clawbot

clawbot pushed to issue-157-event-body-download at sneak/webhooker

2026-08-17 23:48:26 +02:00

1ec8856bce Serve an event's full stored body over HTTP (closes #157)

clawbot opened issue sneak/webhooker#169

2026-08-17 23:45:17 +02:00

Restrict /s/* to GET and HEAD — it currently answers POST, PUT and DELETE with 200

clawbot deleted branch issue-151-release-accuracy from sneak/webhooker

2026-08-17 23:45:00 +02:00

clawbot pushed to next at sneak/webhooker

2026-08-17 23:45:00 +02:00

39064a3d6c Correct release-blocking README and startup-warning inaccuracies (closes #151)

clawbot closed issue sneak/webhooker#151

2026-08-17 23:44:59 +02:00

Release-blocking accuracy: README describes a build and an endpoint that do not exist, and the lockout warning misses the default environment

clawbot merged pull request sneak/webhooker#156

2026-08-17 23:44:59 +02:00

Correct release-blocking README and startup-warning inaccuracies (closes #151)

clawbot commented on pull request sneak/webhooker#156

2026-08-17 23:44:02 +02:00

Correct release-blocking README and startup-warning inaccuracies (closes #151)

PASS

Independently re-derived from the code, not spot-checked: all 15 claim-table rows (including every row previously marked "correct, left alone"), both folded-in minors, all 8 numbered items…

clawbot pushed to issue-146-bound-access-log-amplification at sneak/webhooker

2026-08-17 23:42:41 +02:00

99968231ad Bound the access log line against client-chosen text (closes #146)

c378690977 Fetch and verify Alpine at build time instead of committing it (closes #145)

Compare 2 commits »

clawbot pushed to issue-109-docker-lint at sneak/webhooker

2026-08-17 23:40:18 +02:00

93be4d2846 Run all linting in Docker via Dockerfile.lint (closes #109)

c378690977 Fetch and verify Alpine at build time instead of committing it (closes #145)

Compare 2 commits »

clawbot commented on pull request sneak/webhooker#161

2026-08-17 23:40:08 +02:00

Mark superseded commits honestly instead of skipped (closes #152)

FAIL — needs-rework

Both findings from sneak/webhooker#161 (comment) are genuinely fixed — re-probed independently against my own fake API under dash, not…

clawbot opened issue sneak/webhooker#168

2026-08-17 23:38:48 +02:00

Rate-limit key collapses every peer with an empty RemoteAddr into one bucket

clawbot pushed to issue-125-ipv6-prefix-buckets at sneak/webhooker

2026-08-17 23:38:27 +02:00

9826cc600f Bucket IPv6 rate-limit keys by /64 (closes #125)

c378690977 Fetch and verify Alpine at build time instead of committing it (closes #145)

279effb4c2 Bound the event log's rendered bodies in the query (closes #135)

Compare 3 commits »

clawbot commented on pull request sneak/webhooker#167

2026-08-17 23:33:55 +02:00

Serve an event's full stored body over HTTP (closes #157)

FAIL — needs-rework

Reviewed at be9e13e in an independent clone. Constraint 1 (non-renderable response) holds and is verified on a real response through the production router. Constraint 2…

clawbot commented on pull request sneak/webhooker#159

2026-08-17 23:33:53 +02:00

Set fx.StopTimeout inside the container stop grace (closes #134)

FAIL — needs-rework

Finding — the 2s tail headroom can be consumed by the server hook itself when SENTRY_DSN is set, so the tail hooks (database close included) are still skipped.

`intern…

clawbot pushed to issue-151-release-accuracy at sneak/webhooker

2026-08-17 23:26:55 +02:00

92f3a016e1 Correct release-blocking README and startup-warning inaccuracies (closes #151)

c378690977 Fetch and verify Alpine at build time instead of committing it (closes #145)

279effb4c2 Bound the event log's rendered bodies in the query (closes #135)

9ae19159a3 Mask the http target's destination URL in the UI (closes #115)

Compare 4 commits »

clawbot pushed to issue-152-superseded-status at sneak/webhooker

2026-08-17 23:25:06 +02:00

88f3e1d019 Mark superseded commits honestly instead of skipped (closes #152)

c378690977 Fetch and verify Alpine at build time instead of committing it (closes #145)

279effb4c2 Bound the event log's rendered bodies in the query (closes #135)

Compare 3 commits »

clawbot commented on pull request sneak/webhooker#165

2026-08-17 23:23:32 +02:00

Run all linting in Docker via Dockerfile.lint (closes #109)

FAIL — needs-rebase

Content review passes: the central claim is real and I reproduced every load-bearing item independently in my own clone at 46248a2. The only blocker is that the branch no…

clawbot pushed to issue-134-fx-stop-timeout at sneak/webhooker

2026-08-17 23:23:05 +02:00

6772304c60 Set fx.StopTimeout inside the container stop grace (closes #134)

c378690977 Fetch and verify Alpine at build time instead of committing it (closes #145)

279effb4c2 Bound the event log's rendered bodies in the query (closes #135)

9ae19159a3 Mask the http target's destination URL in the UI (closes #115)

Compare 4 commits »

clawbot commented on pull request sneak/webhooker#155

2026-08-17 23:21:41 +02:00

Bound the access log line against client-chosen text (closes #146)

FAIL — needs-rework

Reviewed at 8690cf9. Both findings from sneak/webhooker#155 (comment) are genuinely fixed, not moved (evidence below). One blocking…

clawbot commented on issue sneak/webhooker#157

2026-08-17 23:18:31 +02:00

No in-app way to retrieve an event body larger than the event log's 8 KB render cap

Built as planned above; sneak/webhooker#167 carries the detail and the gate evidence. One correction to the plan, since it changes what a reader should believe about the…