{"id":283,"date":"2026-03-21T22:47:26","date_gmt":"2026-03-21T14:47:26","guid":{"rendered":"https:\/\/pa.yingzhi8.cn\/index.php\/2026\/03\/21\/tools-exec-approvals\/"},"modified":"2026-03-21T23:08:54","modified_gmt":"2026-03-21T15:08:54","slug":"tools-exec-approvals","status":"publish","type":"post","link":"https:\/\/pa.yingzhi8.cn\/index.php\/2026\/03\/21\/tools-exec-approvals\/","title":{"rendered":"\u6267\u884c\u5ba1\u6279"},"content":{"rendered":"

\u6267\u884c\u5ba1\u6279<\/h1>\n

\u6267\u884c\u5ba1\u6279\u662f\u914d\u5957\u5e94\u7528\/\u8282\u70b9\u4e3b\u673a\u7684\u5b89\u5168\u62a4\u680f<\/strong>\uff0c\u7528\u4e8e\u5141\u8bb8\u6c99\u7bb1\u9694\u79bb\u7684\u667a\u80fd\u4f53\u5728\u771f\u5b9e\u4e3b\u673a\uff08gateway<\/code> \u6216 node<\/code>\uff09\u4e0a\u8fd0\u884c\u547d\u4ee4\u3002\u53ef\u4ee5\u5c06\u5176\u7406\u89e3\u4e3a\u5b89\u5168\u8054\u9501\uff1a\u53ea\u6709\u5f53\u7b56\u7565 + \u5141\u8bb8\u5217\u8868 +\uff08\u53ef\u9009\u7684\uff09\u7528\u6237\u5ba1\u6279\u90fd\u540c\u610f\u65f6\uff0c\u547d\u4ee4\u624d\u4f1a\u88ab\u5141\u8bb8\u6267\u884c\u3002
\n\u6267\u884c\u5ba1\u6279\u662f\u9644\u52a0\u4e8e<\/strong>\u5de5\u5177\u7b56\u7565\u548c\u63d0\u6743\u95e8\u63a7\u4e4b\u4e0a\u7684\uff08\u9664\u975e elevated \u8bbe\u7f6e\u4e3a full<\/code>\uff0c\u8fd9\u4f1a\u8df3\u8fc7\u5ba1\u6279\uff09\u3002
\n\u751f\u6548\u7b56\u7565\u53d6 tools.exec.*<\/code> \u548c\u5ba1\u6279\u9ed8\u8ba4\u503c\u4e2d\u66f4\u4e25\u683c<\/strong>\u7684\u4e00\u65b9\uff1b\u5982\u679c\u5ba1\u6279\u5b57\u6bb5\u88ab\u7701\u7565\uff0c\u5219\u4f7f\u7528 tools.exec<\/code> \u7684\u503c\u3002<\/p>\n

\u5982\u679c\u914d\u5957\u5e94\u7528 UI \u4e0d\u53ef\u7528<\/strong>\uff0c\u4efb\u4f55\u9700\u8981\u63d0\u793a\u7684\u8bf7\u6c42\u90fd\u5c06\u7531 ask fallback<\/strong>\uff08\u9ed8\u8ba4\uff1adeny\uff09\u51b3\u5b9a\u3002<\/p>\n

\u9002\u7528\u8303\u56f4<\/h2>\n

\u6267\u884c\u5ba1\u6279\u5728\u6267\u884c\u4e3b\u673a\u4e0a\u672c\u5730\u5f3a\u5236\u6267\u884c\uff1a<\/p>\n

    \n
  • gateway \u4e3b\u673a<\/strong> \u2192 gateway \u673a\u5668\u4e0a\u7684 openclaw<\/code> \u8fdb\u7a0b<\/li>\n
  • node \u4e3b\u673a<\/strong> \u2192 \u8282\u70b9\u8fd0\u884c\u5668\uff08macOS \u914d\u5957\u5e94\u7528\u6216\u65e0\u5934\u8282\u70b9\u4e3b\u673a\uff09<\/li>\n<\/ul>\n

    macOS \u5206\u5de5\uff1a<\/p>\n

      \n
    • node \u4e3b\u673a\u670d\u52a1<\/strong>\u901a\u8fc7\u672c\u5730 IPC \u5c06 system.run<\/code> \u8f6c\u53d1\u7ed9 macOS \u5e94\u7528<\/strong>\u3002<\/li>\n
    • macOS \u5e94\u7528<\/strong>\u6267\u884c\u5ba1\u6279\u5e76\u5728 UI \u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u547d\u4ee4\u3002<\/li>\n<\/ul>\n

      \u8bbe\u7f6e\u548c\u5b58\u50a8<\/h2>\n

      \u5ba1\u6279\u4fe1\u606f\u5b58\u50a8\u5728\u6267\u884c\u4e3b\u673a\u4e0a\u7684\u672c\u5730 JSON \u6587\u4ef6\u4e2d\uff1a<\/p>\n

      ~\/.openclaw\/exec-approvals.json<\/code><\/p>\n

      \u793a\u4f8b\u7ed3\u6784\uff1a<\/p>\n

      “`json theme={“theme”:{“light”:”min-light”,”dark”:”min-dark”}}
      \n{
      \n “version”: 1,
      \n “socket”: {
      \n “path”: “~\/.openclaw\/exec-approvals.sock”,
      \n “token”: “base64url-token”
      \n },
      \n “defaults”: {
      \n “security”: “deny”,
      \n “ask”: “on-miss”,
      \n “askFallback”: “deny”,
      \n “autoAllowSkills”: false
      \n },
      \n “agents”: {
      \n “main”: {
      \n “security”: “allowlist”,
      \n “ask”: “on-miss”,
      \n “askFallback”: “deny”,
      \n “autoAllowSkills”: true,
      \n “allowlist”: [
      \n {
      \n “id”: “B0C8C0B3-2C2D-4F8A-9A3C-5A4B3C2D1E0F”,
      \n “pattern”: “~\/Projects\/**\/bin\/rg”,
      \n “lastUsedAt”: 1737150000000,
      \n “lastUsedCommand”: “rg -n TODO”,
      \n “lastResolvedPath”: “\/Users\/user\/Projects\/…\/bin\/rg”
      \n }
      \n ]
      \n }
      \n }
      \n}<\/p>\n

      \n## \u7b56\u7565\u9009\u9879\n\n### Security\uff08`exec.security`\uff09\n\n* **deny**\uff1a\u963b\u6b62\u6240\u6709\u4e3b\u673a\u6267\u884c\u8bf7\u6c42\u3002\n* **allowlist**\uff1a\u4ec5\u5141\u8bb8\u5728\u5141\u8bb8\u5217\u8868\u4e2d\u7684\u547d\u4ee4\u3002\n* **full**\uff1a\u5141\u8bb8\u6240\u6709\u547d\u4ee4\uff08\u7b49\u540c\u4e8e\u63d0\u6743\u6a21\u5f0f\uff09\u3002\n\n### Ask\uff08`exec.ask`\uff09\n\n* **off**\uff1a\u4ece\u4e0d\u63d0\u793a\u3002\n* **on-miss**\uff1a\u4ec5\u5728\u5141\u8bb8\u5217\u8868\u672a\u5339\u914d\u65f6\u63d0\u793a\u3002\n* **always**\uff1a\u6bcf\u6b21\u547d\u4ee4\u90fd\u63d0\u793a\u3002\n\n### Ask fallback\uff08`askFallback`\uff09\n\n\u5982\u679c\u9700\u8981\u63d0\u793a\u4f46\u65e0\u6cd5\u8bbf\u95ee UI\uff0cfallback \u51b3\u5b9a\uff1a\n\n* **deny**\uff1a\u963b\u6b62\u3002\n* **allowlist**\uff1a\u4ec5\u5728\u5141\u8bb8\u5217\u8868\u5339\u914d\u65f6\u5141\u8bb8\u3002\n* **full**\uff1a\u5141\u8bb8\u3002\n\n## \u5141\u8bb8\u5217\u8868\uff08\u6309\u667a\u80fd\u4f53\uff09\n\n\u5141\u8bb8\u5217\u8868\u662f**\u6309\u667a\u80fd\u4f53**\u914d\u7f6e\u7684\u3002\u5982\u679c\u5b58\u5728\u591a\u4e2a\u667a\u80fd\u4f53\uff0c\u8bf7\u5728 macOS \u5e94\u7528\u4e2d\u5207\u6362\u8981\u7f16\u8f91\u7684\u667a\u80fd\u4f53\u3002\u6a21\u5f0f\u5339\u914d**\u4e0d\u533a\u5206\u5927\u5c0f\u5199**\u3002\n\u6a21\u5f0f\u5e94\u89e3\u6790\u4e3a**\u4e8c\u8fdb\u5236\u8def\u5f84**\uff08\u4ec5\u5305\u542b\u57fa\u672c\u540d\u79f0\u7684\u6761\u76ee\u4f1a\u88ab\u5ffd\u7565\uff09\u3002\n\u65e7\u7248 `agents.default` \u6761\u76ee\u5728\u52a0\u8f7d\u65f6\u4f1a\u8fc1\u79fb\u5230 `agents.main`\u3002\n\n\u793a\u4f8b\uff1a\n\n* `~\/Projects\/**\/bin\/bird`\n* `~\/.local\/bin\/*`\n* `\/opt\/homebrew\/bin\/rg`\n\n\u6bcf\u4e2a\u5141\u8bb8\u5217\u8868\u6761\u76ee\u4f1a\u8ddf\u8e2a\uff1a\n\n* **id** \u7528\u4e8e UI \u6807\u8bc6\u7684\u7a33\u5b9a UUID\uff08\u53ef\u9009\uff09\n* **last used** \u65f6\u95f4\u6233\n* **last used command**\n* **last resolved path**\n\n## \u81ea\u52a8\u5141\u8bb8 skill CLI\n\n\u542f\u7528 **Auto-allow skill CLIs** \u540e\uff0c\u5df2\u77e5 Skills \u5f15\u7528\u7684\u53ef\u6267\u884c\u6587\u4ef6\u5728\u8282\u70b9\uff08macOS \u8282\u70b9\u6216\u65e0\u5934\u8282\u70b9\u4e3b\u673a\uff09\u4e0a\u88ab\u89c6\u4e3a\u5df2\u5217\u5165\u5141\u8bb8\u5217\u8868\u3002\u8fd9\u901a\u8fc7 Gateway RPC \u7684 `skills.bins` \u83b7\u53d6 skill \u4e8c\u8fdb\u5236\u5217\u8868\u3002\u5982\u679c\u4f60\u60f3\u8981\u4e25\u683c\u7684\u624b\u52a8\u5141\u8bb8\u5217\u8868\uff0c\u8bf7\u7981\u7528\u6b64\u9009\u9879\u3002\n\n## \u5b89\u5168\u4e8c\u8fdb\u5236\uff08\u4ec5\u9650\u6807\u51c6\u8f93\u5165\uff09\n\n`tools.exec.safeBins` \u5b9a\u4e49\u4e86\u4e00\u5c0f\u7ec4**\u4ec5\u9650\u6807\u51c6\u8f93\u5165**\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\uff08\u4f8b\u5982 `jq`\uff09\uff0c\u8fd9\u4e9b\u6587\u4ef6\u53ef\u4ee5\u5728\u5141\u8bb8\u5217\u8868\u6a21\u5f0f\u4e0b\u8fd0\u884c\uff0c**\u65e0\u9700**\u663e\u5f0f\u7684\u5141\u8bb8\u5217\u8868\u6761\u76ee\u3002\u5b89\u5168\u4e8c\u8fdb\u5236\u4f1a\u62d2\u7edd\u4f4d\u7f6e\u6587\u4ef6\u53c2\u6570\u548c\u7c7b\u8def\u5f84\u6807\u8bb0\uff0c\u56e0\u6b64\u5b83\u4eec\u53ea\u80fd\u64cd\u4f5c\u4f20\u5165\u7684\u6d41\u3002\n\u5728\u5141\u8bb8\u5217\u8868\u6a21\u5f0f\u4e0b\uff0cshell \u94fe\u5f0f\u547d\u4ee4\u548c\u91cd\u5b9a\u5411\u4e0d\u4f1a\u88ab\u81ea\u52a8\u5141\u8bb8\u3002\n\n\u5f53\u6bcf\u4e2a\u9876\u7ea7\u6bb5\u90fd\u6ee1\u8db3\u5141\u8bb8\u5217\u8868\uff08\u5305\u62ec\u5b89\u5168\u4e8c\u8fdb\u5236\u6216 skill \u81ea\u52a8\u5141\u8bb8\uff09\u65f6\uff0c\u5141\u8bb8 shell \u94fe\u5f0f\u547d\u4ee4\uff08`&&`\u3001`||`\u3001`;`\uff09\u3002\u91cd\u5b9a\u5411\u5728\u5141\u8bb8\u5217\u8868\u6a21\u5f0f\u4e0b\u4ecd\u4e0d\u53d7\u652f\u6301\u3002\n\u547d\u4ee4\u66ff\u6362\uff08`$()` \/ \u53cd\u5f15\u53f7\uff09\u5728\u5141\u8bb8\u5217\u8868\u89e3\u6790\u671f\u95f4\u4f1a\u88ab\u62d2\u7edd\uff0c\u5305\u62ec\u5728\u53cc\u5f15\u53f7\u5185\uff1b\u5982\u679c\u4f60\u9700\u8981\u5b57\u9762\u7684 `$()` \u6587\u672c\uff0c\u8bf7\u4f7f\u7528\u5355\u5f15\u53f7\u3002\n\n\u9ed8\u8ba4\u5b89\u5168\u4e8c\u8fdb\u5236\uff1a`jq`\u3001`grep`\u3001`cut`\u3001`sort`\u3001`uniq`\u3001`head`\u3001`tail`\u3001`tr`\u3001`wc`\u3002\n\n## Control UI \u7f16\u8f91\n\n\u4f7f\u7528 **Control UI \u2192 Nodes \u2192 Exec approvals** \u5361\u7247\u6765\u7f16\u8f91\u9ed8\u8ba4\u503c\u3001\u6309\u667a\u80fd\u4f53\u7684\u8986\u76d6\u8bbe\u7f6e\u548c\u5141\u8bb8\u5217\u8868\u3002\u9009\u62e9\u4e00\u4e2a\u4f5c\u7528\u57df\uff08Defaults \u6216\u67d0\u4e2a\u667a\u80fd\u4f53\uff09\uff0c\u8c03\u6574\u7b56\u7565\uff0c\u6dfb\u52a0\/\u5220\u9664\u5141\u8bb8\u5217\u8868\u6a21\u5f0f\uff0c\u7136\u540e\u70b9\u51fb **Save**\u3002UI \u4f1a\u663e\u793a\u6bcf\u4e2a\u6a21\u5f0f\u7684 **last used** \u5143\u6570\u636e\uff0c\u4ee5\u4fbf\u4f60\u4fdd\u6301\u5217\u8868\u6574\u6d01\u3002\n\n\u76ee\u6807\u9009\u62e9\u5668\u53ef\u9009\u62e9 **Gateway**\uff08\u672c\u5730\u5ba1\u6279\uff09\u6216 **Node**\u3002\u8282\u70b9\u5fc5\u987b\u901a\u544a `system.execApprovals.get\/set`\uff08macOS \u5e94\u7528\u6216\u65e0\u5934\u8282\u70b9\u4e3b\u673a\uff09\u3002\n\u5982\u679c\u8282\u70b9\u5c1a\u672a\u901a\u544a\u6267\u884c\u5ba1\u6279\uff0c\u8bf7\u76f4\u63a5\u7f16\u8f91\u5176\u672c\u5730\u7684 `~\/.openclaw\/exec-approvals.json`\u3002\n\nCLI\uff1a`openclaw approvals` \u652f\u6301 gateway \u6216 node \u7f16\u8f91\uff08\u53c2\u89c1 [Approvals CLI](\/cli\/approvals)\uff09\u3002\n\n## \u5ba1\u6279\u6d41\u7a0b\n\n\u5f53\u9700\u8981\u63d0\u793a\u65f6\uff0cgateway \u5411\u64cd\u4f5c\u5458\u5ba2\u6237\u7aef\u5e7f\u64ad `exec.approval.requested`\u3002\nControl UI \u548c macOS \u5e94\u7528\u901a\u8fc7 `exec.approval.resolve` \u8fdb\u884c\u5904\u7406\uff0c\u7136\u540e gateway \u5c06\u5df2\u6279\u51c6\u7684\u8bf7\u6c42\u8f6c\u53d1\u7ed9\u8282\u70b9\u4e3b\u673a\u3002\n\n\u5f53\u9700\u8981\u5ba1\u6279\u65f6\uff0cexec \u5de5\u5177\u4f1a\u7acb\u5373\u8fd4\u56de\u4e00\u4e2a\u5ba1\u6279 id\u3002\u4f7f\u7528\u8be5 id \u6765\u5173\u8054\u540e\u7eed\u7684\u7cfb\u7edf\u4e8b\u4ef6\uff08`Exec finished` \/ `Exec denied`\uff09\u3002\u5982\u679c\u5728\u8d85\u65f6\u524d\u6ca1\u6709\u6536\u5230\u51b3\u5b9a\uff0c\u8bf7\u6c42\u5c06\u88ab\u89c6\u4e3a\u5ba1\u6279\u8d85\u65f6\uff0c\u5e76\u4f5c\u4e3a\u62d2\u7edd\u539f\u56e0\u663e\u793a\u3002\n\n\u786e\u8ba4\u5bf9\u8bdd\u6846\u5305\u62ec\uff1a\n\n* \u547d\u4ee4 + \u53c2\u6570\n* cwd\n* \u667a\u80fd\u4f53 id\n* \u89e3\u6790\u540e\u7684\u53ef\u6267\u884c\u6587\u4ef6\u8def\u5f84\n* \u4e3b\u673a + \u7b56\u7565\u5143\u6570\u636e\n\n\u64cd\u4f5c\uff1a\n\n* **Allow once** \u2192 \u7acb\u5373\u8fd0\u884c\n* **Always allow** \u2192 \u6dfb\u52a0\u5230\u5141\u8bb8\u5217\u8868 + \u8fd0\u884c\n* **Deny** \u2192 \u963b\u6b62\n\n## \u5ba1\u6279\u8f6c\u53d1\u5230\u804a\u5929\u6e20\u9053\n\n\u4f60\u53ef\u4ee5\u5c06\u6267\u884c\u5ba1\u6279\u63d0\u793a\u8f6c\u53d1\u5230\u4efb\u4f55\u804a\u5929\u6e20\u9053\uff08\u5305\u62ec\u63d2\u4ef6\u6e20\u9053\uff09\uff0c\u5e76\u4f7f\u7528 `\/approve` \u8fdb\u884c\u6279\u51c6\u3002\u8fd9\u4f7f\u7528\u6b63\u5e38\u7684\u51fa\u7ad9\u6295\u9012\u7ba1\u9053\u3002\n\n\u914d\u7f6e\uff1a\n\n```json5  theme={"theme":{"light":"min-light","dark":"min-dark"}}\n{\n  approvals: {\n    exec: {\n      enabled: true,\n      mode: "session", \/\/ "session" | "targets" | "both"\n      agentFilter: ["main"],\n      sessionFilter: ["discord"], \/\/ substring or regex\n      targets: [\n        { channel: "slack", to: "U12345678" },\n        { channel: "telegram", to: "123456789" },\n      ],\n    },\n  },\n}\n<\/code><\/pre>\n
      \u5728\u804a\u5929\u4e2d\u56de\u590d\uff1a<\/p>\n
      \/approve <id> allow-once\n\/approve <id> allow-always\n\/approve <id> deny\n<\/code><\/pre>\n
      macOS IPC \u6d41\u7a0b<\/h3>\n
      Gateway -> Node Service (WS)\n                 |  IPC (UDS + token + HMAC + TTL)\n                 v\n             Mac App (UI + approvals + system.run)\n<\/code><\/pre>\n
      \u5b89\u5168\u6ce8\u610f\u4e8b\u9879\uff1a<\/p>\n