mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-23 19:08:22 -06:00
Vincent Koc
a2e0eea58c
Adds real Gateway QA coverage for node exec approval get/set forwarding, malformed payload rejection, and paired-node ownership fencing.
26 lines
1.2 KiB
YAML
26 lines
1.2 KiB
YAML
title: Gateway node exec approval relay
|
|
|
|
scenario:
|
|
id: gateway-node-exec-approvals
|
|
surface: runtime
|
|
coverage:
|
|
primary:
|
|
- gateway.node-exec-approvals
|
|
objective: Prove node-local exec approval reads and writes traverse the real Gateway RPC and paired node WebSocket boundary.
|
|
successCriteria:
|
|
- The Gateway relays the exact node-local approval snapshot returned by the connected node.
|
|
- Node approval writes preserve the requested policy and optimistic base hash and return the node update result.
|
|
- Malformed node snapshots are rejected at the Gateway boundary.
|
|
- A retired node connection cannot settle an invocation owned by the current paired connection.
|
|
docsRefs:
|
|
- docs/gateway/protocol.md
|
|
- docs/cli/approvals.md
|
|
codeRefs:
|
|
- src/gateway/server-methods/exec-approvals.ts
|
|
- src/gateway/node-registry.ts
|
|
- test/e2e/qa-lab/runtime/gateway-node-exec-approvals.e2e.test.ts
|
|
execution:
|
|
kind: vitest
|
|
path: test/e2e/qa-lab/runtime/gateway-node-exec-approvals.e2e.test.ts
|
|
summary: Run a real Gateway with an authenticated operator and paired replacement node, then verify exact approval relay, validation, pairing generation, and connection ownership.
|