慣性聚合 高效追讀感興趣之博客、新聞、科技資訊
閱原文 以慣性聚合開啟

推薦訂閱源

博客园 - 司徒正美
V
V2EX
T
Tailwind CSS Blog
有赞技术团队
有赞技术团队
aimingoo的专栏
aimingoo的专栏
Apple Machine Learning Research
Apple Machine Learning Research
IT之家
IT之家
Blog — PlanetScale
Blog — PlanetScale
A
About on SuperTechFans
月光博客
月光博客
T
The Blog of Author Tim Ferriss
宝玉的分享
宝玉的分享
Martin Fowler
Martin Fowler
博客园 - 聂微东
The GitHub Blog
The GitHub Blog
V
Visual Studio Blog
WordPress大学
WordPress大学
酷 壳 – CoolShell
酷 壳 – CoolShell
Engineering at Meta
Engineering at Meta
GbyAI
GbyAI

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311
修之:守空格代理白名单,闭门谢客 (#85849) · openclaw/openclaw@0f83c93
steipete · 2026-05-24 · via Recent Commits to openclaw:main
原本之文件行數差異行數差異變更

@@ -137,6 +137,20 @@ describe("createAgentToAgentPolicy", () => {

137137

expect(policy.matchesAllow("ops")).toBe(false);

138138

});

139139
140+

it("keeps blank configured allow patterns fail-closed", () => {

141+

const policy = createAgentToAgentPolicy({

142+

tools: {

143+

agentToAgent: {

144+

enabled: true,

145+

allow: [" "],

146+

},

147+

},

148+

} as unknown as OpenClawConfig);

149+
150+

expect(policy.matchesAllow("ops")).toBe(false);

151+

expect(policy.isAllowed("main", "ops")).toBe(false);

152+

});

153+
140154

it("handles interior wildcards", () => {

141155

const policy = createAgentToAgentPolicy({

142156

tools: {

原本之文件行數差異行數差異變更

@@ -96,6 +96,7 @@ export function resolveSandboxSessionToolsVisibility(cfg: OpenClawConfig): "spaw

9696
9797

type CompiledAgentAllowPattern =

9898

| { kind: "all" }

99+

| { kind: "deny" }

99100

| { kind: "exact"; value: string }

100101

| {

101102

kind: "wildcard";

@@ -104,10 +105,10 @@ type CompiledAgentAllowPattern =

104105

interior: string[];

105106

};

106107
107-

function compileAgentAllowPattern(pattern: string): CompiledAgentAllowPattern | null {

108+

function compileAgentAllowPattern(pattern: string): CompiledAgentAllowPattern {

108109

const raw = normalizeOptionalString(pattern) ?? "";

109110

if (!raw) {

110-

return null;

111+

return { kind: "deny" };

111112

}

112113

if (raw === "*") {

113114

return { kind: "all" };

@@ -161,9 +162,7 @@ export function createAgentToAgentPolicy(cfg: OpenClawConfig): AgentToAgentPolic

161162

const routingA2A = cfg.tools?.agentToAgent;

162163

const enabled = routingA2A?.enabled === true;

163164

const rawAllowPatterns = Array.isArray(routingA2A?.allow) ? routingA2A.allow : [];

164-

const allowPatterns = rawAllowPatterns

165-

.map((pattern) => compileAgentAllowPattern(pattern))

166-

.filter((pattern): pattern is CompiledAgentAllowPattern => pattern !== null);

165+

const allowPatterns = rawAllowPatterns.map((pattern) => compileAgentAllowPattern(pattern));

167166

const hasWildcardPatterns = allowPatterns.some((pattern) => pattern.kind === "wildcard");

168167

const matchesAllow = (agentId: string) => {

169168

if (allowPatterns.length === 0) {

@@ -174,6 +173,9 @@ export function createAgentToAgentPolicy(cfg: OpenClawConfig): AgentToAgentPolic

174173

if (pattern.kind === "all") {

175174

return true;

176175

}

176+

if (pattern.kind === "deny") {

177+

return false;

178+

}

177179

if (pattern.kind === "exact") {

178180

return pattern.value === agentId;

179181

}