vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 10:30:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(release): harden npm telegram beta e2e

Browse Source
This commit is contained in:
Ayaan Zaidi
2026-04-24 11:46:55 +05:30
parent 5dd3c37fce
commit ed6b487e20
3 changed files with 63 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
test/scripts/npm-telegram-live.test.ts
View File

@@ -6,6 +6,7 @@ import { __testing } from "../../scripts/e2e/npm-telegram-live-runner.ts";
const TEST_DIR = path.dirname(fileURLToPath(import.meta.url));
const DOCKER_SCRIPT_PATH = path.resolve(TEST_DIR, "../../scripts/e2e/npm-telegram-live-docker.sh");
const WORKFLOW_PATH = path.resolve(TEST_DIR, "../../.github/workflows/npm-telegram-beta-e2e.yml");
describe("npm Telegram live Docker E2E", () => {
it("supports npm-specific Convex credential aliases", () => {
@@ -28,6 +29,27 @@ describe("npm Telegram live Docker E2E", () => {
expect(script).toContain('printf "convex"');
});
it("installs the npm package before forwarding runtime secrets", () => {
const script = readFileSync(DOCKER_SCRIPT_PATH, "utf8");
const installRun = script.slice(
script.indexOf('echo "Running published npm Telegram live Docker E2E'),
script.indexOf('cat "$run_log"\n>"$run_log"'),
);
expect(installRun).toContain('npm install -g "$package_spec" --no-fund --no-audit');
expect(installRun).not.toContain('"${docker_env[@]}"');
expect(script).toContain('if [ -z "$credential_role" ] && [ -n "${CI:-}" ]');
expect(script).toContain('credential_role="ci"');
});
it("limits the manual npm beta workflow to maintainer-level actors", () => {
const workflow = readFileSync(WORKFLOW_PATH, "utf8");
expect(workflow).toContain('const allowedRoles = new Set(["admin", "maintain"]);');
expect(workflow).toContain("const role = data.role_name ?? data.permission;");
expect(workflow).not.toContain('new Set(["admin", "write"])');
});
it("lets npm-specific credential aliases override shared QA env", () => {
expect(
__testing.resolveCredentialSource({