6 Commits

Include renames

Author	SHA1	Message	Date
sneak	99c1b936c3	Fuzz NewManifestFromReader and cap the zstd decoder (closes #65) ... FuzzNewManifestFromReader fails when the parser returns both or neither of a manifest and an error, or allocates more than sixteen times its input plus MaxDecompressedSize. make test runs the committed seed corpus; make fuzz fuzzes for one minute, by hand only. Parser bug: MaxDecompressedSize did not bound decompression. The zstd decoder kept its own 64 GiB limit, set aside whatever size a frame header claimed, and decoded payloads under 128 KiB in full before the LimitReader read any of it, so a 92-byte manifest claiming 8 GiB made the parser allocate 8 GiB. The decoder now has MaxDecompressedSize as its limit; that manifest is a regression seed. Model: opus-5-5	2026-10-03 15:44:24 +00:00
clawbot	a3749e9e9b	cibuild: build with --no-cache like script/docker (closes #89) ... A bare `docker build .` served the Dockerfile's check steps from the layer cache on an unchanged tree and exited 0 without running them. script/cibuild now computes the version on its own line and runs the same build command as script/docker and the shared policy, --no-cache included, so every CI build runs the checks. README.md describes script/cibuild accordingly. Model: opus-5-5	2026-10-03 17:41:55 +02:00
clawbot	c3b5fe651a	Stamp the tag or short commit in a plain docker build (closes #112) ... .dockerignore now sends .git but not .git/config, which can hold a credential and which git describe does not need. The build stage stamps main.Gitrev from the VERSION build argument when one is given, otherwise from git describe --tags --always, and fails if .git is present and no version comes out. git there trusts /src whoever owns it, since a context sent as a tar archive keeps its files' owners. script/docker is replaced by the canonical copy, which passes VERSION; bin/gitrev.sh uses --tags too, so every entrypoint stamps the same value for a clean commit. Model: opus-5-5	2026-10-02 08:53:34 +02:00
clawbot	7de4d6ec1c	Rewrite script/test to the canonical race-enabled pattern (closes #67) ... script/test now runs go test -timeout 30s -race -cover ./..., quiet on success and rerunning verbose on failure. -race exposed a data race on the process-global apex/log logger: Init reconfigured it on every CLI run while other goroutines logged through it. internal/log now mutates the global under the write lock and reads it under the read lock; WithError is dropped because its Entry logged outside that lock, and run() reports a failed command's error via log.Errorf instead (still shown under -q). The corruption fuzz test is scaled to 1500 files / 100 iterations to fit the budget under -race; it pins the same claims at reduced breadth. Independent review ran the Docker lint gate uncached. Model: opus-4-8 (implementation, review) model: claude-fable-5	2026-09-21 15:17:50 +02:00
clawbot	5683d0f4ff	Configure prettier and make fmt-check cover markdown (closes #69) ... Adds .prettierrc and .prettierignore, a single script/prettier entrypoint shared by fmt and fmt-check so the two cannot drift, and prettier 3.9.6 pinned by yarn.lock integrity hash. Markdown formatting is now gated in the authoritative Docker build via a new mdfmt stage, since the golangci-lint image has no node. REPO_POLICIES.md is ignored so local tooling cannot drift it from upstream. Removes the || true that made the previous prettier invocation unable to fail.	2026-08-10 16:16:42 +02:00
sneak	6d19de74e7	scripts-to-rule-them-all (#58) ... Reviewed-on: #58 Co-authored-by: sneak <sneak@sneak.berlin> Co-committed-by: sneak <sneak@sneak.berlin>	2026-07-07 02:13:35 +02:00