d327724f81
fix(stream): add semgrep flag for sh tests
2026-04-29 13:01:50 +02:00
81a1be6a74
fix(stream): route to respective fd
2026-04-28 18:58:56 +02:00
7681dafc76
fix(cicd):: no semgrep alert on sh call cicd
2026-04-24 19:04:51 +02:00
88d9f6a0d9
fix(filters): benchmark ci update + fix stream filter quality
2026-04-24 18:54:29 +02:00
a1d46f39c2
fix(stream): missing stderr fields
2026-04-16 20:39:01 +02:00
e92d0993c9
fix(runner): preserve fd separation on command failure
2026-04-16 20:27:13 +02:00
840571fe90
fix(core): review 956 various fix
...
4 fixes applied (all confirmed introduced by PR #956 , all tests pass):
- P0 NEW-passthrough — pipe_cmd.rs: passthrough before cap read
- P1 BUFFERED-panic — stream.rs: catch_unwind on Buffered filter
- P1 STREAM-postcap — stream.rs: stop feeding filter after cap
- P2 OFFBYONE-rawcap — stream.rs: 5 cap boundary checks fixed
5 findings dropped (not introduced by PR or not bugs):
- DENY-claude: pre-existing on master
- AUDIT-asymmetry: intentional scope choice, not a bug
- GEMINI-test: pre-existing test pattern from master
- SAVINGS-threshold: 40% is correct (filters achieve ~46%)
- STDERR-test: cosmetic CI, not correctness
2026-04-11 17:24:04 +02:00
71eeedab4d
feat(stream): P1 fixes from PR #956 review
...
+ trigger feat release tag
2026-04-10 14:00:23 +02:00
2bb5265595
fix(stream): P0 fixes from PR #956 review
...
- pipe_cmd: fix panic on multi-byte UTF-8 at 1024 byte boundary (floor_char_boundary in auto_detect_filter)
- pipe_cmd: cap stdin at 10 MiB to prevent OOM (reuses RAW_CAP)
- stream: hoist RAW_CAP to pub const at module level
- hook_cmd: check deny before get_rewritten in handle_vscode
(matches handle_copilot_cli and run_claude order)
- hook_cmd: escape backslash and pipe in audit log sanitizer
- tsc_cmd: hoist duplicate TSC_ERROR regex to single module-level
lazy_static
2026-04-10 12:09:29 +02:00
b3936b8e5d
fix(stream): stream engine & template + BlockHandler, RegexBlockFilter, signal guard, pipe rewrite
2026-04-09 20:39:30 +02:00
0d07f04d03
fix(core): error handl, RAW_CAP, recursion guard, atomic writes
2026-04-05 14:09:13 +02:00
63313a25b6
fix(stream): skip printf-based tests on Win
2026-04-05 13:28:08 +02:00
a2312df5f2
feat(stream): standardize command execution with exec_capture()
2026-04-04 20:38:43 +02:00
02e3a6f8f4
fix(stream): wire run_streaming as standard exec for filter commands
2026-04-04 19:47:20 +02:00
7b0f5e1ba9
feat(core): binary hook w/ native cmd exec + streaming
...
Co-Authored-By: ahundt <ATHundt@gmail.com >
2026-03-31 20:24:34 +02:00
aesoft