mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-17 08:31:35 +00:00
fbd330b7aa
* fix(channels): enforce configured read targets * test(channels): align policy checks with boundaries * fix: bind channel reads to trusted turn context * test: satisfy gateway lint * fix: narrow message action channel imports * fix(feishu): authorize message reads before provider access * fix(slack): await reaction clear authorization * fix(channels): align provider action contracts * fix(matrix): read direct-room account data before sync * fix(channels): reject unsupported attachment actions early * fix: restore trusted operator conversation reads * fix(matrix): authorize pin actions before provider reads * fix: preserve trusted channel read workflows * fix(discord): resolve current channel ids consistently * fix(agents): preserve message action turn capability * fix(plugins): enforce host-owned read provenance * fix(channels): harden Teams and Discord read policy * fix(channels): preserve exact-current action compatibility * fix(imessage): authorize trusted current chat aliases * fix(channels): preserve normalized current aliases * fix(channels): preserve external current target aliases * fix: reconcile channel policy with current main * fix(discord): isolate DM read policy * fix(channels): enforce provider read gates * fix(gateway): await serialized message action identity tokens * fix(ci): refresh channel protocol contracts
83 lines
3.2 KiB
TypeScript
83 lines
3.2 KiB
TypeScript
// Defines plugin tool metadata and filesystem policy types.
|
|
import type { ToolFsPolicy } from "../agents/tool-fs-policy.types.js";
|
|
import type { AnyAgentTool } from "../agents/tools/common.js";
|
|
import type { ConversationReadInvocationOrigin } from "../channels/plugins/conversation-read-origin.js";
|
|
import type { OpenClawConfig } from "../config/types.openclaw.js";
|
|
import type { HookEntry } from "../hooks/types.js";
|
|
import type { DeliveryContext } from "../utils/delivery-context.types.js";
|
|
|
|
export type OpenClawPluginActiveModelContext = {
|
|
provider?: string;
|
|
modelId?: string;
|
|
modelRef?: string;
|
|
};
|
|
|
|
/** Trusted execution context passed to plugin-owned agent tool factories. */
|
|
export type OpenClawPluginToolContext = {
|
|
config?: OpenClawConfig;
|
|
/** Active runtime-resolved config snapshot when one is available. */
|
|
runtimeConfig?: OpenClawConfig;
|
|
/** Returns the latest runtime-resolved config snapshot for long-lived tool definitions. */
|
|
getRuntimeConfig?: () => OpenClawConfig | undefined;
|
|
/** Effective filesystem policy for the active tool run. */
|
|
fsPolicy?: ToolFsPolicy;
|
|
workspaceDir?: string;
|
|
agentDir?: string;
|
|
agentId?: string;
|
|
sessionKey?: string;
|
|
/** Ephemeral session UUID - regenerated on /new and /reset. Use for per-conversation isolation. */
|
|
sessionId?: string;
|
|
/**
|
|
* Runtime-supplied active model metadata for informational use, diagnostics,
|
|
* and plugin-owned policy decisions. This is not a security boundary against
|
|
* the local operator, installed plugin code, or a modified OpenClaw runtime.
|
|
*/
|
|
activeModel?: OpenClawPluginActiveModelContext;
|
|
browser?: {
|
|
sandboxBridgeUrl?: string;
|
|
allowHostControl?: boolean;
|
|
};
|
|
messageChannel?: string;
|
|
agentAccountId?: string;
|
|
/** Trusted provider auth availability from the active auth profile store. */
|
|
hasAuthForProvider?: (providerId: string) => boolean;
|
|
/** Resolves an API key from the active auth profile store when available. */
|
|
resolveApiKeyForProvider?: (providerId: string) => Promise<string | undefined>;
|
|
/** Trusted ambient delivery route for the active agent/session. */
|
|
deliveryContext?: DeliveryContext;
|
|
/** Trusted platform-native conversation id for the active inbound turn. */
|
|
nativeChannelId?: string;
|
|
/** Trusted sender id from inbound context (runtime-provided, not tool args). */
|
|
requesterSenderId?: string;
|
|
/** Trusted owner bit from inbound context (runtime-provided, not tool args). */
|
|
senderIsOwner?: boolean;
|
|
/**
|
|
* Server-owned origin for this operation. Missing values are delegated.
|
|
* Plugins must use it only for conversation-read visibility policy.
|
|
*/
|
|
conversationReadOrigin?: ConversationReadInvocationOrigin;
|
|
sandboxed?: boolean;
|
|
/**
|
|
* True for explicit one-shot local CLI runs that must release plugin-owned
|
|
* process resources before the command exits.
|
|
*/
|
|
oneShotCliRun?: boolean;
|
|
};
|
|
|
|
export type OpenClawPluginToolFactory = (
|
|
ctx: OpenClawPluginToolContext,
|
|
) => AnyAgentTool | AnyAgentTool[] | null | undefined;
|
|
|
|
export type OpenClawPluginToolOptions = {
|
|
name?: string;
|
|
names?: string[];
|
|
optional?: boolean;
|
|
};
|
|
|
|
export type OpenClawPluginHookOptions = {
|
|
entry?: HookEntry;
|
|
name?: string;
|
|
description?: string;
|
|
register?: boolean;
|
|
};
|