fix(exec): rebuild command authorization on the Tree-sitter command p… · openclaw/openclaw@c9707ab

Recent Commits to openclaw:main

exec-authorization-allowlist.test.ts · 2026-06-18 · via Recent Commits to openclaw:main

File tree

apps/shared/OpenClawKit/Sources/OpenClawProtocol
packages/gateway-protocol/src

Original file line number	Diff line number	Diff line change
`@@ -6579,6 +6579,7 @@ public struct ExecApprovalRequestParams: Codable, Sendable {`
`6579`	`6579`	`public let security: AnyCodable?`
`6580`	`6580`	`public let ask: AnyCodable?`
`6581`	`6581`	`public let warningtext: AnyCodable?`
	`6582`	`+public let unavailabledecisions: [String]?`
`6582`	`6583`	`public let commandspans: [[String: AnyCodable]]?`
`6583`	`6584`	`public let agentid: AnyCodable?`
`6584`	`6585`	`public let resolvedpath: AnyCodable?`
`@@ -6604,6 +6605,7 @@ public struct ExecApprovalRequestParams: Codable, Sendable {`
`6604`	`6605`	`security: AnyCodable?,`
`6605`	`6606`	`ask: AnyCodable?,`
`6606`	`6607`	`warningtext: AnyCodable?,`
	`6608`	`+ unavailabledecisions: [String]?,`
`6607`	`6609`	`commandspans: [[String: AnyCodable]]?,`
`6608`	`6610`	`agentid: AnyCodable? = nil,`
`6609`	`6611`	`resolvedpath: AnyCodable?,`
`@@ -6628,6 +6630,7 @@ public struct ExecApprovalRequestParams: Codable, Sendable {`
`6628`	`6630`	`self.security = security`
`6629`	`6631`	`self.ask = ask`
`6630`	`6632`	`self.warningtext = warningtext`
	`6633`	`+self.unavailabledecisions = unavailabledecisions`
`6631`	`6634`	`self.commandspans = commandspans`
`6632`	`6635`	`self.agentid = agentid`
`6633`	`6636`	`self.resolvedpath = resolvedpath`
`@@ -6654,6 +6657,7 @@ public struct ExecApprovalRequestParams: Codable, Sendable {`
`6654`	`6657`	`case security`
`6655`	`6658`	`case ask`
`6656`	`6659`	`case warningtext = "warningText"`
	`6660`	`+case unavailabledecisions = "unavailableDecisions"`
`6657`	`6661`	`case commandspans = "commandSpans"`
`6658`	`6662`	`case agentid = "agentId"`
`6659`	`6663`	`case resolvedpath = "resolvedPath"`

Original file line number	Diff line number	Diff line change
`@@ -106,4 +106,27 @@ describe("exec approvals protocol validators", () => {`
`106`	`106`	`}),`
`107`	`107`	`).toBe(false);`
`108`	`108`	`});`
	`109`	`+`
	`110`	`+it("accepts only optional unavailable approval decisions", () => {`
	`111`	`+expect(`
	`112`	`+validateExecApprovalRequestParams({`
	`113`	`+command: "echo hi",`
	`114`	`+unavailableDecisions: ["allow-always"],`
	`115`	`+}),`
	`116`	`+).toBe(true);`
	`117`	`+`
	`118`	`+for (const unavailableDecisions of [`
	`119`	`+[],`
	`120`	`+["allow-always", "allow-always"],`
	`121`	`+["allow-once"],`
	`122`	`+["deny"],`
	`123`	`+]) {`
	`124`	`+expect(`
	`125`	`+validateExecApprovalRequestParams({`
	`126`	`+command: "echo hi",`
	`127`	`+ unavailableDecisions,`
	`128`	`+}),`
	`129`	`+).toBe(false);`
	`130`	`+}`
	`131`	`+});`
`109`	`132`	`});`

Original file line number	Diff line number	Diff line change
`@@ -151,6 +151,12 @@ export const ExecApprovalRequestParamsSchema = Type.Object(`
`151`	`151`	`security: Type.Optional(Type.Union([Type.String(), Type.Null()])),`
`152`	`152`	`ask: Type.Optional(Type.Union([Type.String(), Type.Null()])),`
`153`	`153`	`warningText: Type.Optional(Type.Union([Type.String(), Type.Null()])),`
	`154`	`+unavailableDecisions: Type.Optional(`
	`155`	`+Type.Array(Type.String({ enum: ["allow-always"] }), {`
	`156`	`+minItems: 1,`
	`157`	`+maxItems: 1,`
	`158`	`+}),`
	`159`	`+),`
`154`	`160`	`commandSpans: Type.Optional(`
`155`	`161`	`Type.Array(`
`156`	`162`	`Type.Object(`

Original file line number	Diff line number	Diff line change
`@@ -87,7 +87,7 @@ const defaultPublicDeprecatedExportsByEntrypointBudget = Object.freeze({`
`87`	`87`	`"outbound-send-deps": 4,`
`88`	`88`	`"outbound-runtime": 16,`
`89`	`89`	`"file-access-runtime": 2,`
`90`		`-"infra-runtime": 577,`
	`90`	`+"infra-runtime": 584,`
`91`	`91`	`"ssrf-policy": 1,`
`92`	`92`	`"ssrf-runtime": 1,`
`93`	`93`	`"media-runtime": 2,`
`@@ -161,11 +161,11 @@ let publicDeprecatedExportsByEntrypointBudget;`
`161`	`161`	`try {`
`162`	`162`	`budgets = {`
`163`	`163`	`publicEntrypoints: readBudgetEnv("OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_ENTRYPOINTS", 319),`
`164`		`-publicExports: readBudgetEnv("OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_EXPORTS", 10284),`
`165`		`-publicFunctionExports: readBudgetEnv("OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_FUNCTION_EXPORTS", 5163),`
	`164`	`+publicExports: readBudgetEnv("OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_EXPORTS", 10291),`
	`165`	`+publicFunctionExports: readBudgetEnv("OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_FUNCTION_EXPORTS", 5166),`
`166`	`166`	`publicDeprecatedExports: readBudgetEnv(`
`167`	`167`	`"OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_DEPRECATED_EXPORTS",`
`168`		`-3237,`
	`168`	`+3244,`
`169`	`169`	`),`
`170`	`170`	`publicWildcardReexports: readBudgetEnv(`
`171`	`171`	`"OPENCLAW_PLUGIN_SDK_MAX_PUBLIC_WILDCARD_REEXPORTS",`

Original file line number	Diff line number	Diff line change
`@@ -13,6 +13,7 @@ import {`
`13`	`13`	`} from "@openclaw/normalization-core/string-coerce";`
`14`	`14`	`import type {`
`15`	`15`	`ExecApprovalCommandSpan,`
	`16`	`+ExecApprovalUnavailableDecision,`
`16`	`17`	`ExecAsk,`
`17`	`18`	`ExecSecurity,`
`18`	`19`	`SystemRunApprovalPlan,`
`@@ -55,6 +56,7 @@ type RequestExecApprovalDecisionParams = {`
`55`	`56`	`ask: ExecAsk;`
`56`	`57`	`warningText?: string;`
`57`	`58`	`commandSpans?: ExecApprovalCommandSpan[];`
	`59`	`+unavailableDecisions?: readonly ExecApprovalUnavailableDecision[];`
`58`	`60`	`agentId?: string;`
`59`	`61`	`resolvedPath?: string;`
`60`	`62`	`sessionKey?: string;`
`@@ -87,6 +89,9 @@ function buildExecApprovalRequestToolParams(`
`87`	`89`	`ask: params.ask,`
`88`	`90`	`warningText: params.warningText,`
`89`	`91`	`commandSpans: params.commandSpans,`
	`92`	`+ ...(params.unavailableDecisions?.length`
	`93`	`+ ? { unavailableDecisions: params.unavailableDecisions }`
	`94`	`+ : {}),`
`90`	`95`	`agentId: params.agentId,`
`91`	`96`	`resolvedPath: params.resolvedPath,`
`92`	`97`	`sessionKey: params.sessionKey,`
`@@ -207,6 +212,7 @@ type HostExecApprovalParams = {`
`207`	`212`	`ask: ExecAsk;`
`208`	`213`	`warningText?: string;`
`209`	`214`	`commandSpans?: ExecApprovalCommandSpan[];`
	`215`	`+unavailableDecisions?: readonly ExecApprovalUnavailableDecision[];`
`210`	`216`	`commandHighlighting?: boolean;`
`211`	`217`	`agentId?: string;`
`212`	`218`	`resolvedPath?: string;`
`@@ -315,6 +321,7 @@ async function buildHostApprovalDecisionParams(`
`315`	`321`	`ask: params.ask,`
`316`	`322`	`warningText: params.warningText,`
`317`	`323`	`commandSpans,`
	`324`	`+unavailableDecisions: params.unavailableDecisions,`
`318`	`325`	`...buildExecApprovalRequesterContext({`
`319`	`326`	`agentId: params.agentId,`
`320`	`327`	`sessionKey: params.sessionKey,`

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。

推荐订阅源

Recent Commits to openclaw:main

File tree