSTC",
"CARGO_BUILD_RUSTC_WORKSPACE_WRAPPER",
"CARGO_BUILD_RUSTC_WRAPPER",
"CARGO_BUILD_RUSTDOC",
"CARGO_HOME",
"CATALINA_OPTS",
"CC",
"CFLAGS",
"CGO_CFLAGS",
"CGO_LDFLAGS",
"CLASSPATH",
"CMAKE_CXX_COMPILER",
"CMAKE_C_COMPILER",
"CMAKE_TOOLCHAIN_FILE",
"COMPOSER_HOME",
"CONDA_DEFAULT_ENV",
"CONDA_PREFIX",
"CONFIG_SHELL",
"CONFIG_SITE",
"CORECLR_PROFILER",
"CORECLR_PROFILER_PATH",
"CPATH",
"CPLUS_INCLUDE_PATH",
"CURL_HOME",
"CXX",
"C_INCLUDE_PATH",
"DATABASE_URL",
"DENO_DIR",
"DOTNET_ADDITIONAL_DEPS",
"DOTNET_STARTUP_HOOKS",
"EDITOR",
"ELIXIR_ERL_OPTIONS",
"EMACSLOADPATH",
"ENV",
"ERL_AFLAGS",
"ERL_FLAGS",
"ERL_ZFLAGS",
"EXINIT",
"FCEDIT",
"FPATH",
"GCONV_PATH",
"GEM_HOME",
"GEM_PATH",
"GH_TOKEN",
"GITHUB_TOKEN",
"GITLAB_TOKEN",
"GIT_ALLOW_PROTOCOL",
"GIT_ALTERNATE_OBJECT_DIRECTORIES",
"GIT_ASKPASS",
"GIT_COMMON_DIR",
"GIT_DIR",
"GIT_EDITOR",
"GIT_EXEC_PATH",
"GIT_EXTERNAL_DIFF",
"GIT_HOOK_PATH",
"GIT_INDEX_FILE",
"GIT_NAMESPACE",
"GIT_OBJECT_DIRECTORY",
"GIT_PROTOCOL_FROM_USER",
"GIT_PROXY_COMMAND",
"GIT_SEQUENCE_EDITOR",
"GIT_SSH",
"GIT_SSH_COMMAND",
"GIT_SSL_CAINFO",
"GIT_SSL_CAPATH",
"GIT_SSL_NO_VERIFY",
"GIT_TEMPLATE_DIR",
"GIT_WORK_TREE",
"GLIBC_TUNABLES",
"GOENV",
"GOFLAGS",
"GONOPROXY",
"GONOSUMCHECK",
"GONOSUMDB",
"GOPATH",
"GOPRIVATE",
"GOPROXY",
"GRADLE_OPTS",
"GVIMINIT",
"HELM_HOME",
"HELM_PLUGINS",
"HGEDITOR",
"HGMERGE",
"HGRCPATH",
"HOSTALIASES",
"IFS",
"JAVA_OPTS",
"JAVA_TOOL_OPTIONS",
"JDK_JAVA_OPTIONS",
"JULIA_EDITOR",
"KSH_ENV",
"LDFLAGS",
"LESSCLOSE",
"LESSOPEN",
"LIBRARY_PATH",
"LUA_CPATH",
"LUA_INIT",
"LUA_INIT_5_1",
"LUA_INIT_5_2",
"LUA_INIT_5_3",
"LUA_INIT_5_4",
"LUA_PATH",
"MAKE",
"MAKEFLAGS",
"MAVEN_OPTS",
"MFLAGS",
"MONGODB_URI",
"MYVIMRC",
"NODE_AUTH_TOKEN",
"NODE_OPTIONS",
"NODE_PATH",
"NODE_REDIRECT_WARNINGS",
"NODE_REPL_EXTERNAL_MODULE",
"NODE_REPL_HISTORY",
"NODE_V8_COVERAGE",
"NPM_TOKEN",
"OBJC_INCLUDE_PATH",
"OPENSSL_CONF",
"OPENSSL_ENGINES",
"PACKER_PLUGIN_PATH",
"PERL5DB",
"PERL5DBCMD",
"PERL5LIB",
"PERL5OPT",
"PHPRC",
"PHP_INI_SCAN_DIR",
"PIP_CONFIG_FILE",
"PIP_EXTRA_INDEX_URL",
"PIP_FIND_LINKS",
"PIP_INDEX_URL",
"PIP_PYPI_URL",
"PIP_TRUSTED_HOST",
"PROMPT_COMMAND",
"PS4",
"PYTHONBREAKPOINT",
"PYTHONHOME",
"PYTHONPATH",
"PYTHONSTARTUP",
"PYTHONUSERBASE",
"REDIS_URL",
"RUBYLIB",
"RUBYOPT",
"RUBYSHELL",
"RUSTC",
"RUSTC_WORKSPACE_WRAPPER",
"RUSTC_WRAPPER",
"RUSTDOC",
"RUSTFLAGS",
"R_ENVIRON",
"R_ENVIRON_USER",
"R_LIBS_USER",
"R_PROFILE",
"R_PROFILE_USER",
"SBT_OPTS",
"SHELL",
"SHELLOPTS",
"SSH_ASKPASS",
"SSLKEYLOGFILE",
"SUDO_ASKPASS",
"SUDO_EDITOR",
"SVN_EDITOR",
"SVN_SSH",
"TCLLIBPATH",
"TF_CLI_CONFIG_FILE",
"TF_PLUGIN_CACHE_DIR",
"UV_DEFAULT_INDEX",
"UV_EXTRA_INDEX_URL",
"UV_INDEX",
"UV_INDEX_URL",
"UV_PYTHON",
"VAGRANT_VAGRANTFILE",
"VIMINIT",
"VIRTUAL_ENV",
"VISUAL",
"WGETRC",
"YARN_RC_FILENAME",
"_JAVA_OPTIONS"
]
static let blockedInheritedPrefixes: [String] = [
"BASH_FUNC_",
"DYLD_",
"LD_"
]
static let blockedKeys: Set<String> = [
"ANT_OPTS",
"BASHOPTS",
"BASH_ENV",
"BROWSER",
"BZR_EDITOR",
"BZR_PLUGIN_PATH",
"BZR_SSH",
"CARGO_BUILD_RUSTC",
"CARGO_BUILD_RUSTC_WORKSPACE_WRAPPER",
"CARGO_BUILD_RUSTC_WRAPPER",
"CARGO_BUILD_RUSTDOC",
"CATALINA_OPTS",
"CC",
"CMAKE_CXX_COMPILER",
"CMAKE_C_COMPILER",
"CMAKE_TOOLCHAIN_FILE",
"CONFIG_SHELL",
"CONFIG_SITE",
"CORECLR_PROFILER",
"CXX",
"DOTNET_ADDITIONAL_DEPS",
"DOTNET_STARTUP_HOOKS",
"ELIXIR_ERL_OPTIONS",
"EMACSLOADPATH",
"ENV",
"ERL_AFLAGS",
"ERL_FLAGS",
"ERL_ZFLAGS",
"EXINIT",
"FPATH",
"GCONV_PATH",
"GIT_ALLOW_PROTOCOL",
"GIT_ALTERNATE_OBJECT_DIRECTORIES",
"GIT_COMMON_DIR",
"GIT_DIR",
"GIT_EDITOR",
"GIT_EXEC_PATH",
"GIT_EXTERNAL_DIFF",
"GIT_HOOK_PATH",
"GIT_INDEX_FILE",
"GIT_NAMESPACE",
"GIT_OBJECT_DIRECTORY",
"GIT_PROTOCOL_FROM_USER",
"GIT_SEQUENCE_EDITOR",
"GIT_SSL_CAINFO",
"GIT_SSL_CAPATH",
"GIT_SSL_NO_VERIFY",
"GIT_TEMPLATE_DIR",
"GIT_WORK_TREE",
"GLIBC_TUNABLES",
"GRADLE_OPTS",
"GVIMINIT",
"HELM_PLUGINS",
"HGEDITOR",
"HGMERGE",
"HGRCPATH",
"HOSTALIASES",
"IFS",
"JAVA_OPTS",
"JAVA_TOOL_OPTIONS",
"JDK_JAVA_OPTIONS",
"JULIA_EDITOR",
"KSH_ENV",
"LUA_INIT",
"LUA_INIT_5_1",
"LUA_INIT_5_2",
"LUA_INIT_5_3",
"LUA_INIT_5_4",
"MAKE",
"MAKEFLAGS",
"MAVEN_OPTS",
"MFLAGS",
"MYVIMRC",
"NODE_OPTIONS",
"NODE_PATH",
"NODE_REDIRECT_WARNINGS",
"NODE_REPL_EXTERNAL_MODULE",
"NODE_REPL_HISTORY",
"NODE_V8_COVERAGE",
"PACKER_PLUGIN_PATH",
"PERL5LIB",
"PERL5OPT",
"PS4",
"PYTHONBREAKPOINT",
"PYTHONHOME",
"PYTHONPATH",
"RUBYLIB",
"RUBYOPT",
"RUBYSHELL",
"RUSTC",
"RUSTC_WORKSPACE_WRAPPER",
"RUSTC_WRAPPER",
"RUSTDOC",
"R_ENVIRON",
"R_ENVIRON_USER",
"R_PROFILE",
"R_PROFILE_USER",
"SBT_OPTS",
"SHELL",
"SHELLOPTS",
"SSLKEYLOGFILE",
"SUDO_ASKPASS",
"SVN_EDITOR",
"SVN_SSH",
"TCLLIBPATH",
"VAGRANT_VAGRANTFILE",
"VIMINIT",
"_JAVA_OPTIONS"
]
static let blockedOverrideKeys: Set<String> = [
"ALL_PROXY",
"AMQP_URL",
"ANSIBLE_CALLBACK_PLUGINS",
"ANSIBLE_COLLECTIONS_PATH",
"ANSIBLE_CONFIG",
"ANSIBLE_CONNECTION_PLUGINS",
"ANSIBLE_FILTER_PLUGINS",
"ANSIBLE_INVENTORY_PLUGINS",
"ANSIBLE_LIBRARY",
"ANSIBLE_LOOKUP_PLUGINS",
"ANSIBLE_MODULE_UTILS",
"ANSIBLE_REMOTE_TEMP",
"ANSIBLE_ROLES_PATH",
"ANSIBLE_STRATEGY_PLUGINS",
"AWS_ACCESS_KEY_ID",
"AWS_CONFIG_FILE",
"AWS_CONTAINER_CREDENTIALS_FULL_URI",
"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",
"AWS_SECRET_ACCESS_KEY",
"AWS_SECURITY_TOKEN",
"AWS_SESSION_TOKEN",
"AWS_SHARED_CREDENTIALS_FILE",
"AWS_WEB_IDENTITY_TOKEN_FILE",
"AZURE_AUTH_LOCATION",
"AZURE_CLIENT_ID",
"AZURE_CLIENT_SECRET",
"BUNDLE_GEMFILE",
"BUN_CONFIG_REGISTRY",
"CARGO_BUILD_RUSTC_WRAPPER",
"CARGO_HOME",
"CFLAGS",
"CGO_CFLAGS",
"CGO_LDFLAGS",
"CLASSPATH",
"COMPOSER_HOME",
"CONDA_DEFAULT_ENV",
"CONDA_PREFIX",
"CORECLR_PROFILER_PATH",
"CPATH",
"CPLUS_INCLUDE_PATH",
"CURL_CA_BUNDLE",
"CURL_HOME",
"C_INCLUDE_PATH",
"DATABASE_URL",
"DENO_DIR",
"DOCKER_CERT_PATH",
"DOCKER_CONTEXT",
"DOCKER_HOST",
"DOCKER_TLS_VERIFY",
"EDITOR",
"FCEDIT",
"GEM_HOME",
"GEM_PATH",
"GH_TOKEN",
"GITHUB_TOKEN",
"GITLAB_TOKEN",
"GIT_ALTERNATE_OBJECT_DIRECTORIES",
"GIT_ASKPASS",
"GIT_COMMON_DIR",
"GIT_DIR",
"GIT_INDEX_FILE",
"GIT_NAMESPACE",
"GIT_OBJECT_DIRECTORY",
"GIT_PAGER",
"GIT_PROXY_COMMAND",
"GIT_SSH",
"GIT_SSH_COMMAND",
"GIT_SSL_CAINFO",
"GIT_SSL_CAPATH",
"GIT_SSL_NO_VERIFY",
"GIT_WORK_TREE",
"GOENV",
"GOFLAGS",
"GONOPROXY",
"GONOSUMCHECK",
"GONOSUMDB",
"GOOGLE_APPLICATION_CREDENTIALS",
"GOPATH",
"GOPRIVATE",
"GOPROXY",
"GRADLE_USER_HOME",
"HELM_HOME",
"HGRCPATH",
"HISTFILE",
"HOME",
"HTTPS_PROXY",
"HTTP_PROXY",
"KUBECONFIG",
"LDFLAGS",
"LESSCLOSE",
"LESSOPEN",
"LIBRARY_PATH",
"LUA_CPATH",
"LUA_PATH",
"MAKEFLAGS",
"MANPAGER",
"MFLAGS",
"MONGODB_URI",
"NODE_AUTH_TOKEN",
"NODE_EXTRA_CA_CERTS",
"NODE_TLS_REJECT_UNAUTHORIZED",
"NO_PROXY",
"NPM_TOKEN",
"OBJC_INCLUDE_PATH",
"OPENSSL_CONF",
"OPENSSL_ENGINES",
"PAGER",
"PERL5DB",
"PERL5DBCMD",
"PHPRC",
"PHP_INI_SCAN_DIR",
"PIP_CONFIG_FILE",
"PIP_EXTRA_INDEX_URL",
"PIP_FIND_LINKS",
"PIP_INDEX_URL",
"PIP_PYPI_URL",
"PIP_TRUSTED_HOST",
"PROMPT_COMMAND",
"PYTHONSTARTUP",
"PYTHONUSERBASE",
"REDIS_URL",
"REQUESTS_CA_BUNDLE",
"RUSTC_WRAPPER",
"RUSTFLAGS",
"RUSTUP_DIST_ROOT",
"RUSTUP_DIST_SERVER",
"RUSTUP_HOME",
"RUSTUP_TOOLCHAIN",
"RUSTUP_UPDATE_ROOT",
"R_LIBS_USER",
"SSH_ASKPASS",
"SSH_AUTH_SOCK",
"SSL_CERT_DIR",
"SSL_CERT_FILE",
"SUDO_EDITOR",
"SYSTEMROOT",
"TF_CLI_CONFIG_FILE",
"TF_PLUGIN_CACHE_DIR",
"UV_DEFAULT_INDEX",
"UV_EXTRA_INDEX_URL",
"UV_INDEX",
"UV_INDEX_URL",
"UV_PYTHON",
"VIRTUAL_ENV",
"VISUAL",
"WGETRC",
"WINDIR",
"XDG_CACHE_HOME",
"XDG_CONFIG_DIRS",
"XDG_CONFIG_HOME",
"XDG_DATA_DIRS",
"XDG_DATA_HOME",
"XDG_RUNTIME_DIR",
"XDG_STATE_HOME",
"YARN_RC_FILENAME",
"ZDOTDIR"
]
static let blockedOverridePrefixes: [String] = [
"CARGO_REGISTRIES_",
"GIT_CONFIG_",
"NPM_CONFIG_",
"TF_VAR_"
]
static let blockedPrefixes: [String] = [
"BASH_FUNC_",
"DYLD_",
"LD_"
]
}
Reference in New Issue View Git Blame Copy Permalink