vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-05 19:40:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(gateway): preserve async hook ingress provenance

Browse Source
This commit is contained in:
Peter Steinberger
2026-03-22 22:21:49 -07:00
parent c5a941a506
commit ea579ef858
9 changed files with 174 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
src/security/external-content.ts
View File

@@ -91,6 +91,10 @@ export type ExternalContentSource =
| "web_fetch"
| "unknown";
// Hook-origin async runs need immutable ingress provenance because routed
// session keys can be normalized outside the hook:* namespace.
export type HookExternalContentSource = "gmail" | "webhook";
const EXTERNAL_SOURCE_LABELS: Record<ExternalContentSource, string> = {
email: "Email",
webhook: "Webhook",
@@ -102,6 +106,25 @@ const EXTERNAL_SOURCE_LABELS: Record<ExternalContentSource, string> = {
unknown: "External",
};
export function resolveHookExternalContentSource(
sessionKey: string,
): HookExternalContentSource | undefined {
const normalized = sessionKey.trim().toLowerCase();
if (normalized.startsWith("hook:gmail:")) {
return "gmail";
}
if (normalized.startsWith("hook:webhook:") || normalized.startsWith("hook:")) {
return "webhook";
}
return undefined;
}
export function mapHookExternalContentSource(
source: HookExternalContentSource,
): Extract<ExternalContentSource, "email" | "webhook"> {
return source === "gmail" ? "email" : "webhook";
}
const FULLWIDTH_ASCII_OFFSET = 0xfee0;
// Map of Unicode angle bracket homoglyphs to their ASCII equivalents.
@@ -315,29 +338,15 @@ export function buildSafeExternalPrompt(params: {
* Checks if a session key indicates an external hook source.
*/
export function isExternalHookSession(sessionKey: string): boolean {
const normalized = sessionKey.trim().toLowerCase();
return (
normalized.startsWith("hook:gmail:") ||
normalized.startsWith("hook:webhook:") ||
normalized.startsWith("hook:") // Generic hook prefix
);
return resolveHookExternalContentSource(sessionKey) !== undefined;
}
/**
* Extracts the hook type from a session key.
*/
export function getHookType(sessionKey: string): ExternalContentSource {
const normalized = sessionKey.trim().toLowerCase();
if (normalized.startsWith("hook:gmail:")) {
return "email";
}
if (normalized.startsWith("hook:webhook:")) {
return "webhook";
}
if (normalized.startsWith("hook:")) {
return "webhook";
}
return "unknown";
const source = resolveHookExternalContentSource(sessionKey);
return source ? mapHookExternalContentSource(source) : "unknown";
}
/**