mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-27 12:56:01 -06:00
Peter Steinberger
473b4f19e3
* feat(approvals): mint scoped standing grants for cron allow-always
When an operator resolves allow-always for an approval raised by a cron
job's isolated run, the Gateway now mints a scoped standing grant in the
same SQLite transaction that resolves the approval, instead of writing an
unbounded command digest into the JSON allowlist. Subsequent occurrences
of that job execute the exact approved operation (command text, cwd, env
hash) without prompting while the grant revalidates against authoritative
rows: 30-day expiry, revocation, the cron job still existing with the same
config revision, and the minting approval row still holding allow-always
all fail closed back to the normal prompt. Non-cron allow-always behavior
is unchanged.
- New first-use lazy STRICT table operator_approval_standing_grants in the
shared state DB (declared canonically, no schema-version bump; older and
downgraded readers stay valid without it).
- The cron run owner records run -> {agent, job, config revision} in a
process-local registry at run start; exec.approval.request stamps the
cron source and exact operation binding onto the approval at creation,
so nothing is ever inferred from session keys or run ids.
- The gateway exec host consults grants only when policy would prompt;
ask=always, security=deny, mutable file operands, heredoc, strict
inline-eval, and audit-suppression approvals keep prompting. Grant use
updates last_used_at_ms/use_count and emits the exec approval security
event with the grant and minting approval as lineage.
- Abort-wins guard: a run with an abort tombstone never mints.
* feat(approvals): deliver cron exec approvals to approval clients and wait inline
The standing-grant mint path was unreachable end-to-end: #128031 made
cron approval requests register with delivery fully suppressed, so the
shared owner expired them as no-approval-route within milliseconds, and
even a delivered card would have died seconds later when the isolated
run finalized on the approval-pending handoff and authority-close
cancelled the parked approval.
Cron approval requests now carry deliverToApprovalClientsOnly: the
shared delivery owner broadcasts them to connected websocket approval
clients (Control UI, TUI) but skips internal chat approval runtimes,
forwarder/iOS delivery, and turn-source routes, so the per-occurrence
chat spam #128031 removed stays removed. With no approval client
connected, the request still expires no-route into the existing
headless denial. The gateway exec host additionally waits inline for
cron-triggered approvals (the same treatment native chat channels got
in #93918), keeping the isolated run and its delegated authority alive
for the full approval window; cron jobs are single-flight, so at most
one card per job is pending at a time and allow-always ends the
recurrence by minting the standing grant.
Live-proven on a hermetic gateway: card delivered with ~30-minute
window, run waited 72s for the operator click, allow-always executed
the occurrence and minted the grant with no JSON allowlist digest,
the next occurrence ran promptless (use_count 1, no new approval row),
and editing the job failed closed back to a fresh prompt.
* chore(protocol): regenerate Swift models for deliverToApprovalClientsOnly
* fix(approvals): consume standing grants at the spawn boundary; keep node cron headless
Review findings from ClawSweeper on #129526:
- Grant authority is now recorded only at the final effect. The consult
path validates without recording a use and returns a
revalidateBeforeExecution closure (the mutable-file-binding seam) that
consumes the grant immediately before runExecProcess; any invalidation
during awaited pre-spawn work (job edit/delete, revocation, parent
approval reversal) denies with next-step text instead of executing on
stale authority. Regression proves consult leaves use_count at 0 and a
reversed minting approval denies at the boundary.
- Cron approval-client delivery is scoped to host=gateway. Node-host cron
cannot mint or consume grants yet, so it keeps the fully suppressed
headless policy from #128031 instead of raising cards whose allow-always
could not stick; node-host grant support stays a named follow-up.
* test(agents): complete plugin-metadata-snapshot mock factories
Five explicit vi.mock factories for current-plugin-metadata-snapshot.js
exported only getCurrentPluginMetadataSnapshot. Under isolate:false shard
composition the incomplete mock can bleed into siblings that import the
real module — model-resolution-consistency.test.ts failed on CI with
'No withPluginMetadataSnapshotScope export is defined on the mock'.
Spread importOriginal so every binding prod touches stays exported, per
the repo mock-factory rule; only the snapshot getter stays overridden.
* chore: drop accidentally committed pinned swiftlint binary; ignore .build/
scripts/install-swift-tools.sh installs pinned Swift tools into
.build/swift-tools per the lint-swift.sh remediation hint; the 36MB
binary must never ride a commit. Remove it and ignore the directory.
* test(agents): shield model-resolution-consistency from leaked snapshot mocks
The agents-embedded shard still failed after completing five factories:
~20 more test files across the repo mock current-plugin-metadata-snapshot
with incomplete explicit factories, and under isolate:false composition
any of them can strip withPluginMetadataSnapshotScope from this file's
imports. Give the victim a file-local identity mock (importOriginal
spread) that always wins, and revert the static-catalog factory edit that
tipped that grandfathered file over the max-lines cap — the repo-wide
factory completion belongs to a dedicated sweep.
239 lines
5.4 KiB
Plaintext
239 lines
5.4 KiB
Plaintext
node_modules
|
|
**/node_modules/
|
|
.env
|
|
docker-compose.override.yml
|
|
docker-compose.extra.yml
|
|
docker-compose.sandbox.yml
|
|
dist
|
|
dist-runtime/
|
|
dist-sea/
|
|
pnpm-lock.yaml
|
|
bun.lock
|
|
bun.lockb
|
|
coverage
|
|
__openclaw_vitest__/
|
|
__pycache__/
|
|
*.pyc
|
|
*.tsbuildinfo
|
|
.pnpm-store
|
|
.worktrees/
|
|
.DS_Store
|
|
**/.DS_Store
|
|
ui/src/ui/__screenshots__/
|
|
ui/playwright-report/
|
|
ui/test-results/
|
|
packages/dashboard-next/.next/
|
|
packages/dashboard-next/out/
|
|
|
|
# Mise configuration files
|
|
mise.toml
|
|
|
|
# Android build artifacts
|
|
apps/android/.gradle/
|
|
apps/android/app/build/
|
|
apps/android/.cxx/
|
|
apps/android/.kotlin/
|
|
apps/android/benchmark/results/
|
|
|
|
# Bun build artifacts
|
|
*.bun-build
|
|
apps/macos/.build/
|
|
apps/macos-mlx-tts/.build/
|
|
apps/shared/MoltbotKit/.build/
|
|
apps/shared/OpenClawKit/.build/
|
|
apps/shared/*/.build/
|
|
packages/*/dist/
|
|
apps/shared/OpenClawKit/Package.resolved
|
|
# Xcode rewrites local-package Package.resolved with the iOS app supergraph on
|
|
# every resolve; swabble's only runtime dep is exact-pinned in Package.swift.
|
|
apps/swabble/Package.resolved
|
|
**/ModuleCache/
|
|
bin/
|
|
bin/clawdbot-mac
|
|
apps/macos/.build-local/
|
|
apps/macos/.swiftpm/
|
|
apps/shared/MoltbotKit/.swiftpm/
|
|
apps/shared/OpenClawKit/.swiftpm/
|
|
apps/shared/*/.swiftpm/
|
|
Core/
|
|
apps/ios/*.xcodeproj/
|
|
apps/ios/*.xcworkspace/
|
|
apps/ios/.swiftpm/
|
|
apps/ios/.derivedData/
|
|
apps/ios/.local-signing.xcconfig
|
|
vendor/
|
|
apps/ios/Clawdbot.xcodeproj/
|
|
apps/ios/Clawdbot.xcodeproj/**
|
|
apps/macos/.build/**
|
|
apps/macos-mlx-tts/.build/**
|
|
**/*.bun-build
|
|
apps/ios/*.xcfilelist
|
|
|
|
# Vendor build artifacts
|
|
vendor/a2ui/renderers/lit/dist/
|
|
src/canvas-host/a2ui/*.bundle.js
|
|
src/canvas-host/a2ui/*.map
|
|
extensions/canvas/src/host/a2ui/*.bundle.js
|
|
extensions/canvas/src/host/a2ui/*.map
|
|
.bundle.hash
|
|
|
|
# fastlane (iOS)
|
|
apps/ios/fastlane/README.md
|
|
apps/android/fastlane/README.md
|
|
apps/ios/fastlane/report.xml
|
|
apps/ios/fastlane/Preview.html
|
|
apps/ios/fastlane/screenshots/
|
|
apps/ios/fastlane/metadata/*/release_notes.txt
|
|
apps/ios/fastlane/test_output/
|
|
apps/ios/fastlane/logs/
|
|
apps/ios/fastlane/.env
|
|
apps/android/fastlane/report.xml
|
|
apps/android/fastlane/Preview.html
|
|
apps/android/fastlane/test_output/
|
|
apps/android/fastlane/logs/
|
|
apps/android/fastlane/.env
|
|
apps/android/fastlane/metadata/android/**/images/
|
|
|
|
# fastlane build artifacts (local)
|
|
apps/ios/*.ipa
|
|
apps/ios/*.dSYM.zip
|
|
|
|
# provisioning profiles (local)
|
|
apps/ios/*.mobileprovision
|
|
|
|
# Local untracked files
|
|
.local/
|
|
docs/.local/
|
|
docs/internal/
|
|
tmp/
|
|
IDENTITY.md
|
|
USER.md
|
|
# Keep packaged workspace templates visible to Git-aware remote syncs.
|
|
!docs/reference/templates/IDENTITY.md
|
|
!docs/reference/templates/USER.md
|
|
# Exception: oc-path real-world test fixtures need to be tracked even
|
|
# though the bare names match the local-untracked rule above.
|
|
!extensions/oc-path/src/oc-path/tests/fixtures/real/IDENTITY.md
|
|
!extensions/oc-path/src/oc-path/tests/fixtures/real/USER.md
|
|
*.tgz
|
|
*.tar.gz
|
|
*.zip
|
|
.idea
|
|
.vscode/
|
|
|
|
# local tooling
|
|
.antigravitycli/
|
|
.serena/
|
|
.crabbox/
|
|
/.openclaw/trajectory-exports/
|
|
|
|
# local QA evidence mirrors; CI publishes canonical Mantis files as Actions artifacts
|
|
/mantis/
|
|
|
|
# Keep repository skills visible to Git-aware syncs; local-only skill ignores
|
|
# belong in .git/info/exclude.
|
|
.agents/skills/**/*.orig
|
|
.agents/skills/**/__pycache__/
|
|
.agents/skills/**/*.py[cod]
|
|
|
|
# Agent credentials and memory (NEVER COMMIT)
|
|
/memory/
|
|
.agent/*.json
|
|
!.agent/workflows/
|
|
/local/
|
|
/client_secret_*.json
|
|
package-lock.json
|
|
!.github/release/clawhub-cli/package-lock.json
|
|
!src/commands/copilot-sdk-install-manifest/package-lock.json
|
|
.claude/*
|
|
# Track the shared Claude Code project config (worktree auto-install hook) and the
|
|
# skills symlink into .agents/skills; keep everything else under .claude/
|
|
# (worktrees, settings.local.json) ignored.
|
|
!.claude/settings.json
|
|
!.claude/skills
|
|
.agent/
|
|
skills-lock.json
|
|
|
|
# Local iOS signing overrides
|
|
apps/ios/LocalSigning.xcconfig
|
|
|
|
# Xcode build directories (xcodebuild output)
|
|
apps/ios/build/
|
|
apps/shared/OpenClawKit/build/
|
|
apps/swabble/build/
|
|
*.xcresult
|
|
*.trace
|
|
*.profraw
|
|
|
|
# Generated protocol schema (produced via pnpm protocol:gen)
|
|
dist/protocol.schema.json
|
|
packages/gateway-protocol/protocol.schema.json
|
|
.ant-colony/
|
|
|
|
# Eclipse
|
|
**/.project
|
|
**/.classpath
|
|
**/.settings/
|
|
**/.gradle/
|
|
|
|
# Synthing
|
|
**/.stfolder/
|
|
.dev-state
|
|
docs/superpowers
|
|
.superpowers/
|
|
test/config-form.analyze.telegram.test.ts
|
|
ui/src/ui/theme-variants.browser.test.ts
|
|
ui/src/ui/__screenshots__
|
|
ui/src/ui/views/__screenshots__
|
|
ui/.vitest-attachments
|
|
|
|
# Generated docs baseline artifacts (locally generated, only drift detectors tracked)
|
|
docs/.generated/*.json
|
|
!docs/.generated/config-baseline.counts.json
|
|
docs/.generated/*.jsonl
|
|
!docs/.generated/plugin-sdk-api-baseline/
|
|
!docs/.generated/plugin-sdk-api-baseline/*.json
|
|
|
|
# Deprecated changelog fragment workflow
|
|
changelog/fragments/
|
|
|
|
# Local scratch workspace
|
|
.tmp/
|
|
.cache/
|
|
.pytest_cache/
|
|
.ruff_cache/
|
|
.mypy_cache/
|
|
.vmux*
|
|
.artifacts/
|
|
.amp/portals/
|
|
.openclaw-config-doc-cache/
|
|
openclaw-path-alias-*/
|
|
/.pi/
|
|
/C:\\openclaw/
|
|
*.log
|
|
*.tmp
|
|
*.heapsnapshot
|
|
*.cpuprofile
|
|
*.prof
|
|
test/fixtures/openclaw-vitest-unit-report.json
|
|
analysis/
|
|
.artifacts/qa-e2e/
|
|
/runs/
|
|
/data/rtt.jsonl
|
|
extensions/qa-lab/web/dist/
|
|
|
|
# Generated bundled plugin runtime dependency manifests
|
|
extensions/**/.openclaw-runtime-deps.json
|
|
extensions/**/.openclaw-runtime-deps-stamp.json
|
|
extensions/diffs/assets/viewer-runtime.js
|
|
extensions/diffs-language-pack/assets/viewer-runtime.js
|
|
extensions/discord/assets/embedded-app-sdk.mjs
|
|
|
|
# Output dir for scripts/run-opengrep.sh (local opengrep scans)
|
|
/.opengrep-out/
|
|
/.crabbox-artifacts
|
|
.comux*
|
|
|
|
# Pinned Swift lint/format tools installed by scripts/install-swift-tools.sh
|
|
.build/
|