github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-07 23:01:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): harden toolsBySender sender-key matching

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-22 21:03:09 +01:00
parent 3461dda880
commit 5547a2275c
10 changed files with 324 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/agents/pi-tools-agent-config.test.ts
View File

@@ -379,7 +379,7 @@ describe("Agent-specific tool filtering", () => {
"*": {
tools: { allow: ["read"] },
toolsBySender: {
alice: { allow: ["read", "exec"] },
"id:alice": { allow: ["read", "exec"] },
},
},
},
@@ -417,7 +417,7 @@ describe("Agent-specific tool filtering", () => {
groups: {
"*": {
toolsBySender: {
admin: { allow: ["read", "exec"] },
"id:admin": { allow: ["read", "exec"] },
},
},
locked: {