ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-25 11:55:47 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix(snapshot): survive cold PowerShell starts in Windows staging gates (#123633)

Browse Source 
* fix(snapshot): survive cold PowerShell starts in Windows staging gates

CI run 31775262530, checks-windows-node-test-1 attempt 1, showed the fail-closed ACL probe timing out during PowerShell first-use module preparation. Centralize encoded one-shot spawning, budget 60 seconds for cold starts, and preserve the underlying probe failure as the error cause.

* fix(snapshot): sanitize PowerShell failure causes in Windows staging gates

* fix(secrets): explain the sanitized plan-file failure cause suppression

check-lint-core-2 flagged preserve-caught-error at the private plan file
catch; retaining the raw error would re-leak the -EncodedCommand argv the
sanitization contract strips, so the suppression is intentional (same
idiom as setup-inference-activate.ts).

* test(lint): register the private-plan-file suppression in the inventory

* test(infra): give the LAN-host real PowerShell spawn a cold-start budget

checks-windows-node-test-2 (run 31804325922) hit the same cold-start flake
class this PR fixes: the codepage-proof test spawns real powershell.exe
bounded at 3s, which a cold runner cannot meet. Production keeps its
fail-open 3s route-hint probe; only the test's real-spawn verification
uses the shared cold-spawn budget.
This commit is contained in:
Peter Steinberger
2026-08-14 06:49:36 -07:00
committed by GitHub
parent 7c579abf06
commit b4f91fadf3
7 changed files with 188 additions and 80 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/scripts/lint-suppressions.test.ts
+2
View File
@@ -231,6 +231,8 @@ describe("production lint suppressions", () => {
"src/plugins/runtime/runtime-plugin-boundary.ts|typescript/no-unnecessary-type-parameters|1",
"src/plugins/runtime/types-channel.ts|typescript/no-unnecessary-type-parameters|1",
"src/plugins/trusted-tool-policy.ts|typescript/no-unnecessary-type-parameters|1",
// Raw PowerShell errors carry the -EncodedCommand argv; only the sanitized cause may escape.
"src/secrets/private-plan-file.ts|preserve-caught-error|1",
"src/state/config-machine-state.ts|typescript/no-unnecessary-type-parameters|1",
"src/system-agent/setup-inference-activate.ts|no-unsafe-finally|1",
"src/system-agent/setup-inference-activate.ts|preserve-caught-error|1",