mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-15 23:24:03 -06:00
Peter Steinberger
c83dcc2bc0
* fix(security): bound external tool content at its canonical owner boundary * fix(plugin-sdk): document supported security boundary and restore facade parity
62 lines
1.6 KiB
TypeScript
62 lines
1.6 KiB
TypeScript
// Public package facade for security runtime helpers.
|
|
|
|
export {
|
|
appendRegularFile,
|
|
assertNoSymlinkParents,
|
|
assertNoSymlinkParentsSync,
|
|
buildChannelMetadata,
|
|
buildUntrustedChannelMetadata,
|
|
canonicalPathFromExistingAncestor,
|
|
compileSafeRegexDetailed,
|
|
ensurePortAvailable,
|
|
evaluateSupplementalContextVisibility,
|
|
expandAllowFromWithAccessGroups,
|
|
extractErrorCode,
|
|
filterSupplementalContextItems,
|
|
findExistingAncestor,
|
|
formatErrorMessage,
|
|
FsSafeError,
|
|
hasProxyEnvConfigured,
|
|
isPathInside,
|
|
isPrivateNetworkAllowedByPolicy,
|
|
matchesHostnameAllowlist,
|
|
movePathWithCopyFallback,
|
|
normalizeHostname,
|
|
openLocalFileSafely,
|
|
parseAccessGroupAllowFromEntry,
|
|
pathExists,
|
|
pathExistsSync,
|
|
pathScope,
|
|
privateFileStoreSync,
|
|
readRegularFile,
|
|
readRegularFileSync,
|
|
redactSensitiveText,
|
|
replaceFileAtomic,
|
|
resolveAbsolutePathForRead,
|
|
resolveAbsolutePathForWrite,
|
|
resolveExistingPathsWithinRoot,
|
|
resolveLocalPathFromRootsSync,
|
|
resolvePinnedHostnameWithPolicy,
|
|
resolvePinnedMainDmOwnerFromAllowlist,
|
|
resolvePreferredOpenClawTmpDir,
|
|
resolveStrictExistingPathsWithinRoot,
|
|
root,
|
|
safeEqualSecret,
|
|
sanitizeUntrustedFileName,
|
|
shouldIncludeSupplementalContext,
|
|
SsrFBlockedError,
|
|
statRegularFile,
|
|
statRegularFileSync,
|
|
truncateSanitizedExternalContent,
|
|
withTimeout,
|
|
wrapExternalContent,
|
|
wrapWebContent,
|
|
writeExternalFileWithinRoot,
|
|
} from "../../../src/plugin-sdk/security-runtime.js";
|
|
export type {
|
|
ContextVisibilityDecision,
|
|
LookupFn,
|
|
SafeRegexRejectReason,
|
|
SsrFPolicy,
|
|
} from "../../../src/plugin-sdk/security-runtime.js";
|