mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-08 05:51:24 +00:00
fix(agents): harden bash tool and reply directive handling
This commit is contained in:
@@ -278,6 +278,18 @@ export function createProcessTool(
|
||||
});
|
||||
};
|
||||
|
||||
const runningSessionResult = (
|
||||
session: ProcessSession,
|
||||
text: string,
|
||||
): AgentToolResult<unknown> => ({
|
||||
content: [{ type: "text", text }],
|
||||
details: {
|
||||
status: "running",
|
||||
sessionId: params.sessionId,
|
||||
name: deriveSessionName(session.command),
|
||||
},
|
||||
});
|
||||
|
||||
switch (params.action) {
|
||||
case "poll": {
|
||||
if (!scopedSession) {
|
||||
@@ -452,21 +464,12 @@ export function createProcessTool(
|
||||
if (params.eof) {
|
||||
resolved.stdin.end();
|
||||
}
|
||||
return {
|
||||
content: [
|
||||
{
|
||||
type: "text",
|
||||
text: `Wrote ${(params.data ?? "").length} bytes to session ${params.sessionId}${
|
||||
params.eof ? " (stdin closed)" : ""
|
||||
}.`,
|
||||
},
|
||||
],
|
||||
details: {
|
||||
status: "running",
|
||||
sessionId: params.sessionId,
|
||||
name: deriveSessionName(resolved.session.command),
|
||||
},
|
||||
};
|
||||
return runningSessionResult(
|
||||
resolved.session,
|
||||
`Wrote ${(params.data ?? "").length} bytes to session ${params.sessionId}${
|
||||
params.eof ? " (stdin closed)" : ""
|
||||
}.`,
|
||||
);
|
||||
}
|
||||
|
||||
case "send-keys": {
|
||||
@@ -491,21 +494,11 @@ export function createProcessTool(
|
||||
};
|
||||
}
|
||||
await writeToStdin(resolved.stdin, data);
|
||||
return {
|
||||
content: [
|
||||
{
|
||||
type: "text",
|
||||
text:
|
||||
`Sent ${data.length} bytes to session ${params.sessionId}.` +
|
||||
(warnings.length ? `\nWarnings:\n- ${warnings.join("\n- ")}` : ""),
|
||||
},
|
||||
],
|
||||
details: {
|
||||
status: "running",
|
||||
sessionId: params.sessionId,
|
||||
name: deriveSessionName(resolved.session.command),
|
||||
},
|
||||
};
|
||||
return runningSessionResult(
|
||||
resolved.session,
|
||||
`Sent ${data.length} bytes to session ${params.sessionId}.` +
|
||||
(warnings.length ? `\nWarnings:\n- ${warnings.join("\n- ")}` : ""),
|
||||
);
|
||||
}
|
||||
|
||||
case "submit": {
|
||||
@@ -514,19 +507,10 @@ export function createProcessTool(
|
||||
return resolved.result;
|
||||
}
|
||||
await writeToStdin(resolved.stdin, "\r");
|
||||
return {
|
||||
content: [
|
||||
{
|
||||
type: "text",
|
||||
text: `Submitted session ${params.sessionId} (sent CR).`,
|
||||
},
|
||||
],
|
||||
details: {
|
||||
status: "running",
|
||||
sessionId: params.sessionId,
|
||||
name: deriveSessionName(resolved.session.command),
|
||||
},
|
||||
};
|
||||
return runningSessionResult(
|
||||
resolved.session,
|
||||
`Submitted session ${params.sessionId} (sent CR).`,
|
||||
);
|
||||
}
|
||||
|
||||
case "paste": {
|
||||
@@ -547,19 +531,10 @@ export function createProcessTool(
|
||||
};
|
||||
}
|
||||
await writeToStdin(resolved.stdin, payload);
|
||||
return {
|
||||
content: [
|
||||
{
|
||||
type: "text",
|
||||
text: `Pasted ${params.text?.length ?? 0} chars to session ${params.sessionId}.`,
|
||||
},
|
||||
],
|
||||
details: {
|
||||
status: "running",
|
||||
sessionId: params.sessionId,
|
||||
name: deriveSessionName(resolved.session.command),
|
||||
},
|
||||
};
|
||||
return runningSessionResult(
|
||||
resolved.session,
|
||||
`Pasted ${params.text?.length ?? 0} chars to session ${params.sessionId}.`,
|
||||
);
|
||||
}
|
||||
|
||||
case "kill": {
|
||||
|
||||
@@ -6,6 +6,19 @@ import {
|
||||
repairToolUseResultPairing,
|
||||
} from "./session-transcript-repair.js";
|
||||
|
||||
const TOOL_CALL_BLOCK_TYPES = new Set(["toolCall", "toolUse", "functionCall"]);
|
||||
|
||||
function getAssistantToolCallBlocks(messages: AgentMessage[]) {
|
||||
const assistant = messages[0] as Extract<AgentMessage, { role: "assistant" }> | undefined;
|
||||
if (!assistant || !Array.isArray(assistant.content)) {
|
||||
return [] as Array<{ type?: unknown; id?: unknown; name?: unknown }>;
|
||||
}
|
||||
return assistant.content.filter((block) => {
|
||||
const type = (block as { type?: unknown }).type;
|
||||
return typeof type === "string" && TOOL_CALL_BLOCK_TYPES.has(type);
|
||||
}) as Array<{ type?: unknown; id?: unknown; name?: unknown }>;
|
||||
}
|
||||
|
||||
describe("sanitizeToolUseResultPairing", () => {
|
||||
const buildDuplicateToolResultInput = (opts?: {
|
||||
middleMessage?: unknown;
|
||||
@@ -229,13 +242,7 @@ describe("sanitizeToolCallInputs", () => {
|
||||
] as unknown as AgentMessage[];
|
||||
|
||||
const out = sanitizeToolCallInputs(input);
|
||||
const assistant = out[0] as Extract<AgentMessage, { role: "assistant" }>;
|
||||
const toolCalls = Array.isArray(assistant.content)
|
||||
? assistant.content.filter((block) => {
|
||||
const type = (block as { type?: unknown }).type;
|
||||
return typeof type === "string" && ["toolCall", "toolUse", "functionCall"].includes(type);
|
||||
})
|
||||
: [];
|
||||
const toolCalls = getAssistantToolCallBlocks(out);
|
||||
|
||||
expect(toolCalls).toHaveLength(1);
|
||||
expect((toolCalls[0] as { id?: unknown }).id).toBe("call_ok");
|
||||
@@ -264,13 +271,7 @@ describe("sanitizeToolCallInputs", () => {
|
||||
] as unknown as AgentMessage[];
|
||||
|
||||
const out = sanitizeToolCallInputs(input);
|
||||
const assistant = out[0] as Extract<AgentMessage, { role: "assistant" }>;
|
||||
const toolCalls = Array.isArray(assistant.content)
|
||||
? assistant.content.filter((block) => {
|
||||
const type = (block as { type?: unknown }).type;
|
||||
return typeof type === "string" && ["toolCall", "toolUse", "functionCall"].includes(type);
|
||||
})
|
||||
: [];
|
||||
const toolCalls = getAssistantToolCallBlocks(out);
|
||||
|
||||
expect(toolCalls).toHaveLength(1);
|
||||
expect((toolCalls[0] as { name?: unknown }).name).toBe("read");
|
||||
@@ -288,13 +289,7 @@ describe("sanitizeToolCallInputs", () => {
|
||||
] as unknown as AgentMessage[];
|
||||
|
||||
const out = sanitizeToolCallInputs(input, { allowedToolNames: ["read"] });
|
||||
const assistant = out[0] as Extract<AgentMessage, { role: "assistant" }>;
|
||||
const toolCalls = Array.isArray(assistant.content)
|
||||
? assistant.content.filter((block) => {
|
||||
const type = (block as { type?: unknown }).type;
|
||||
return typeof type === "string" && ["toolCall", "toolUse", "functionCall"].includes(type);
|
||||
})
|
||||
: [];
|
||||
const toolCalls = getAssistantToolCallBlocks(out);
|
||||
|
||||
expect(toolCalls).toHaveLength(1);
|
||||
expect((toolCalls[0] as { name?: unknown }).name).toBe("read");
|
||||
|
||||
Reference in New Issue
Block a user