fix(openclaw): harden 2026.7.1 installation

tests/openclaw-install-safety.test.js

@@ -0,0 +1,119 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import { existsSync, mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { replaceStandaloneInstall } from '../scripts/dev-api.js'
+
+const setup = readFileSync(new URL('../src/pages/setup.js', import.meta.url), 'utf8')
+const tauriApi = readFileSync(new URL('../src/lib/tauri-api.js', import.meta.url), 'utf8')
+const wsClient = readFileSync(new URL('../src/lib/ws-client.js', import.meta.url), 'utf8')
+const devApi = readFileSync(new URL('../scripts/dev-api.js', import.meta.url), 'utf8')
+const rustConfig = readFileSync(new URL('../src-tauri/src/commands/config.rs', import.meta.url), 'utf8')
+
+function sliceFunction(source, startMarker, endMarker) {
+  const start = source.indexOf(startMarker)
+  const end = source.indexOf(endMarker, start + startMarker.length)
+  return start >= 0 && end > start ? source.slice(start, end) : ''
+}
+
+test('setup keeps standalone installation available without a system Node runtime', () => {
+  const cliSection = sliceFunction(setup, '// 第三步：OpenClaw CLI', '// 第四步：')
+  assert.doesNotMatch(
+    cliSection,
+    /opacity:0\.65;pointer-events:none/,
+  )
+  assert.match(setup, /if \(!installBtn\) return/)
+  assert.doesNotMatch(setup, /if \(!installBtn \|\| !nodeOk\) return/)
+})
+
+test('npm installation checks the target OpenClaw Node requirement before running npm', () => {
+  const webUpgrade = sliceFunction(devApi, 'async upgrade_openclaw(', '// 设备配对 + Gateway 握手')
+  assert.match(webUpgrade, /ensureTargetNodeRuntimeCompatibleForNpm\(ver\)/)
+  assert.ok(
+    webUpgrade.indexOf('ensureTargetNodeRuntimeCompatibleForNpm(ver)') < webUpgrade.indexOf('const runInstall'),
+    'Web target runtime check must run before npm install',
+  )
+
+  const rustUpgrade = sliceFunction(rustConfig, 'async fn upgrade_openclaw_inner(', '#[tauri::command]\npub async fn uninstall_openclaw')
+  assert.match(rustUpgrade, /ensure_target_node_runtime_compatible_for_npm\(ver\)\?/)
+  assert.ok(
+    rustUpgrade.indexOf('ensure_target_node_runtime_compatible_for_npm(ver)?') < rustUpgrade.indexOf('pre_install_cleanup();'),
+    'Desktop target runtime check must run before cleanup and npm install',
+  )
+})
+
+test('standalone installation validates a staging directory before replacing the active install', () => {
+  const webInstall = sliceFunction(devApi, 'async function _tryStandaloneInstall(', 'function r2PlatformKey()')
+  assert.match(webInstall, /stagingDir/)
+  assert.match(webInstall, /backupDir/)
+  assert.match(webInstall, /verifyStandaloneInstall/)
+  assert.ok(
+    webInstall.indexOf('verifyStandaloneInstall') < webInstall.indexOf('replaceStandaloneInstall'),
+    'Web standalone archive must be verified before activation',
+  )
+
+  const rustInstall = sliceFunction(rustConfig, 'async fn try_standalone_install(', '/// 尝试从 R2 CDN')
+  assert.match(rustInstall, /staging_dir/)
+  assert.match(rustInstall, /backup_dir/)
+  assert.match(rustInstall, /verify_standalone_install/)
+  assert.ok(
+    rustInstall.indexOf('verify_standalone_install') < rustInstall.indexOf('replace_standalone_install'),
+    'Desktop standalone archive must be verified before activation',
+  )
+})
+
+test('GitHub standalone fallback can resolve a pinned version without the CDN manifest', () => {
+  const webInstall = sliceFunction(devApi, 'async function _tryStandaloneInstall(', 'function r2PlatformKey()')
+  assert.match(webInstall, /overrideBaseUrl && version !== 'latest'/)
+  assert.match(webInstall, /remoteVersion = version/)
+
+  const rustInstall = sliceFunction(rustConfig, 'async fn try_standalone_install(', '/// 尝试从 R2 CDN')
+  assert.match(rustInstall, /override_base_url\.is_some\(\) && version != "latest"/)
+})
+
+test('Web Gateway pairing sends the actual browser origin to the backend', () => {
+  assert.match(tauriApi, /autoPairDevice: \(origin = window\.location\.origin\) => invoke\('auto_pair_device', \{ origin: origin \|\| null \}\)/)
+  assert.match(wsClient, /api\.autoPairDevice\(window\.location\.origin\)/)
+  assert.match(devApi, /auto_pair_device\(\{ origin \} = \{\}\)/)
+  assert.match(devApi, /patchGatewayOrigins\(origin\)/)
+})
+
+test('Web standalone activation replaces a verified staging directory', () => {
+  const root = mkdtempSync(join(tmpdir(), 'clawpanel-standalone-swap-'))
+  const installDir = join(root, 'install')
+  const stagingDir = join(root, 'staging')
+  const backupDir = join(root, 'backup')
+  try {
+    mkdirSync(installDir)
+    mkdirSync(stagingDir)
+    writeFileSync(join(installDir, 'old.txt'), 'old')
+    writeFileSync(join(stagingDir, 'new.txt'), 'new')
+
+    replaceStandaloneInstall(stagingDir, installDir, backupDir)
+
+    assert.equal(readFileSync(join(installDir, 'new.txt'), 'utf8'), 'new')
+    assert.equal(existsSync(join(installDir, 'old.txt')), false)
+    assert.equal(existsSync(backupDir), false)
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('Web standalone activation restores the old install when activation fails', () => {
+  const root = mkdtempSync(join(tmpdir(), 'clawpanel-standalone-rollback-'))
+  const installDir = join(root, 'install')
+  const missingStagingDir = join(root, 'missing-staging')
+  const backupDir = join(root, 'backup')
+  try {
+    mkdirSync(installDir)
+    writeFileSync(join(installDir, 'old.txt'), 'old')
+
+    assert.throws(() => replaceStandaloneInstall(missingStagingDir, installDir, backupDir))
+
+    assert.equal(readFileSync(join(installDir, 'old.txt'), 'utf8'), 'old')
+    assert.equal(existsSync(backupDir), false)
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})

tests/patch-gateway-origins.test.js

@@ -6,7 +6,7 @@ const devApi = readFileSync(new URL('../scripts/dev-api.js', import.meta.url), '
 const pairing = readFileSync(new URL('../src-tauri/src/commands/pairing.rs', import.meta.url), 'utf8')
 
 test('patchGatewayOrigins writes only allowedOrigins through merge path', () => {
-  const start = devApi.indexOf('function patchGatewayOrigins()')
+  const start = devApi.indexOf('function patchGatewayOrigins(')
   const end = devApi.indexOf('function readOpenclawConfigOptional()', start)
   const fn = start >= 0 && end > start ? devApi.slice(start, end) : ''
 
@@ -18,7 +18,7 @@ test('patchGatewayOrigins writes only allowedOrigins through merge path', () =>
 })
 
 test('patch_gateway_origins writes only allowedOrigins patch in Rust', () => {
-  const start = pairing.indexOf('fn patch_gateway_origins()')
+  const start = pairing.indexOf('fn patch_gateway_origins(')
   const end = pairing.indexOf('#[tauri::command]', start)
   const fn = start >= 0 && end > start ? pairing.slice(start, end) : ''