fix(exec): align release validation checks · openclaw/ope...

Recent Commits to openclaw:main

joshavant · 2026-05-29 · via Recent Commits to openclaw:main

Original file line number	Diff line number	Diff line change
`@@ -466,7 +466,7 @@ export function resolveCodexAppServerRuntimeOptions(`
`466`	`466`	`? selectForcedDangerFullAccessSandbox({`
`467`	`467`	`configuredSandbox,`
`468`	`468`	`defaultPolicy,`
`469`		`-openClawSandboxActive: params.openClawSandboxActive === true,`
	`469`	`+openClawSandboxActive: Boolean(params.openClawSandboxActive),`
`470`	`470`	`})`
`471`	`471`	`: selectForcedPromptingSandbox({`
`472`	`472`	`configuredSandbox,`

Original file line number	Diff line number	Diff line change
`@@ -1,14 +1,15 @@`
`1`	`1`	`import fs from "node:fs/promises";`
`2`	`2`	`import os from "node:os";`
`3`	`3`	`import path from "node:path";`
	`4`	`+import type { ExecApprovalsFile } from "openclaw/plugin-sdk/exec-approvals-runtime";`
`4`	`5`	`import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";`
`5`	`6`
`6`	`7`	`const sharedClientMocks = vi.hoisted(() => ({`
`7`	`8`	`getSharedCodexAppServerClient: vi.fn(),`
`8`	`9`	`}));`
`9`	`10`
`10`	`11`	`const execApprovalsRuntimeMocks = vi.hoisted(() => ({`
`11`		`-loadExecApprovals: vi.fn(() => ({ version: 1 as const, agents: {} })),`
	`12`	`+loadExecApprovals: vi.fn<() => ExecApprovalsFile>(() => ({ version: 1, agents: {} })),`
`12`	`13`	`}));`
`13`	`14`
`14`	`15`	`const agentRuntimeMocks = vi.hoisted(() => ({`

Original file line number	Diff line number	Diff line change
`@@ -127,7 +127,7 @@ async function resolveConversationAppServerRuntime(params: {`
`127`	`127`	`sessionKey: params.sessionKey,`
`128`	`128`	`});`
`129`	`129`	`const sandboxForPolicy =`
`130`		`-execPolicy?.touched === true && execPolicy.security === "full" && execPolicy.ask !== "off"`
	`130`	`+execPolicy.touched && execPolicy.security === "full" && execPolicy.ask !== "off"`
`131`	`131`	`? await resolveSandboxContext({`
`132`	`132`	`config: params.config,`
`133`	`133`	`sessionKey: params.sessionKey,`
`@@ -137,7 +137,7 @@ async function resolveConversationAppServerRuntime(params: {`
`137`	`137`	`const runtime = resolveCodexAppServerRuntimeOptions({`
`138`	`138`	`pluginConfig: params.pluginConfig,`
`139`	`139`	`execPolicy,`
`140`		`-openClawSandboxActive: sandboxForPolicy?.enabled === true,`
	`140`	`+openClawSandboxActive: Boolean(sandboxForPolicy?.enabled),`
`141`	`141`	`});`
`142`	`142`	`assertNativeConversationApprovalPolicySupported({ execPolicy, runtime });`
`143`	`143`	`return { execPolicy, runtime };`
`@@ -626,7 +626,7 @@ async function runBoundTurnWithMissingThreadRecovery(params: {`
`626`	`626`	`config: params.config,`
`627`	`627`	`sessionKey: params.sessionKey,`
`628`	`628`	`});`
`629`		`-const useCurrentRuntimePolicy = execPolicy?.touched === true;`
	`629`	`+const useCurrentRuntimePolicy = execPolicy.touched;`
`630`	`630`	`await startCodexConversationThread({`
`631`	`631`	`pluginConfig: params.pluginConfig,`
`632`	`632`	`sessionFile: params.data.sessionFile,`

Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,18 @@ type ExecAutoReviewer = typeof import("../infra/exec-auto-review.js").defaultExe`
`10`	`10`	`type BuildExecApprovalFollowupTargetMock = (`
`11`	`11`	`value: ExecApprovalFollowupTarget,`
`12`	`12`	`) => ExecApprovalFollowupTarget \| null;`
	`13`	`+type MockAllowlistSegment = {`
	`14`	`+raw?: string;`
	`15`	`+resolution: null;`
	`16`	`+argv: string[];`
	`17`	`+};`
	`18`	`+type MockAllowlistResult = {`
	`19`	`+allowlistMatches: unknown[];`
	`20`	`+analysisOk: boolean;`
	`21`	`+allowlistSatisfied: boolean;`
	`22`	`+segments: MockAllowlistSegment[];`
	`23`	`+segmentAllowlistEntries: unknown[];`
	`24`	`+};`
`13`	`25`
`14`	`26`	`const INLINE_EVAL_HIT = {`
`15`	`27`	`executable: "python3",`
`@@ -37,13 +49,15 @@ const createExecApprovalDecisionStateMock = vi.hoisted(() =>`
`37`	`49`	`),`
`38`	`50`	`);`
`39`	`51`	`const evaluateShellAllowlistMock = vi.hoisted(() =>`
`40`		`-vi.fn(() => ({`
`41`		`-allowlistMatches: [],`
`42`		`-analysisOk: true,`
`43`		`-allowlistSatisfied: true,`
`44`		`-segments: [{ resolution: null, argv: ["echo", "ok"] }],`
`45`		`-segmentAllowlistEntries: [{ pattern: "/usr/bin/echo", source: "allow-always" }],`
`46`		`-})),`
	`52`	`+vi.fn(`
	`53`	`+(): MockAllowlistResult => ({`
	`54`	`+allowlistMatches: [],`
	`55`	`+analysisOk: true,`
	`56`	`+allowlistSatisfied: true,`
	`57`	`+segments: [{ resolution: null, argv: ["echo", "ok"] }],`
	`58`	`+segmentAllowlistEntries: [{ pattern: "/usr/bin/echo", source: "allow-always" }],`
	`59`	`+}),`
	`60`	`+),`
`47`	`61`	`);`
`48`	`62`	`const analyzeShellCommandMock = vi.hoisted(() =>`
`49`	`63`	`vi.fn((params: { command: string }) => ({`

Original file line number	Diff line number	Diff line change
`@@ -3,6 +3,18 @@ import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";`
`3`	`3`	`type StrictInlineEvalBoundary =`
`4`	`4`	`typeof import("./bash-tools.exec-host-shared.js").enforceStrictInlineEvalApprovalBoundary;`
`5`	`5`	`type ExecAutoReviewer = typeof import("../infra/exec-auto-review.js").defaultExecAutoReviewer;`
	`6`	`+type MockAllowlistSegment = {`
	`7`	`+raw?: string;`
	`8`	`+resolution: null;`
	`9`	`+argv: string[];`
	`10`	`+};`
	`11`	`+type MockAllowlistResult = {`
	`12`	`+allowlistMatches: unknown[];`
	`13`	`+analysisOk: boolean;`
	`14`	`+allowlistSatisfied: boolean;`
	`15`	`+segments: MockAllowlistSegment[];`
	`16`	`+segmentAllowlistEntries: unknown[];`
	`17`	`+};`
`6`	`18`
`7`	`19`	`const INLINE_EVAL_HIT = {`
`8`	`20`	`executable: "python3",`
`@@ -30,13 +42,15 @@ const listNodesMock = vi.hoisted(() => vi.fn());`
`30`	`42`	`const parsePreparedSystemRunPayloadMock = vi.hoisted(() => vi.fn());`
`31`	`43`	`const commandRequiresSecurityAuditSuppressionApprovalMock = vi.hoisted(() => vi.fn(() => false));`
`32`	`44`	`const evaluateShellAllowlistMock = vi.hoisted(() =>`
`33`		`-vi.fn(() => ({`
`34`		`-allowlistMatches: [],`
`35`		`-analysisOk: true,`
`36`		`-allowlistSatisfied: false,`
`37`		`-segments: [{ resolution: null, argv: ["bun", "./script.ts"] }],`
`38`		`-segmentAllowlistEntries: [],`
`39`		`-})),`
	`45`	`+vi.fn(`
	`46`	`+(): MockAllowlistResult => ({`
	`47`	`+allowlistMatches: [],`
	`48`	`+analysisOk: true,`
	`49`	`+allowlistSatisfied: false,`
	`50`	`+segments: [{ resolution: null, argv: ["bun", "./script.ts"] }],`
	`51`	`+segmentAllowlistEntries: [],`
	`52`	`+}),`
	`53`	`+),`
`40`	`54`	`);`
`41`	`55`	`const resolveExecApprovalsFromFileMock = vi.hoisted(() =>`
`42`	`56`	`vi.fn(() => ({`

Original file line number	Diff line number	Diff line change
`@@ -65,6 +65,7 @@ function execSecurityFloorRank(security: ExecSecurity): number {`
`65`	`65`	`case "deny":`
`66`	`66`	`return 2;`
`67`	`67`	`}`
	`68`	`+throw new Error("Unsupported exec security floor");`
`68`	`69`	`}`
`69`	`70`
`70`	`71`	`function nodePolicyBlocksAutoReview(params: {`

Original file line number	Diff line number	Diff line change
`@@ -133,9 +133,8 @@ export function resolveExecPolicyForMode(mode: ExecMode): {`
`133`	`133`	`case "full":`
`134`	`134`	`return { security: "full", ask: "off", autoReview: false };`
`135`	`135`	`}`
`136`		`-const _exhaustive: never = mode;`
`137`		`-void _exhaustive;`
`138`		`-throw new Error("Unsupported exec mode");`
	`136`	`+const exhaustiveMode: never = mode;`
	`137`	+throw new Error(`Unsupported exec mode: ${String(exhaustiveMode)}`);
`139`	`138`	`}`
`140`	`139`
`141`	`140`	`export function resolveExecModePolicy(params: {`

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。

推荐订阅源

Recent Commits to openclaw:main