Vincent Koc
e451a4e875
fix(qa): measure chunked credential payload bytes
2026-06-20 07:26:49 +02:00
Vincent Koc
2babcf026e
fix(scripts): parse keyed npm tarball metadata
2026-06-20 06:37:27 +02:00
Vincent Koc
9192ff8416
fix(scripts): write Windows markers without BOM
2026-06-20 06:26:11 +02:00
Vincent Koc
118f3f3312
fix(scripts): clear RPC RTT send failure timers
2026-06-20 06:18:57 +02:00
Vincent Koc
b44e39b82c
fix(scripts): redact openwebui probe diagnostics
2026-06-20 06:07:22 +02:00
Vincent Koc
61ee4ffdfc
fix(scripts): guard reused testbox keys
2026-06-20 05:35:10 +02:00
Vincent Koc
4a75171190
fix(scripts): preserve kitchen sink RPC request errors
2026-06-20 11:23:59 +08:00
Vincent Koc
f04c3d6575
fix(qa): sanitize ux evidence artifact paths
2026-06-20 03:46:06 +02:00
Vincent Koc
da03996ab7
fix(test): reject unselected media provider filters
2026-06-20 03:40:50 +02:00
Vincent Koc
622955b3fc
fix(test): guard issue labeler cli args
2026-06-20 03:36:50 +02:00
Vincent Koc
214a28affd
fix(test): reject invalid max loc args
2026-06-20 03:32:08 +02:00
Vincent Koc
033455b6f1
fix(test): guard platform pin cli values
2026-06-20 03:29:15 +02:00
Vincent Koc
8b5b150e02
fix(test): guard platform sync cli values
2026-06-20 03:27:15 +02:00
Vincent Koc
4db7d6a90a
fix(test): guard platform version cli values
2026-06-20 03:24:46 +02:00
Vincent Koc
9491e9187d
fix(test): add env mutation report help
2026-06-20 03:21:21 +02:00
Vincent Koc
e0ec42e0e0
fix(test): restore live media harness entrypoint
2026-06-20 03:18:26 +02:00
Vincent Koc
a971641a54
fix(test): guard claude usage debug args
2026-06-20 03:15:30 +02:00
Vincent Koc
0cf941344c
fix(test): honor shell completion test args
2026-06-20 03:12:16 +02:00
Vincent Koc
e6823c3d16
fix(test): guard model benchmark cli args
2026-06-20 03:06:22 +02:00
Vincent Koc
4b2b70ec79
fix(test): guard gateway benchmark cli args
2026-06-20 03:04:34 +02:00
Vincent Koc
b6d91d96ef
fix(test): guard sqlite benchmark cli args
2026-06-20 03:00:07 +02:00
Vincent Koc
dadec4500f
fix(test): require abort leak snapshot dir value
2026-06-20 02:54:52 +02:00
Vincent Koc
41691a82d5
fix(test): guard discord acp smoke cli args
2026-06-20 02:47:36 +02:00
Vincent Koc
49b0487e5b
fix(test): guard kitchen sink rpc cli args
2026-06-20 02:36:52 +02:00
Vincent Koc
4575734f59
fix(test): guard realtime perf cli args
2026-06-20 02:34:06 +02:00
Vincent Koc
7e7dc7505b
test(docker): stabilize build signal probe ( #95137 )
2026-06-20 08:30:33 +08:00
Vincent Koc
7dca9210c9
fix(test): guard dev smoke cli args
2026-06-20 02:28:04 +02:00
Vincent Koc
87358d7a7c
fix(test): guard model resolution profiler args
2026-06-20 02:22:59 +02:00
Vincent Koc
e02bee6aab
fix(test): guard tui pty watch cli args
2026-06-20 02:19:53 +02:00
Vincent Koc
56c0405018
fix(test): guard benchmark qa cli args
2026-06-20 02:13:13 +02:00
Vincent Koc
b6d754e3cb
fix(macos): create DMG output directories ( #95133 )
2026-06-20 08:11:23 +08:00
Vincent Koc
423b1b3a42
fix(test): clean release check cli errors
2026-06-20 02:08:16 +02:00
Vincent Koc
faeb731a29
fix(test): guard boundary check cli args
2026-06-20 02:05:20 +02:00
Vincent Koc
d6075c1694
fix(test): clean dependency report cli errors
2026-06-20 02:02:37 +02:00
Vincent Koc
a67f809b33
fix(test): clean perf summary cli errors
2026-06-20 02:00:34 +02:00
Vincent Koc
1f1c434ede
fix(test): clean qa report cli errors
2026-06-20 01:58:54 +02:00
Vincent Koc
3c3f1010aa
fix(test): preflight gauntlet missing builds
2026-06-20 01:53:05 +02:00
Vincent Koc
0e980be284
fix(package): ignore stale packed tarballs ( #95126 )
2026-06-20 07:49:25 +08:00
Vincent Koc
27450f6b42
fix(test): honor rpc rtt help flag
2026-06-20 01:44:59 +02:00
Vincent Koc
6fc0a3a9bd
fix(test): chunk broad script test routing
2026-06-20 01:32:13 +02:00
Vincent Koc
be7807f65e
fix(test): stabilize tooling guard probes ( #95114 )
...
* fix(test): release kitchen sink probe readers
* test(github): follow shared guard membership helper
2026-06-20 06:55:40 +08:00
Vincent Koc
ba43be9424
refactor(github): share guard comment helpers
2026-06-20 06:10:37 +08:00
Vincent Koc
d97574aae6
fix(dev): bound realtime SDP answer reads
...
Keep the OpenAI Realtime WebRTC smoke's SDP offer request in the browser fetch path while moving the browser-side SDP answer reader into a testable helper. Reject unsafe decimal Content-Length values before acquiring a body reader and preserve streamed byte limiting for responses without a safe declared length.
Proof: direct bounded-reader repro rejects unsafe content-length before getReader and cancels the body; node --check --experimental-strip-types scripts/dev/realtime-talk-live-smoke.ts; node --check --experimental-strip-types test/scripts/dev-tooling-safety.test.ts; git diff --check origin/main...HEAD; autoreview clean overall 0.84; exact-head release gate succeeded at https://github.com/openclaw/openclaw/actions/runs/27848673438 .
2026-06-20 05:22:56 +08:00
Vincent Koc
45971784c9
test(scripts): stabilize tsdown process group timeout
2026-06-19 23:05:48 +02:00
Vincent Koc
0f18e82932
fix(e2e): reject unsafe bounded response text lengths
...
Reject unsafe decimal Content-Length values in the E2E bounded response text helper before streaming response bodies. Keep non-decimal values on the streaming byte-limit path and add regression coverage proving unsafe declared lengths cancel without starting a read.
Proof: direct patched repro rejects before reading with code ETOOBIG; origin/main comparison entered the reader first; node --check scripts/e2e/lib/bounded-response-text.mjs; git diff --check origin/main...HEAD; autoreview clean overall 0.86; exact-head release gate succeeded at https://github.com/openclaw/openclaw/actions/runs/27846197115 .
2026-06-20 04:20:02 +08:00
Vincent Koc
c2c19a883d
fix(scripts): reject unsafe bounded response lengths
...
Reject unsafe decimal Content-Length values in shared scripts bounded-response helpers before streaming response bodies.\n\nValidation:\n- node --check scripts/lib/bounded-response.mjs\n- direct MJS repro for unsafe Content-Length\n- git diff --check origin/main...HEAD\n- autoreview clean, overall patch correct 0.88\n- exact-head release gate https://github.com/openclaw/openclaw/actions/runs/27845767740
2026-06-20 04:04:40 +08:00
Hannes Rudolph
4a0f497f16
improve: simplify PR context and evidence ( #94676 )
...
* improve: simplify PR context and evidence
* improve: decouple PR context from proof labels
* fix: satisfy PR context lint
2026-06-19 14:00:38 -06:00
Vincent Koc
b5811ea2b3
fix(ci): retry stable closeout package lookup
2026-06-19 21:42:41 +02:00
Vincent Koc
bb1043b14c
fix(scripts): reject unsafe package download lengths
...
Reject unsafe decimal package_url Content-Length values before streaming response bodies.\n\nValidation:\n- node --check scripts/resolve-openclaw-package-candidate.mjs\n- direct injected downloadUrl repro for unsafe Content-Length\n- git diff --check origin/main...HEAD\n- autoreview clean, overall patch correct 0.9\n- exact-head release gate https://github.com/openclaw/openclaw/actions/runs/27844538401
2026-06-20 03:36:12 +08:00
Vincent Koc
6cfb025143
fix(e2e): reject unsafe chat tools body lengths
...
Reject unsafe numeric Content-Length values in the OpenAI chat tools E2E client before waiting on the response stream.
Also hardens Docker E2E heartbeat timing coverage after the exact-head release gate exposed a brittle zero-padded heartbeat assertion.
Verification: direct mock gateway repro, docker heartbeat shell proof, autoreview clean, and exact-head CI release gate https://github.com/openclaw/openclaw/actions/runs/27843455246 .
2026-06-20 03:09:51 +08:00