openclaw/src/daemon
clawsweeper[bot] e427262044
[Fix] Keep node systemd tokens out of unit files (#84815)
Summary:
- This replacement PR marks the Linux node daemon gateway token as file-backed, writes it to `node.systemd.env`, sanitizes and migrates systemd env artifacts, adds regression tests, and updates the changelog.
- Reproducibility: yes. from source inspection: current `main` copies `OPENCLAW_GATEWAY_TOKEN` into the node s ... e-backed before systemd rendering. I did not run a local live systemd install during this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(systemd): scrub single-quoted env tokens
- PR branch already contained follow-up commit before automerge: [Fix] Keep node systemd tokens out of unit files

Validation:
- ClawSweeper review passed for head f626b66c09.
- Required merge gates passed before the squash merge.

Prepared head SHA: f626b66c09
Review: https://github.com/openclaw/openclaw/pull/84815#issuecomment-4505012292

Co-authored-by: samzong <samzong.lu@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>
2026-05-21 06:48:15 +00:00
..
test-helpers
arg-split.ts [Fix] Keep node systemd tokens out of unit files (#84815) 2026-05-21 06:48:15 +00:00
cmd-argv.test.ts
cmd-argv.ts
cmd-set.ts
constants.test.ts
constants.ts
container-context.ts
diagnostics.test.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
diagnostics.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
exec-file.ts
future-config-guard.ts
gateway-entrypoint.ts
inspect.test.ts fix(doctor): avoid launchagent false positives 2026-05-16 22:56:48 +01:00
inspect.ts fix(daemon): remove unused service marker helper 2026-05-16 23:06:12 +01:00
launchd-plist.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
launchd-restart-handoff.test.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
launchd-restart-handoff.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
launchd.integration.e2e.test.ts
launchd.test.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
launchd.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
node-service.ts fix(node): hide Windows task launcher (#81267) 2026-05-16 22:25:33 -07:00
output.ts
paths.ts
program-args.test.ts
program-args.ts build: update pi dependencies to 0.75.1 2026-05-18 06:22:36 +01:00
restart-logs.test.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
restart-logs.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
runtime-binary.test.ts
runtime-binary.ts
runtime-format.test.ts test: nail daemon runtime status text 2026-05-12 18:47:20 +01:00
runtime-format.ts
runtime-hints.test.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
runtime-hints.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
runtime-hints.windows-paths.test.ts fix: harden gateway launchd and configure sections 2026-05-17 03:44:05 +01:00
runtime-parse.ts
runtime-paths.test.ts build: update pi dependencies to 0.75.1 2026-05-18 06:22:36 +01:00
runtime-paths.ts build: update pi dependencies to 0.75.1 2026-05-18 06:22:36 +01:00
schtasks-exec.test.ts
schtasks-exec.ts
schtasks.install.test.ts fix(node): hide Windows task launcher (#81267) 2026-05-16 22:25:33 -07:00
schtasks.startup-fallback.test.ts fix(node): hide Windows task launcher (#81267) 2026-05-16 22:25:33 -07:00
schtasks.stop.test.ts test: script scheduled restart calls 2026-05-12 19:35:25 +01:00
schtasks.test.ts
schtasks.ts fix(node): hide Windows task launcher (#81267) 2026-05-16 22:25:33 -07:00
service-audit.test.ts
service-audit.ts build: update pi dependencies to 0.75.1 2026-05-18 06:22:36 +01:00
service-env-plan.ts
service-env-render-policy.ts
service-env.test.ts build: update pi dependencies to 0.75.1 2026-05-18 06:22:36 +01:00
service-env.ts fix(node): hide Windows task launcher (#81267) 2026-05-16 22:25:33 -07:00
service-layout.ts
service-managed-env.ts
service-path-policy.ts
service-runtime.ts
service-types.ts
service.test-helpers.ts
service.test.ts test: share process platform spy helper 2026-05-17 16:52:46 +08:00
service.ts
systemd-hints.test.ts
systemd-hints.ts
systemd-linger.ts
systemd-unavailable.test.ts
systemd-unavailable.ts
systemd-unit.test.ts
systemd-unit.ts [Fix] Keep node systemd tokens out of unit files (#84815) 2026-05-21 06:48:15 +00:00
systemd.test.ts [Fix] Keep node systemd tokens out of unit files (#84815) 2026-05-21 06:48:15 +00:00
systemd.ts [Fix] Keep node systemd tokens out of unit files (#84815) 2026-05-21 06:48:15 +00:00