惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

GbyAI
GbyAI
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
P
Proofpoint News Feed
L
Lohrmann on Cybersecurity
S
Secure Thoughts
Attack and Defense Labs
Attack and Defense Labs
人人都是产品经理
人人都是产品经理
Stack Overflow Blog
Stack Overflow Blog
W
WeLiveSecurity
O
OpenAI News
SecWiki News
SecWiki News
博客园 - Franky
NISL@THU
NISL@THU
Microsoft Azure Blog
Microsoft Azure Blog
T
Tor Project blog
Microsoft Security Blog
Microsoft Security Blog
aimingoo的专栏
aimingoo的专栏
Security Latest
Security Latest
H
Hacker News: Front Page
Google Online Security Blog
Google Online Security Blog
P
Privacy & Cybersecurity Law Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
D
Darknet – Hacking Tools, Hacker News & Cyber Security
月光博客
月光博客
李成银的技术随笔
Spread Privacy
Spread Privacy
F
Full Disclosure
F
Fortinet All Blogs
T
The Exploit Database - CXSecurity.com
Vercel News
Vercel News
AWS News Blog
AWS News Blog
WordPress大学
WordPress大学
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
V
Visual Studio Blog
J
Java Code Geeks
博客园 - 三生石上(FineUI控件)
G
Google Developers Blog
云风的 BLOG
云风的 BLOG
博客园 - 司徒正美
Engineering at Meta
Engineering at Meta
Last Week in AI
Last Week in AI
P
Palo Alto Networks Blog
宝玉的分享
宝玉的分享
T
True Tiger Recordings
N
News and Events Feed by Topic
酷 壳 – CoolShell
酷 壳 – CoolShell
Cisco Talos Blog
Cisco Talos Blog
N
News | PayPal Newsroom
S
SegmentFault 最新的问题
Jina AI
Jina AI

Recent Commits to openclaw:main

Policy: add model, network, and MCP conformance checks (#80783) fix(agents): fence embedded session writes refactor: remove sender owner tool gating docs: remove stale owner tool wording fix(xai): keep OAuth URL clickable (#84927) · openclaw/openclaw@159b300 Fix stale WebChat typing indicator after terminal session patch (#84565) docs: document rejected autoreview findings · openclaw/openclaw@c49647e docs(changelog): note VAPID subject fix · openclaw/openclaw@db606a8 perf(plugins): reuse compatible gateway startup registry · openclaw/openclaw@d2ad7d6 test: cover dispatch registry reuse caller · openclaw/openclaw@b248b48 docs: add plugin registry reuse changelog · openclaw/openclaw@6ccca4a fix(tests): wrap kitchen sink pnpm runner fix(agents): cap heartbeat context hint fallback · openclaw/openclaw@04061bc chore(deadcode): dedupe repeated helpers · openclaw/openclaw@88c49f9 perf(cli): cache stable subcommand help (#84786) · openclaw/openclaw@f39f56a fix(ollama): preserve tool call ids [AI-assisted] (#84855) · openclaw/openclaw@2000227 fix: align remaining copyright notice · openclaw/openclaw@f43e83c fix(config): append numeric bound hints to ceiling/floor validation e… · openclaw/openclaw@8a8f9dc fix(qa): enable private self-check runtime · openclaw/openclaw@0fb1de5 fix(diffs): replace iconMarkup string with ToolbarIconName enum to el… · openclaw/openclaw@b7f9bf5 fix: update mac copyright owner fix(agents): normalize openapi tool schemas · openclaw/openclaw@ec67290 fix(memory): stop recall tracking when dreaming is disabled · openclaw/openclaw@c89632b fix(diagnostics-otel): suppress exporter rejection crashes (#84881) perf: speed up secrets and nodes help startup (#84818) · openclaw/openclaw@233765b docs: add PDF timeout changelog · openclaw/openclaw@e3b77d6 fix(pdf): bound remote body reads [Fix] Reject slow node event sends (#84387) fix(doctor): detect Codex bwrap namespace denials · openclaw/openclaw@43c6c26 fix(update): prune stale local bundled plugin shadows · openclaw/openclaw@4a360ac ci: add live Codex plugin release check · openclaw/openclaw@3eb2d64 fix(slack): suppress reasoning reply payloads (#84322) chore: update vite · openclaw/openclaw@ec7495c chore: update dependencies · openclaw/openclaw@ec10d12 fix(config): validate browser sandbox bind sources [AI] (#84799) · openclaw/openclaw@3cc8b2a doctor: constrain legacy plugin cleanup paths [AI] (#84801) Fix Telegram isolated polling stall watchdog (#84861) · openclaw/openclaw@40db92f ci(release): keep non-waiting clawhub publish best effort fix(docker): keep prune store warmup before offline stage · openclaw/openclaw@1e8d966 ci(release): require resolved target before child dispatch · openclaw/openclaw@2fd02c2 fix(docker): keep runtime prune offline · openclaw/openclaw@a329b9e ci(release): streamline beta publish verification · openclaw/openclaw@1c5fda1 ci(release): preserve direct repair publishes · openclaw/openclaw@0604d25 ci(release): keep focused validation reruns independent · openclaw/openclaw@624d920 [Fix] Keep node systemd tokens out of unit files (#84815) fix: reject symlinked whatsapp creds · openclaw/openclaw@194f078 fix(whatsapp): guard credential atomic writes refactor(whatsapp): use async fs-safe credential checks · openclaw/openclaw@9ec9fbf fix(doctor): clear stale runtime override pins (#84221) fix(agents): disable pi-coding-agent auto-retry to prevent tool call … fix(trajectory): tolerate partial skill snapshot entries in support c… · openclaw/openclaw@c9b6a8b fix(ui): widen settings personal card · openclaw/openclaw@3156d94 fix(agents): log pre-prompt compaction fits decisions (#84676) · openclaw/openclaw@79be940 fix(memory-core): allow bounded dreaming session cleanup (#84802) · openclaw/openclaw@0671a2a perf(cli): lazy-load agents actions for help (#84483) · openclaw/openclaw@168f8a7 Skip empty sherpa structured transcripts (#84667) · openclaw/openclaw@46030f5 feat: support git and local skill installs (#84793) · openclaw/openclaw@c031274 Policy: add tool metadata conformance (#80056) fix(doctor): warn when sandbox hides MCP tools (#84742) · openclaw/openclaw@6745fe8 perf(cli): speed up onboarding help startup (#84488) · openclaw/openclaw@2c0c9c9 perf: isolate doctor core check tests (#84493) · openclaw/openclaw@2585249 feat(tasks): explain stale-running maintenance decisions (#84691) · openclaw/openclaw@3d3cf96 fix(minimax): stop advertising music duration control (#84765) fix(codex): guard path-only bootstrap files [AI-assisted] (#84736) · openclaw/openclaw@c4f14a3 Warn on plaintext secret config in doctor (#84718) · openclaw/openclaw@9cdf8a1 Remove skill prelude exec allowlist (#84570) perf(tui): defer EmbeddedTuiBackend import, drop dead warmup helpers … · openclaw/openclaw@b79effe perf(tui): skip plugin metadata + provider catalog on remote TUI star… · openclaw/openclaw@d91ef6b Route JSON-mode plugin registration logs to stderr (#84741) · openclaw/openclaw@b3ec4f0 build: suppress rolldown-plugin-dts CommonJS dts warnings from bundle… [codex] Fix macOS app copyright year (#84729) · openclaw/openclaw@5c4c6a4 fix(approval): route /approve through approval resolver (#84678) · openclaw/openclaw@b58572e test(secret-file): cover NickServ + account-level symlinks, narrow in… · openclaw/openclaw@4d47f9a fix(infra): restore symlink rejection in tryReadSecretFileSync (#84711) · openclaw/openclaw@90fd26b ci: preserve node path across setup action steps · openclaw/openclaw@d786b4e fix(update): defer legacy parent plugin repair · openclaw/openclaw@f4dc9b1 fix(update): prefer npm during post-core repair · openclaw/openclaw@2e389b6 test: align release timeout budget expectations · openclaw/openclaw@3844513 ci: extend stable release validation monitors · openclaw/openclaw@6b52105 fix(update): adopt post-core plugin payloads fix: preserve update compatibility host during release upgrades · openclaw/openclaw@1fdeee3 fix(update): prefer existing npm plugins during repair fix(update): preserve post-core host version · openclaw/openclaw@e57fa51 chore(release): update appcast for 2026.5.19 · openclaw/openclaw@ec8e700 chore(release): refresh generated baselines · openclaw/openclaw@6c7fe58 chore(release): bump version to 2026.5.20 · openclaw/openclaw@7b90661 fix(doctor): migrate invalid thinking formats (#84626) · openclaw/openclaw@6e9d47b fix(slack): normalize approval user ids (#84671) · openclaw/openclaw@9e4eca0 fix(codex): bridge computer use elicitations chore(deps): update whatsapp baileys · openclaw/openclaw@6e7bd55 fix(cli): gate exported subcli descriptors (#84519) · openclaw/openclaw@ca0fe88 fix(browser): honor image sanitization config for screenshots (#84595) · openclaw/openclaw@d5cc0d5 fix: update fs-safe fallback dependency · openclaw/openclaw@1a7669b fix(errors): dedupe identical messages when traversing error .cause c… · openclaw/openclaw@447a364 fix(agents): credit delivered subagent completions (#84383) fix: check billing errors before surfacing rate-limit message (#79489) · openclaw/openclaw@0af55f9 fix: clarify pinned session model status · openclaw/openclaw@a134683 fix: keep cron final output over tool warnings · openclaw/openclaw@c8a953a Add OpenRouter provider routing params (#84579) · openclaw/openclaw@ac69776 feat(discord): add realtime voice bootstrap context · openclaw/openclaw@48a14e4
test: update command auth expectations · openclaw/openclaw@95eac52
steipete · 2026-05-21 · via Recent Commits to openclaw:main

@@ -1,10 +1,7 @@

11

import { beforeEach, describe, expect, it, vi } from "vitest";

22

import type { OpenClawConfig } from "../../config/config.js";

33

import { handlePluginsCommand } from "./commands-plugins.js";

4-

import {

5-

buildPluginsCommandParams,

6-

type ConfigSnapshotMock,

7-

} from "./commands.test-harness.js";

4+

import { buildPluginsCommandParams, type ConfigSnapshotMock } from "./commands.test-harness.js";

8596

const readConfigFileSnapshotMock = vi.hoisted(() => vi.fn());

107

const validateConfigObjectWithPluginsMock = vi.hoisted(() => vi.fn());

@@ -42,10 +39,12 @@ vi.mock("../../config/config.js", () => ({

4239

transform: (

4340

currentConfig: OpenClawConfig,

4441

context: { snapshot: ConfigSnapshotMock; previousHash: string | null; attempt: number },

45-

) => Promise<{ nextConfig: OpenClawConfig; result?: unknown }> | {

46-

nextConfig: OpenClawConfig;

47-

result?: unknown;

48-

};

42+

) =>

43+

| Promise<{ nextConfig: OpenClawConfig; result?: unknown }>

44+

| {

45+

nextConfig: OpenClawConfig;

46+

result?: unknown;

47+

};

4948

}) => {

5049

const snapshot = (await readConfigFileSnapshotMock()) as ConfigSnapshotMock;

5150

const previousHash = snapshot.hash ?? null;

@@ -358,7 +357,7 @@ describe("handlePluginsCommand", () => {

358357359358

it("returns an explicit unauthorized reply for native /plugins list", async () => {

360359

const params = buildPluginsParams("/plugins list", buildCfg());

361-

params.command.senderIsOwner = false;

360+

params.command.isAuthorizedSender = false;

362361

params.ctx.Provider = "telegram";

363362

params.ctx.Surface = "telegram";

364363

params.ctx.CommandSource = "native";