Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions scripts/telegram-bridge.js
Original file line number Diff line number Diff line change
Expand Up @@ -127,6 +127,7 @@ function runAgentInSandbox(message, sessionId) {
(l) =>
!l.startsWith("Setting up NemoClaw") &&
!l.startsWith("[plugins]") &&
!l.startsWith("[gateway]") &&
!l.startsWith("(node:") &&
!l.includes("NemoClaw ready") &&
!l.includes("NemoClaw registered") &&
Expand Down
13 changes: 13 additions & 0 deletions test/runner.test.js
Original file line number Diff line number Diff line change
Expand Up @@ -227,6 +227,19 @@ describe("regression guards", () => {
expect(src.includes("execSync")).toBeFalsy();
});

it("telegram bridge response filter covers gateway startup lines", () => {
const src = fs.readFileSync(path.join(import.meta.dirname, "..", "scripts", "telegram-bridge.js"), "utf-8");
expect(src.includes('!l.startsWith("[gateway]")')).toBe(true);

const noiseThatMustBeFiltered = [
'[gateway] Running as non-root (uid=998) — privilege separation disabled',
'[gateway] openclaw gateway launched (pid 1234)',
];
for (const line of noiseThatMustBeFiltered) {
expect(line.startsWith("[gateway]")).toBe(true);
}
});

describe("credential exposure guards (#429)", () => {
it("onboard createSandbox does not pass NVIDIA_API_KEY to sandbox env", () => {
const fs = require("fs");
Expand Down