writeonce

shoney/writeonce

Fork 0

Commit graph

Author	SHA1	Message	Date
shoney.arickathil	47a920f19a	feat(serve+view): file serving, downloads, supported systems; rename - rename the two libraries: writeonce-framework -> writeonce-serve (`use serve`), wo-html -> writeonce-view (`use view`). Names say the ROLE now; every sample, script, gate and live doc follows - stories/specs/plans keep the old names: they are dated records, and both library READMEs carry a "renamed 2026-08-25" note - serve/http/files.wo: StaticFiles { dir, max_bytes } — traversal refused not normalised, extension content types, attachment disposition for archives. Lifted out of the shop, which had said in a comment that it belonged in the framework - shop drops its private copy and mounts the framework's - site: /dl/*path over $WO_DIST (default ./dist), 16 MiB ceiling - /install gains supported systems — Linux x86-64, glibc >= 2.38, not musl — read off `file` and the binaries' GLIBC_ symbol versions, not off a wish list; plus GitHub release as primary, /dl as mirror, and the sha256 verify step - site-accept: 17 -> 21 checks (supported systems, gzip download with a binary-safe probe, checksum, /dl traversal 404) Verified on 192.168.0.165: the real 960,820-byte tarball downloads as application/gzip and its sha256 matches the published digest. Gates: oop-accept MET, site 21/0, web-app 46/0, fibers 10/0, db-actor 8/0; shop rebuilt and its /assets served by the framework. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-25 04:41:00 +02:00
shoney.arickathil	c17a8a2558	feat(framework): auth in core — Bearer/Basic mechanism + principal slot - http/auth.wo: auth_header (scheme split, case-insensitive, RFC 9110), bearer_token, basic_credentials (first-colon split, RFC 7617), pure-.wo base64_decode (RFC 4648, strict padding), ct_eq constant-time compare (no early exit, both Basic fields always compared) - req.principal: the blessed "who is this" slot, "" until authenticated; Middleware.before now takes mut req so auth can write it - BearerAuth { token, principal } and BasicAuth { user, pass, realm } middlewares; BasicAuth answers the WWW-Authenticate challenge; policy (routes/users/secrets) stays app-side on the exposed fns - web-app dogfoods BearerAuth; its hand-rolled Auth class deleted - probe matrix 26/26 (RFC 4648 vectors, rfc7617 pair, pass-with-colon, bad padding/chars/length, deny paths, challenge header) release+ASan - gate grows 16 -> 17: wrong bearer token answers 401 over the wire - README: auth bullet + the core CHECKLIST (done / candidate / parked behind 8-11 by design); story 16 + board record the landing - all gates green: web-app 17/0, oop-e2e 89/0, deps-accept 8/0, log-watcher 7/0, employee 8/0, woc-test green Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-20 03:15:16 +02:00

Author

SHA1

Message

Date

shoney.arickathil

47a920f19a

feat(serve+view): file serving, downloads, supported systems; rename

- rename the two libraries: writeonce-framework -> writeonce-serve
  (`use serve`), wo-html -> writeonce-view (`use view`). Names say the
  ROLE now; every sample, script, gate and live doc follows
- stories/specs/plans keep the old names: they are dated records, and
  both library READMEs carry a "renamed 2026-08-25" note
- serve/http/files.wo: StaticFiles { dir, max_bytes } — traversal
  refused not normalised, extension content types, attachment
  disposition for archives. Lifted out of the shop, which had said in
  a comment that it belonged in the framework
- shop drops its private copy and mounts the framework's
- site: /dl/*path over $WO_DIST (default ./dist), 16 MiB ceiling
- /install gains supported systems — Linux x86-64, glibc >= 2.38,
  not musl — read off `file` and the binaries' GLIBC_ symbol
  versions, not off a wish list; plus GitHub release as primary,
  /dl as mirror, and the sha256 verify step
- site-accept: 17 -> 21 checks (supported systems, gzip download with
  a binary-safe probe, checksum, /dl traversal 404)

Verified on 192.168.0.165: the real 960,820-byte tarball downloads
as application/gzip and its sha256 matches the published digest.

Gates: oop-accept MET, site 21/0, web-app 46/0, fibers 10/0,
db-actor 8/0; shop rebuilt and its /assets served by the framework.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-25 04:41:00 +02:00

shoney.arickathil

c17a8a2558

feat(framework): auth in core — Bearer/Basic mechanism + principal slot

- http/auth.wo: auth_header (scheme split, case-insensitive, RFC 9110),
  bearer_token, basic_credentials (first-colon split, RFC 7617),
  pure-.wo base64_decode (RFC 4648, strict padding), ct_eq constant-time
  compare (no early exit, both Basic fields always compared)
- req.principal: the blessed "who is this" slot, "" until authenticated;
  Middleware.before now takes mut req so auth can write it
- BearerAuth { token, principal } and BasicAuth { user, pass, realm }
  middlewares; BasicAuth answers the WWW-Authenticate challenge; policy
  (routes/users/secrets) stays app-side on the exposed fns
- web-app dogfoods BearerAuth; its hand-rolled Auth class deleted
- probe matrix 26/26 (RFC 4648 vectors, rfc7617 pair, pass-with-colon,
  bad padding/chars/length, deny paths, challenge header) release+ASan
- gate grows 16 -> 17: wrong bearer token answers 401 over the wire
- README: auth bullet + the core CHECKLIST (done / candidate / parked
  behind 8-11 by design); story 16 + board record the landing
- all gates green: web-app 17/0, oop-e2e 89/0, deps-accept 8/0,
  log-watcher 7/0, employee 8/0, woc-test green

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-20 03:15:16 +02:00

2 commits