fix: refresh hooks token validation PR

Jasmine Zhang · Jasmine Zhang · commit ba080f9980fe · 2026-05-30T20:09:03.000+08:00
diff --git a/src/config/config.hooks-module-paths.test.ts b/src/config/config.hooks-module-paths.test.ts
@@ -111,4 +111,22 @@ describe("config hooks module paths", () => {
       "hooks.mappings.0.channel",
     );
   });
+
+  it("rejects hooks.enabled=true without hooks.token", () => {
+    expectRejectedIssuePath(
+      {
+        agents: { list: [{ id: "openclaw" }] },
+        hooks: { enabled: true },
+      },
+      "hooks.token",
+    );
+  });
+
+  it("accepts hooks.enabled=true when hooks.token is present", () => {
+    const res = validateConfigObjectWithPlugins({
+      agents: { list: [{ id: "openclaw" }] },
+      hooks: { enabled: true, token: "secret" },
+    });
+    expect(res.ok).toBe(true);
+  });
 });
diff --git a/src/config/validation.ts b/src/config/validation.ts
@@ -1598,6 +1598,15 @@ function validateConfigObjectWithPluginsBase(
   validateWebSearchProvider();
   validateConfiguredModelRefs();
 
+  if (config.hooks?.enabled === true && !config.hooks?.token?.trim()) {
+    issues.push({
+      path: "hooks.token",
+      message:
+        "hooks.enabled is true but hooks.token is not set. " +
+        "Set hooks.token before enabling hooks (for example with `openclaw config set hooks.token <redacted>` or a redacted `openclaw gateway call config.patch --params ...`).",
+    });
+  }
+
   if (!hasExplicitPluginsConfig) {
     if (issues.length > 0) {
       return { ok: false, issues, warnings };
diff --git a/src/gateway/hooks.ts b/src/gateway/hooks.ts
@@ -52,7 +52,10 @@ export function resolveHooksConfig(cfg: OpenClawConfig): HooksConfigResolved | n
   }
   const token = normalizeOptionalString(cfg.hooks?.token);
   if (!token) {
-    throw new Error("hooks.enabled requires hooks.token");
+    throw new Error(
+      "hooks.enabled requires hooks.token. " +
+        "Set hooks.token before enabling hooks (for example with `openclaw config set hooks.token <redacted>` or a redacted `openclaw gateway call config.patch --params ...`).",
+    );
   }
   const rawPath = normalizeOptionalString(cfg.hooks?.path) || DEFAULT_HOOKS_PATH;
   const withSlash = rawPath.startsWith("/") ? rawPath : `/${rawPath}`;

Original file line number	Diff line number	Diff line change
`@@ -52,7 +52,10 @@ export function resolveHooksConfig(cfg: OpenClawConfig): HooksConfigResolved \| n`
`52`	`52`	`}`
`53`	`53`	`const token = normalizeOptionalString(cfg.hooks?.token);`
`54`	`54`	`if (!token) {`
`55`		`- throw new Error("hooks.enabled requires hooks.token");`
	`55`	`+ throw new Error(`
	`56`	`+ "hooks.enabled requires hooks.token. " +`
	`57`	+ "Set hooks.token before enabling hooks (for example with `openclaw config set hooks.token <redacted>` or a redacted `openclaw gateway call config.patch --params ...`).",
	`58`	`+ );`
`56`	`59`	`}`
`57`	`60`	`const rawPath = normalizeOptionalString(cfg.hooks?.path) \|\| DEFAULT_HOOKS_PATH;`
`58`	`61`	const withSlash = rawPath.startsWith("/") ? rawPath : `/${rawPath}`;