惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
爱范儿
爱范儿
WordPress大学
WordPress大学
博客园 - 三生石上(FineUI控件)
J
Java Code Geeks
Vercel News
Vercel News
aimingoo的专栏
aimingoo的专栏
T
Tailwind CSS Blog
罗磊的独立博客
B
Blog
博客园_首页
A
About on SuperTechFans
有赞技术团队
有赞技术团队
V
V2EX
U
Unit 42
I
InfoQ
IT之家
IT之家
博客园 - 司徒正美
阮一峰的网络日志
阮一峰的网络日志
博客园 - 叶小钗
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Stack Overflow Blog
Stack Overflow Blog
The Cloudflare Blog
H
Help Net Security

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
fix(qa-lab): keep bootstrap tokens private · openclaw/ope...
vincentkoc · 2026-05-17 · via Recent Commits to openclaw:main

@@ -301,8 +301,7 @@ describe("qa-lab server", () => {

301301

port: 0,

302302

outputPath,

303303

repoRoot,

304-

controlUiUrl: "http://127.0.0.1:18789/",

305-

controlUiToken: "qa-token",

304+

controlUiUrl: "http://127.0.0.1:18789/?token=qa-token&panel=chat#token=fragment-token",

306305

embeddedGateway: "disabled",

307306

});

308307

cleanups.push(async () => {

@@ -321,15 +320,22 @@ describe("qa-lab server", () => {

321320

};

322321

expect(bootstrap.defaults.conversationId).toBe("qa-operator");

323322

expect(bootstrap.defaults.senderId).toBe("qa-operator");

324-

expect(bootstrap.controlUiUrl).toBe("http://127.0.0.1:18789/");

325-

expect(bootstrap.controlUiEmbeddedUrl).toBe("http://127.0.0.1:18789/#token=qa-token");

323+

expect(bootstrap.controlUiUrl).toBe("http://127.0.0.1:18789/?panel=chat");

324+

expect(bootstrap.controlUiEmbeddedUrl).toBe("http://127.0.0.1:18789/?panel=chat");

326325

expect(bootstrap.kickoffTask).toContain("Lobster Invaders");

327326

expect(bootstrap.scenarios.length).toBeGreaterThanOrEqual(10);

328327

expect(bootstrap.scenarios.map((scenario) => scenario.id)).toContain("dm-chat-baseline");

329328

expect(bootstrap.runner.status).toBe("idle");

330329

expect(bootstrap.runner.selection.providerMode).toBe("live-frontier");

331330

expect(bootstrap.runner.selection.scenarioIds).toHaveLength(bootstrap.scenarios.length);

332331332+

const startupStatus = (await (

333+

await fetchWithRetry(`${lab.baseUrl}/api/capture/startup-status`)

334+

).json()) as {

335+

status: { gateway: { url: string } };

336+

};

337+

expect(startupStatus.status.gateway.url).toBe("http://127.0.0.1:18789/?panel=chat");

338+333339

const messageResponse = await fetch(`${lab.baseUrl}/api/inbound/message`, {

334340

method: "POST",

335341

headers: {

@@ -453,7 +459,9 @@ describe("qa-lab server", () => {

453459

});

454460455461

it("proxies control-ui paths through /control-ui", async () => {

462+

const authorizations: Array<string | undefined> = [];

456463

const upstream = createServer((req, res) => {

464+

authorizations.push(req.headers.authorization);

457465

if ((req.url ?? "/") === "/healthz") {

458466

res.writeHead(200, { "content-type": "application/json" });

459467

res.end(JSON.stringify({ ok: true, status: "live" }));

@@ -488,7 +496,7 @@ describe("qa-lab server", () => {

488496

advertiseHost: "127.0.0.1",

489497

advertisePort: 43124,

490498

controlUiProxyTarget: `http://127.0.0.1:${address.port}/`,

491-

controlUiToken: "proxy-token",

499+

controlUiProxyToken: "proxy-token",

492500

});

493501

cleanups.push(async () => {

494502

await lab.stop();

@@ -499,9 +507,7 @@ describe("qa-lab server", () => {

499507

controlUiEmbeddedUrl: string | null;

500508

};

501509

expect(bootstrap.controlUiUrl).toBe("http://127.0.0.1:43124/control-ui/");

502-

expect(bootstrap.controlUiEmbeddedUrl).toBe(

503-

"http://127.0.0.1:43124/control-ui/#token=proxy-token",

504-

);

510+

expect(bootstrap.controlUiEmbeddedUrl).toBe("http://127.0.0.1:43124/control-ui/");

505511506512

const healthResponse = await fetchWithRetry(`${lab.listenUrl}/control-ui/healthz`);

507513

expect(healthResponse.status).toBe(200);

@@ -512,6 +518,7 @@ describe("qa-lab server", () => {

512518

expect(rootResponse.headers.get("x-frame-options")).toBeNull();

513519

expect(rootResponse.headers.get("content-security-policy")).toContain("frame-ancestors 'self'");

514520

expect(await rootResponse.text()).toContain("Control UI");

521+

expect(authorizations).toEqual(["Bearer proxy-token", "Bearer proxy-token"]);

515522

});

516523517524

it("serves the built QA UI bundle when available", async () => {

@@ -742,14 +749,13 @@ describe("qa-lab server", () => {

742749

],

743750

});

744751

lab.setControlUi({

745-

controlUiUrl: "http://127.0.0.1:18789/",

746-

controlUiToken: "late-token",

752+

controlUiUrl: "http://127.0.0.1:18789/?password=late-password#token=late-token",

747753

});

748754749755

const bootstrap = (await (await fetchWithRetry(`${lab.baseUrl}/api/bootstrap`)).json()) as {

750756

controlUiEmbeddedUrl: string | null;

751757

};

752-

expect(bootstrap.controlUiEmbeddedUrl).toBe("http://127.0.0.1:18789/#token=late-token");

758+

expect(bootstrap.controlUiEmbeddedUrl).toBe("http://127.0.0.1:18789/");

753759754760

const outcomes = (await (await fetchWithRetry(`${lab.baseUrl}/api/outcomes`)).json()) as {

755761

run: {