3 Commits

Include renames

Author	SHA1	Message	Date
sneak	2dd2134f7f	Store a source the way a variant is stored, one row and one file per source URL (closes #308) ... A source is now one source_content row and one file named by its SourceKey, the SHA-256 of its host, path and query, made as the variant key is. A store writes the file, then upserts the row, and removes the file when the row cannot be written; an eviction deletes the row, then the file, with no lock. source_metadata, the JSON files under cache/metadata/, MetadataStorage, the content lock, the eviction transaction and its test hook are gone, as is the reconciliation pass that dropped a source row whose file is missing. Two source URLs serving the same bytes store them twice. Model: opus-5-5	2026-10-21 14:16:47 +00:00
clawbot	faad959bea	Refuse local-use NAT64 addresses, and IPv4-compatible ones in blocked_networks (closes #299) ... The check that keeps pixa from fetching internal addresses let through 64:ff9b:1::/48, the local-use NAT64 range, and matched an address in the IPv4-compatible form (::/96) against blocked_networks only as IPv6, so ::203.0.113.5 passed with 203.0.113.0/24 listed. The local-use NAT64 range is now blocked next to 64:ff9b::/96, and an address in ::/96 is refused when blocked_networks holds it as written or the IPv4 address it holds. The mapped form stays matched as IPv4 only, as Go keeps plain IPv4 addresses in that form; README.md says so. Model: opus-5-5	2026-10-16 06:52:17 +02:00
clawbot	cca2e3f926	Test the image proxy flow end to end (closes #80) ... TestImageProxyFlow in internal/server starts the database, handlers and middleware from the constructors pixad uses, with a fresh state directory, and replaces only the upstream origin with an httptest server. For a resize with a format change and for orig it checks a 200 MISS with the right type and size, then a HIT after one upstream request, and the files and rows the cache keeps. Two optional test seams make that possible: httpfetcher.Config.DialContext and handlers.Params.Fetcher. pixad sets neither and the config file and environment cannot, and tests show production still uses the checked dialer and builds its own fetcher. Model: opus-5-5	2026-10-04 23:24:46 +02:00