fix(gateway): classify pairing rejection events · opencla...

Recent Commits to openclaw:main

vincentkoc · 2026-06-17 · via Recent Commits to openclaw:main

Original file line number	Diff line number	Diff line change
`@@ -1193,14 +1193,35 @@ describe("deviceHandlers", () => {`
`1193`	`1193`	`}),`
`1194`	`1194`	`},`
`1195`	`1195`	`);`
	`1196`	`+const captured = captureSecurityEvents();`
`1196`	`1197`
`1197`		`-await deviceHandlers["device.pair.reject"](opts);`
	`1198`	`+try {`
	`1199`	`+await deviceHandlers["device.pair.reject"](opts);`
	`1200`	`+} finally {`
	`1201`	`+captured.stop();`
	`1202`	`+}`
`1198`	`1203`
`1199`	`1204`	`expect(rejectDevicePairingMock).toHaveBeenCalledWith("req-2");`
`1200`	`1205`	`expect(opts.respond).toHaveBeenCalledWith(`
`1201`	`1206`	`true,`
`1202`	`1207`	`{ requestId: "req-2", deviceId: "device-2", rejectedAtMs: 456 },`
`1203`	`1208`	`undefined,`
`1204`	`1209`	`);`
	`1210`	`+expect(captured.events).toHaveLength(1);`
	`1211`	`+expect(captured.events[0]).toMatchObject({`
	`1212`	`+action: "device.pairing.rejected",`
	`1213`	`+outcome: "success",`
	`1214`	`+severity: "low",`
	`1215`	`+actor: {`
	`1216`	`+kind: "operator",`
	`1217`	`+role: "admin",`
	`1218`	`+},`
	`1219`	`+target: { kind: "device", idHash: expect.stringMatching(/^sha256:[a-f0-9]{12}$/u) },`
	`1220`	`+policy: { id: "gateway.device-pairing", decision: "allow" },`
	`1221`	`+control: { id: "device.pair.reject", family: "auth" },`
	`1222`	`+});`
	`1223`	`+const serialized = JSON.stringify(captured.events);`
	`1224`	`+expect(serialized).not.toContain("device-1");`
	`1225`	`+expect(serialized).not.toContain("device-2");`
`1205`	`1226`	`});`
`1206`	`1227`	`});`

Original file line number	Diff line number	Diff line change
`@@ -256,7 +256,7 @@ function emitDevicePairingDeniedSecurityEvent(params: {`
`256`	`256`	`}`
`257`	`257`
`258`	`258`	`function emitDevicePairingLifecycleSecurityEvent(params: {`
`259`		`-action: "device.pairing.approved" \| "device.pairing.removed";`
	`259`	`+action: "device.pairing.approved" \| "device.pairing.rejected" \| "device.pairing.removed";`
`260`	`260`	`severity: DiagnosticSecurityEventInput["severity"];`
`261`	`261`	`authz: DeviceSessionAuthz;`
`262`	`262`	`targetDeviceId: string;`
`@@ -513,11 +513,11 @@ export const deviceHandlers: GatewayRequestHandlers = {`
`513`	`513`	`respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, "unknown requestId"));`
`514`	`514`	`return;`
`515`	`515`	`}`
`516`		`-emitDevicePairingDeniedSecurityEvent({`
	`516`	`+emitDevicePairingLifecycleSecurityEvent({`
	`517`	`+action: "device.pairing.rejected",`
`517`	`518`	`authz,`
`518`	`519`	`targetDeviceId: rejected.deviceId,`
`519`	`520`	`controlId: "device.pair.reject",`
`520`		`-reason: "operator-rejected",`
`521`	`521`	`severity: "low",`
`522`	`522`	`});`
`523`	`523`	`context.broadcast(`

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。原文来自 — 版权归原作者所有。