mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-08 06:30:44 +00:00
f328c21046
* feat(models): add chat model registration with hot reload * docs(changelog): add models entry for pr 70211 * fix(models): harden add flow follow-ups * fix models add review follow-ups * harden models add config writes * tighten plugin boundary invariant * move models add adapters behind sdk facades * avoid ollama-specific core facade
75 lines
2.7 KiB
TypeScript
75 lines
2.7 KiB
TypeScript
import { describe, expect, it } from "vitest";
|
|
import type { OpenClawConfig } from "../config/config.js";
|
|
import {
|
|
buildCommandsMessage,
|
|
buildCommandsMessagePaginated,
|
|
buildHelpMessage,
|
|
resolveSenderCommandAuthorization,
|
|
} from "./command-auth.js";
|
|
|
|
const baseCfg = {
|
|
commands: { useAccessGroups: true },
|
|
} as unknown as OpenClawConfig;
|
|
|
|
async function resolveAuthorization(params: {
|
|
senderId: string;
|
|
configuredAllowFrom?: string[];
|
|
configuredGroupAllowFrom?: string[];
|
|
}) {
|
|
return resolveSenderCommandAuthorization({
|
|
cfg: baseCfg,
|
|
rawBody: "/status",
|
|
isGroup: true,
|
|
dmPolicy: "pairing",
|
|
configuredAllowFrom: params.configuredAllowFrom ?? ["dm-owner"],
|
|
configuredGroupAllowFrom: params.configuredGroupAllowFrom ?? ["group-owner"],
|
|
senderId: params.senderId,
|
|
isSenderAllowed: (senderId, allowFrom) => allowFrom.includes(senderId),
|
|
readAllowFromStore: async () => ["paired-user"],
|
|
shouldComputeCommandAuthorized: () => true,
|
|
resolveCommandAuthorizedFromAuthorizers: ({ useAccessGroups, authorizers }) =>
|
|
useAccessGroups && authorizers.some((entry) => entry.configured && entry.allowed),
|
|
});
|
|
}
|
|
|
|
describe("plugin-sdk/command-auth", () => {
|
|
it("keeps deprecated command status builders available for compatibility", () => {
|
|
const cfg = { commands: { config: false, debug: false } } as unknown as OpenClawConfig;
|
|
|
|
expect(buildHelpMessage(cfg)).toContain("/commands for full list");
|
|
expect(buildCommandsMessage(cfg)).toContain("More: /tools for available capabilities");
|
|
expect(buildCommandsMessage(cfg)).toContain(
|
|
"/models - List model providers/models or add a model.",
|
|
);
|
|
expect(buildCommandsMessagePaginated(cfg)).toMatchObject({
|
|
currentPage: 1,
|
|
totalPages: expect.any(Number),
|
|
});
|
|
});
|
|
|
|
it("resolves command authorization across allowlist sources", async () => {
|
|
const cases = [
|
|
{
|
|
name: "authorizes group commands from explicit group allowlist",
|
|
senderId: "group-owner",
|
|
expectedAuthorized: true,
|
|
expectedSenderAllowed: true,
|
|
},
|
|
{
|
|
name: "keeps pairing-store identities DM-only for group command auth",
|
|
senderId: "paired-user",
|
|
expectedAuthorized: false,
|
|
expectedSenderAllowed: false,
|
|
},
|
|
];
|
|
|
|
for (const testCase of cases) {
|
|
const result = await resolveAuthorization({ senderId: testCase.senderId });
|
|
expect(result.commandAuthorized).toBe(testCase.expectedAuthorized);
|
|
expect(result.senderAllowedForCommands).toBe(testCase.expectedSenderAllowed);
|
|
expect(result.effectiveAllowFrom).toEqual(["dm-owner"]);
|
|
expect(result.effectiveGroupAllowFrom).toEqual(["group-owner"]);
|
|
}
|
|
});
|
|
});
|