github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-01 05:11:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

doctor: report immutable operator policy

Browse Source
This commit is contained in:
Vincent Koc
2026-03-06 01:14:30 -05:00
parent 120c686de4
commit 6c3b0cbea8
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
src/commands/doctor.ts
View File

@@ -106,6 +106,7 @@ export async function doctorCommand(
const sourceConfigValid = configResult.sourceConfigValid ?? true; const sourceConfigValid = configResult.sourceConfigValid ?? true;
const configPath = configResult.path ?? CONFIG_PATH; const configPath = configResult.path ?? CONFIG_PATH;
const configSnapshot = await readConfigFileSnapshot().catch(() => null);
if (!cfg.gateway?.mode) { if (!cfg.gateway?.mode) {
const lines = [ const lines = [
"gateway.mode is unset; gateway start will be blocked.", "gateway.mode is unset; gateway start will be blocked.",
@@ -191,6 +192,23 @@ export async function doctorCommand(
} }
await noteStateIntegrity(cfg, prompter, configResult.path ?? CONFIG_PATH); await noteStateIntegrity(cfg, prompter, configResult.path ?? CONFIG_PATH);
const operatorPolicy = configSnapshot?.policy;
if (operatorPolicy?.exists) {
const lines = operatorPolicy.valid
? [
`- Active: ${shortenHomePath(operatorPolicy.path)}`,
`- Locked paths: ${operatorPolicy.lockedPaths.length}`,
`- Config edits cannot weaken values enforced by this file.`,
]
: [
`- Invalid operator policy: ${shortenHomePath(operatorPolicy.path)}`,
...operatorPolicy.issues.map((issue) => {
const pathLabel = issue.path || "<root>";
return `- ${pathLabel}: ${issue.message}`;
}),
];
note(lines.join("\n"), "Operator policy");
}
await noteSessionLockHealth({ shouldRepair: prompter.shouldRepair }); await noteSessionLockHealth({ shouldRepair: prompter.shouldRepair });
cfg = await maybeRepairSandboxImages(cfg, runtime, prompter); cfg = await maybeRepairSandboxImages(cfg, runtime, prompter);