惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Y
Y Combinator Blog
腾讯CDC
Recent Announcements
Recent Announcements
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Hugging Face - Blog
Hugging Face - Blog
H
Help Net Security
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Last Week in AI
Last Week in AI
博客园_首页
D
DataBreaches.Net
P
Proofpoint News Feed
云风的 BLOG
云风的 BLOG
V
Visual Studio Blog
月光博客
月光博客
Jina AI
Jina AI
Stack Overflow Blog
Stack Overflow Blog
酷 壳 – CoolShell
酷 壳 – CoolShell
博客园 - 【当耐特】
Vercel News
Vercel News
WordPress大学
WordPress大学
J
Java Code Geeks
博客园 - 聂微东
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
U
Unit 42

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
feat(codex): add auto plugin approvals (#92625) · opencla...
kevinslin · 2026-06-15 · via Recent Commits to openclaw:main

@@ -859,25 +859,104 @@ allowed_sandbox_modes = ["read-only", "workspace-write"]

859859

configured: true,

860860

enabled: true,

861861

allowDestructiveActions: false,

862+

destructiveApprovalMode: "deny",

862863

pluginPolicies: [

863864

{

864865

configKey: "google-calendar",

865866

marketplaceName: "openai-curated",

866867

pluginName: "google-calendar",

867868

enabled: true,

868869

allowDestructiveActions: true,

870+

destructiveApprovalMode: "allow",

869871

},

870872

{

871873

configKey: "slack",

872874

marketplaceName: "openai-curated",

873875

pluginName: "slack",

874876

enabled: false,

875877

allowDestructiveActions: false,

878+

destructiveApprovalMode: "deny",

876879

},

877880

],

878881

});

879882

});

880883884+

it("parses auto native Codex plugin destructive policy", () => {

885+

const config = readCodexPluginConfig({

886+

codexPlugins: {

887+

enabled: true,

888+

allow_destructive_actions: "auto",

889+

plugins: {

890+

"google-calendar": {

891+

marketplaceName: "openai-curated",

892+

pluginName: "google-calendar",

893+

},

894+

slack: {

895+

marketplaceName: "openai-curated",

896+

pluginName: "slack",

897+

allow_destructive_actions: false,

898+

},

899+

gmail: {

900+

marketplaceName: "openai-curated",

901+

pluginName: "gmail",

902+

allow_destructive_actions: true,

903+

},

904+

},

905+

},

906+

});

907+908+

expect(config.codexPlugins?.allow_destructive_actions).toBe("auto");

909+

expect(resolveCodexPluginsPolicy(config)).toEqual({

910+

configured: true,

911+

enabled: true,

912+

allowDestructiveActions: true,

913+

destructiveApprovalMode: "auto",

914+

pluginPolicies: [

915+

{

916+

configKey: "gmail",

917+

marketplaceName: "openai-curated",

918+

pluginName: "gmail",

919+

enabled: true,

920+

allowDestructiveActions: true,

921+

destructiveApprovalMode: "allow",

922+

},

923+

{

924+

configKey: "google-calendar",

925+

marketplaceName: "openai-curated",

926+

pluginName: "google-calendar",

927+

enabled: true,

928+

allowDestructiveActions: true,

929+

destructiveApprovalMode: "auto",

930+

},

931+

{

932+

configKey: "slack",

933+

marketplaceName: "openai-curated",

934+

pluginName: "slack",

935+

enabled: true,

936+

allowDestructiveActions: false,

937+

destructiveApprovalMode: "deny",

938+

},

939+

],

940+

});

941+

});

942+943+

it("rejects unsupported native Codex plugin destructive policy strings", () => {

944+

const config = readCodexPluginConfig({

945+

codexPlugins: {

946+

enabled: true,

947+

allow_destructive_actions: "ask",

948+

plugins: {

949+

slack: {

950+

marketplaceName: "openai-curated",

951+

pluginName: "slack",

952+

},

953+

},

954+

},

955+

});

956+957+

expect(config.codexPlugins).toBeUndefined();

958+

});

959+881960

it("defaults native Codex plugin destructive policy to enabled", () => {

882961

const policy = resolveCodexPluginsPolicy({

883962

codexPlugins: {

@@ -895,13 +974,15 @@ allowed_sandbox_modes = ["read-only", "workspace-write"]

895974

configured: true,

896975

enabled: true,

897976

allowDestructiveActions: true,

977+

destructiveApprovalMode: "allow",

898978

pluginPolicies: [

899979

{

900980

configKey: "slack",

901981

marketplaceName: "openai-curated",

902982

pluginName: "slack",

903983

enabled: true,

904984

allowDestructiveActions: true,

985+

destructiveApprovalMode: "allow",

905986

},

906987

],

907988

});