重构主控编排与运行时预热链路，统一工作区提示词/专家调度协议并补齐 wiki 记忆注入与写回闭环。

同时收敛启动与运维脚本默认行为（含 wiki worker）、更新 Admin 可观测性与相关测试，降低首轮时延并提高运行稳定性。 Made-with: Cursor
2026-10-17 02:03:25 +08:00 · 2026-04-26 08:34:33 +08:00 · 2026-04-26 08:34:33 +08:00 · dbbe3add6a
commit dbbe3add6a
parent 4a23b715a2
14438 changed files with 2693620 additions and 2546 deletions
--- a/openclaw/apps/macos/Tests/OpenClawIPCTests/ExecHostRequestEvaluatorTests.swift
+++ b/openclaw/apps/macos/Tests/OpenClawIPCTests/ExecHostRequestEvaluatorTests.swift
@ -0,0 +1,86 @@
+import Foundation
+import Testing
+@testable import OpenClaw
+
+struct ExecHostRequestEvaluatorTests {
+    @Test func `validate request rejects empty command`() {
+        let request = ExecHostRequest(
+            command: [],
+            rawCommand: nil,
+            cwd: nil,
+            env: nil,
+            timeoutMs: nil,
+            needsScreenRecording: nil,
+            agentId: nil,
+            sessionKey: nil,
+            approvalDecision: nil)
+        switch ExecHostRequestEvaluator.validateRequest(request) {
+        case .success:
+            Issue.record("expected invalid request")
+        case let .failure(error):
+            #expect(error.code == "INVALID_REQUEST")
+            #expect(error.message == "command required")
+        }
+    }
+
+    @Test func `evaluate requires prompt on allowlist miss without decision`() {
+        let context = Self.makeContext(security: .allowlist, ask: .onMiss, allowlistSatisfied: false, skillAllow: false)
+        let decision = ExecHostRequestEvaluator.evaluate(context: context, approvalDecision: nil)
+        switch decision {
+        case .requiresPrompt:
+            break
+        case .allow:
+            Issue.record("expected prompt requirement")
+        case let .deny(error):
+            Issue.record("unexpected deny: \(error.message)")
+        }
+    }
+
+    @Test func `evaluate allows allow once decision on allowlist miss`() {
+        let context = Self.makeContext(security: .allowlist, ask: .onMiss, allowlistSatisfied: false, skillAllow: false)
+        let decision = ExecHostRequestEvaluator.evaluate(context: context, approvalDecision: .allowOnce)
+        switch decision {
+        case let .allow(approvedByAsk):
+            #expect(approvedByAsk)
+        case .requiresPrompt:
+            Issue.record("expected allow decision")
+        case let .deny(error):
+            Issue.record("unexpected deny: \(error.message)")
+        }
+    }
+
+    @Test func `evaluate denies on explicit deny decision`() {
+        let context = Self.makeContext(security: .full, ask: .off, allowlistSatisfied: true, skillAllow: false)
+        let decision = ExecHostRequestEvaluator.evaluate(context: context, approvalDecision: .deny)
+        switch decision {
+        case let .deny(error):
+            #expect(error.reason == "user-denied")
+        case .requiresPrompt:
+            Issue.record("expected deny decision")
+        case .allow:
+            Issue.record("expected deny decision")
+        }
+    }
+
+    private static func makeContext(
+        security: ExecSecurity,
+        ask: ExecAsk,
+        allowlistSatisfied: Bool,
+        skillAllow: Bool) -> ExecApprovalEvaluation
+    {
+        ExecApprovalEvaluation(
+            command: ["/usr/bin/echo", "hi"],
+            displayCommand: "/usr/bin/echo hi",
+            agentId: nil,
+            security: security,
+            ask: ask,
+            env: [:],
+            resolution: nil,
+            allowlistResolutions: [],
+            allowAlwaysPatterns: [],
+            allowlistMatches: [],
+            allowlistSatisfied: allowlistSatisfied,
+            allowlistMatch: nil,
+            skillAllow: skillAllow)
+    }
+}