Feat/v1 sweep - #2
Merged
Merged
Conversation
…Corrupt error - Vendor Mozilla CA bundle (144 certs) from curl.se at certs/cacert.pem - Add certs/SOURCE provenance metadata - Add scripts/update-ca-bundle.sh helper to refresh CA bundle - Update bssl_ctx_new_from_pem signature with cert_count_out parameter - Add cert counting in PEM parse loop and ERR_clear_error after loop - Add FetchError.CaBundleCorrupt with exit code 77 and descriptive message Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add mod.addAnonymousImport for cacert_pem on library module - Add "certs" to .paths in build.zig.zon for package consumers - Update extern fn bssl_ctx_new_from_pem to 4-parameter signature - Pass null cert_count_out at call site (Plan 02 will wire full integration) - All existing tests pass Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…ogging - Load embedded CA bundle via @embedfile("cacert_pem") in connect() - Validate cert count >= 50, return CaBundleCorrupt if below threshold - Add verbose output showing loaded embedded CA certificate count - System CAs supplement embedded via existing SSL_CTX_set_default_verify_paths Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- SUMMARY.md with task commits and deviation documentation - STATE.md updated with position, metrics, decisions - ROADMAP.md updated with phase 04 completion - REQUIREMENTS.md: SEC-06 marked complete Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add brat (shell TAP testing framework) as submodule and create automated tests for the embedded CA bundle feature covering HTTPS fetch, cert count validation, insecure mode, and error cases. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Replace StringHashMap with fixed-size ResponseHeader array in ResponseHead - Add getHeader() for case-insensitive lookup preserving insertion order - Update Response in root.zig to use slice of ResponseHeader - Add skip_body field to Options, plumbed through to readResponse - Update redirect Location lookup to use getHeader() - Add tests for insertion order, case-insensitive lookup, duplicate handling Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…utual exclusion - Add head_request, include_headers, fail_with_body fields to CliArgs - Parse -I, -i, --fail-with-body flags in parse() - Reject --fail + --fail-with-body combination at parse time - Update resolvedMethod() to return HEAD when head_request is set (-I overrides -X) - Add dedicated cli module test step in build.zig (named module tests need explicit step) - Add 8 new tests for flag parsing and resolvedMethod behavior Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add header_writer to ReadResponseOptions and Options for wire-format header output - Add reasonPhrase() and writeHeadersToFile() for status line + header output - Inject header output between header parse and body streaming in readResponse - Define NullSink in main.zig for --fail body suppression (body read but discarded) - Wire -I to skip_body=true, -i/-I to header_writer=stdout - Branch fetch call: --fail uses NullSink, --fail-with-body uses real sink then exits 22 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Add -i and -I flag descriptions after -o - Add --fail-with-body flag description - Update --fail description to note body suppression - Add examples for -I, -i, and --fail-with-body Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Covers -I, -i, --fail, --fail-with-body, and mutual exclusion. Adds mise `test` task to run all brat tests. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Remove REQUIREMENTS.md (archived to milestones/) and audit file (moved to milestones/). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.