Vincent Koc d97574aae6 fix(dev): bound realtime SDP answer reads ... Keep the OpenAI Realtime WebRTC smoke's SDP offer request in the browser fetch path while moving the browser-side SDP answer reader into a testable helper. Reject unsafe decimal Content-Length values before acquiring a body reader and preserve streamed byte limiting for responses without a safe declared length. Proof: direct bounded-reader repro rejects unsafe content-length before getReader and cancels the body; node --check --experimental-strip-types scripts/dev/realtime-talk-live-smoke.ts; node --check --experimental-strip-types test/scripts/dev-tooling-safety.test.ts; git diff --check origin/main...HEAD; autoreview clean overall 0.84; exact-head release gate succeeded at https://github.com/openclaw/openclaw/actions/runs/27848673438.		2026-06-20 05:22:56 +08:00
..
discord-acp-plain-language-smoke.ts	docs: document repository scripts	2026-06-04 20:52:50 -04:00
gateway-smoke.ts	fix(dev): align gateway smoke auth contract	2026-06-07 12:07:05 +02:00
gateway-ws-client.ts	docs: document repository scripts	2026-06-04 20:52:50 -04:00
ios-node-e2e.ts	fix(ios): reject malformed node e2e wait seconds	2026-06-16 20:20:46 +02:00
ios-pull-gateway-log.sh	fix(dev): harden smoke log diagnostics	2026-06-07 08:42:16 +02:00
realtime-talk-live-smoke.ts	fix(dev): bound realtime SDP answer reads	2026-06-20 05:22:56 +08:00
test-device-pair-telegram.ts	fix(dev): lazy-load telegram pairing smoke	2026-06-07 08:48:40 +02:00
tui-pty-test-watch.ts	fix(dev): harden smoke log diagnostics	2026-06-07 08:42:16 +02:00