openclaw/src/wizard/setup.secret-input.test.ts

52 lines
1.5 KiB
TypeScript

import { describe, expect, it } from "vitest";
import type { OpenClawConfig } from "../config/config.js";
import { resolveSetupSecretInputString } from "./setup.secret-input.js";
function makeConfig(): OpenClawConfig {
return {
secrets: {
providers: {
default: { source: "env" },
},
},
} as OpenClawConfig;
}
describe("resolveSetupSecretInputString", () => {
it("resolves env-template SecretInput strings", async () => {
const resolved = await resolveSetupSecretInputString({
config: makeConfig(),
value: "${OPENCLAW_GATEWAY_PASSWORD}",
path: "gateway.auth.password",
env: {
OPENCLAW_GATEWAY_PASSWORD: "gateway-secret", // pragma: allowlist secret
},
});
expect(resolved).toBe("gateway-secret");
});
it("returns plaintext strings when value is not a SecretRef", async () => {
const resolved = await resolveSetupSecretInputString({
config: makeConfig(),
value: "plain-text",
path: "gateway.auth.password",
});
expect(resolved).toBe("plain-text");
});
it("throws with path context when env-template SecretRef cannot resolve", async () => {
await expect(
resolveSetupSecretInputString({
config: makeConfig(),
value: "${OPENCLAW_GATEWAY_PASSWORD}",
path: "gateway.auth.password",
env: {},
}),
).rejects.toThrow(
'gateway.auth.password: failed to resolve SecretRef "env:default:OPENCLAW_GATEWAY_PASSWORD"',
);
});
});