Limit hook CLI tool authority [AI] (#81065) · openclaw/openclaw@a3fda2a

Recent Commits to openclaw:main

pgondhi987 · 2026-05-13 · via Recent Commits to openclaw:main

Original file line number	Diff line number	Diff line change
`@@ -6,6 +6,7 @@ Docs: https://docs.openclaw.ai`
`6`	`6`
`7`	`7`	`### Fixes`
`8`	`8`
	`9`	`+- Limit hook CLI tool authority [AI]. (#81065) Thanks @pgondhi987.`
`9`	`10`	`- Require admin scope for node device token management [AI]. (#81067) Thanks @pgondhi987.`
`10`	`11`	`- Restrict chat sender allowlist matching [AI]. (#80898) Thanks @pgondhi987.`
`11`	`12`	`- Sessions: redact persisted tool result detail metadata before writing transcripts so diagnostic secrets do not survive tool output redaction. (#80444) Thanks @nimbleenigma.`

Original file line number	Diff line number	Diff line change
`@@ -82,6 +82,7 @@ export function createCronPromptExecutor(params: {`
`82`	`82`	`resolvedVerboseLevel: VerboseLevel;`
`83`	`83`	`thinkLevel: ThinkLevel \| undefined;`
`84`	`84`	`timeoutMs: number;`
	`85`	`+senderIsOwner: boolean;`
`85`	`86`	`messageChannel: string \| undefined;`
`86`	`87`	`suppressExecNotifyOnExit: boolean;`
`87`	`88`	`resolvedDelivery: {`
`@@ -177,7 +178,7 @@ export function createCronPromptExecutor(params: {`
`177`	`178`	`onExecutionPhase: params.onExecutionPhase,`
`178`	`179`	`bootstrapPromptWarningSignaturesSeen,`
`179`	`180`	`bootstrapPromptWarningSignature,`
`180`		`-senderIsOwner: true,`
	`181`	`+senderIsOwner: params.senderIsOwner,`
`181`	`182`	`});`
`182`	`183`	`bootstrapPromptWarningSignaturesSeen = resolveBootstrapWarningSignaturesSeen(`
`183`	`184`	`result.meta?.systemPromptReport,`
`@@ -314,6 +315,7 @@ export async function executeCronRun(params: {`
`314`	`315`	`) => void;`
`315`	`316`	`thinkLevel: ThinkLevel \| undefined;`
`316`	`317`	`timeoutMs: number;`
	`318`	`+senderIsOwner: boolean;`
`317`	`319`	`suppressExecNotifyOnExit: boolean;`
`318`	`320`	`runStartedAt?: number;`
`319`	`321`	`}): Promise<CronExecutionResult> {`
`@@ -350,6 +352,7 @@ export async function executeCronRun(params: {`
`350`	`352`	`abortReason: params.abortReason,`
`351`	`353`	`onExecutionStarted: params.onExecutionStarted,`
`352`	`354`	`onExecutionPhase: params.onExecutionPhase,`
	`355`	`+senderIsOwner: params.senderIsOwner,`
`353`	`356`	`});`
`354`	`357`
`355`	`358`	`const runStartedAt = params.runStartedAt ?? Date.now();`

Original file line number	Diff line number	Diff line change
`@@ -319,6 +319,7 @@ describe("runCronIsolatedAgentTurn message tool policy", () => {`
`319`	`319`	`resolvedVerboseLevel: "off",`
`320`	`320`	`thinkLevel: undefined,`
`321`	`321`	`timeoutMs: 60_000,`
	`322`	`+senderIsOwner: true,`
`322`	`323`	`messageChannel: "messagechat",`
`323`	`324`	`suppressExecNotifyOnExit: true,`
`324`	`325`	`toolPolicy: {`

Original file line number	Diff line number	Diff line change
`@@ -121,9 +121,40 @@ describe("runCronIsolatedAgentTurn isolated session identity", () => {`
`121`	`121`	`const runRequest = requireFirstMockArg(runCliAgentMock, "runCliAgentMock") as {`
`122`	`122`	`sessionId?: string;`
`123`	`123`	`sessionKey?: string;`
	`124`	`+senderIsOwner?: boolean;`
`124`	`125`	`};`
`125`	`126`	`expect(runRequest.sessionId).toBe("isolated-cli-run-1");`
`126`	`127`	`expect(runRequest.sessionKey).toBe("agent:default:cron:cli-monitor:run:isolated-cli-run-1");`
`127`	`128`	`expect(runRequest.sessionKey).not.toBe("agent:default:cron:cli-monitor");`
	`129`	`+expect(runRequest.senderIsOwner).toBe(true);`
	`130`	`+});`
	`131`	`+`
	`132`	`+it("runs externally sourced CLI hook turns without owner tool authority", async () => {`
	`133`	`+isCliProviderMock.mockReturnValue(true);`
	`134`	`+mockRunCronFallbackPassthrough();`
	`135`	`+runCliAgentMock.mockResolvedValue({`
	`136`	`+payloads: [{ text: "done" }],`
	`137`	`+meta: { agentMeta: { usage: { input: 10, output: 20 } } },`
	`138`	`+});`
	`139`	`+`
	`140`	`+const result = await runCronIsolatedAgentTurn(`
	`141`	`+makeIsolatedAgentTurnParams({`
	`142`	`+sessionKey: "hook:webhook:cli-monitor",`
	`143`	`+job: makeIsolatedAgentTurnJob({`
	`144`	`+payload: {`
	`145`	`+kind: "agentTurn",`
	`146`	`+message: "test",`
	`147`	`+externalContentSource: "webhook",`
	`148`	`+},`
	`149`	`+}),`
	`150`	`+}),`
	`151`	`+);`
	`152`	`+`
	`153`	`+expect(result.status).toBe("ok");`
	`154`	`+expect(runCliAgentMock).toHaveBeenCalledOnce();`
	`155`	`+const runRequest = requireFirstMockArg(runCliAgentMock, "runCliAgentMock") as {`
	`156`	`+senderIsOwner?: boolean;`
	`157`	`+};`
	`158`	`+expect(runRequest.senderIsOwner).toBe(false);`
`128`	`159`	`});`
`129`	`160`	`});`

Original file line number	Diff line number	Diff line change
`@@ -462,6 +462,7 @@ type PreparedCronRunContext = {`
`462`	`462`	`resolvedDelivery: ResolvedCronDeliveryTarget;`
`463`	`463`	`deliveryRequested: boolean;`
`464`	`464`	`suppressExecNotifyOnExit: boolean;`
	`465`	`+senderIsOwner: boolean;`
`465`	`466`	`toolPolicy: ReturnType<typeof resolveCronToolPolicy>;`
`466`	`467`	`skillsSnapshot: SkillSnapshot;`
`467`	`468`	`liveSelection: CronLiveSelection;`
`@@ -792,6 +793,7 @@ async function prepareCronRunContext(params: {`
`792`	`793`	`resolvedDelivery,`
`793`	`794`	`deliveryRequested,`
`794`	`795`	`suppressExecNotifyOnExit: deliveryPlan.mode === "none",`
	`796`	`+senderIsOwner: !isExternalHook,`
`795`	`797`	`toolPolicy,`
`796`	`798`	`skillsSnapshot,`
`797`	`799`	`liveSelection,`
`@@ -1145,6 +1147,7 @@ export async function runCronIsolatedAgentTurn(params: {`
`1145`	`1147`	`thinkLevel: prepared.context.thinkLevel,`
`1146`	`1148`	`timeoutMs: prepared.context.timeoutMs,`
`1147`	`1149`	`suppressExecNotifyOnExit: prepared.context.suppressExecNotifyOnExit,`
	`1150`	`+senderIsOwner: prepared.context.senderIsOwner,`
`1148`	`1151`	`});`
`1149`	`1152`	`if (isAborted()) {`
`1150`	`1153`	`return prepared.context.withRunSession({`

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。

推荐订阅源

Recent Commits to openclaw:main