6 Commits

Include renames

Author	SHA1	Message	Date
sneak	00803243de	Fuzz NewManifestFromReader and cap the zstd decoder (closes #65) ... FuzzNewManifestFromReader fails when the parser returns both or neither of a manifest and an error, or allocates more than sixteen times its input and the decompressed data it may read, plus room for the decoder's window buffers. make test runs the seed corpus; make fuzz fuzzes for one minute. Parser bug: MaxDecompressedSize did not bound decompression. The zstd decoder decoded a payload under 128 KiB in full before the LimitReader read any of it. It now decodes synchronously, only what the LimitReader reads, and refuses windows over the 8 MiB mfer writes with, since each frame asking for a larger window gets a new buffer. Seeds: a frame claiming 8 GiB, two frames together over the limit, empty frames with growing windows. Model: opus-5-5	2026-10-04 01:36:30 +00:00
clawbot	a3749e9e9b	cibuild: build with --no-cache like script/docker (closes #89) ... A bare `docker build .` served the Dockerfile's check steps from the layer cache on an unchanged tree and exited 0 without running them. script/cibuild now computes the version on its own line and runs the same build command as script/docker and the shared policy, --no-cache included, so every CI build runs the checks. README.md describes script/cibuild accordingly. Model: opus-5-5	2026-10-03 17:41:55 +02:00
clawbot	c3b5fe651a	Stamp the tag or short commit in a plain docker build (closes #112) ... .dockerignore now sends .git but not .git/config, which can hold a credential and which git describe does not need. The build stage stamps main.Gitrev from the VERSION build argument when one is given, otherwise from git describe --tags --always, and fails if .git is present and no version comes out. git there trusts /src whoever owns it, since a context sent as a tar archive keeps its files' owners. script/docker is replaced by the canonical copy, which passes VERSION; bin/gitrev.sh uses --tags too, so every entrypoint stamps the same value for a clean commit. Model: opus-5-5	2026-10-02 08:53:34 +02:00
clawbot	7de4d6ec1c	Rewrite script/test to the canonical race-enabled pattern (closes #67) ... script/test now runs go test -timeout 30s -race -cover ./..., quiet on success and rerunning verbose on failure. -race exposed a data race on the process-global apex/log logger: Init reconfigured it on every CLI run while other goroutines logged through it. internal/log now mutates the global under the write lock and reads it under the read lock; WithError is dropped because its Entry logged outside that lock, and run() reports a failed command's error via log.Errorf instead (still shown under -q). The corruption fuzz test is scaled to 1500 files / 100 iterations to fit the budget under -race; it pins the same claims at reduced breadth. Independent review ran the Docker lint gate uncached. Model: opus-4-8 (implementation, review) model: claude-fable-5	2026-09-21 15:17:50 +02:00
clawbot	5683d0f4ff	Configure prettier and make fmt-check cover markdown (closes #69) ... Adds .prettierrc and .prettierignore, a single script/prettier entrypoint shared by fmt and fmt-check so the two cannot drift, and prettier 3.9.6 pinned by yarn.lock integrity hash. Markdown formatting is now gated in the authoritative Docker build via a new mdfmt stage, since the golangci-lint image has no node. REPO_POLICIES.md is ignored so local tooling cannot drift it from upstream. Removes the || true that made the previous prettier invocation unable to fail.	2026-08-10 16:16:42 +02:00
sneak	6d19de74e7	scripts-to-rule-them-all (#58) ... Reviewed-on: #58 Co-authored-by: sneak <sneak@sneak.berlin> Co-committed-by: sneak <sneak@sneak.berlin>	2026-07-07 02:13:35 +02:00