clawsweeper

ClawSweeper

ClawSweeper reviews issues and pull requests across OpenClaw repositories. Its canonical source is openclaw/clawsweeper. Resolve the actual local checkout instead of assuming its path.

Start

Inspect git status --short --branch in the ClawSweeper checkout. Status and report requests stay read-only: use current reports and live read APIs when freshness matters, without pulling or building just to inspect them.

For authorized implementation or execution, update a clean task-owned checkout and build only when the selected command needs it. Preserve unrelated edits and other operators' active workflows. Read that checkout's AGENTS.md before execution.

One Bot, One App

Use the clawsweeper GitHub App and current CLAWSWEEPER_* configuration. The source repository owns App setup and permissions. Do not change credentials, permissions, or execution gates for a status request.

Review workers propose findings with stripped secret/token environments. Deterministic workflows own comments, labels, and guarded close proposals. A review result does not authorize a separate mutation.

Hosted Commit Reviews

Hosted per-commit reports and commit Check Runs are retired. For the retained offline review of a committed branch, use pnpm local-review -- --base main. $autoreview --mode commit --commit <sha> remains a separate general-purpose review path.

Sweep Reports

Canonical issue/PR report keys are:

records/<repo-slug>/items/<number>.md
records/<repo-slug>/closed/<number>.md

The Worker store owns current records. Verify freshness before relying on a local copy. Lead with counts, concrete findings, and report links. Do not post unsolicited GitHub comments from report-reading work.

PR reports include reviewFindings with priority, confidence, repository-relative file, and line range. Public comments show short findings and collapsed review details. Read the durable result rather than inferring coverage from labels.

For a simple status request, read existing reports and bounded live workflow state. Use pnpm run audit only for a requested full audit.

Reconciliation is a separate authorized mutation: bare pnpm run reconcile moves/deletes report and work-plan files. Inspect its dry-run only when that maintenance task is requested. Likewise, apply-decisions belongs to an explicitly authorized apply workflow, beginning with its dry-run.

Maintainer Mentions

Prefer the supported mention commands:

@clawsweeper review
@clawsweeper re-review
@clawsweeper explain
@clawsweeper stop
@clawsweeper help

review and re-review request a fresh read-only issue/PR review. explain summarizes current status. Review commands can include read-only focus context. Arbitrary freeform questions and action requests do not start repair.

Item authors can use re-review or re-run on their own open items. The router checks current comment identity and repository permissions. Repository membership alone does not establish command authority.

stop establishes the human-review hold before removing old repair-loop labels. Let that supported command own the transition. Do not remove protection labels manually to reproduce it.

Start an authorized comment-routing task with its dry-run:

pnpm run repair:comment-router -- --repo openclaw/openclaw --lookback-minutes 180

The command defaults to dry-run. Scheduled routing stays dry unless CLAWSWEEPER_COMMENT_ROUTER_EXECUTE=1. Use --execute only for an authorized routing task. Do not toggle or reset gates as generic cleanup.

Retired Commands And Protected State

Repair, autofix, automerge, issue implementation, fix-ci, address-review, rebase, and approve commands are retired. @clawsweeper status is also retired. Use @clawsweeper explain. The removed repair job creation, validation, dispatch, and executor entrypoints are unavailable.

For authorized code repairs and landing, follow the maintainer workflow. Do not treat a retired command or label as execution or merge authority.

Existing clawsweeper:autofix and clawsweeper:automerge labels still protect items from automatic closure. Preserve those holds, active or unknown owners, leases, locks, receipts, and recovery evidence. Retirement alone authorizes no cleanup or adoption. Remaining repair: tooling supports reviews, publication, and maintenance. Its name does not restore repair execution.

Security Boundary

Route vulnerability reports and sensitive disclosures through OpenClaw security handling. A review result or retired repair label does not waive security approval, source trust, required review, or native merge gates.

Monitoring

Distinguish intake success from an active review using the review-admission guidance.

Receiver workflows:

gh run list --repo openclaw/clawsweeper --workflow sweep.yml \
  --limit 12 --json databaseId,displayTitle,event,status,conclusion,createdAt,updatedAt,url
gh run list --repo openclaw/clawsweeper --workflow repair-comment-router.yml \
  --limit 12 --json databaseId,displayTitle,event,status,conclusion,createdAt,updatedAt,url
gh run list --repo openclaw/clawsweeper --workflow github-activity.yml \
  --limit 12 --json databaseId,displayTitle,event,status,conclusion,createdAt,updatedAt,url

Target dispatcher:

gh run list --repo openclaw/openclaw --workflow "ClawSweeper Dispatch" \
  --limit 8 --json databaseId,displayTitle,event,status,conclusion,headSha,url

Reading Output

For findings or failures, summarize:

• target repo, item/PR, run, report key
• result, confidence, severity, and exact blocker
• affected files and validation results
• actual mutation authority and next deterministic action.