Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
158 lines
4.7 KiB
TypeScript
158 lines
4.7 KiB
TypeScript
// Plain GitHub CLI helper tests cover wrapper-safe gh execution for maintainer scripts.
|
|
import { spawnSync } from "node:child_process";
|
|
import { chmodSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
|
|
import { tmpdir } from "node:os";
|
|
import path from "node:path";
|
|
import { afterEach, describe, expect, it } from "vitest";
|
|
import {
|
|
execPlainGh,
|
|
plainGhEnv,
|
|
PLAIN_GH_SYSTEM_CANDIDATES,
|
|
resolvePlainGhBin,
|
|
} from "../../scripts/lib/plain-gh.mjs";
|
|
|
|
const tempDirs: string[] = [];
|
|
|
|
afterEach(() => {
|
|
for (const dir of tempDirs.splice(0)) {
|
|
rmSync(dir, { recursive: true, force: true });
|
|
}
|
|
});
|
|
|
|
function makeFakeGh(): string {
|
|
const dir = mkdtempSync(path.join(tmpdir(), "plain-gh-"));
|
|
tempDirs.push(dir);
|
|
const binDir = path.join(dir, "bin");
|
|
mkdirSync(binDir);
|
|
const ghPath = path.join(binDir, "gh");
|
|
writeFileSync(
|
|
ghPath,
|
|
`#!/usr/bin/env bash
|
|
printf 'argv=%s\\n' "$*"
|
|
printf 'NO_COLOR=%s\\n' "\${NO_COLOR-}"
|
|
printf 'GH_FORCE_TTY=%s\\n' "\${GH_FORCE_TTY-}"
|
|
printf 'FORCE_COLOR=%s\\n' "\${FORCE_COLOR-}"
|
|
printf 'CLICOLOR=%s\\n' "\${CLICOLOR-}"
|
|
printf 'CLICOLOR_FORCE=%s\\n' "\${CLICOLOR_FORCE-}"
|
|
printf 'COLORTERM_SET=%s\\n' "\${COLORTERM+x}"
|
|
`,
|
|
);
|
|
chmodSync(ghPath, 0o755);
|
|
return ghPath;
|
|
}
|
|
|
|
function makeLargeFakeGh(): string {
|
|
const dir = mkdtempSync(path.join(tmpdir(), "plain-gh-large-"));
|
|
tempDirs.push(dir);
|
|
const ghPath = path.join(dir, "gh");
|
|
writeFileSync(
|
|
ghPath,
|
|
`#!/usr/bin/env node
|
|
const bytes = Number(process.env.PLAIN_GH_FAKE_BYTES ?? "0");
|
|
process.stdout.write("x".repeat(bytes));
|
|
`,
|
|
);
|
|
chmodSync(ghPath, 0o755);
|
|
return ghPath;
|
|
}
|
|
|
|
describe("plain gh helpers", () => {
|
|
it("prefers OPENCLAW_GH_BIN over PATH shims", () => {
|
|
const ghPath = makeFakeGh();
|
|
|
|
expect(
|
|
resolvePlainGhBin({
|
|
HOME: path.dirname(path.dirname(ghPath)),
|
|
OPENCLAW_GH_BIN: ghPath,
|
|
PATH: "",
|
|
}),
|
|
).toBe(ghPath);
|
|
});
|
|
|
|
it("prefers package-manager gh paths over bin shims", () => {
|
|
const realGh = makeFakeGh();
|
|
const shimGh = makeFakeGh();
|
|
|
|
expect(resolvePlainGhBin({ PATH: shimGh }, [realGh, shimGh])).toBe(realGh);
|
|
expect(PLAIN_GH_SYSTEM_CANDIDATES.indexOf("/opt/homebrew/opt/gh/bin/gh")).toBeLessThan(
|
|
PLAIN_GH_SYSTEM_CANDIDATES.indexOf("/opt/homebrew/bin/gh"),
|
|
);
|
|
});
|
|
|
|
it("normalizes color environment for JSON-safe gh output", () => {
|
|
expect(
|
|
plainGhEnv({
|
|
CLICOLOR: "1",
|
|
CLICOLOR_FORCE: "1",
|
|
COLORTERM: "truecolor",
|
|
FORCE_COLOR: "3",
|
|
}),
|
|
).toMatchObject({
|
|
NO_COLOR: "1",
|
|
FORCE_COLOR: "0",
|
|
CLICOLOR: "0",
|
|
CLICOLOR_FORCE: "0",
|
|
});
|
|
expect(plainGhEnv({ COLORTERM: "truecolor" })).not.toHaveProperty("COLORTERM");
|
|
expect(plainGhEnv({ GH_FORCE_TTY: "120" })).not.toHaveProperty("GH_FORCE_TTY");
|
|
});
|
|
|
|
it("runs the shell helper with color disabled", () => {
|
|
const ghPath = makeFakeGh();
|
|
const outputPath = path.join(path.dirname(path.dirname(ghPath)), "output.txt");
|
|
const script = [
|
|
"set -euo pipefail",
|
|
"source scripts/lib/plain-gh.sh",
|
|
`OPENCLAW_GH_BIN=${JSON.stringify(ghPath)}`,
|
|
"export OPENCLAW_GH_BIN",
|
|
`gh_plain api rate_limit > ${JSON.stringify(outputPath)}`,
|
|
].join("\n");
|
|
|
|
const result = spawnSync("bash", ["-lc", script], {
|
|
encoding: "utf8",
|
|
env: {
|
|
...process.env,
|
|
CLICOLOR: "1",
|
|
CLICOLOR_FORCE: "1",
|
|
COLORTERM: "truecolor",
|
|
FORCE_COLOR: "3",
|
|
},
|
|
});
|
|
|
|
expect(result.status).toBe(0);
|
|
expect(readFileSync(outputPath, "utf8")).toContain("argv=api rate_limit");
|
|
expect(readFileSync(outputPath, "utf8")).toContain("NO_COLOR=1");
|
|
expect(readFileSync(outputPath, "utf8")).toContain("GH_FORCE_TTY=");
|
|
expect(readFileSync(outputPath, "utf8")).toContain("FORCE_COLOR=0");
|
|
expect(readFileSync(outputPath, "utf8")).toContain("CLICOLOR=0");
|
|
expect(readFileSync(outputPath, "utf8")).toContain("CLICOLOR_FORCE=0");
|
|
expect(readFileSync(outputPath, "utf8")).toContain("COLORTERM_SET=");
|
|
});
|
|
|
|
it("captures large gh payloads by default", () => {
|
|
const ghPath = makeLargeFakeGh();
|
|
const bytes = 2 * 1024 * 1024;
|
|
|
|
const output = execPlainGh(["api", "large"], {
|
|
encoding: "utf8",
|
|
env: {
|
|
...process.env,
|
|
OPENCLAW_GH_BIN: ghPath,
|
|
PLAIN_GH_FAKE_BYTES: String(bytes),
|
|
},
|
|
});
|
|
|
|
expect(output).toHaveLength(bytes);
|
|
});
|
|
|
|
it("keeps the shell resolver on external gh binaries", () => {
|
|
const helper = readFileSync("scripts/lib/plain-gh.sh", "utf8");
|
|
|
|
expect(helper).toContain("type -P gh");
|
|
expect(helper).not.toContain("command -v gh");
|
|
expect(helper.indexOf("/opt/homebrew/opt/gh/bin/gh")).toBeLessThan(
|
|
helper.indexOf("/opt/homebrew/bin/gh"),
|
|
);
|
|
});
|
|
});
|