Vincent Koc 6cfb025143 fix(e2e): reject unsafe chat tools body lengths ...

Reject unsafe numeric Content-Length values in the OpenAI chat tools E2E client before waiting on the response stream.

Also hardens Docker E2E heartbeat timing coverage after the exact-head release gate exposed a brittle zero-padded heartbeat assertion.

Verification: direct mock gateway repro, docker heartbeat shell proof, autoreview clean, and exact-head CI release gate https://github.com/openclaw/openclaw/actions/runs/27843455246.

2026-06-20 03:09:51 +08:00

..

lib

fix(e2e): reject unsafe chat tools body lengths

2026-06-20 03:09:51 +08:00

parallels

fix(e2e): clear streaming host command timers

2026-06-19 04:37:43 +02:00

agent-bundle-mcp-tools-docker-client.ts

fix(e2e): clean generated docker client state

2026-06-02 01:30:10 +02:00

agent-bundle-mcp-tools-docker.sh

…

agents-delete-shared-workspace-docker.sh

…

browser-cdp-snapshot-docker.sh

fix(e2e): forward browser cdp snapshot limit

2026-06-19 02:40:09 +02:00

build-image.sh

…

bun-global-install-smoke.sh

fix(e2e): validate bun smoke timeout env

2026-06-18 23:07:22 +02:00

bundled-plugin-install-uninstall-docker.sh

fix(e2e): forward bundled upgrade limits

2026-06-19 03:06:36 +02:00

channel-plugin-trust-docker.sh

fix(channel): harden local setup trust (#92175)

2026-06-11 13:48:41 +00:00

codex-media-path-docker.sh

fix(e2e): forward codex media log limit

2026-06-19 03:12:33 +02:00

codex-npm-plugin-live-docker.sh

fix(e2e): defer codex live profile exports

2026-06-19 04:09:10 +02:00

codex-on-demand-docker.sh

…

commitments-safety-docker-client.ts

…

commitments-safety-docker.sh

…

config-reload-source-docker.sh

…

crestodian-first-run-docker-client.ts

fix(e2e): clean generated docker client state

2026-06-02 01:30:10 +02:00

crestodian-first-run-docker.sh

…

crestodian-first-run-spec.json

…

crestodian-planner-docker-client.mjs

…

crestodian-planner-docker.sh

…

crestodian-rescue-docker-client.ts

fix(e2e): clean generated docker client state

2026-06-02 01:30:10 +02:00

crestodian-rescue-docker.sh

…

cron-mcp-cleanup-docker-client.ts

fix(qa): reject loose cron cleanup probe pids

2026-06-16 22:01:44 +02:00

cron-mcp-cleanup-docker.sh

fix(e2e): bound mcp client logs

2026-06-07 11:44:55 +02:00

cron-mcp-cleanup-seed.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

docker-openai-seed.ts

…

Dockerfile

…

Dockerfile.qr-import

…

doctor-install-switch-docker.sh

fix(e2e): forward doctor switch timeouts

2026-06-19 03:21:28 +02:00

gateway-network-docker.sh

fix(e2e): forward gateway network client limits

2026-06-19 02:30:53 +02:00

kitchen-sink-plugin-docker.sh

fix(e2e): forward kitchen sink fixture wait knob

2026-06-19 03:39:04 +02:00

kitchen-sink-rpc-docker.sh

fix(e2e): extend kitchen rpc watchdog

2026-06-19 04:21:10 +02:00

kitchen-sink-rpc-walk.mjs

fix(test): harden script probe bounds (#95060)

2026-06-20 02:31:40 +08:00

live-plugin-tool-docker.sh

fix(e2e): align live timeout wrappers

2026-06-19 04:01:43 +02:00

mcp-channel-limits.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-channels-docker-client.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-channels-docker.sh

fix(e2e): bound mcp client logs

2026-06-07 11:44:55 +02:00

mcp-channels-harness.ts

fix(e2e): share gateway websocket request handling

2026-06-04 08:29:33 +02:00

mcp-channels-seed.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-client-temp-state.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-code-mode-gateway-client.ts

test(e2e): share mcp code mode validation

2026-06-06 18:16:57 +02:00

mcp-code-mode-gateway-docker.sh

fix(e2e): forward code-mode client limits

2026-06-19 02:19:27 +02:00

mcp-code-mode-gateway-live-docker.sh

fix(e2e): forward code-mode client limits

2026-06-19 02:19:27 +02:00

mcp-code-mode-gateway-seed.ts

refactor(scripts): dedupe mcp code-mode fixture

2026-06-18 12:14:01 +08:00

mcp-connect-timeout.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mcp-websocket-open.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

mock-openai-server.mjs

fix(e2e): reject invalid mock fixture ports

2026-06-18 20:28:20 +02:00

multi-node-update-docker.sh

test(e2e): reuse shared image for multi-node updates

2026-06-18 11:42:36 +02:00

npm-onboard-channel-agent-docker.sh

fix(config): preserve raw snapshots after materialization

2026-06-19 09:01:54 +08:00

npm-telegram-live-docker.sh

fix(qa): mount Telegram package output dir

2026-06-17 16:59:35 +05:30

npm-telegram-live-runner.ts

Fold Telegram RTT sampling into live QA evidence (#92550)

2026-06-14 17:02:33 +08:00

onboard-docker.sh

fix(e2e): forward onboard gateway wait knobs

2026-06-19 03:30:17 +02:00

openai-chat-tools-docker.sh

fix(e2e): honor chat tools body limit

2026-06-19 01:59:12 +02:00

openai-image-auth-docker-client.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

openai-image-auth-docker.sh

…

openai-web-search-minimal-docker.sh

…

openwebui-docker.sh

fix(e2e): validate docker e2e ports

2026-06-19 00:09:47 +02:00

openwebui-probe.mjs

fix(e2e): cancel Open WebUI probe body reads

2026-06-19 07:37:28 +02:00

parallels-linux-smoke.sh

fix(scripts): avoid pnpm in parallels smoke wrappers

2026-06-19 16:47:03 +02:00

parallels-macos-smoke.sh

fix(scripts): avoid pnpm in parallels smoke wrappers

2026-06-19 16:47:03 +02:00

parallels-npm-update-smoke.sh

fix(scripts): avoid pnpm in parallels smoke wrappers

2026-06-19 16:47:03 +02:00

parallels-windows-smoke.sh

fix(scripts): avoid pnpm in parallels smoke wrappers

2026-06-19 16:47:03 +02:00

plugin-binding-command-escape-docker.sh

…

plugin-binding-command-escape.Dockerfile

…

plugin-lifecycle-matrix-docker.sh

fix(e2e): forward plugin lifecycle poll interval

2026-06-19 03:56:03 +02:00

plugin-update-unchanged-docker.sh

…

plugins-docker.sh

fix(e2e): forward plugin sweep runtime knobs

2026-06-19 03:46:19 +02:00

qr-import-docker.sh

…

release-media-memory-docker.sh

…

release-plugin-marketplace-docker.sh

…

release-typed-onboarding-docker.sh

…

release-upgrade-user-journey-docker.sh

fix(scripts): avoid downgrade release upgrade baselines

2026-06-16 09:35:39 +02:00

release-user-journey-docker.sh

fix(config): preserve raw snapshots after materialization

2026-06-19 09:01:54 +08:00

secret-provider-integrations.mjs

fix(e2e): require secret probe success

2026-06-07 11:22:43 +02:00

session-runtime-context-docker-client.ts

…

session-runtime-context-docker.sh

…

skill-install-docker.sh

…

status-corrupt-plugin-deps.sh

…

telegram-bot-api.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

telegram-user-crabbox-proof.ts

fix(e2e): reject invalid telegram proof ports

2026-06-18 20:23:01 +02:00

telegram-user-credential-io.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

telegram-user-credential-paths.ts

docs: document repository scripts

2026-06-04 20:52:50 -04:00

telegram-user-credential.ts

fix(e2e): reject loose credential numeric limits

2026-06-18 20:51:36 +02:00

telegram-user-driver.py

…

update-channel-switch-docker.sh

fix(e2e): bound update channel logs

2026-06-07 10:33:14 +02:00

update-corrupt-plugin-docker.sh

…

upgrade-survivor-docker.sh

fix(e2e): forward bundled upgrade limits

2026-06-19 03:06:36 +02:00