Commit Graph

4998 Commits

Author SHA1 Message Date
Vincent Koc
61ee4ffdfc fix(scripts): guard reused testbox keys 2026-06-20 05:35:10 +02:00
Vincent Koc
4a75171190 fix(scripts): preserve kitchen sink RPC request errors 2026-06-20 11:23:59 +08:00
Vincent Koc
2c65b9b407 refactor(scripts): share mobile version arg parsing 2026-06-20 11:08:34 +08:00
Vincent Koc
f04c3d6575 fix(qa): sanitize ux evidence artifact paths 2026-06-20 03:46:06 +02:00
Vincent Koc
da03996ab7 fix(test): reject unselected media provider filters 2026-06-20 03:40:50 +02:00
Vincent Koc
622955b3fc fix(test): guard issue labeler cli args 2026-06-20 03:36:50 +02:00
Vincent Koc
cd69760628 fix(release): guard plugin release cli values 2026-06-20 03:34:41 +02:00
Vincent Koc
214a28affd fix(test): reject invalid max loc args 2026-06-20 03:32:08 +02:00
Vincent Koc
033455b6f1 fix(test): guard platform pin cli values 2026-06-20 03:29:15 +02:00
Vincent Koc
8b5b150e02 fix(test): guard platform sync cli values 2026-06-20 03:27:15 +02:00
Vincent Koc
4db7d6a90a fix(test): guard platform version cli values 2026-06-20 03:24:46 +02:00
Vincent Koc
9491e9187d fix(test): add env mutation report help 2026-06-20 03:21:21 +02:00
Vincent Koc
e0ec42e0e0 fix(test): restore live media harness entrypoint 2026-06-20 03:18:26 +02:00
Vincent Koc
a971641a54 fix(test): guard claude usage debug args 2026-06-20 03:15:30 +02:00
Vincent Koc
0cf941344c fix(test): honor shell completion test args 2026-06-20 03:12:16 +02:00
Vincent Koc
e6823c3d16 fix(test): guard model benchmark cli args 2026-06-20 03:06:22 +02:00
Vincent Koc
4b2b70ec79 fix(test): guard gateway benchmark cli args 2026-06-20 03:04:34 +02:00
Vincent Koc
b6d91d96ef fix(test): guard sqlite benchmark cli args 2026-06-20 03:00:07 +02:00
Vincent Koc
dadec4500f fix(test): require abort leak snapshot dir value 2026-06-20 02:54:52 +02:00
Vincent Koc
41691a82d5 fix(test): guard discord acp smoke cli args 2026-06-20 02:47:36 +02:00
Vincent Koc
49b0487e5b fix(test): guard kitchen sink rpc cli args 2026-06-20 02:36:52 +02:00
Vincent Koc
4575734f59 fix(test): guard realtime perf cli args 2026-06-20 02:34:06 +02:00
Vincent Koc
7dca9210c9 fix(test): guard dev smoke cli args 2026-06-20 02:28:04 +02:00
Vincent Koc
87358d7a7c fix(test): guard model resolution profiler args 2026-06-20 02:22:59 +02:00
Vincent Koc
e02bee6aab fix(test): guard tui pty watch cli args 2026-06-20 02:19:53 +02:00
Vincent Koc
56c0405018 fix(test): guard benchmark qa cli args 2026-06-20 02:13:13 +02:00
Vincent Koc
b6d754e3cb fix(macos): create DMG output directories (#95133) 2026-06-20 08:11:23 +08:00
Vincent Koc
423b1b3a42 fix(test): clean release check cli errors 2026-06-20 02:08:16 +02:00
Vincent Koc
faeb731a29 fix(test): guard boundary check cli args 2026-06-20 02:05:20 +02:00
Vincent Koc
d6075c1694 fix(test): clean dependency report cli errors 2026-06-20 02:02:37 +02:00
Vincent Koc
a67f809b33 fix(test): clean perf summary cli errors 2026-06-20 02:00:34 +02:00
Vincent Koc
1f1c434ede fix(test): clean qa report cli errors 2026-06-20 01:58:54 +02:00
Vincent Koc
3c3f1010aa fix(test): preflight gauntlet missing builds 2026-06-20 01:53:05 +02:00
Vincent Koc
0e980be284 fix(package): ignore stale packed tarballs (#95126) 2026-06-20 07:49:25 +08:00
Vincent Koc
27450f6b42 fix(test): honor rpc rtt help flag 2026-06-20 01:44:59 +02:00
Vincent Koc
6fc0a3a9bd fix(test): chunk broad script test routing 2026-06-20 01:32:13 +02:00
Vincent Koc
be7807f65e fix(test): stabilize tooling guard probes (#95114)
* fix(test): release kitchen sink probe readers

* test(github): follow shared guard membership helper
2026-06-20 06:55:40 +08:00
Vincent Koc
ba43be9424 refactor(github): share guard comment helpers 2026-06-20 06:10:37 +08:00
Vincent Koc
aa479ac7d8 refactor(github): share guard request helpers 2026-06-20 06:07:12 +08:00
Vincent Koc
0eed410bd0 refactor(tooling): remove unused cleanup helpers 2026-06-20 05:52:30 +08:00
Vincent Koc
d97574aae6 fix(dev): bound realtime SDP answer reads
Keep the OpenAI Realtime WebRTC smoke's SDP offer request in the browser fetch path while moving the browser-side SDP answer reader into a testable helper. Reject unsafe decimal Content-Length values before acquiring a body reader and preserve streamed byte limiting for responses without a safe declared length.

Proof: direct bounded-reader repro rejects unsafe content-length before getReader and cancels the body; node --check --experimental-strip-types scripts/dev/realtime-talk-live-smoke.ts; node --check --experimental-strip-types test/scripts/dev-tooling-safety.test.ts; git diff --check origin/main...HEAD; autoreview clean overall 0.84; exact-head release gate succeeded at https://github.com/openclaw/openclaw/actions/runs/27848673438.
2026-06-20 05:22:56 +08:00
Vincent Koc
0f18e82932 fix(e2e): reject unsafe bounded response text lengths
Reject unsafe decimal Content-Length values in the E2E bounded response text helper before streaming response bodies. Keep non-decimal values on the streaming byte-limit path and add regression coverage proving unsafe declared lengths cancel without starting a read.

Proof: direct patched repro rejects before reading with code ETOOBIG; origin/main comparison entered the reader first; node --check scripts/e2e/lib/bounded-response-text.mjs; git diff --check origin/main...HEAD; autoreview clean overall 0.86; exact-head release gate succeeded at https://github.com/openclaw/openclaw/actions/runs/27846197115.
2026-06-20 04:20:02 +08:00
Vincent Koc
c2c19a883d fix(scripts): reject unsafe bounded response lengths
Reject unsafe decimal Content-Length values in shared scripts bounded-response helpers before streaming response bodies.\n\nValidation:\n- node --check scripts/lib/bounded-response.mjs\n- direct MJS repro for unsafe Content-Length\n- git diff --check origin/main...HEAD\n- autoreview clean, overall patch correct 0.88\n- exact-head release gate https://github.com/openclaw/openclaw/actions/runs/27845767740
2026-06-20 04:04:40 +08:00
Hannes Rudolph
4a0f497f16 improve: simplify PR context and evidence (#94676)
* improve: simplify PR context and evidence

* improve: decouple PR context from proof labels

* fix: satisfy PR context lint
2026-06-19 14:00:38 -06:00
Vincent Koc
bb1043b14c fix(scripts): reject unsafe package download lengths
Reject unsafe decimal package_url Content-Length values before streaming response bodies.\n\nValidation:\n- node --check scripts/resolve-openclaw-package-candidate.mjs\n- direct injected downloadUrl repro for unsafe Content-Length\n- git diff --check origin/main...HEAD\n- autoreview clean, overall patch correct 0.9\n- exact-head release gate https://github.com/openclaw/openclaw/actions/runs/27844538401
2026-06-20 03:36:12 +08:00
Vincent Koc
6cfb025143 fix(e2e): reject unsafe chat tools body lengths
Reject unsafe numeric Content-Length values in the OpenAI chat tools E2E client before waiting on the response stream.

Also hardens Docker E2E heartbeat timing coverage after the exact-head release gate exposed a brittle zero-padded heartbeat assertion.

Verification: direct mock gateway repro, docker heartbeat shell proof, autoreview clean, and exact-head CI release gate https://github.com/openclaw/openclaw/actions/runs/27843455246.
2026-06-20 03:09:51 +08:00
Vincent Koc
17e2fbfa86 fix(test): harden script probe bounds (#95060)
Merged via squash.

Prepared head SHA: 3a51c3c2d7
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com>
Co-authored-by: vincentkoc <25068+vincentkoc@users.noreply.github.com>
Reviewed-by: @vincentkoc
2026-06-20 02:31:40 +08:00
Vincent Koc
2b0a72bb48 fix(release): lazy-load sigstore verification 2026-06-19 20:02:21 +02:00
Josh Lehman
d216f7c876 refactor: use canonical transcript reader identity (#89581)
* refactor: use canonical transcript reader identity

* refactor: keep transcript reader dependency storage-neutral
2026-06-19 10:40:18 -07:00
Vincent Koc
6ef4684b89 fix(scripts): skip generated dist in legacy store guard 2026-06-19 17:22:14 +02:00