惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

WordPress大学
WordPress大学
Engineering at Meta
Engineering at Meta
D
DataBreaches.Net
月光博客
月光博客
Recent Announcements
Recent Announcements
Google DeepMind News
Google DeepMind News
U
Unit 42
腾讯CDC
爱范儿
爱范儿
J
Java Code Geeks
有赞技术团队
有赞技术团队
Blog — PlanetScale
Blog — PlanetScale
N
Netflix TechBlog - Medium
B
Blog
Stack Overflow Blog
Stack Overflow Blog
GbyAI
GbyAI
T
The Blog of Author Tim Ferriss
小众软件
小众软件
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Y
Y Combinator Blog
大猫的无限游戏
大猫的无限游戏
Microsoft Azure Blog
Microsoft Azure Blog
T
Tailwind CSS Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
fix(line): persist inbound media in shared store · opencl...
steipete · 2026-04-28 · via Recent Commits to openclaw:main

@@ -1,9 +1,7 @@

1-

import fs from "node:fs";

2-

import path from "node:path";

3-

import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";

41

import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

5263

const getMessageContentMock = vi.hoisted(() => vi.fn());

4+

const saveMediaBufferMock = vi.hoisted(() => vi.fn());

7586

vi.mock("@line/bot-sdk", () => ({

97

messagingApi: {

@@ -29,6 +27,10 @@ vi.mock("openclaw/plugin-sdk/runtime-env", () => ({

2927

logVerbose: () => {},

3028

}));

312930+

vi.mock("openclaw/plugin-sdk/media-store", () => ({

31+

saveMediaBuffer: saveMediaBufferMock,

32+

}));

33+3234

let downloadLineMedia: typeof import("./download.js").downloadLineMedia;

33353436

async function* chunks(parts: Buffer[]): AsyncGenerator<Buffer> {

@@ -45,68 +47,87 @@ describe("downloadLineMedia", () => {

4547

beforeEach(() => {

4648

vi.restoreAllMocks();

4749

getMessageContentMock.mockReset();

50+

saveMediaBufferMock.mockReset();

51+

saveMediaBufferMock.mockImplementation(

52+

async (_buffer: Buffer, contentType?: string, subdir?: string) => ({

53+

path: `/home/user/.openclaw/media/${subdir ?? "unknown"}/saved-media`,

54+

contentType,

55+

}),

56+

);

4857

});

495850-

it("does not derive temp file path from external messageId", async () => {

51-

const messageId = "a/../../../../etc/passwd";

59+

it("persists inbound media with the shared media store", async () => {

5260

const jpeg = Buffer.from([0xff, 0xd8, 0xff, 0x00]);

5361

getMessageContentMock.mockResolvedValueOnce(chunks([jpeg]));

546255-

const writeSpy = vi.spyOn(fs.promises, "writeFile").mockResolvedValueOnce(undefined);

63+

const result = await downloadLineMedia("mid-jpeg", "token");

64+65+

expect(saveMediaBufferMock).toHaveBeenCalledTimes(1);

66+

const call = saveMediaBufferMock.mock.calls[0];

67+

expect((call?.[0] as Buffer).equals(jpeg)).toBe(true);

68+

expect(call?.[1]).toBe("image/jpeg");

69+

expect(call?.[2]).toBe("inbound");

70+

expect(call?.[3]).toBe(10 * 1024 * 1024);

71+

expect(result).toEqual({

72+

path: "/home/user/.openclaw/media/inbound/saved-media",

73+

contentType: "image/jpeg",

74+

size: jpeg.length,

75+

});

76+

});

77+78+

it("does not pass the external messageId to saveMediaBuffer", async () => {

79+

const messageId = "a/../../../../etc/passwd";

80+

const jpeg = Buffer.from([0xff, 0xd8, 0xff, 0x00]);

81+

getMessageContentMock.mockResolvedValueOnce(chunks([jpeg]));

56825783

const result = await downloadLineMedia(messageId, "token");

58-

const writtenPath = writeSpy.mock.calls[0]?.[0];

59846085

expect(result.size).toBe(jpeg.length);

6186

expect(result.contentType).toBe("image/jpeg");

62-

expect(typeof writtenPath).toBe("string");

63-

if (typeof writtenPath !== "string") {

64-

throw new Error("expected string temp file path");

87+

for (const arg of saveMediaBufferMock.mock.calls[0] ?? []) {

88+

if (typeof arg === "string") {

89+

expect(arg).not.toContain(messageId);

90+

}

6591

}

66-

expect(result.path).toBe(writtenPath);

67-

expect(writtenPath).toContain("line-media-");

68-

expect(writtenPath).toMatch(/\.jpg$/);

69-

expect(writtenPath).not.toContain(messageId);

70-

expect(writtenPath).not.toContain("..");

71-72-

const tmpRoot = path.resolve(resolvePreferredOpenClawTmpDir());

73-

const rel = path.relative(tmpRoot, path.resolve(writtenPath));

74-

expect(rel === ".." || rel.startsWith(`..${path.sep}`)).toBe(false);

7592

});

769377-

it("rejects oversized media before writing to disk", async () => {

94+

it("rejects oversized media before invoking saveMediaBuffer", async () => {

7895

getMessageContentMock.mockResolvedValueOnce(chunks([Buffer.alloc(4), Buffer.alloc(4)]));

79-

const writeSpy = vi.spyOn(fs.promises, "writeFile").mockResolvedValue(undefined);

80968197

await expect(downloadLineMedia("mid", "token", 7)).rejects.toThrow(/Media exceeds/i);

82-

expect(writeSpy).not.toHaveBeenCalled();

98+

expect(saveMediaBufferMock).not.toHaveBeenCalled();

8399

});

8410085101

it("classifies M4A ftyp major brand as audio/mp4", async () => {

86102

const m4aHeader = Buffer.from([

87103

0x00, 0x00, 0x00, 0x1c, 0x66, 0x74, 0x79, 0x70, 0x4d, 0x34, 0x41, 0x20,

88104

]);

89105

getMessageContentMock.mockResolvedValueOnce(chunks([m4aHeader]));

90-

const writeSpy = vi.spyOn(fs.promises, "writeFile").mockResolvedValueOnce(undefined);

9110692107

const result = await downloadLineMedia("mid-audio", "token");

93-

const writtenPath = writeSpy.mock.calls[0]?.[0];

9410895109

expect(result.contentType).toBe("audio/mp4");

96-

expect(result.path).toMatch(/\.m4a$/);

97-

expect(writtenPath).toBe(result.path);

110+

expect(saveMediaBufferMock.mock.calls[0]?.[1]).toBe("audio/mp4");

111+

expect(saveMediaBufferMock.mock.calls[0]?.[2]).toBe("inbound");

98112

});

99113100114

it("detects MP4 video from ftyp major brand (isom)", async () => {

101115

const mp4 = Buffer.from([

102116

0x00, 0x00, 0x00, 0x1c, 0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6f, 0x6d,

103117

]);

104118

getMessageContentMock.mockResolvedValueOnce(chunks([mp4]));

105-

vi.spyOn(fs.promises, "writeFile").mockResolvedValueOnce(undefined);

106119107120

const result = await downloadLineMedia("mid-mp4", "token");

108121109122

expect(result.contentType).toBe("video/mp4");

110-

expect(result.path).toMatch(/\.mp4$/);

123+

expect(saveMediaBufferMock.mock.calls[0]?.[1]).toBe("video/mp4");

124+

});

125+126+

it("propagates media store failures", async () => {

127+

const jpeg = Buffer.from([0xff, 0xd8, 0xff, 0x00]);

128+

getMessageContentMock.mockResolvedValueOnce(chunks([jpeg]));

129+

saveMediaBufferMock.mockRejectedValueOnce(new Error("Media exceeds 0MB limit"));

130+131+

await expect(downloadLineMedia("mid-bad", "token")).rejects.toThrow(/Media exceeds/i);

111132

});

112133

});