Files
openclaw/extensions/reef/protocol/node.test.ts
Peter Steinberger 882b2fe900 feat(channels): bundle Reef guarded claw-to-claw channel (#106232)
* feat(channels): bundle Reef guarded claw-to-claw channel

Moves the Reef channel extension from openclaw/reef into the bundled extensions tree with the wire protocol vendored under extensions/reef/protocol. Includes channelConfigs manifest metadata, runtime status reporting via setStatus/buildAccountSnapshot, abort-aware inbox shutdown, monotonic device-auth timestamps, and immutable-model guard admission (dated snapshots plus documented gpt-5.6 ids).

* fix(reef): pin zod exactly per dependency pin guard

* style(reef): satisfy extension lint gates

Curly braces in vendored protocol, explicit type re-exports, typed catch callbacks, Object.assign over map-spread, abort-aware loop restructure.

* fix(reef): CI gates — knip workspace, boundary tsconfig, facade imports, cycle break, contract baselines

- knip: reef workspace project includes vendored protocol/ (owns noble deps)
- tsconfig: conform to canonical extension package-boundary include/exclude; add @openclaw/plugin-sdk devDependency
- imports: channel-inbound/channel-outbound facades instead of deprecated subpaths
- protocol: home ReplayStore contract in envelope.ts to break the envelope<->replay type cycle
- baselines: reef in unguarded runtime-api list; regenerate bundled channel config metadata

* feat(reef): plugin catalog cover art, channel label, changelog revert

* fix(reef): drop unused error-class exports, register lint suppression

* fix(reef): knip entry surface for vendored protocol, explicit WebSocketLike export
2026-07-13 05:17:44 -07:00

93 lines
4.4 KiB
TypeScript

import { appendFile, mkdtemp, readFile, writeFile } from "node:fs/promises";
import { tmpdir } from "node:os";
import { join } from "node:path";
import { describe, expect, it } from "vitest";
import { appendAudit, verifyChain } from "./audit.js";
import { generateIdentity } from "./identity.js";
import { JsonlAuditStore, FileReplayStore } from "./node.js";
import { signReceipt } from "./receipts.js";
const auditKey = Uint8Array.from({ length: 32 }, (_, index) => index + 1);
const replayBodyKey = Uint8Array.from({ length: 32 }, (_, index) => 255 - index);
const receiptId = "01JZ0000000000000000000000";
describe("Node stores", () => {
it("persists serialized audit JSONL", async () => {
const directory = await mkdtemp(join(tmpdir(), "reef-audit-"));
const path = join(directory, "audit.jsonl");
const store = new JsonlAuditStore(path, auditKey);
await Promise.all(
Array.from({ length: 20 }, (_, index) =>
appendAudit(store, "test", { id: index }, 10 + index),
),
);
const reopened = await new JsonlAuditStore(path, auditKey).entries();
expect(reopened).toHaveLength(20);
expect(verifyChain(reopened)).toBe(true);
});
it("drops a torn final JSONL record and permits a durable append", async () => {
const directory = await mkdtemp(join(tmpdir(), "reef-audit-torn-"));
const path = join(directory, "audit.jsonl");
const store = new JsonlAuditStore(path, auditKey);
await store.appendEvent("one", { id: 1 }, 10);
await store.appendEvent("two", { id: 2 }, 11);
await appendFile(path, '{"event":{"seq":3');
const recovered = new JsonlAuditStore(path, auditKey);
expect(await recovered.entries()).toHaveLength(2);
await recovered.appendEvent("three", { id: 3 }, 12);
expect(await new JsonlAuditStore(path, auditKey).entries()).toHaveLength(3);
});
it("rejects a corrupt middle JSONL record", async () => {
const directory = await mkdtemp(join(tmpdir(), "reef-audit-corrupt-"));
const path = join(directory, "audit.jsonl");
const store = new JsonlAuditStore(path, auditKey);
await store.appendEvent("one", { id: 1 }, 10);
await store.appendEvent("two", { id: 2 }, 11);
const lines = (await readFile(path, "utf8")).trimEnd().split("\n");
await writeFile(path, `${lines[0]}\n{"broken"\n${lines[1]}\n`);
await expect(new JsonlAuditStore(path, auditKey).entries()).rejects.toThrow();
});
it("persists replay bindings and completed receipts", async () => {
const directory = await mkdtemp(join(tmpdir(), "reef-replay-"));
const path = join(directory, "replay.jsonl");
const identity = generateIdentity();
const receipt = signReceipt(
{
id: receiptId,
bodyHash: "a".repeat(64),
auditHead: "b".repeat(64),
status: "accepted",
},
identity.signing.secretKey,
);
const body = { text: "RECOVERABLE SECRET BODY" };
const store = new FileReplayStore(path, replayBodyKey, () => new Uint8Array(12).fill(7));
expect(await store.claim("alice", receiptId, "c".repeat(64))).toBe("new");
expect(await store.claim("alice", receiptId, "c".repeat(64))).toBe("in_flight");
await store.complete("alice", receiptId, receipt, body);
expect(await readFile(path, "utf8")).not.toContain(body.text);
const reopened = new FileReplayStore(path, replayBodyKey);
expect(await reopened.claim("alice", receiptId, "c".repeat(64))).toBe("duplicate");
expect(await reopened.completed("alice", receiptId)).toEqual({ receipt, body });
expect(await reopened.claim("alice", receiptId, "d".repeat(64))).toBe("mismatch");
expect(await reopened.claim("carol", receiptId, "d".repeat(64))).toBe("new");
});
it("persists consumed replay bindings without receipts", async () => {
const directory = await mkdtemp(join(tmpdir(), "reef-replay-consumed-"));
const path = join(directory, "replay.jsonl");
const store = new FileReplayStore(path, replayBodyKey);
expect(await store.claim("alice", receiptId, "c".repeat(64))).toBe("new");
await store.release("alice", receiptId);
expect(await store.claim("alice", receiptId, "c".repeat(64))).toBe("new");
await store.consume("alice", receiptId);
const reopened = new FileReplayStore(path, replayBodyKey);
expect(await reopened.claim("alice", receiptId, "c".repeat(64))).toBe("duplicate");
expect(await reopened.completed("alice", receiptId)).toBeUndefined();
expect(await reopened.claim("alice", receiptId, "d".repeat(64))).toBe("mismatch");
});
});