ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-28 05:16:23 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix: clarify unstored exec approval defaults (#114417)

Browse Source
This commit is contained in:
Dallin Romney
2026-07-27 16:07:11 +08:00
committed by GitHub
parent 669db2968f
commit ec391edea7
4 changed files with 46 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/cli/exec-approvals-cli.ts
+7 -4
View File
@@ -757,7 +757,7 @@ function buildEffectivePolicyReport(params: {
scopes: [],
note: params.nativePolicy
? "This node enforces a host-native exec policy; OpenClaw approvals-file policy math does not apply."
: "Approvals file unavailable.",
: "Host approvals policy unavailable.",
};
}
if (params.source === "node") {
@@ -784,7 +784,7 @@ function buildEffectivePolicyReport(params: {
hostDefaultSource: "node-reported resolved defaults",
}),
note:
"Effective exec policy is the node host approvals file intersected with gateway tools.exec policy. " +
"Effective exec policy is the node host approvals policy intersected with gateway tools.exec policy. " +
SESSION_EXEC_OVERRIDES_NOTE,
};
}
@@ -801,7 +801,7 @@ function buildEffectivePolicyReport(params: {
hostPath: params.hostPath,
}),
note:
"Effective exec policy is the host approvals file intersected with requested tools.exec policy. " +
"Effective exec policy is the host approvals policy intersected with requested tools.exec policy. " +
SESSION_EXEC_OVERRIDES_NOTE,
};
}
@@ -887,7 +887,10 @@ function renderApprovalsSnapshot(snapshot: ExecApprovalsSnapshot, targetLabel: s
const summaryRows = [
{ Field: "Target", Value: targetLabel },
{ Field: "Path", Value: snapshot.path },
{ Field: "Exists", Value: snapshot.exists ? "yes" : "no" },
{
Field: "State",
Value: snapshot.exists ? "stored" : "defaults (no stored overrides)",
},
{ Field: "Hash", Value: snapshot.hash },
{ Field: "Version", Value: String(file.version ?? 1) },
{ Field: "Socket", Value: file.socket?.path ?? "default" },