Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
185 lines
5.7 KiB
TypeScript
185 lines
5.7 KiB
TypeScript
// Voice Call tests cover manager.inbound allowlist plugin behavior.
|
|
import { describe, expect, it } from "vitest";
|
|
import { FakeProvider, createManagerHarness } from "./manager.test-harness.js";
|
|
|
|
describe("CallManager inbound allowlist", () => {
|
|
it("rejects inbound calls with missing caller ID when allowlist enabled", async () => {
|
|
const { manager, provider } = await createManagerHarness({
|
|
inboundPolicy: "allowlist",
|
|
allowFrom: ["+15550001234"],
|
|
});
|
|
|
|
manager.processEvent({
|
|
id: "evt-allowlist-missing",
|
|
type: "call.initiated",
|
|
callId: "call-missing",
|
|
providerCallId: "provider-missing",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
expect(manager.getCallByProviderCallId("provider-missing")).toBeUndefined();
|
|
expect(provider.hangupCalls).toHaveLength(1);
|
|
expect(provider.hangupCalls[0]?.providerCallId).toBe("provider-missing");
|
|
});
|
|
|
|
it("rejects inbound calls with anonymous caller ID when allowlist enabled", async () => {
|
|
const { manager, provider } = await createManagerHarness({
|
|
inboundPolicy: "allowlist",
|
|
allowFrom: ["+15550001234"],
|
|
});
|
|
|
|
manager.processEvent({
|
|
id: "evt-allowlist-anon",
|
|
type: "call.initiated",
|
|
callId: "call-anon",
|
|
providerCallId: "provider-anon",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "anonymous",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
expect(manager.getCallByProviderCallId("provider-anon")).toBeUndefined();
|
|
expect(provider.hangupCalls).toHaveLength(1);
|
|
expect(provider.hangupCalls[0]?.providerCallId).toBe("provider-anon");
|
|
});
|
|
|
|
it("rejects inbound calls that only match allowlist suffixes", async () => {
|
|
const { manager, provider } = await createManagerHarness({
|
|
inboundPolicy: "allowlist",
|
|
allowFrom: ["+15550001234"],
|
|
});
|
|
|
|
manager.processEvent({
|
|
id: "evt-allowlist-suffix",
|
|
type: "call.initiated",
|
|
callId: "call-suffix",
|
|
providerCallId: "provider-suffix",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "+99915550001234",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
expect(manager.getCallByProviderCallId("provider-suffix")).toBeUndefined();
|
|
expect(provider.hangupCalls).toHaveLength(1);
|
|
expect(provider.hangupCalls[0]?.providerCallId).toBe("provider-suffix");
|
|
});
|
|
|
|
it("rejects duplicate inbound events with a single hangup call", async () => {
|
|
const { manager, provider } = await createManagerHarness({
|
|
inboundPolicy: "disabled",
|
|
});
|
|
|
|
manager.processEvent({
|
|
id: "evt-reject-init",
|
|
type: "call.initiated",
|
|
callId: "provider-dup",
|
|
providerCallId: "provider-dup",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "+15552222222",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
manager.processEvent({
|
|
id: "evt-reject-ring",
|
|
type: "call.ringing",
|
|
callId: "provider-dup",
|
|
providerCallId: "provider-dup",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "+15552222222",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
expect(manager.getCallByProviderCallId("provider-dup")).toBeUndefined();
|
|
expect(provider.hangupCalls).toHaveLength(1);
|
|
expect(provider.hangupCalls[0]?.providerCallId).toBe("provider-dup");
|
|
});
|
|
|
|
it("retries rejected inbound hangup after a transient provider failure", async () => {
|
|
class FlakyHangupProvider extends FakeProvider {
|
|
hangupFailuresRemaining = 1;
|
|
|
|
override async hangupCall(input: Parameters<FakeProvider["hangupCall"]>[0]): Promise<void> {
|
|
this.hangupCalls.push(input);
|
|
if (this.hangupFailuresRemaining > 0) {
|
|
this.hangupFailuresRemaining -= 1;
|
|
throw new Error("provider down");
|
|
}
|
|
}
|
|
}
|
|
|
|
const provider = new FlakyHangupProvider();
|
|
const { manager } = await createManagerHarness(
|
|
{
|
|
inboundPolicy: "disabled",
|
|
},
|
|
provider,
|
|
);
|
|
|
|
manager.processEvent({
|
|
id: "evt-reject-fail-init",
|
|
type: "call.initiated",
|
|
callId: "provider-flaky",
|
|
providerCallId: "provider-flaky",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "+15553333333",
|
|
to: "+15550000000",
|
|
});
|
|
await Promise.resolve();
|
|
|
|
manager.processEvent({
|
|
id: "evt-reject-fail-ring",
|
|
type: "call.ringing",
|
|
callId: "provider-flaky",
|
|
providerCallId: "provider-flaky",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "+15553333333",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
expect(manager.getCallByProviderCallId("provider-flaky")).toBeUndefined();
|
|
expect(provider.hangupCalls).toHaveLength(2);
|
|
expect(provider.hangupCalls.map((call) => call.providerCallId)).toEqual([
|
|
"provider-flaky",
|
|
"provider-flaky",
|
|
]);
|
|
});
|
|
|
|
it("accepts inbound calls that exactly match the allowlist", async () => {
|
|
const { manager } = await createManagerHarness({
|
|
inboundPolicy: "allowlist",
|
|
allowFrom: ["+15550001234"],
|
|
});
|
|
|
|
manager.processEvent({
|
|
id: "evt-allowlist-exact",
|
|
type: "call.initiated",
|
|
callId: "call-exact",
|
|
providerCallId: "provider-exact",
|
|
timestamp: Date.now(),
|
|
direction: "inbound",
|
|
from: "+15550001234",
|
|
to: "+15550000000",
|
|
});
|
|
|
|
const call = manager.getCallByProviderCallId("provider-exact");
|
|
if (!call) {
|
|
throw new Error("expected exact allowlist match to keep the inbound call");
|
|
}
|
|
expect(call.providerCallId).toBe("provider-exact");
|
|
expect(call.direction).toBe("inbound");
|
|
expect(call.from).toBe("+15550001234");
|
|
expect(call.to).toBe("+15550000000");
|
|
expect(call.callId).toMatch(
|
|
/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,
|
|
);
|
|
});
|
|
});
|