🛡️ Sentinel: [MEDIUM] Fix missing HTTP client timeout in jules API client

Added a 15-second timeout to the http.Client in cmd/picoclaw/internal/jules/jules.go to prevent potential resource exhaustion or indefinite hangs if the external service is slow or unresponsive.

Co-authored-by: hobbyistlabs-coder <267281733+hobbyistlabs-coder@users.noreply.github.com>

cmd/picoclaw/internal/jules/jules.go

@@ -7,6 +7,7 @@ import (
 	"io"
 	"net/http"
 	"os"
+	"time"
 
 	"github.com/spf13/cobra"
 
@@ -43,7 +44,9 @@ func doRequest(method, url string, body []byte) error {
 	req.Header.Set("x-goog-api-key", apiKey)
 	req.Header.Set("Content-Type", "application/json")
 
-	client := &http.Client{}
+	client := &http.Client{
+		Timeout: 15 * time.Second,
+	}
 	resp, err := client.Do(req)
 	if err != nil {
 		return fmt.Errorf("error making request: %w", err)

pkg/agent/loop_test.go

@@ -844,15 +844,15 @@ func TestTargetReasoningChannelID_AllChannels(t *testing.T) {
 		t.Fatalf("Failed to create channel manager: %v", err)
 	}
 	for name, id := range map[string]string{
-		"whatsapp":  "rid-whatsapp",
+		"whatsapp": "rid-whatsapp",
-		"telegram":  "rid-telegram",
+		"telegram": "rid-telegram",
-		"discord":   "rid-discord",
+		"discord":  "rid-discord",
-		"maixcam":   "rid-maixcam",
+		"maixcam":  "rid-maixcam",
-		"qq":        "rid-qq",
+		"qq":       "rid-qq",
-		"dingtalk":  "rid-dingtalk",
+		"dingtalk": "rid-dingtalk",
-		"slack":     "rid-slack",
+		"slack":    "rid-slack",
-		"line":      "rid-line",
+		"line":     "rid-line",
-		"onebot":    "rid-onebot",
+		"onebot":   "rid-onebot",
 	} {
 		chManager.RegisterChannel(name, &fakeChannel{id: id})
 	}

pkg/config/channels.go

@@ -1,18 +1,18 @@
 package config
 
 type ChannelsConfig struct {
-	WhatsApp   WhatsAppConfig   `json:"whatsapp"`
+	WhatsApp WhatsAppConfig `json:"whatsapp"`
-	Telegram   TelegramConfig   `json:"telegram"`
+	Telegram TelegramConfig `json:"telegram"`
-	Discord    DiscordConfig    `json:"discord"`
+	Discord  DiscordConfig  `json:"discord"`
-	MaixCam    MaixCamConfig    `json:"maixcam"`
+	MaixCam  MaixCamConfig  `json:"maixcam"`
-	QQ         QQConfig         `json:"qq"`
+	QQ       QQConfig       `json:"qq"`
-	DingTalk   DingTalkConfig   `json:"dingtalk"`
+	DingTalk DingTalkConfig `json:"dingtalk"`
-	Slack      SlackConfig      `json:"slack"`
+	Slack    SlackConfig    `json:"slack"`
-	Matrix     MatrixConfig     `json:"matrix"`
+	Matrix   MatrixConfig   `json:"matrix"`
-	LINE       LINEConfig       `json:"line"`
+	LINE     LINEConfig     `json:"line"`
-	OneBot     OneBotConfig     `json:"onebot"`
+	OneBot   OneBotConfig   `json:"onebot"`
-	Pico       PicoConfig       `json:"pico"`
+	Pico     PicoConfig     `json:"pico"`
-	IRC        IRCConfig        `json:"irc"`
+	IRC      IRCConfig      `json:"irc"`
 }
 
 // GroupTriggerConfig controls when the bot responds in group chats.

pkg/health/resource_tracker.go

@@ -66,12 +66,12 @@ func (rt *ResourceTracker) logResources() {
 	sysMB := float64(m.Sys) / 1024 / 1024
 
 	logger.InfoCF("SystemHealth", "Resource tracking telemetry", map[string]any{
-		"goroutines":       goroutines,
+		"goroutines":        goroutines,
-		"memory_alloc_mb":  allocMB,
+		"memory_alloc_mb":   allocMB,
-		"memory_total_mb":  totalAllocMB,
+		"memory_total_mb":   totalAllocMB,
-		"memory_sys_mb":    sysMB,
+		"memory_sys_mb":     sysMB,
-		"num_gc":           m.NumGC,
+		"num_gc":            m.NumGC,
-		"gc_pause_ns":      m.PauseNs[(m.NumGC+255)%256], // Latest GC pause time
+		"gc_pause_ns":       m.PauseNs[(m.NumGC+255)%256], // Latest GC pause time
 		"gc_pause_total_ns": m.PauseTotalNs,
 	})
 }

pkg/logger/logger.go

@@ -34,9 +34,9 @@ var (
 	currentTimeFormat = "15:04:05"
 	logger            zerolog.Logger
 	fileLogger        zerolog.Logger
-	logFile      *os.File
+	logFile           *os.File
-	once         sync.Once
+	once              sync.Once
-	mu           sync.RWMutex
+	mu                sync.RWMutex
 )
 
 func init() {

pkg/migrate/sources/openclaw/common.go

@@ -13,14 +13,14 @@ var migrateableDirs = []string{
 }
 
 var supportedChannels = map[string]bool{
-	"whatsapp":  true,
+	"whatsapp": true,
-	"telegram":  true,
+	"telegram": true,
-	"discord":   true,
+	"discord":  true,
-	"maixcam":   true,
+	"maixcam":  true,
-	"qq":        true,
+	"qq":       true,
-	"dingtalk":  true,
+	"dingtalk": true,
-	"slack":     true,
+	"slack":    true,
-	"matrix":    true,
+	"matrix":   true,
-	"line":      true,
+	"line":     true,
-	"onebot":    true,
+	"onebot":   true,
 }

pkg/tools/alpaca/alpaca.go

@@ -107,8 +107,8 @@ func (t *AlpacaTool) getPrice(symbol string) *tools.ToolResult {
 
 func (t *AlpacaTool) getSMA(symbol string) *tools.ToolResult {
 	req := marketdata.GetBarsRequest{
-		TimeFrame: marketdata.OneDay,
+		TimeFrame:  marketdata.OneDay,
-		TotalLimit:     10, // 10-day simple moving average
+		TotalLimit: 10, // 10-day simple moving average
 	}
 	bars, err := t.marketData.GetBars(symbol, req)
 	if err != nil {

pkg/tools/mcp2cli.go

@@ -259,7 +259,7 @@ func splitQuoted(s string) []string {
 	var quoteChar rune
 
 	for _, r := range s {
-		if (r == '"' || r == '\'') {
+		if r == '"' || r == '\'' {
 			if inQuotes && quoteChar == r {
 				inQuotes = false
 			} else if !inQuotes {

pkg/tools/mcp2cli_test.go

@@ -2,8 +2,8 @@ package tools
 
 import (
 	"context"
-	"testing"
 	"github.com/stretchr/testify/assert"
+	"testing"
 )
 
 func TestSplitQuoted(t *testing.T) {

pkg/tools/web/fetch.go

@@ -1,12 +1,12 @@
 package web
 
 import (
-	"jane/pkg/tools"
 	"context"
 	"encoding/json"
 	"errors"
 	"fmt"
 	"io"
+	"jane/pkg/tools"
 	"net"
 	"net/http"
 	"net/url"

pkg/tools/web/search.go

@@ -1,9 +1,9 @@
 package web
 
 import (
-	"jane/pkg/tools"
 	"context"
 	"fmt"
+	"jane/pkg/tools"
 )
 
 type WebSearchTool struct {