opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Revert Monday and Harvest updates to match main branch

Browse source
This commit is contained in:
stevef 2026-04-18 07:32:08 +02:00
parent cdf1741222
commit bab688a924
4 changed files with 4 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
cluster_config.json
View file

@ -410,8 +410,7 @@
"weather": true, "weather": true,
"summarize": true, "summarize": true,
"github": true, "github": true,
"monday": true, "hdn-server": true
"harvest": true
} }
} }
}, },
@ -557,8 +556,6 @@
"weather", "weather",
"summarize", "summarize",
"github", "github",
"monday",
"harvest",
"hdn-server" "hdn-server"
], ],
"whitelist_enabled": true, "whitelist_enabled": true,

2
docs/configuration.md
View file

@ -77,7 +77,7 @@ When an incoming message includes a **ChatID** (passed in the `/chat` API or ext
1. **Isolated Workspace:** The agent's operations are restricted to `workspace/sessions/{isolationID}/workspace`. 1. **Isolated Workspace:** The agent's operations are restricted to `workspace/sessions/{isolationID}/workspace`.
2. **Isolated Memory:** Long-term memory (`MEMORY.md`) is stored and read from the isolated session path. 2. **Isolated Memory:** Long-term memory (`MEMORY.md`) is stored and read from the isolated session path.
3. **Isolated Tools:** Tools like `read_file` and `write_file` are automatically pointed to the isolated workspace. Additionally, **MCP server tools** (e.g., Harvest, Monday) and discovery search tools are dynamically registered to each isolated instance, ensuring they inherit the same security boundaries. 3. **Isolated Tools:** Tools like `read_file` and `write_file` are automatically pointed to the isolated workspace. Additionally, **MCP server tools** (e.g., GitHub, Google) and discovery search tools are dynamically registered to each isolated instance, ensuring they inherit the same security boundaries.
#### Tenant Identification (Inbound Integration) #### Tenant Identification (Inbound Integration)

2
pkg/security/policy/checker.go
View file

@ -55,7 +55,7 @@ func (c *Checker) ApproveTool(ctx context.Context, req *agent.ToolApprovalReques
if c.Config.AllowedTools[req.Tool] { if c.Config.AllowedTools[req.Tool] {
allowed = true allowed = true
} else { } else {
// Check for prefix matches (e.g. "monday" matches "mcp_monday_...") // Check for prefix matches (e.g. "github" matches "mcp_github_...")
// Match logic consistent with ToolRegistry.Filter // Match logic consistent with ToolRegistry.Filter
for w, ok := range c.Config.AllowedTools { for w, ok := range c.Config.AllowedTools {
if !ok { if !ok {

2
pkg/tools/registry.go
View file

@ -445,7 +445,7 @@ func (r *ToolRegistry) Filter(whitelist []string, enabled bool) {
if _, exact := whitelistMap[name]; exact { if _, exact := whitelistMap[name]; exact {
allowed = true allowed = true
} else { } else {
// Check for prefix matches (e.g. "monday" matches "mcp_monday_...") // Check for prefix matches (e.g. "github" matches "mcp_github_...")
for _, w := range whitelist { for _, w := range whitelist {
// Match exact (redundant but safe) or prefix with underscore // Match exact (redundant but safe) or prefix with underscore
// We also check for "mcp_" prefix specifically to support MCP tool grouping // We also check for "mcp_" prefix specifically to support MCP tool grouping