惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

F
Full Disclosure
Recorded Future
Recorded Future
T
Tenable Blog
S
Securelist
C
CERT Recently Published Vulnerability Notes
T
Threatpost
S
Schneier on Security
A
Arctic Wolf
The Hacker News
The Hacker News
C
CXSECURITY Database RSS Feed - CXSecurity.com
Know Your Adversary
Know Your Adversary
P
Privacy International News Feed
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
The Register - Security
The Register - Security
Cisco Talos Blog
Cisco Talos Blog
AWS News Blog
AWS News Blog
K
Kaspersky official blog
T
True Tiger Recordings
T
Threat Research - Cisco Blogs
V
Vulnerabilities – Threatpost
P
Palo Alto Networks Blog
T
The Exploit Database - CXSecurity.com
小众软件
小众软件
B
Blog
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
Microsoft Azure Blog
Microsoft Azure Blog
Cyberwarzone
Cyberwarzone
C
Cybersecurity and Infrastructure Security Agency CISA
T
Tor Project blog
Spread Privacy
Spread Privacy
Malwarebytes
Malwarebytes
P
Proofpoint News Feed
F
Fox-IT International blog
F
Fortinet All Blogs
P
Privacy & Cybersecurity Law Blog
G
GRAHAM CLULEY
量子位
Latest news
Latest news
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
博客园 - 叶小钗
Project Zero
Project Zero
T
Tailwind CSS Blog
N
Netflix TechBlog - Medium
Martin Fowler
Martin Fowler
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
I
Intezer
博客园_首页
腾讯CDC
H
Hackread – Cybersecurity News, Data Breaches, AI and More
D
Darknet – Hacking Tools, Hacker News & Cyber Security

Recent Commits to openclaw:main

fix(qa): cap Matrix readiness polling · openclaw/openclaw@099b0f8 fix(cli): validate directory limits before resolution · openclaw/openclaw@513a223 fix(cli): reject loose webhook and directory numeric options · openclaw/openclaw@0889106 fix(agents): keep runtime context before active user turns · openclaw/openclaw@0503853 fix(qa): stop Matrix phases after run timeout · openclaw/openclaw@f4b9d24 fix(agents): strip stale Anthropic thinking · openclaw/openclaw@66965f5 fix(doctor): validate bundled MCP tool schemas · openclaw/openclaw@a02fe52 fix(qa): kill timed out Matrix CLI runs · openclaw/openclaw@b8fc2f6 fix(dev): bound discord smoke waits · openclaw/openclaw@545ad7f feat(pixverse): add api region selection · openclaw/openclaw@b3083de feat(pixverse): add video generation provider · openclaw/openclaw@c183705 chore(pixverse): publish as external plugin · openclaw/openclaw@5366209 fix(qa): tolerate fast Matrix tool replies · openclaw/openclaw@a46e839 refactor: remove channel turn runtime aliases · openclaw/openclaw@6c37402 fix(lint): clean manifest registry installed checks · openclaw/openclaw@fd648ed fix(scripts): resolve npm package candidates through npm runner · openclaw/openclaw@7a7d9de fix(qa): hide Matrix tool progress marker in workspace · openclaw/openclaw@42f3550 fix(usage): forward cached token usage in chat completions (#82062) · openclaw/openclaw@12e5876 test(codex): align provider claim expectation · openclaw/openclaw@42387af perf(gateway): cache stable plugin index fingerprints · openclaw/openclaw@2babe03 fix(test): scan kitchen rpc readiness logs incrementally · openclaw/openclaw@1d4537a fix(test): fail startup bench on bad samples · openclaw/openclaw@8c6da93 fix(onboard): preserve agents.list and bindings on rerun · openclaw/openclaw@bbdff39 fix: send bare direct Anthropic model ids · openclaw/openclaw@aa0a290 fix(deepinfra): load all DeepInfra models when user wants to browse t… fix(package): honor dist package exclusions in inventory · openclaw/openclaw@296fbde fix(qa): harden Matrix tool progress scenario · openclaw/openclaw@32b3fb6 fix(package): match npm globstar exclusions · openclaw/openclaw@f4bcd61 fix: preserve channel runResolved mock compatibility · openclaw/openclaw@c89298f fix(test): bound config reload log polling · openclaw/openclaw@329dad2 fix(lint): preserve JSONL parse cause · openclaw/openclaw@d6949d5 test(e2e): preserve macos smoke entrypoint path · openclaw/openclaw@5eba765 fix(test): await mcp timeout cleanup · openclaw/openclaw@109ba23 fix(test): harden mcp channel ws timeout · openclaw/openclaw@a4a75a8 fix(test): harden gateway network ws timeout · openclaw/openclaw@e50b20f fix(agents/harness): validate forced plugin harness support before pi… · openclaw/openclaw@730ac1a fix(test): bound codex media path log polling · openclaw/openclaw@40a2600 test: align extension inbound context assertions · openclaw/openclaw@98c0ad8 fix(install): skip Homebrew until macOS packages need it · openclaw/openclaw@527b7c2 fix(ci): bound additional boundary checks · openclaw/openclaw@351aac9 fix(release): reject empty beta smoke runs · openclaw/openclaw@4dfc2cf fix(build): cap tsdown heap in containers · openclaw/openclaw@e8dde30 fix(docker): skip declarations in runtime packages · openclaw/openclaw@cc662ba fix(package): omit unpacked test helpers from inventory · openclaw/openclaw@6c42fea fix(crabbox): reinitialize invalid changed-gate git dirs · openclaw/openclaw@ecdc925 fix(lint): shard core lint checks · openclaw/openclaw@1ba4448 fix(lint): cap oxlint helper memory locally · openclaw/openclaw@8caa44f fix(lint): split source lint shards · openclaw/openclaw@158bc69 fix(crabbox): full-sync local sparse container runs · openclaw/openclaw@b3e3b1b fix(test): enable live cache script gates · openclaw/openclaw@72c6813 fix(test): reject unknown live media providers · openclaw/openclaw@51dd548 fix(cli): reject loose model and gateway numeric options · openclaw/openclaw@6b391ef refactor: centralize inbound supplemental context · openclaw/openclaw@1507a97 fix(test): reject empty gateway cpu runs · openclaw/openclaw@ad3d197 fix(test): fail empty plugin gauntlet runs · openclaw/openclaw@b460ee4 fix: load Claude CLI OAuth for PI auth profiles (#87167) · openclaw/openclaw@cc704ca fix(agents): ignore failed subagent placeholders fix(agents): report approval resolutions in bridge mode · openclaw/openclaw@88bbc5b fix(qa): keep fallback delivery on latest targets fix(agents): preserve bridge hook context · openclaw/openclaw@2c3190d fix(qa): close remaining mock qa e2e regressions · openclaw/openclaw@14198a1 fix(qa): isolate mock bridge hook state · openclaw/openclaw@35248be fix(qa): stabilize mock QA scenario contracts · openclaw/openclaw@81c1892 fix(agents): classify direct fallback targets by channel grammar · openclaw/openclaw@79f7b93 fix(qa): scope mock image prompts to latest turn · openclaw/openclaw@c2d059d fix(agents): suppress Write/Edit failed warning on response-timeout f… · openclaw/openclaw@7e702bb fix(cron): surface classified run failure causes · openclaw/openclaw@3104f36 fix(test): fail empty extension test requests · openclaw/openclaw@57b1c0b fix(cli): reject loose numeric options · openclaw/openclaw@c95d348 docs(providers/openai): clarify OpenAI Realtime Platform credits · openclaw/openclaw@717003a fix(codex): keep attempt watchdog for queued terminal turns · openclaw/openclaw@ca990f2 fix(qqbot): gate fallback approval buttons (#87154) · openclaw/openclaw@08a73db fix(test): fail explicit empty vitest runs · openclaw/openclaw@7615c31 ci: fall back from stale workflow dispatch refs · openclaw/openclaw@8d99037 fix(lint): serialize oxlint shards on constrained hosts · openclaw/openclaw@c93b7d8 fix: reject partial numeric CLI options fix(agents): avoid duplicate Claude CLI skill prompts · openclaw/openclaw@f4e20f8 test: harden e2e instance package fixture fix(codex): preserve raw reasoning source-reply guard · openclaw/openclaw@284098d test(codex): verify completion idle watch arms after non-assistant ra… · openclaw/openclaw@4d6bcf9 fix(codex): keep raw assistant release path intact · openclaw/openclaw@4314ead test(codex): mirror raw reasoning event order · openclaw/openclaw@e718d47 fix(codex): arm completion idle watch after rawResponseItem/completed… · openclaw/openclaw@a36c82b fix(node-host): restart stale node host on version mismatch · openclaw/openclaw@819fd9f fix(e2e): bound tool search gateway proof · openclaw/openclaw@761c802 fix(discord): harden requester checks for guild actions · openclaw/openclaw@9ed1b02 fix: let skills JSON output flush naturally · openclaw/openclaw@84b1123 fix: support plugin generated help targets · openclaw/openclaw@ec377dd fix: route generated help targets to subcommands · openclaw/openclaw@1de9848 fix: validate gateway call timeouts · openclaw/openclaw@f407e4e fix: mark plugin command groups in root help · openclaw/openclaw@482018e fix: route nested root help targets · openclaw/openclaw@2bbef6c fix: keep root help plugin descriptor loading quiet · openclaw/openclaw@ef2ebee fix: preserve root options in generated help · openclaw/openclaw@b31c9e9 fix: route root help targets to command help · openclaw/openclaw@5f6293a fix: normalize generated help self-help · openclaw/openclaw@9015d0c perf(secrets): propagate snapshots and eliminate esm side-effects in … test: stabilize main ci lanes · openclaw/openclaw@f327df8 perf(gateway): keep agent session working store active-only · openclaw/openclaw@54eca3f test(e2e): harden shell helper env assertions · openclaw/openclaw@e6937f9
fix(test): bound qa otel receiver bodies · openclaw/openclaw@83ab0ba
vincentkoc · 2026-05-27 · via Recent Commits to openclaw:main

@@ -8,6 +8,7 @@ import { createServer, type IncomingMessage, type ServerResponse } from "node:ht

88

import { Socket } from "node:net";

99

import { tmpdir } from "node:os";

1010

import path from "node:path";

11+

import { pathToFileURL } from "node:url";

1112

import { gunzipSync } from "node:zlib";

12131314

type CollectorMode = "local" | "docker";

@@ -92,9 +93,7 @@ const REQUIRED_SPAN_NAMES = [

9293

"openclaw.context.assembled",

9394

"openclaw.message.delivery",

9495

] as const;

95-

const REQUIRED_METRIC_NAMES = [

96-

"openclaw.harness.duration_ms",

97-

] as const;

96+

const REQUIRED_METRIC_NAMES = ["openclaw.harness.duration_ms"] as const;

9897

const DISALLOWED_ATTRIBUTE_KEYS = new Set([

9998

"openclaw.runId",

10099

"openclaw.chatId",

@@ -111,11 +110,37 @@ const DISALLOWED_ATTRIBUTE_KEYS = new Set([

111110

"openclaw.call_id",

112111

"openclaw.tool_call_id",

113112

]);

114-

const DISALLOWED_BODY_NEEDLES = [

115-

"OTEL-QA-SECRET",

116-

"OTEL-QA-OK",

117-

];

113+

const DISALLOWED_BODY_NEEDLES = ["OTEL-QA-SECRET", "OTEL-QA-OK"];

118114

const COLLECTOR_OUTPUT_TAIL_BYTES = 16_000;

115+

const MAX_OTLP_COMPRESSED_BODY_BYTES = readPositiveIntegerEnv(

116+

"OPENCLAW_QA_OTEL_MAX_COMPRESSED_BODY_BYTES",

117+

2 * 1024 * 1024,

118+

);

119+

const MAX_OTLP_DECODED_BODY_BYTES = readPositiveIntegerEnv(

120+

"OPENCLAW_QA_OTEL_MAX_DECODED_BODY_BYTES",

121+

8 * 1024 * 1024,

122+

);

123+

const MAX_CAPTURED_BODY_TEXT_BYTES = readPositiveIntegerEnv(

124+

"OPENCLAW_QA_OTEL_MAX_CAPTURED_BODY_TEXT_BYTES",

125+

512 * 1024,

126+

);

127+128+

function readPositiveIntegerEnv(name: string, fallback: number): number {

129+

const parsed = Number.parseInt(process.env[name] ?? "", 10);

130+

return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;

131+

}

132+133+

function oversizedBodyError(

134+

label: string,

135+

actualBytes: number,

136+

maxBytes: number,

137+

): Error & {

138+

statusCode: number;

139+

} {

140+

return Object.assign(new Error(`${label} exceeded ${maxBytes} bytes: ${actualBytes} bytes`), {

141+

statusCode: 413,

142+

});

143+

}

119144120145

function usage(): string {

121146

return `Usage: pnpm qa:otel:smoke [--collector local|docker] [--output-dir <path>] [--provider-mode <mode>] [--scenario <id>] [--model <ref>] [--alt-model <ref>]

@@ -184,10 +209,20 @@ function disallowedBodyNeedles(options: CliOptions): string[] {

184209

return [...needles];

185210

}

186211187-

async function readRequestBody(req: IncomingMessage): Promise<Buffer> {

212+

async function readRequestBody(

213+

req: IncomingMessage,

214+

maxBytes = MAX_OTLP_COMPRESSED_BODY_BYTES,

215+

): Promise<Buffer> {

188216

const chunks: Buffer[] = [];

217+

let totalBytes = 0;

189218

for await (const chunk of req) {

190-

chunks.push(Buffer.from(chunk));

219+

const buffer = Buffer.from(chunk);

220+

totalBytes += buffer.length;

221+

if (totalBytes > maxBytes) {

222+

req.destroy();

223+

throw oversizedBodyError("compressed OTLP request body", totalBytes, maxBytes);

224+

}

225+

chunks.push(buffer);

191226

}

192227

return Buffer.concat(chunks);

193228

}

@@ -196,17 +231,68 @@ function headerValue(value: string | string[] | undefined): string | undefined {

196231

return Array.isArray(value) ? value[0] : value;

197232

}

198233199-

function decodeRequestBody(body: Buffer, contentEncoding: string | undefined): Buffer {

234+

function decodeRequestBody(

235+

body: Buffer,

236+

contentEncoding: string | undefined,

237+

maxBytes = MAX_OTLP_DECODED_BODY_BYTES,

238+

): Buffer {

200239

const normalizedEncoding = contentEncoding?.trim().toLowerCase();

240+

if (body.length > maxBytes && (!normalizedEncoding || normalizedEncoding === "identity")) {

241+

throw oversizedBodyError("OTLP request body", body.length, maxBytes);

242+

}

201243

if (!normalizedEncoding || normalizedEncoding === "identity") {

202244

return body;

203245

}

204246

if (normalizedEncoding === "gzip") {

205-

return gunzipSync(body);

247+

let decoded: Buffer;

248+

try {

249+

decoded = gunzipSync(body, { maxOutputLength: maxBytes });

250+

} catch (error) {

251+

const code = (error as { code?: unknown }).code;

252+

const message = error instanceof Error ? error.message : String(error);

253+

if (code === "ERR_BUFFER_TOO_LARGE" || /maxOutputLength|larger than/u.test(message)) {

254+

throw oversizedBodyError("decoded OTLP request body", maxBytes + 1, maxBytes);

255+

}

256+

throw error;

257+

}

258+

if (decoded.length > maxBytes) {

259+

throw oversizedBodyError("decoded OTLP request body", decoded.length, maxBytes);

260+

}

261+

return decoded;

206262

}

207263

throw new Error(`unsupported OTLP content-encoding ${contentEncoding}`);

208264

}

209265266+

function appendCapturedBodyText(

267+

capturedBodyText: Partial<Record<OtlpSignal, string[]>>,

268+

signal: OtlpSignal,

269+

body: Buffer,

270+

maxBytes = MAX_CAPTURED_BODY_TEXT_BYTES,

271+

disallowedNeedles: string[] = [],

272+

): void {

273+

const currentEntries = capturedBodyText[signal] ?? [];

274+

const leakEntries = currentEntries.filter((entry) => entry.startsWith("[detected leak needle] "));

275+

const currentTail = currentEntries

276+

.filter((entry) => !entry.startsWith("[detected leak needle] "))

277+

.join("\n");

278+

const bodyText = body.toString("utf8");

279+

const next = currentTail ? `${currentTail}\n${bodyText}` : bodyText;

280+

const buffer = Buffer.from(next);

281+

const nextLeakEntries = [

282+

...leakEntries,

283+

...disallowedNeedles

284+

.filter((needle) => bodyText.includes(needle))

285+

.map((needle) => `[detected leak needle] ${needle}`),

286+

].slice(-20);

287+

const tailEntry =

288+

buffer.length > maxBytes

289+

? `[captured body text truncated to last ${maxBytes} bytes]\n${buffer

290+

.subarray(buffer.length - maxBytes)

291+

.toString("utf8")}`

292+

: next;

293+

capturedBodyText[signal] = [...nextLeakEntries, tailEntry];

294+

}

295+210296

function normalizeOtlpValue(value: OtlpAnyValue | undefined): string | number | boolean | string[] {

211297

if (!value) {

212298

return "";

@@ -250,9 +336,12 @@ function spanAttributes(span: OtlpSpan): Record<string, string | number | boolea

250336

}

251337252338

class ProtoReader {

339+

private readonly buffer: Uint8Array;

253340

private offset = 0;

254341255-

constructor(private readonly buffer: Uint8Array) {}

342+

constructor(buffer: Uint8Array) {

343+

this.buffer = buffer;

344+

}

256345257346

done(): boolean {

258347

return this.offset >= this.buffer.length;

@@ -580,7 +669,7 @@ function decodeLogRequest(body: Buffer): CapturedLogRecord[] {

580669

return records;

581670

}

582671583-

function startLocalOtlpReceiver() {

672+

function startLocalOtlpReceiver(disallowedBodyNeedles: string[] = []) {

584673

const capturedRequests: CapturedRequest[] = [];

585674

const capturedSpans: CapturedSpan[] = [];

586675

const capturedMetrics: CapturedMetric[] = [];

@@ -600,9 +689,30 @@ function startLocalOtlpReceiver() {

600689

return;

601690

}

602691603-

const compressedBody = await readRequestBody(req);

604692

const contentEncoding = headerValue(req.headers["content-encoding"]);

605-

const body = decodeRequestBody(compressedBody, contentEncoding);

693+

let body: Buffer;

694+

try {

695+

const compressedBody = await readRequestBody(req);

696+

body = decodeRequestBody(compressedBody, contentEncoding);

697+

} catch (error) {

698+

const statusCode =

699+

typeof (error as { statusCode?: unknown }).statusCode === "number"

700+

? (error as { statusCode: number }).statusCode

701+

: 400;

702+

capturedRequests.push({

703+

path: requestPath,

704+

signal,

705+

bytes: 0,

706+

contentEncoding,

707+

status: statusCode,

708+

spanCount: 0,

709+

metricCount: 0,

710+

logCount: 0,

711+

});

712+

res.writeHead(statusCode, { "content-type": "text/plain" });

713+

res.end(error instanceof Error ? error.message : String(error));

714+

return;

715+

}

606716

const spans = signal === "traces" ? decodeTraceRequest(body) : [];

607717

const metrics = signal === "metrics" ? decodeMetricRequest(body) : [];

608718

const logRecords = signal === "logs" ? decodeLogRequest(body) : [];

@@ -615,8 +725,7 @@ function startLocalOtlpReceiver() {

615725

if (logRecords.length > 0) {

616726

capturedLogRecords.push(...logRecords);

617727

}

618-

capturedBodyText[signal] ??= [];

619-

capturedBodyText[signal]?.push(body.toString("utf8"));

728+

appendCapturedBodyText(capturedBodyText, signal, body, undefined, disallowedBodyNeedles);

620729

capturedRequests.push({

621730

path: requestPath,

622731

signal,

@@ -774,21 +883,13 @@ service:

774883

containerName,

775884

...(useHostNetwork

776885

? ["--network", "host"]

777-

: [

778-

"--add-host=host.docker.internal:host-gateway",

779-

"-p",

780-

`127.0.0.1:${collectorPort}:4318`,

781-

]),

886+

: ["--add-host=host.docker.internal:host-gateway", "-p", `127.0.0.1:${collectorPort}:4318`]),

782887

"-v",

783888

`${configPath}:/etc/otelcol/config.yaml:ro`,

784889

DEFAULT_DOCKER_COLLECTOR_IMAGE,

785890

"--config=/etc/otelcol/config.yaml",

786891

];

787-

const child = spawn(

788-

"docker",

789-

dockerArgs,

790-

{ stdio: ["ignore", "pipe", "pipe"] },

791-

);

892+

const child = spawn("docker", dockerArgs, { stdio: ["ignore", "pipe", "pipe"] });

792893

child.stdout?.on("data", (chunk) => stdout.push(String(chunk)));

793894

child.stderr?.on("data", (chunk) => stderr.push(String(chunk)));

794895

child.on("error", (err) => {

@@ -936,7 +1037,7 @@ function hasRequiredSmokeSignals(receiver: ReturnType<typeof startLocalOtlpRecei

9361037

REQUIRED_METRIC_NAMES.every((name) => metricNames.has(name)) &&

9371038

receiver.capturedLogRecords.length > 0 &&

9381039

["traces", "metrics", "logs"].every((signal) =>

939-

receiver.capturedRequests.some((request) => request.signal === signal)

1040+

receiver.capturedRequests.some((request) => request.signal === signal),

9401041

)

9411042

);

9421043

}

@@ -1021,9 +1122,7 @@ function assertSmoke(params: {

10211122

.map((record) => record.body)

10221123

.filter((body) => body !== "log");

10231124

if (rawLogBodies.length > 0) {

1024-

failures.push(

1025-

`OTLP log records exported ${rawLogBodies.length} non-placeholder bodies`,

1026-

);

1125+

failures.push(`OTLP log records exported ${rawLogBodies.length} non-placeholder bodies`);

10271126

}

1028112710291128

const attributeKeys = collectAttributeKeys(params.spans);

@@ -1094,7 +1193,7 @@ async function main() {

10941193

}

1095119410961195

await mkdir(options.outputDir, { recursive: true });

1097-

const receiver = startLocalOtlpReceiver();

1196+

const receiver = startLocalOtlpReceiver(disallowedBodyNeedles(options));

10981197

const port = await receiver.listen();

10991198

process.stdout.write(

11001199

`qa-otel-smoke: local OTLP receiver listening on http://127.0.0.1:${port}\n`,

@@ -1216,9 +1315,17 @@ async function main() {

12161315

);

12171316

}

121813171219-

main().catch((error) => {

1220-

process.stderr.write(

1221-

`qa-otel-smoke: ${error instanceof Error ? error.stack || error.message : String(error)}\n`,

1222-

);

1223-

process.exitCode = 1;

1224-

});

1318+

export const testing = {

1319+

appendCapturedBodyText,

1320+

decodeRequestBody,

1321+

readRequestBody,

1322+

};

1323+1324+

if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {

1325+

main().catch((error) => {

1326+

process.stderr.write(

1327+

`qa-otel-smoke: ${error instanceof Error ? error.stack || error.message : String(error)}\n`,

1328+

);

1329+

process.exitCode = 1;

1330+

});

1331+

}