惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

W
WeLiveSecurity
D
DataBreaches.Net
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
T
The Exploit Database - CXSecurity.com
D
Darknet – Hacking Tools, Hacker News & Cyber Security
腾讯CDC
PCI Perspectives
PCI Perspectives
阮一峰的网络日志
阮一峰的网络日志
S
Security Archives - TechRepublic
Hugging Face - Blog
Hugging Face - Blog
U
Unit 42
IT之家
IT之家
T
Troy Hunt's Blog
P
Proofpoint News Feed
www.infosecurity-magazine.com
www.infosecurity-magazine.com
F
Full Disclosure
V
V2EX
Stack Overflow Blog
Stack Overflow Blog
C
Comments on: Blog
V
Vulnerabilities – Threatpost
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
V
V2EX - 技术
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
N
News | PayPal Newsroom
MyScale Blog
MyScale Blog
Google DeepMind News
Google DeepMind News
Application and Cybersecurity Blog
Application and Cybersecurity Blog
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
李成银的技术随笔
P
Privacy & Cybersecurity Law Blog
大猫的无限游戏
大猫的无限游戏
V
Visual Studio Blog
T
ThreatConnect
WordPress大学
WordPress大学
Security Latest
Security Latest
C
Cybersecurity and Infrastructure Security Agency CISA
Recent Announcements
Recent Announcements
Google DeepMind News
Google DeepMind News
SecWiki News
SecWiki News
Recorded Future
Recorded Future
小众软件
小众软件
K
Kaspersky official blog
T
Tor Project blog
Last Week in AI
Last Week in AI
GbyAI
GbyAI
人人都是产品经理
人人都是产品经理
Jina AI
Jina AI
S
SegmentFault 最新的问题
MongoDB | Blog
MongoDB | Blog
Simon Willison's Weblog
Simon Willison's Weblog

Recent Commits to openclaw:main

Speed up /models browse replies (#84735) docs: update changelog for plugin binding command escape (#85188) · openclaw/openclaw@9fc5346 ci: fix Crabbox hydrate pnpm modules dir Restore Control UI gateway token pairing [AI] (#85459) · openclaw/openclaw@10cb0a5 fix(docker): accept single-object pnpm list output · openclaw/openclaw@5e97045 fix: apply docs sweep updates fix(update): roll back failed git updates · openclaw/openclaw@769fd0b test(docker): expect prod store seed command fix(agents): bound embedded compaction write locks · openclaw/openclaw@46de078 fix(update): repair managed npm plugin peers · openclaw/openclaw@571f364 fix(update): repair managed npm plugin peers (#83794) (thanks @fuller… · openclaw/openclaw@de8a82a fix(telegram): honor table mode in outbound chunks (#85455) · openclaw/openclaw@7fc691a fix(docker): precreate owned named volume targets (#85454) · openclaw/openclaw@d8b9736 fix(ui): strip ANSI from displayed gateway logs (#85453) · openclaw/openclaw@664611c fix(skills): accept macos os requirement on darwin (#85451) fix(gateway): preserve message-tool replies in chat history test: track Docker prod store seed command · openclaw/openclaw@9a816f4 fix: satisfy prod store package list lint · openclaw/openclaw@d5247d0 test(plugins): clear lookup metadata memo fix(docker): seed prod store before offline prune · openclaw/openclaw@6788aa1 fix(memory): expand home paths in extra memory paths (#85449) · openclaw/openclaw@48bf037 docs: add security FAQ guidance chore(deps): refresh npm shrinkwraps docs: clarify OpenAI HTTP client guidance docs: remove stale showcase intro videos · openclaw/openclaw@00d3dca fix(gateway): point model override error to config docs docs: document secrets provider plan fields docs: clarify media directive formatting · openclaw/openclaw@c876fec docs: align memory search cache default refactor(ios): centralize setup auth parsing test(release): wait for config reload log proof refactor(ios): consolidate manual auth override inputs · openclaw/openclaw@d93c597 fix(ui): hide thinking options for non-reasoning models (#85406) · openclaw/openclaw@bb4d88e fix(ui): attach pasted data image text (#85392) · openclaw/openclaw@a03a8d9 fix(gateway): preserve OpenAI usage aliases in chat history (#85383) · openclaw/openclaw@d9c6c5f feat(ios): add realtime talk relay mode · openclaw/openclaw@e730e9b fix(browser): hint WSL portproxy CDP empty replies (#85379) · openclaw/openclaw@933f01c fix(installer): persist portable Git on Windows · openclaw/openclaw@5b90a48 fix(opencode-go): strip Kimi reasoning replay fields (#85377) · openclaw/openclaw@d22bcfc fix(build): normalize cache paths on Windows (#85437) · openclaw/openclaw@81d22c8 fix(update): detect nested macOS gateway ancestry (#85391) · openclaw/openclaw@adc6adc fix(docker): seed offline prune store in runtime stage · openclaw/openclaw@faf2a6c fix(ci): stabilize npm shrinkwrap metadata · openclaw/openclaw@21bedd3 fix(codex): route node exec through OpenClaw tools · openclaw/openclaw@5cc0dbc test(installer): track portable node root helper · openclaw/openclaw@9364b21 fix(ui): sync talk transcript translations fix(ui): localize talk transcript labels · openclaw/openclaw@8fc48af fix(release): stabilize config restart QA · openclaw/openclaw@cc91ff0 fix(installer): extract portable Node directly test(qa-lab): report scenario pack coverage · openclaw/openclaw@dcd98bf fix(plugins): drop stale tlon tool contract · openclaw/openclaw@d70dc4b fix(installer): prefer tar for portable Node extraction · openclaw/openclaw@a54a881 fix(codex): deliver native subagent completions feat: add context-engine host capability requirements (#84994) · openclaw/openclaw@cff5244 fix(release): keep shrinkwrap pinned to pnpm lock · openclaw/openclaw@9d24fde fix: surface plan updates as status notices · openclaw/openclaw@dc04503 test(google): narrow web search fake timers · openclaw/openclaw@fe7d13c fix(installer): extract portable Node with ZipFile · openclaw/openclaw@ffa6cd8 fix(gateway): defer provider auth prewarm after startup (#85369) · openclaw/openclaw@69255f8 fix(talk): stabilize realtime voice consults · openclaw/openclaw@683ad75 test(qa): tolerate slow gateway rpc startup · openclaw/openclaw@29118a0 chore(diagnostics): refresh plugin sdk baseline · openclaw/openclaw@ab684f5 fix(diagnostics): surface async queue drops fix(diagnostics): bound diagnostic buffers · openclaw/openclaw@bdcaac0 fix(installer): copy portable Node into place · openclaw/openclaw@c21ca88 fix(cli): recover replaced device approvals (#85342) · openclaw/openclaw@6ea907c test(release): align prerelease validation · openclaw/openclaw@0def3e2 fix(installer): install portable Node directory atomically · openclaw/openclaw@2890b1a fix(runtime-llm): avoid duplicate provider prefix in allowlist diagno… · openclaw/openclaw@937a756 fix(gateway): include openclaw bin in service PATH (#84475) · openclaw/openclaw@66d1d13 fix(gateway): handle concurrent launchd bootstrap restart race (#84722) · openclaw/openclaw@ba86716 feat: support pi and opencode autoreview engines · openclaw/openclaw@31a189d ci(package): gate acceptance on package integrity · openclaw/openclaw@5275929 ci(release): bypass pnpm for tsdown package build · openclaw/openclaw@fea89cd test(release): align prerelease validation baselines · openclaw/openclaw@04ebdc6 ci(release): harden docker package build · openclaw/openclaw@7b1fbe1 fix(codex): skip native web search transcript mirroring (#85346) · openclaw/openclaw@c3531fc fix(gateway): harden launchd reload handoff race recovery (#84641) · openclaw/openclaw@fc7a531 fix: honor per-model provider transport overrides (#80488) fix(skills): type watcher mock calls in dedupe regression tests · openclaw/openclaw@bb73f0a fix(skills): dedupe shared-directory watchers across agent workspaces… · openclaw/openclaw@3e94290 fix(skills): document watcher edge cases, add teardown/rebuild tests,… · openclaw/openclaw@19ff77e fix(infra): allow macos browser open over ssh env (#85340) · openclaw/openclaw@47d66fe fix(update): preserve package service state during cutover (#83026) · openclaw/openclaw@a15797a fix(gateway): broadcast agent-run error payloads (#85355) · openclaw/openclaw@07e61fc test(e2e): avoid synthetic channel config in plugin smoke fix(cli): suppress systemd hints for live gateway (#85336) · openclaw/openclaw@a00c583 fix(cli): honor agent for model auth logout (#85326) · openclaw/openclaw@fc47c1f fix(gateway): eager-load lifecycle runtime to survive in-place upgrad… · openclaw/openclaw@4a91385 fix(doctor): point codex asset warning at migrate plan (#85324) fix(update): harden managed handoff cwd (#83875) · openclaw/openclaw@1bafc23 docs(release): prepare 2026.5.21 notes ci(crabbox): harden docker hydration refactor(crabbox): parse provider list from binary help instead of ha… test(plugins): keep rpc source walk on source call gateway test(plugins): add kitchen sink rpc docker lane · openclaw/openclaw@6f6da5f test(plugins): run kitchen sink rpc lane without tsx test(qa-lab): add bus tool trace scenario · openclaw/openclaw@2b39613 fix(cron): classify network retry errors (#85344) fix(installer): bootstrap portable Windows Node · openclaw/openclaw@3551e98
Let binding commands escape plugin routes · openclaw/openclaw@af12082
TurboTheTurt · 2026-05-23 · via Recent Commits to openclaw:main

@@ -13,6 +13,7 @@ import type {

1313

AcpRuntimeHandle,

1414

AcpRuntimeTurnInput,

1515

} from "../../plugin-sdk/acp-runtime.js";

16+

import { clearPluginCommands, registerPluginCommand } from "../../plugins/commands.js";

1617

import type {

1718

PluginHookBeforeDispatchResult,

1819

PluginHookReplyDispatchResult,

@@ -791,6 +792,7 @@ async function dispatchTwiceWithFreshDispatchers(params: Omit<DispatchReplyArgs,

791792

describe("dispatchReplyFromConfig", () => {

792793

beforeEach(() => {

793794

clearAgentHarnesses();

795+

clearPluginCommands();

794796

const discordTestPlugin = {

795797

...createChannelTestPluginBase({

796798

id: "discord",

@@ -3881,6 +3883,217 @@ describe("dispatchReplyFromConfig", () => {

38813883

expect(replyResolver).not.toHaveBeenCalled();

38823884

});

388338853886+

it("lets authorized plugin-owned binding commands fall through to command processing", async () => {

3887+

setNoAbort();

3888+

expect(

3889+

registerPluginCommand(

3890+

"codex",

3891+

{

3892+

name: "codex",

3893+

description: "Control Codex app-server bindings",

3894+

acceptsArgs: true,

3895+

requireAuth: true,

3896+

handler: vi.fn(async () => ({ continueAgent: true })),

3897+

},

3898+

{ allowReservedCommandNames: true },

3899+

),

3900+

).toEqual({ ok: true });

3901+

hookMocks.runner.hasHooks.mockImplementation(

3902+

((hookName?: string) =>

3903+

hookName === "inbound_claim" || hookName === "message_received") as () => boolean,

3904+

);

3905+

hookMocks.registry.plugins = [{ id: "openclaw-codex-app-server", status: "loaded" }];

3906+

hookMocks.runner.runInboundClaimForPluginOutcome.mockResolvedValue({

3907+

status: "handled",

3908+

result: { handled: true },

3909+

});

3910+

sessionBindingMocks.resolveByConversation.mockReturnValue({

3911+

bindingId: "binding-command-escape-1",

3912+

targetSessionKey: "plugin-binding:codex:abc123",

3913+

targetKind: "session",

3914+

conversation: {

3915+

channel: "discord",

3916+

accountId: "default",

3917+

conversationId: "channel:1481858418548412579",

3918+

},

3919+

status: "active",

3920+

boundAt: 1710000000000,

3921+

metadata: {

3922+

pluginBindingOwner: "plugin",

3923+

pluginId: "openclaw-codex-app-server",

3924+

pluginRoot: "/Users/huntharo/github/openclaw-app-server",

3925+

detachHint: "/codex detach",

3926+

data: {

3927+

kind: "codex-app-server-session",

3928+

version: 1,

3929+

sessionFile: "/tmp/session.jsonl",

3930+

workspaceDir: "/workspace/openclaw",

3931+

},

3932+

},

3933+

} satisfies SessionBindingRecord);

3934+

const cfg = emptyConfig;

3935+

const dispatcher = createDispatcher();

3936+

const ctx = buildTestCtx({

3937+

Provider: "discord",

3938+

Surface: "discord",

3939+

OriginatingChannel: "discord",

3940+

OriginatingTo: "discord:channel:1481858418548412579",

3941+

To: "discord:channel:1481858418548412579",

3942+

AccountId: "default",

3943+

SenderId: "user-9",

3944+

SenderUsername: "ada",

3945+

CommandSource: "text",

3946+

CommandAuthorized: true,

3947+

WasMentioned: false,

3948+

CommandBody: "/codex detach",

3949+

RawBody: "/codex detach",

3950+

Body: "/codex detach",

3951+

MessageSid: "msg-claim-plugin-command-escape",

3952+

SessionKey: "agent:main:discord:channel:1481858418548412579",

3953+

});

3954+

const replyResolver = vi.fn(async () => ({ text: "detached" }) satisfies ReplyPayload);

3955+3956+

const result = await dispatchReplyFromConfig({ ctx, cfg, dispatcher, replyResolver });

3957+3958+

expect(result).toEqual({ queuedFinal: true, counts: { tool: 0, block: 0, final: 0 } });

3959+

expect(sessionBindingMocks.touch).toHaveBeenCalledWith("binding-command-escape-1");

3960+

expect(hookMocks.runner.runInboundClaimForPluginOutcome).not.toHaveBeenCalled();

3961+

expect(hookMocks.runner.runInboundClaim).not.toHaveBeenCalled();

3962+

expect(replyResolver).toHaveBeenCalledTimes(1);

3963+

expect(firstFinalReplyPayload(dispatcher)?.text).toBe("detached");

3964+

});

3965+3966+

it("keeps authorized unknown slash text in a plugin-owned binding routed to the bound plugin", async () => {

3967+

setNoAbort();

3968+

hookMocks.runner.hasHooks.mockImplementation(

3969+

((hookName?: string) =>

3970+

hookName === "inbound_claim" || hookName === "message_received") as () => boolean,

3971+

);

3972+

hookMocks.registry.plugins = [{ id: "openclaw-codex-app-server", status: "loaded" }];

3973+

hookMocks.runner.runInboundClaimForPluginOutcome.mockResolvedValue({

3974+

status: "handled",

3975+

result: { handled: true },

3976+

});

3977+

sessionBindingMocks.resolveByConversation.mockReturnValue({

3978+

bindingId: "binding-command-unknown-slash",

3979+

targetSessionKey: "plugin-binding:codex:abc123",

3980+

targetKind: "session",

3981+

conversation: {

3982+

channel: "discord",

3983+

accountId: "default",

3984+

conversationId: "channel:1481858418548412579",

3985+

},

3986+

status: "active",

3987+

boundAt: 1710000000000,

3988+

metadata: {

3989+

pluginBindingOwner: "plugin",

3990+

pluginId: "openclaw-codex-app-server",

3991+

pluginRoot: "/Users/huntharo/github/openclaw-app-server",

3992+

},

3993+

} satisfies SessionBindingRecord);

3994+

const cfg = emptyConfig;

3995+

const dispatcher = createDispatcher();

3996+

const ctx = buildTestCtx({

3997+

Provider: "discord",

3998+

Surface: "discord",

3999+

OriginatingChannel: "discord",

4000+

OriginatingTo: "discord:channel:1481858418548412579",

4001+

To: "discord:channel:1481858418548412579",

4002+

AccountId: "default",

4003+

SenderId: "user-9",

4004+

SenderUsername: "ada",

4005+

CommandSource: "text",

4006+

CommandAuthorized: true,

4007+

WasMentioned: false,

4008+

CommandBody: "/notes keep this with the bound plugin",

4009+

RawBody: "/notes keep this with the bound plugin",

4010+

Body: "/notes keep this with the bound plugin",

4011+

MessageSid: "msg-claim-plugin-command-unknown-slash",

4012+

SessionKey: "agent:main:discord:channel:1481858418548412579",

4013+

});

4014+

const replyResolver = vi.fn(async () => ({ text: "should not run" }) satisfies ReplyPayload);

4015+4016+

const result = await dispatchReplyFromConfig({ ctx, cfg, dispatcher, replyResolver });

4017+4018+

expect(result).toEqual({ queuedFinal: false, counts: { tool: 0, block: 0, final: 0 } });

4019+

expect(sessionBindingMocks.touch).toHaveBeenCalledWith("binding-command-unknown-slash");

4020+

expect(hookMocks.runner.runInboundClaimForPluginOutcome).toHaveBeenCalledWith(

4021+

"openclaw-codex-app-server",

4022+

expect.objectContaining({ content: "/notes keep this with the bound plugin" }),

4023+

expect.objectContaining({

4024+

pluginBinding: expect.objectContaining({ bindingId: "binding-command-unknown-slash" }),

4025+

}),

4026+

);

4027+

expect(hookMocks.runner.runInboundClaim).not.toHaveBeenCalled();

4028+

expect(replyResolver).not.toHaveBeenCalled();

4029+

});

4030+4031+

it("keeps unauthorized plugin-owned binding slash text routed to the bound plugin", async () => {

4032+

setNoAbort();

4033+

hookMocks.runner.hasHooks.mockImplementation(

4034+

((hookName?: string) =>

4035+

hookName === "inbound_claim" || hookName === "message_received") as () => boolean,

4036+

);

4037+

hookMocks.registry.plugins = [{ id: "openclaw-codex-app-server", status: "loaded" }];

4038+

hookMocks.runner.runInboundClaimForPluginOutcome.mockResolvedValue({

4039+

status: "handled",

4040+

result: { handled: true },

4041+

});

4042+

sessionBindingMocks.resolveByConversation.mockReturnValue({

4043+

bindingId: "binding-command-escape-denied",

4044+

targetSessionKey: "plugin-binding:codex:abc123",

4045+

targetKind: "session",

4046+

conversation: {

4047+

channel: "discord",

4048+

accountId: "default",

4049+

conversationId: "channel:1481858418548412579",

4050+

},

4051+

status: "active",

4052+

boundAt: 1710000000000,

4053+

metadata: {

4054+

pluginBindingOwner: "plugin",

4055+

pluginId: "openclaw-codex-app-server",

4056+

pluginRoot: "/Users/huntharo/github/openclaw-app-server",

4057+

detachHint: "/codex detach",

4058+

},

4059+

} satisfies SessionBindingRecord);

4060+

const cfg = emptyConfig;

4061+

const dispatcher = createDispatcher();

4062+

const ctx = buildTestCtx({

4063+

Provider: "discord",

4064+

Surface: "discord",

4065+

OriginatingChannel: "discord",

4066+

OriginatingTo: "discord:channel:1481858418548412579",

4067+

To: "discord:channel:1481858418548412579",

4068+

AccountId: "default",

4069+

SenderId: "user-9",

4070+

SenderUsername: "ada",

4071+

CommandSource: "text",

4072+

CommandAuthorized: false,

4073+

WasMentioned: false,

4074+

CommandBody: "/codex detach",

4075+

RawBody: "/codex detach",

4076+

Body: "/codex detach",

4077+

MessageSid: "msg-claim-plugin-command-denied",

4078+

SessionKey: "agent:main:discord:channel:1481858418548412579",

4079+

});

4080+

const replyResolver = vi.fn(async () => ({ text: "should not run" }) satisfies ReplyPayload);

4081+4082+

const result = await dispatchReplyFromConfig({ ctx, cfg, dispatcher, replyResolver });

4083+4084+

expect(result).toEqual({ queuedFinal: false, counts: { tool: 0, block: 0, final: 0 } });

4085+

expect(sessionBindingMocks.touch).toHaveBeenCalledWith("binding-command-escape-denied");

4086+

expect(hookMocks.runner.runInboundClaimForPluginOutcome).toHaveBeenCalledWith(

4087+

"openclaw-codex-app-server",

4088+

expect.objectContaining({ content: "/codex detach" }),

4089+

expect.objectContaining({

4090+

pluginBinding: expect.objectContaining({ bindingId: "binding-command-escape-denied" }),

4091+

}),

4092+

);

4093+

expect(hookMocks.runner.runInboundClaim).not.toHaveBeenCalled();

4094+

expect(replyResolver).not.toHaveBeenCalled();

4095+

});

4096+38844097

it("delivers plugin-owned binding replies returned by the owning inbound claim hook", async () => {

38854098

setNoAbort();

38864099

hookMocks.runner.hasHooks.mockImplementation(