惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Security Archives - TechRepublic
Security Archives - TechRepublic
T
The Exploit Database - CXSecurity.com
P
Proofpoint News Feed
Scott Helme
Scott Helme
NISL@THU
NISL@THU
Cisco Talos Blog
Cisco Talos Blog
C
Cybersecurity and Infrastructure Security Agency CISA
AWS News Blog
AWS News Blog
V
Vulnerabilities – Threatpost
J
Java Code Geeks
U
Unit 42
The GitHub Blog
The GitHub Blog
H
Help Net Security
T
Tenable Blog
aimingoo的专栏
aimingoo的专栏
Jina AI
Jina AI
Spread Privacy
Spread Privacy
Apple Machine Learning Research
Apple Machine Learning Research
人人都是产品经理
人人都是产品经理
L
Lohrmann on Cybersecurity
T
Threatpost
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Engineering at Meta
Engineering at Meta
A
About on SuperTechFans
I
InfoQ
Microsoft Azure Blog
Microsoft Azure Blog
B
Blog
L
LINUX DO - 最新话题
K
Kaspersky official blog
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
T
Threat Research - Cisco Blogs
C
Check Point Blog
T
The Blog of Author Tim Ferriss
有赞技术团队
有赞技术团队
宝玉的分享
宝玉的分享
Help Net Security
Help Net Security
Google DeepMind News
Google DeepMind News
A
Arctic Wolf
Y
Y Combinator Blog
N
News | PayPal Newsroom
M
MIT News - Artificial intelligence
Latest news
Latest news
H
Hacker News: Front Page
Blog — PlanetScale
Blog — PlanetScale
腾讯CDC
I
Intezer
爱范儿
爱范儿
F
Fortinet All Blogs
P
Palo Alto Networks Blog
C
CERT Recently Published Vulnerability Notes

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4 test: trim doctor command hotspots · openclaw/openclaw@c66f16a test: isolate agent auth and spawn hotspots · openclaw/openclaw@9285935 test: stabilize MCP startup disposal race · openclaw/openclaw@dd9d2eb test: merge browser contract server suites · openclaw/openclaw@5817a76 test: narrow ollama provider discovery setup · openclaw/openclaw@a0d9598 build: declare qa-lab aimock runtime dependency · openclaw/openclaw@24431e5 test: speed up safe-bins exec harness · openclaw/openclaw@ee856ab test: preserve tool helpers in embedded runner mocks · openclaw/openclaw@acd86a0 refactor: move memory embeddings into provider plugins · openclaw/openclaw@77e6e4c test: reuse system-run temp fixtures · openclaw/openclaw@7e9ff0f test: trim hotspot wait overhead · openclaw/openclaw@12a59b0 Check: avoid duplicate boundary prep · openclaw/openclaw@baf11b8 test: reduce hotspot fixture overhead · openclaw/openclaw@3a59edd feat(ui): overhaul settings and slash command UX (#67819) thanks @Bun… · openclaw/openclaw@2cfb660 QA Matrix: exit cleanly on failure · openclaw/openclaw@42805d2 QA Matrix: isolate scenario coverage · openclaw/openclaw@7e659e1 Matrix: refresh crypto bootstrap state · openclaw/openclaw@94081d8 QA Lab: add provider registry · openclaw/openclaw@bb7e982 Matrix: add plugin changelog · openclaw/openclaw@4acab55 test: trim more hotspot overhead · openclaw/openclaw@f485311 test: trim remaining hotspot tests · openclaw/openclaw@6ba8626 test: narrow hotspot mocks · openclaw/openclaw@dbc8179 test: isolate gemini embedding request helpers · openclaw/openclaw@cd330f5 test: trim memory and mcp hotspots · openclaw/openclaw@fd48dfa test: slim provider registry mocks · openclaw/openclaw@2e08c77 test: harden Parallels update smoke · openclaw/openclaw@1a98090 feat: default Anthropic to Opus 4.7 · openclaw/openclaw@628b454 fix: harden node-host shell payload mutability checks · openclaw/openclaw@75c551e fix: land node-host approval binding for native binaries (#66731) (th… · openclaw/openclaw@29919bb CI: add daily schedule to CodeQL workflow (#67645) · openclaw/openclaw@69d25f5 fix(gateway): capture config hash after plugin auto-enable to prevent… · openclaw/openclaw@8c11210 fix: repair sanitized replay tool results before send (#67620) (thank… · openclaw/openclaw@c3c7a99 fix: restrict HTML timeout short-circuit to transient statuses · openclaw/openclaw@de129a6 fix: keep TUI watchdog bound to active run (#67401) (thanks @xantorres) · openclaw/openclaw@3525273 Gateway/skills: dedupe skills prefix-match + drop dead fallback on log · openclaw/openclaw@d7f489f Extensions/lmstudio: back off inference preload after consecutive fai… · openclaw/openclaw@b555214 TUI/streaming: add watchdog that resets the activity indicator after … · openclaw/openclaw@f44ab20 Agents/tool-loop: enable unknown-tool stream guard by default · openclaw/openclaw@36ed367 Gateway/skills: invalidate session skills snapshot on config write · openclaw/openclaw@b23d59a fix: classify HTML provider error pages correctly (#67642) (thanks @s… · openclaw/openclaw@e588e90 fix(skills): remove unused model-usage import (#67641) · openclaw/openclaw@55f05df docs(changelog): credit codex fix superseded PRs · openclaw/openclaw@e485f24 fix(openai-codex): normalize stale transport metadata in resolution a… · openclaw/openclaw@90801ba CI: pin Docker-related GitHub Actions (#67632) · openclaw/openclaw@f697b01 Android: modernize WebView and discovery API usage (#67627) · openclaw/openclaw@44a6e50 fix(deps): bump hono to 4.12.14 and @hono/node-server to 1.19.14 (GHS… · openclaw/openclaw@fbccc18 fix(deps): bump dompurify to 3.4.0 (#67614) · openclaw/openclaw@2c2dc00 CI: add explicit permissions to all workflow jobs (fixes code-scannin… · openclaw/openclaw@01b7516 fix: register bundled TTS providers and route overrides correctly (#6… · openclaw/openclaw@6ea3cdd fix: align host tilde paths with OS home (#62804) (thanks @stainlu) · openclaw/openclaw@ecfaf64 fix: flush creds queue before reconnect socket open (#67464) (thanks … · openclaw/openclaw@405c63f fix: strip standalone <function> tool call tags from visible text (#6… · openclaw/openclaw@78df859 fix(agents): preserve cli session metadata before transcript persist … · openclaw/openclaw@898fd04 docs(changelog): move cli transcript entry · openclaw/openclaw@c1817c6 fix(agents): normalize cli transcript api field · openclaw/openclaw@3a3fae0 docs(changelog): note cli transcript persistence · openclaw/openclaw@6c343f1 fix(agents): persist cli transcript turns · openclaw/openclaw@b8ef507 fix(msteams): harden security-sensitive flows (#65841) · openclaw/openclaw@c56b56e [Dashboard] Fix exec approval modal overflow for long command content… · openclaw/openclaw@053c5b0 Docs: remove QA changelog entry · openclaw/openclaw@7fd5771 QA: fix private runtime source loading (#67428) · openclaw/openclaw@d5933af docs(gateway): correct protocol.md schema path, hello-ok example, aut… · openclaw/openclaw@489404d CI: pin Node 22 runners to 22.18.0 · openclaw/openclaw@4ffa621 models.authStatus: normalize provider ids + tighten env-backed escape… · openclaw/openclaw@f2fdb9d Update CHANGELOG.md · openclaw/openclaw@7694a92 test(parallels): clean up npm update guard jobs · openclaw/openclaw@045ea7b Plugins: prefer scanDir override paths · openclaw/openclaw@b2974da fix(dreaming): default storage.mode to "separate" so phase blocks sto… · openclaw/openclaw@8c392f0 fix(memory-core): skip dreaming transcript ingestion via session stor… · openclaw/openclaw@a1b01f0 fix: dedupe replayed exec.finished node events (#67281) · openclaw/openclaw@5dcf526
refactor(plugins): split bundled runtime deps helpers · openclaw/openclaw@9d03cd1
steipete · 2026-04-30 · via Recent Commits to openclaw:main

@@ -0,0 +1,303 @@

1+

import fs from "node:fs";

2+

import path from "node:path";

3+

import { getProcessStartTime } from "../shared/pid-alive.js";

4+5+

export const BUNDLED_RUNTIME_DEPS_LOCK_DIR = ".openclaw-runtime-deps.lock";

6+7+

const BUNDLED_RUNTIME_DEPS_LOCK_OWNER_FILE = "owner.json";

8+

const BUNDLED_RUNTIME_DEPS_LOCK_WAIT_MS = 100;

9+

const BUNDLED_RUNTIME_DEPS_LOCK_TIMEOUT_MS = 5 * 60_000;

10+

const BUNDLED_RUNTIME_DEPS_LOCK_STALE_MS = 10 * 60_000;

11+

const BUNDLED_RUNTIME_DEPS_OWNERLESS_LOCK_STALE_MS = 30_000;

12+13+

type RuntimeDepsLockOwner = {

14+

pid?: number;

15+

starttime?: number;

16+

createdAtMs?: number;

17+

ownerFileState: "ok" | "missing" | "invalid";

18+

ownerFilePath: string;

19+

ownerFileMtimeMs?: number;

20+

ownerFileIsSymlink?: boolean;

21+

lockDirMtimeMs?: number;

22+

};

23+24+

const CURRENT_PROCESS_STARTTIME = getProcessStartTime(process.pid);

25+26+

function sleepSync(ms: number): void {

27+

Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);

28+

}

29+30+

async function sleep(ms: number): Promise<void> {

31+

await new Promise((resolve) => setTimeout(resolve, ms));

32+

}

33+34+

function isProcessAlive(pid: number): boolean {

35+

if (!Number.isInteger(pid) || pid <= 0) {

36+

return false;

37+

}

38+

try {

39+

process.kill(pid, 0);

40+

return true;

41+

} catch (error) {

42+

return (error as NodeJS.ErrnoException).code === "EPERM";

43+

}

44+

}

45+46+

function readRuntimeDepsLockOwner(lockDir: string): RuntimeDepsLockOwner {

47+

const ownerFilePath = path.join(lockDir, BUNDLED_RUNTIME_DEPS_LOCK_OWNER_FILE);

48+

let owner: Record<string, unknown> | null = null;

49+

let ownerFileState: RuntimeDepsLockOwner["ownerFileState"] = "missing";

50+

let ownerFileMtimeMs: number | undefined;

51+

let ownerFileIsSymlink: boolean | undefined;

52+

try {

53+

const ownerFileStat = fs.lstatSync(ownerFilePath);

54+

ownerFileMtimeMs = ownerFileStat.mtimeMs;

55+

ownerFileIsSymlink = ownerFileStat.isSymbolicLink();

56+

} catch {

57+

// The owner file may not exist yet, or may have been removed by the lock owner.

58+

}

59+

try {

60+

const parsed = JSON.parse(fs.readFileSync(ownerFilePath, "utf8")) as unknown;

61+

if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {

62+

owner = parsed as Record<string, unknown>;

63+

ownerFileState = "ok";

64+

} else {

65+

ownerFileState = "invalid";

66+

}

67+

} catch (error) {

68+

ownerFileState =

69+

(error as NodeJS.ErrnoException).code === "ENOENT" && ownerFileMtimeMs === undefined

70+

? "missing"

71+

: "invalid";

72+

}

73+

let lockDirMtimeMs: number | undefined;

74+

try {

75+

lockDirMtimeMs = fs.statSync(lockDir).mtimeMs;

76+

} catch {

77+

// The lock may have disappeared between the mkdir failure and diagnostics.

78+

}

79+

return {

80+

pid: typeof owner?.pid === "number" ? owner.pid : undefined,

81+

starttime: typeof owner?.starttime === "number" ? owner.starttime : undefined,

82+

createdAtMs: typeof owner?.createdAtMs === "number" ? owner.createdAtMs : undefined,

83+

ownerFileState,

84+

ownerFilePath,

85+

ownerFileMtimeMs,

86+

ownerFileIsSymlink,

87+

lockDirMtimeMs,

88+

};

89+

}

90+91+

function latestFiniteMs(values: readonly (number | undefined)[]): number | undefined {

92+

let latest: number | undefined;

93+

for (const value of values) {

94+

if (typeof value !== "number" || !Number.isFinite(value)) {

95+

continue;

96+

}

97+

if (latest === undefined || value > latest) {

98+

latest = value;

99+

}

100+

}

101+

return latest;

102+

}

103+104+

export function shouldRemoveRuntimeDepsLock(

105+

owner: Pick<

106+

RuntimeDepsLockOwner,

107+

"pid" | "starttime" | "createdAtMs" | "lockDirMtimeMs" | "ownerFileMtimeMs"

108+

>,

109+

nowMs: number,

110+

isAlive: (pid: number) => boolean = isProcessAlive,

111+

readStarttime: (pid: number) => number | null = getProcessStartTime,

112+

): boolean {

113+

if (typeof owner.pid === "number") {

114+

if (!isAlive(owner.pid)) {

115+

return true;

116+

}

117+

if (typeof owner.starttime === "number") {

118+

const liveStarttime = readStarttime(owner.pid);

119+

if (liveStarttime !== null && liveStarttime !== owner.starttime) {

120+

return true;

121+

}

122+

}

123+

return false;

124+

}

125+126+

if (typeof owner.createdAtMs === "number") {

127+

return nowMs - owner.createdAtMs > BUNDLED_RUNTIME_DEPS_LOCK_STALE_MS;

128+

}

129+130+

const ownerlessObservedAtMs = latestFiniteMs([owner.lockDirMtimeMs, owner.ownerFileMtimeMs]);

131+

return (

132+

typeof ownerlessObservedAtMs === "number" &&

133+

nowMs - ownerlessObservedAtMs > BUNDLED_RUNTIME_DEPS_OWNERLESS_LOCK_STALE_MS

134+

);

135+

}

136+137+

function formatDurationMs(ms: number | undefined): string {

138+

return typeof ms === "number" && Number.isFinite(ms) ? `${Math.max(0, Math.round(ms))}ms` : "n/a";

139+

}

140+141+

export function formatRuntimeDepsLockTimeoutMessage(params: {

142+

lockDir: string;

143+

owner: RuntimeDepsLockOwner;

144+

waitedMs: number;

145+

nowMs: number;

146+

}): string {

147+

const ownerAgeMs =

148+

typeof params.owner.createdAtMs === "number"

149+

? params.nowMs - params.owner.createdAtMs

150+

: undefined;

151+

const lockAgeMs =

152+

typeof params.owner.lockDirMtimeMs === "number"

153+

? params.nowMs - params.owner.lockDirMtimeMs

154+

: undefined;

155+

const ownerFileAgeMs =

156+

typeof params.owner.ownerFileMtimeMs === "number"

157+

? params.nowMs - params.owner.ownerFileMtimeMs

158+

: undefined;

159+

const pidDetail =

160+

typeof params.owner.pid === "number"

161+

? `pid=${params.owner.pid} alive=${isProcessAlive(params.owner.pid)}`

162+

: "pid=missing";

163+

const ownerFileSymlink =

164+

typeof params.owner.ownerFileIsSymlink === "boolean" ? params.owner.ownerFileIsSymlink : "n/a";

165+

return (

166+

`Timed out waiting for bundled runtime deps lock at ${params.lockDir} ` +

167+

`(waited=${formatDurationMs(params.waitedMs)}, ownerFile=${params.owner.ownerFileState}, ownerFileSymlink=${ownerFileSymlink}, ` +

168+

`${pidDetail}, ownerAge=${formatDurationMs(ownerAgeMs)}, ownerFileAge=${formatDurationMs(ownerFileAgeMs)}, lockAge=${formatDurationMs(lockAgeMs)}, ` +

169+

`ownerFilePath=${params.owner.ownerFilePath}). If no OpenClaw/npm install is running, remove the lock directory and retry.`

170+

);

171+

}

172+173+

export function removeRuntimeDepsLockIfStale(lockDir: string, nowMs: number): boolean {

174+

const owner = readRuntimeDepsLockOwner(lockDir);

175+

if (!shouldRemoveRuntimeDepsLock(owner, nowMs)) {

176+

return false;

177+

}

178+179+

try {

180+

fs.rmSync(lockDir, { recursive: true, force: true });

181+

return true;

182+

} catch {

183+

return false;

184+

}

185+

}

186+187+

function writeRuntimeDepsLockOwner(lockDir: string): void {

188+

try {

189+

fs.writeFileSync(

190+

path.join(lockDir, BUNDLED_RUNTIME_DEPS_LOCK_OWNER_FILE),

191+

`${JSON.stringify(

192+

{

193+

pid: process.pid,

194+

...(typeof CURRENT_PROCESS_STARTTIME === "number"

195+

? { starttime: CURRENT_PROCESS_STARTTIME }

196+

: {}),

197+

createdAtMs: Date.now(),

198+

},

199+

null,

200+

2,

201+

)}\n`,

202+

"utf8",

203+

);

204+

} catch (ownerWriteError) {

205+

fs.rmSync(lockDir, { recursive: true, force: true });

206+

throw ownerWriteError;

207+

}

208+

}

209+210+

function tryAcquireRuntimeDepsLock(lockDir: string): boolean {

211+

try {

212+

fs.mkdirSync(lockDir);

213+

writeRuntimeDepsLockOwner(lockDir);

214+

return true;

215+

} catch (error) {

216+

const code = (error as NodeJS.ErrnoException).code;

217+

if (code !== "EEXIST") {

218+

throw error;

219+

}

220+

return false;

221+

}

222+

}

223+224+

function createRuntimeDepsLockTimeoutError(params: {

225+

lockDir: string;

226+

startedAt: number;

227+

nowMs: number;

228+

cause: unknown;

229+

}): Error {

230+

return new Error(

231+

formatRuntimeDepsLockTimeoutMessage({

232+

lockDir: params.lockDir,

233+

owner: readRuntimeDepsLockOwner(params.lockDir),

234+

waitedMs: params.nowMs - params.startedAt,

235+

nowMs: params.nowMs,

236+

}),

237+

{ cause: params.cause },

238+

);

239+

}

240+241+

export function withBundledRuntimeDepsFilesystemLock<T>(

242+

installRoot: string,

243+

lockName: string,

244+

run: () => T,

245+

): T {

246+

fs.mkdirSync(installRoot, { recursive: true });

247+

const lockDir = path.join(installRoot, lockName);

248+

const startedAt = Date.now();

249+

let locked = false;

250+

while (!locked) {

251+

locked = tryAcquireRuntimeDepsLock(lockDir);

252+

if (!locked) {

253+

removeRuntimeDepsLockIfStale(lockDir, Date.now());

254+

const nowMs = Date.now();

255+

if (nowMs - startedAt > BUNDLED_RUNTIME_DEPS_LOCK_TIMEOUT_MS) {

256+

throw createRuntimeDepsLockTimeoutError({

257+

lockDir,

258+

startedAt,

259+

nowMs,

260+

cause: new Error("runtime deps lock already exists"),

261+

});

262+

}

263+

sleepSync(BUNDLED_RUNTIME_DEPS_LOCK_WAIT_MS);

264+

}

265+

}

266+

try {

267+

return run();

268+

} finally {

269+

fs.rmSync(lockDir, { recursive: true, force: true });

270+

}

271+

}

272+273+

export async function withBundledRuntimeDepsFilesystemLockAsync<T>(

274+

installRoot: string,

275+

lockName: string,

276+

run: () => Promise<T>,

277+

): Promise<T> {

278+

fs.mkdirSync(installRoot, { recursive: true });

279+

const lockDir = path.join(installRoot, lockName);

280+

const startedAt = Date.now();

281+

let locked = false;

282+

while (!locked) {

283+

locked = tryAcquireRuntimeDepsLock(lockDir);

284+

if (!locked) {

285+

removeRuntimeDepsLockIfStale(lockDir, Date.now());

286+

const nowMs = Date.now();

287+

if (nowMs - startedAt > BUNDLED_RUNTIME_DEPS_LOCK_TIMEOUT_MS) {

288+

throw createRuntimeDepsLockTimeoutError({

289+

lockDir,

290+

startedAt,

291+

nowMs,

292+

cause: new Error("runtime deps lock already exists"),

293+

});

294+

}

295+

await sleep(BUNDLED_RUNTIME_DEPS_LOCK_WAIT_MS);

296+

}

297+

}

298+

try {

299+

return await run();

300+

} finally {

301+

fs.rmSync(lockDir, { recursive: true, force: true });

302+

}

303+

}