vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-05 23:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Tests: tighten channel import guardrails

Browse Source
This commit is contained in:
Tak Hoffman
2026-03-18 23:07:17 -05:00
parent 79e13e0a5e
commit f6c57edd5c
1 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/plugin-sdk/channel-import-guardrails.test.ts
View File

@@ -9,7 +9,11 @@ const ALLOWED_EXTENSION_PUBLIC_SURFACES = new Set([
"action-runtime-api.js", "action-runtime-api.js",
"api.js", "api.js",
"index.js", "index.js",
"light-runtime-api.js",
"login-qr-api.js", "login-qr-api.js",
"onboard.js",
"openai-codex-catalog.js",
"provider-catalog.js",
"runtime-api.js", "runtime-api.js",
"session-key-api.js", "session-key-api.js",
"setup-api.js", "setup-api.js",
@@ -252,6 +256,7 @@ function collectCoreSourceFiles(): string[] {
} }
if ( if (
fullPath.includes(".test.") || fullPath.includes(".test.") ||
fullPath.includes(".mock-harness.") ||
fullPath.includes(".spec.") || fullPath.includes(".spec.") ||
fullPath.includes(".fixture.") || fullPath.includes(".fixture.") ||
fullPath.includes(".snap") || fullPath.includes(".snap") ||
@@ -320,11 +325,14 @@ function collectImportSpecifiers(text: string): string[] {
function expectOnlyApprovedExtensionSeams(file: string, imports: string[]): void { function expectOnlyApprovedExtensionSeams(file: string, imports: string[]): void {
for (const specifier of imports) { for (const specifier of imports) {
const normalized = specifier.replaceAll("\\", "/"); const normalized = specifier.replaceAll("\\", "/");
const extensionId = normalized.match(/extensions\/([^/]+)\//)?.[1] ?? null; const resolved = specifier.startsWith(".")
? resolve(dirname(file), specifier).replaceAll("\\", "/")
: normalized;
const extensionId = resolved.match(/extensions\/([^/]+)\//)?.[1] ?? null;
if (!extensionId || !GUARDED_CHANNEL_EXTENSIONS.has(extensionId)) { if (!extensionId || !GUARDED_CHANNEL_EXTENSIONS.has(extensionId)) {
continue; continue;
} }
const basename = normalized.split("/").at(-1) ?? ""; const basename = resolved.split("/").at(-1) ?? "";
expect( expect(
ALLOWED_EXTENSION_PUBLIC_SURFACES.has(basename), ALLOWED_EXTENSION_PUBLIC_SURFACES.has(basename),
`${file} should only import approved extension surfaces, got ${specifier}`, `${file} should only import approved extension surfaces, got ${specifier}`,