ClawSweeper

ClawSweeper is the conservative maintenance bot for OpenClaw repositories. It

currently covers `openclaw/openclaw`, `openclaw/clawhub`, and self-review for

`openclaw/clawsweeper`.

It has two independent lanes:

• issue/PR sweeper: keeps one markdown report per open issue or PR, publishes

one durable Codex automated review comment when useful, and only closes items

when the evidence is strong

• commit sweeper: reviews code-bearing commits that land on `main`, writes one

canonical markdown report per commit, and optionally publishes a GitHub Check

Run for that commit

Capabilities

• **Repository profiles:** per-repository rules live in

`src/repository-profiles.ts`, so OpenClaw, ClawHub, and ClawSweeper can share

the same engine while keeping different apply limits.

• **Issue and PR intake:** scheduled runs scan open issues and pull requests,

while target repositories can forward exact issue/PR events with

`repository_dispatch` for low-latency one-item reviews.

• **Codex review reports:** each issue or PR becomes

`records//items/.md` with the decision, evidence, proposed

maintainer-facing comment, runtime metadata, and GitHub snapshot hash.

• **Durable review comments:** ClawSweeper syncs one marker-backed public review

comment per item and edits it in place instead of posting repeated comments.

When a review starts and no ClawSweeper comment exists yet, it posts a short

crustacean-friendly status placeholder first, then replaces that same comment

with the completed review. Completed comments include a dedicated security

review section for supply-chain, permission, secret-handling, and code

execution concerns. Pull request comments include hidden verdict markers, and

actionable PR follow-up includes a hidden

`clawsweeper-action:fix-required` marker for the trusted ClawSweeper repair

loop. See

`docs/pr-review-comments.md`.

• **Guarded apply:** apply mode re-fetch