Vincent Koc d97574aae6 fix(dev): bound realtime SDP answer reads ...

Keep the OpenAI Realtime WebRTC smoke's SDP offer request in the browser fetch path while moving the browser-side SDP answer reader into a testable helper. Reject unsafe decimal Content-Length values before acquiring a body reader and preserve streamed byte limiting for responses without a safe declared length.

Proof: direct bounded-reader repro rejects unsafe content-length before getReader and cancels the body; node --check --experimental-strip-types scripts/dev/realtime-talk-live-smoke.ts; node --check --experimental-strip-types test/scripts/dev-tooling-safety.test.ts; git diff --check origin/main...HEAD; autoreview clean overall 0.84; exact-head release gate succeeded at https://github.com/openclaw/openclaw/actions/runs/27848673438.

2026-06-20 05:22:56 +08:00

..

discord-acp-plain-language-smoke.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

gateway-smoke.ts

fix(dev): align gateway smoke auth contract

2026-06-07 12:07:05 +02:00

gateway-ws-client.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

ios-node-e2e.ts

fix(ios): reject malformed node e2e wait seconds

2026-06-16 20:20:46 +02:00

ios-pull-gateway-log.sh

fix(dev): harden smoke log diagnostics

2026-06-07 08:42:16 +02:00

realtime-talk-live-smoke.ts

fix(dev): bound realtime SDP answer reads

2026-06-20 05:22:56 +08:00

test-device-pair-telegram.ts

fix(dev): lazy-load telegram pairing smoke

2026-06-07 08:48:40 +02:00

tui-pty-test-watch.ts

fix(dev): harden smoke log diagnostics

2026-06-07 08:42:16 +02:00