$ the-wire · showcase
ClawSweeper goes Codex-only and adds Cerebras, OpenClaw fallback
By RepoJournal · Filed · About OpenClaw
ClawSweeper removed the Claude CLI layer, added a built-in Cerebras provider, and shipped a deny-by-default environment allowlist for OpenClaw subprocesses.
ClawSweeper [1] removed the Claude CLI runtime, making the tool Codex-only. The change also added a pluggable agent runner with an OpenClaw fallback, publishing exact-review results directly from Cloudflare. For security, "Run OpenClaw subprocesses through a deny-by-default environment allowlist" so workflow credentials and unrelated host secrets are stripped at the process boundary.
On the runner side, ClawSweeper [2] now ships a built-in Cerebras provider, with live validation reporting 474 tok/s wall and 5s E2E on Cerebras Code Max. Previously the provider-key allowlist blocked CEREBRAS_API_KEY, causing a 401; it now accepts it. Note that the zai-glm-4.7 model deprecates on 2026-08-17.
On the desktop side, the macOS dashboard gateway picker [3] now permits in-place switching, carrying TLS pins through promotion and serializing gateway switches. Separately, the compat registry [4] dated 10 shipped deprecated surfaces that previously only had @deprecated annotations, exposing removal-pending debt with due dates and blockers.
Action items
- → Update ClawSweeper to pick up the Cerebras provider before you rely on CEREBRAS_API_KEY openclaw/clawsweeper [immediate]
- → Review ClawSweeper changes if you depend on the Claude CLI runtime openclaw/clawsweeper [immediate]
- → Audit deprecated surfaces listed in the dated compat registry before the removal window openclaw/openclaw [plan]
References
- [1] feat: Codex-only runtime, OpenClaw fallback runner, direct Cloudflare publication (#859) ↗ openclaw/clawsweeper
- [2] feat(runner): add built-in Cerebras provider and widen the provider-key allowlist (#860) ↗ openclaw/clawsweeper
- [3] feat(mac): dashboard gateway picker with in-place switching (#113965) ↗ openclaw/openclaw
- [4] chore(compat): date the annotated deprecation families and expose removal-pending debt (#114002) ↗ openclaw/openclaw