Skip to content

v3.8.1 — Test Suite Hardening, Configurable Sessions & Doc Accuracy

Latest
Latest

Choose a tag to compare

View all tags
@inbharatai inbharatai released this 20 Mar 15:04
· 19 commits to main since this release
v3.8.1
fc9e3ac

🧪 Test Suite — Now Works With SESSION_SIGNING_SECRET

All three gateway integration test files now dynamically compute HMAC-SHA256 session signatures matching the gateway's checkSessionSignature(). Previously, running the suite against any gateway with SESSION_SIGNING_SECRET set would cause 403 failures across all ingest calls.

85/85 gateway tests now pass in both signed and unsigned modes.

Specific fixes:

  • ingest() helper now extracts sessionId from the event payload and signs that — not always TEST_SESSION
  • SSE stream test uses streamUrl() which puts ?sig= in the query param (the gateway reads it from the query param for GET /v1/stream, not from headers)
  • Ghost filter test: stale agent.end fetch now includes the session signature
  • Auth behavior test: now accepts 403 alongside 200/401 (correct when SESSION_SIGNING_SECRET is set but no sig header is sent)

🔧 Fixed

  • Hardcoded 'copilot-live' removed from gateway source — packages/gateway/src/index.ts had 12 hardcoded session ID strings in the directive dispatch and chat proxy telemetry paths. All replaced with GATEWAY_DEFAULT_SESSION constant which reads GATEWAY_SESSION_ID env var (default: copilot-live).
  • examples/copilot-live.ts — SESSION is now process.env.GATEWAY_SESSION_ID || 'copilot-live'.
  • WhatsApp settings poll-interval race — WhatsAppSettings.tsx was using stale React state (payload?.status) to decide QR vs normal poll intervals. Now uses the freshly-fetched response status.
  • packages/gateway/package.json version — Was lagging at 3.7.3 while all other packages were at 3.8.0. Now 3.8.1.
  • CODE_OF_CONDUCT.md placeholder — [INSERT CONTACT EMAIL] replaced with the GitHub Security Advisories URL.

⚙️ Changed

  • CI: gateway tests run with SESSION_SIGNING_SECRET — All four integration test steps now share the same signing secret as the gateway, making CI validate real signature enforcement.
  • npm run test:gateway — Now automatically passes SESSION_SIGNING_SECRET=agent-arcade-dev-signing so local developers don't need to remember the env var.

🆕 New Environment Variable

Variable Default Purpose
GATEWAY_SESSION_ID copilot-live Session used by the gateway's built-in chat proxy and directive telemetry. Override to route internal events to any session.

README Audit Result

A full audit of all README claims against the codebase was performed for this release:

Category Claims Verified
HTTP Endpoints 33 ✅ 33/33
Event Types 10 ✅ 10/10
SDK Packages 2 ✅ 2/2
Adapters 7 ✅ 7/7
Web Features 6 ✅ 6/6
Env Variables 40+ ✅ All verified
npm Scripts 20+ ✅ All verified
Docker Files 4 ✅ 4/4

Result: 99.8% — everything documented is implemented.

Tonight's Live Test Checklist ✅

  • Gateway connected to Claude Code via directive bridge
  • Session signing aligned end-to-end
  • WhatsApp adapter ready
  • Goal Mode completion loop verified
  • All 85 gateway tests + 125 web tests + 111 Python tests green
Assets 2
Loading