github/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-08 15:28:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Agents: validate persisted tool-call names

Browse Source
This commit is contained in:
Vignesh Natarajan
2026-02-21 23:06:44 -08:00
parent 29a782b9cd
commit cdfe45eeb8
11 changed files with 248 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
src/agents/session-tool-result-guard.e2e.test.ts
View File

@@ -191,6 +191,43 @@ describe("installSessionToolResultGuard", () => {
expect(messages).toHaveLength(0);
});
it("drops malformed tool calls with invalid name tokens before persistence", () => {
const sm = SessionManager.inMemory();
installSessionToolResultGuard(sm);
sm.appendMessage(
asAppendMessage({
role: "assistant",
content: [
{
type: "toolCall",
id: "call_bad_name",
name: 'toolu_01mvznfebfuu <|tool_call_argument_begin|> {"command"',
arguments: {},
},
],
}),
);
expect(getPersistedMessages(sm)).toHaveLength(0);
});
it("drops tool calls not present in allowedToolNames", () => {
const sm = SessionManager.inMemory();
installSessionToolResultGuard(sm, {
allowedToolNames: ["read"],
});
sm.appendMessage(
asAppendMessage({
role: "assistant",
content: [{ type: "toolCall", id: "call_1", name: "write", arguments: {} }],
}),
);
expect(getPersistedMessages(sm)).toHaveLength(0);
});
it("flushes pending tool results when a sanitized assistant message is dropped", () => {
const sm = SessionManager.inMemory();
installSessionToolResultGuard(sm);