Timmy
517c8dbac3
Some checks failed
Quality gates / quality (pull_request) Failing after 2m39s
Closes the PR 63 hostile-review blockers: 1. Immutable pinned Python/Pillow runtime (TIMMY_PYTHON absolute, --verify-pin), deployment/runtime re-encode smoke gate in build_release + deploy_staging. 2. Header-only width/height/total-pixel/bomb rejection before full decode; proves 6000x6000 and 12000x12000 stay resource bounded (RSS + address-space caps). 3. Fail-fast decoder concurrency ceiling; tests count actual spawned children. 4. Rate-limiter key cardinality hard-bounded under 20k+ unexpired identities, trusted-loopback-proxy identity, no spoofable forwarded headers, fixed-window boundary burst smoothed by two-window sliding count. 5. build_release explicitly syntax/gates every new JS module + Python re-encoder + production-runtime smoke; CI runs reencode-image test and the runtime pin smoke. 6. Robust polyglot contract via canonical container parsing; rejects uppercase/mixed script, appended HTML, ZIP local/EOCD and archive tails, data after canonical JPEG/PNG/WebP end; no naive compressed-byte scans (false-positive controls pass). 7. Canonical base64 data-URL grammar with byte-exact round trip; rejects missing/excess padding, whitespace/CRLF, malformed and noncanonical encodings; exact MIME policy. 8. Missing Pillow / runtime-unavailable maps to sanitized 503 + manual fallback. 9. Inbound body-read timeout and stop-on-oversize; preserves sanitized 413, base path, provider suppression, and temp cleanup; socket torn down on rejection. Audited prior partial edits: reused the sound source modules, re-wired new tests into the unit/syntax gates, fixed a non-canonical readJson that destroyed the socket before delivering 413/408, and hardened test flakiness (port reuse, EPIPE, startup races). |
||
|---|---|---|
| .. | ||
| fixtures | ||
| agent-gateway.acceptance.test.js | ||
| analysis.test.js | ||
| body-timeout.test.js | ||
| ci-workflow.test.js | ||
| domain.test.js | ||
| hermes-agent-service.test.js | ||
| image-concurrency.test.js | ||
| image-dataurl.test.js | ||
| image-ingress.test.js | ||
| image-polyglot.test.js | ||
| image-unavailable.test.js | ||
| photo-first.acceptance.mjs | ||
| product-decisions.test.js | ||
| rate-identity.test.js | ||
| rate-limiter.test.js | ||
| reencode-image.test.py | ||
| release-demo.test.js | ||
| selfhost-bootstrap.test.js | ||
| service-worker-runtime.test.js | ||
| sleek-chat.acceptance.mjs | ||
| staging-config.test.js | ||
| staging-deploy.test.py | ||
| staging-health.test.js | ||
| staging.acceptance.mjs | ||
| training-ingest.test.js | ||
| ui.acceptance.mjs | ||
| vision-config.test.js | ||
| vision-service.test.js | ||