惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

博客园_首页
IT之家
IT之家
博客园 - Franky
Stack Overflow Blog
Stack Overflow Blog
宝玉的分享
宝玉的分享
Recent Announcements
Recent Announcements
Engineering at Meta
Engineering at Meta
S
SegmentFault 最新的问题
V
Visual Studio Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
Last Week in AI
Last Week in AI
H
Help Net Security
V
V2EX
H
Hackread – Cybersecurity News, Data Breaches, AI and More
量子位
博客园 - 叶小钗
J
Java Code Geeks
博客园 - 【当耐特】
月光博客
月光博客
爱范儿
爱范儿
人人都是产品经理
人人都是产品经理
酷 壳 – CoolShell
酷 壳 – CoolShell
小众软件
小众软件

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
security(gateway): route hook completion events to target...
vincentkoc · 2026-04-28 · via Recent Commits to openclaw:main

@@ -20,6 +20,7 @@ installGatewayTestHooks({ scope: "suite" });

20202121

const resolveMainKey = () => resolveMainSessionKeyFromConfig();

2222

const HOOK_TOKEN = "hook-secret";

23+

const HOOKS_MAIN_SESSION_KEY = "agent:hooks:main";

23242425

afterEach(() => {

2526

vi.restoreAllMocks();

@@ -117,14 +118,24 @@ async function expectHookAgentSessionRouting(params: {

117118

sessionKey: params.requestSessionKey,

118119

});

119120

expect(resAgent.status).toBe(200);

120-

await waitForSystemEvent();

121+

await waitForSystemEventTexts(HOOKS_MAIN_SESSION_KEY);

121122122123

const routedCall = (cronIsolatedRun.mock.calls[0] as unknown[] | undefined)?.[0] as

123124

| { sessionKey?: string; job?: { agentId?: string } }

124125

| undefined;

125126

expect(routedCall?.job?.agentId).toBe("hooks");

126127

expect(routedCall?.sessionKey).toBe(params.expectedSessionKey);

127-

drainSystemEvents(resolveMainKey());

128+

drainSystemEvents(HOOKS_MAIN_SESSION_KEY);

129+

}

130+131+

async function waitForSystemEventTexts(sessionKey: string, timeoutMs = 2_000) {

132+

await expect

133+

.poll(() => peekSystemEventEntries(sessionKey).map((event) => event.text), {

134+

timeout: timeoutMs,

135+

interval: 10,

136+

})

137+

.not.toHaveLength(0);

138+

return peekSystemEventEntries(sessionKey).map((event) => event.text);

128139

}

129140130141

async function writeHookTransformModule(moduleName: string, source: string): Promise<void> {

@@ -181,12 +192,12 @@ describe("gateway server hooks", () => {

181192

agentId: "hooks",

182193

});

183194

expect(resAgentWithId.status).toBe(200);

184-

await waitForSystemEvent();

195+

await waitForSystemEventTexts(HOOKS_MAIN_SESSION_KEY);

185196

const routedCall = (cronIsolatedRun.mock.calls[0] as unknown[] | undefined)?.[0] as {

186197

job?: { agentId?: string };

187198

};

188199

expect(routedCall?.job?.agentId).toBe("hooks");

189-

drainSystemEvents(resolveMainKey());

200+

drainSystemEvents(HOOKS_MAIN_SESSION_KEY);

190201191202

mockIsolatedRunOkOnce();

192203

const resAgentUnknown = await postHook(port, "/hooks/agent", {

@@ -281,6 +292,26 @@ describe("gateway server hooks", () => {

281292

});

282293

});

283294295+

test("routes explicit-agent hook completion events to the target agent main session", async () => {

296+

testState.hooksConfig = { enabled: true, token: HOOK_TOKEN };

297+

setMainAndHooksAgents();

298+299+

await withGatewayServer(async ({ port }) => {

300+

mockIsolatedRunOkOnce();

301+

const resAgent = await postHook(port, "/hooks/agent", {

302+

message: "Do it",

303+

name: "Email",

304+

agentId: "hooks",

305+

});

306+

expect(resAgent.status).toBe(200);

307+308+

const targetEvents = await waitForSystemEventTexts(HOOKS_MAIN_SESSION_KEY);

309+

expect(targetEvents.some((event) => event.includes("Hook Email: done"))).toBe(true);

310+

expect(peekSystemEventEntries(resolveMainKey())).toEqual([]);

311+

drainSystemEvents(HOOKS_MAIN_SESSION_KEY);

312+

});

313+

});

314+284315

test("queues direct and mapped wake payloads as untrusted system events", async () => {

285316

testState.hooksConfig = {

286317

enabled: true,

@@ -700,12 +731,12 @@ describe("gateway server hooks", () => {

700731

agentId: "hooks",

701732

});

702733

expect(resAllowed.status).toBe(200);

703-

await waitForSystemEvent();

734+

await waitForSystemEventTexts(HOOKS_MAIN_SESSION_KEY);

704735

const allowedCall = (cronIsolatedRun.mock.calls[0] as unknown[] | undefined)?.[0] as {

705736

job?: { agentId?: string };

706737

};

707738

expect(allowedCall?.job?.agentId).toBe("hooks");

708-

drainSystemEvents(resolveMainKey());

739+

drainSystemEvents(HOOKS_MAIN_SESSION_KEY);

709740710741

const resDenied = await postHook(port, "/hooks/agent", {

711742

message: "Denied",