LLM/moltbot
1
0
Fork 0
mirror of https://github.com/moltbot/moltbot.git synced 2026-04-27 00:17:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(doctor): warn that approvals.exec.enabled only disables forwarding

Browse Source 
Co-authored-by: nomadonwheels196 <nomadonwheels196@users.noreply.github.com>
This commit is contained in:
Peter Steinberger
2026-02-22 23:32:35 +01:00
parent a30f9c8673
commit 3b0e62d5bf
3 changed files with 24 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
src/commands/doctor-security.test.ts
View File

@@ -104,4 +104,19 @@ describe("noteSecurityWarnings gateway exposure", () => {
const message = lastMessage();
expect(message).toContain('config set session.dmScope "per-channel-peer"');
});
it("clarifies approvals.exec forwarding-only behavior", async () => {
const cfg = {
approvals: {
exec: {
enabled: false,
},
},
} as OpenClawConfig;
await noteSecurityWarnings(cfg);
const message = lastMessage();
expect(message).toContain("disables approval forwarding only");
expect(message).toContain("exec-approvals.json");
expect(message).toContain("openclaw approvals get --gateway");
});
});

8
src/commands/doctor-security.ts
View File

@@ -12,6 +12,14 @@ export async function noteSecurityWarnings(cfg: OpenClawConfig) {
const warnings: string[] = [];
const auditHint = `- Run: ${formatCliCommand("openclaw security audit --deep")}`;
if (cfg.approvals?.exec?.enabled === false) {
warnings.push(
"- Note: approvals.exec.enabled=false disables approval forwarding only.",
" Host exec gating still comes from ~/.openclaw/exec-approvals.json.",
` Check local policy with: ${formatCliCommand("openclaw approvals get --gateway")}`,
);
}
// ===========================================
// GATEWAY NETWORK EXPOSURE CHECK
// ===========================================