Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
221 lines
7.0 KiB
TypeScript
221 lines
7.0 KiB
TypeScript
// Signal tests cover approval handler plugin behavior.
|
|
import { beforeEach, describe, expect, it, vi } from "vitest";
|
|
|
|
const sendMocks = vi.hoisted(() => ({
|
|
sendTypingSignal: vi.fn(),
|
|
sendMessageSignal: vi.fn(),
|
|
}));
|
|
|
|
vi.mock("./send.js", () => ({
|
|
sendTypingSignal: sendMocks.sendTypingSignal,
|
|
sendMessageSignal: sendMocks.sendMessageSignal,
|
|
}));
|
|
|
|
const { signalApprovalNativeRuntime } = await import("./approval-handler.runtime.js");
|
|
|
|
function buildPendingContent(params: {
|
|
manualText: string;
|
|
reactionText?: string;
|
|
allowedDecisions?: readonly ("allow-once" | "allow-always" | "deny")[];
|
|
}) {
|
|
const allowedDecisions = params.allowedDecisions ?? ["allow-once"];
|
|
return {
|
|
manualFallbackPayload: { text: params.manualText },
|
|
reactionPayload: {
|
|
text: params.reactionText ?? params.manualText,
|
|
allowedDecisions,
|
|
reactionBindings: [],
|
|
},
|
|
};
|
|
}
|
|
|
|
describe("Signal approval native runtime", () => {
|
|
beforeEach(() => {
|
|
sendMocks.sendTypingSignal.mockReset().mockResolvedValue(true);
|
|
sendMocks.sendMessageSignal.mockReset().mockResolvedValue({
|
|
messageId: "1700000000000",
|
|
timestamp: 1700000000000,
|
|
receipt: { parts: [] },
|
|
});
|
|
});
|
|
|
|
it("uses the live Signal RPC context when delivering approval prompts", async () => {
|
|
const prepared = await signalApprovalNativeRuntime.transport.prepareTarget({
|
|
plannedTarget: { target: { to: "+15551230000" } },
|
|
accountId: "default",
|
|
context: { baseUrl: "http://127.0.0.1:18080", account: "+15550001111" },
|
|
} as never);
|
|
|
|
expect(prepared?.target).toMatchObject({
|
|
to: "+15551230000",
|
|
accountId: "default",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
});
|
|
|
|
await signalApprovalNativeRuntime.transport.deliverPending({
|
|
cfg: {},
|
|
preparedTarget: prepared!.target,
|
|
pendingPayload: buildPendingContent({ manualText: "approval" }),
|
|
} as never);
|
|
|
|
expect(sendMocks.sendTypingSignal).toHaveBeenCalledWith("+15551230000", {
|
|
cfg: {},
|
|
accountId: "default",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
});
|
|
expect(sendMocks.sendMessageSignal).toHaveBeenCalledWith("+15551230000", "approval", {
|
|
cfg: {},
|
|
accountId: "default",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
textMode: "plain",
|
|
});
|
|
});
|
|
|
|
it("resolves aliases before delivering native approval prompts", async () => {
|
|
const cfg = {
|
|
channels: {
|
|
signal: {
|
|
allowFrom: ["+15551230000"],
|
|
aliases: {
|
|
me: "+15551230000",
|
|
},
|
|
},
|
|
},
|
|
};
|
|
const prepared = await signalApprovalNativeRuntime.transport.prepareTarget({
|
|
cfg,
|
|
plannedTarget: { target: { to: "signal:me" } },
|
|
accountId: "default",
|
|
context: { baseUrl: "http://127.0.0.1:18080", account: "+15550001111" },
|
|
} as never);
|
|
|
|
expect(prepared?.target).toMatchObject({
|
|
to: "+15551230000",
|
|
accountId: "default",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
});
|
|
|
|
const entry = await signalApprovalNativeRuntime.transport.deliverPending({
|
|
cfg,
|
|
preparedTarget: prepared!.target,
|
|
pendingPayload: buildPendingContent({ manualText: "approval" }),
|
|
} as never);
|
|
|
|
expect(entry).toMatchObject({
|
|
to: "+15551230000",
|
|
conversationKey: "+15551230000",
|
|
});
|
|
expect(sendMocks.sendTypingSignal).toHaveBeenCalledWith("+15551230000", {
|
|
cfg,
|
|
accountId: "default",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
});
|
|
expect(sendMocks.sendMessageSignal).toHaveBeenCalledWith("+15551230000", "approval", {
|
|
cfg,
|
|
accountId: "default",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
textMode: "plain",
|
|
});
|
|
});
|
|
|
|
it("resolves default-account aliases before delivering native approval prompts", async () => {
|
|
const cfg = {
|
|
channels: {
|
|
signal: {
|
|
defaultAccount: "work",
|
|
accounts: {
|
|
work: {
|
|
aliases: {
|
|
ops: "+15551230000",
|
|
},
|
|
},
|
|
},
|
|
},
|
|
},
|
|
};
|
|
const prepared = await signalApprovalNativeRuntime.transport.prepareTarget({
|
|
cfg,
|
|
plannedTarget: { target: { to: "signal:ops" } },
|
|
context: { baseUrl: "http://127.0.0.1:18080", account: "+15550001111" },
|
|
} as never);
|
|
|
|
expect(prepared?.target).toMatchObject({
|
|
to: "+15551230000",
|
|
accountId: "work",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
});
|
|
|
|
await signalApprovalNativeRuntime.transport.deliverPending({
|
|
cfg,
|
|
preparedTarget: prepared!.target,
|
|
pendingPayload: buildPendingContent({ manualText: "approval" }),
|
|
} as never);
|
|
|
|
expect(sendMocks.sendMessageSignal).toHaveBeenCalledWith("+15551230000", "approval", {
|
|
cfg,
|
|
accountId: "work",
|
|
baseUrl: "http://127.0.0.1:18080",
|
|
account: "+15550001111",
|
|
textMode: "plain",
|
|
});
|
|
});
|
|
|
|
it("only renders reaction hints when the Signal target author can be bound", async () => {
|
|
const cfg = { channels: { signal: { allowFrom: ["+15551230000"] } } };
|
|
const unbound = await signalApprovalNativeRuntime.transport.prepareTarget({
|
|
plannedTarget: { target: { to: "+15551230000" } },
|
|
accountId: "default",
|
|
context: { baseUrl: "http://127.0.0.1:18080" },
|
|
} as never);
|
|
|
|
await signalApprovalNativeRuntime.transport.deliverPending({
|
|
cfg,
|
|
preparedTarget: unbound!.target,
|
|
pendingPayload: buildPendingContent({
|
|
manualText:
|
|
"Exec approval required\nID: exec-1\n\nReply with: /approve exec-1 allow-once|deny",
|
|
reactionText:
|
|
"Exec approval required\nID: exec-1\n\nReact with:\n\n👍 Allow Once\n👎 Deny\n\nReply with: /approve exec-1 allow-once|deny",
|
|
allowedDecisions: ["allow-once", "deny"],
|
|
}),
|
|
} as never);
|
|
|
|
expect(sendMocks.sendMessageSignal).toHaveBeenLastCalledWith(
|
|
"+15551230000",
|
|
expect.not.stringContaining("React with:"),
|
|
expect.any(Object),
|
|
);
|
|
|
|
const bound = await signalApprovalNativeRuntime.transport.prepareTarget({
|
|
plannedTarget: { target: { to: "+15551230000" } },
|
|
accountId: "default",
|
|
context: { baseUrl: "http://127.0.0.1:18080", account: "+15550001111" },
|
|
} as never);
|
|
|
|
await signalApprovalNativeRuntime.transport.deliverPending({
|
|
cfg,
|
|
preparedTarget: bound!.target,
|
|
pendingPayload: buildPendingContent({
|
|
manualText:
|
|
"Exec approval required\nID: exec-1\n\nReply with: /approve exec-1 allow-once|deny",
|
|
reactionText:
|
|
"Exec approval required\nID: exec-1\n\nReact with:\n\n👍 Allow Once\n👎 Deny\n\nReply with: /approve exec-1 allow-once|deny",
|
|
allowedDecisions: ["allow-once", "deny"],
|
|
}),
|
|
} as never);
|
|
|
|
expect(sendMocks.sendMessageSignal).toHaveBeenLastCalledWith(
|
|
"+15551230000",
|
|
expect.stringContaining("React with:\n\n👍 Allow Once\n👎 Deny"),
|
|
expect.any(Object),
|
|
);
|
|
});
|
|
});
|