writeonce

shoney/writeonce

Fork 0

Commit graph

Author	SHA1	Message	Date
shoney.arickathil	b5d862dcc5	feat(framework): form-encoded body parsing — media_type + form_values - media_type(req): content-type lowercased, "; charset=..." stripped, "" when absent — the content-negotiation hook - form_values(req): application/x-www-form-urlencoded body -> decoded pairs through the existing query decoder ('+' as space, %XX); nil on any other content-type so a JSON body is never misread as a form key - web-app CreateProduct accepts form OR JSON; shared create_product insert path; field/number validation answers 400 - probe 7/7 (plus/pct decode, empty value, case + charset param, json and missing content-type nil, empty body, media_type strip) + ASan - gate grows 17 -> 19: form create 201 with decoded name, non-numeric price 400; hit() gains a content-type argument - README: checklist row form ✅ (multipart stays candidate), limits paragraph updated; story 16 + board record the landing - gates: web-app 19/0, oop-e2e 89/0, deps-accept 8/0, log-watcher 7/0, employee 8/0, woc-test green Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-20 03:21:48 +02:00
shoney.arickathil	c17a8a2558	feat(framework): auth in core — Bearer/Basic mechanism + principal slot - http/auth.wo: auth_header (scheme split, case-insensitive, RFC 9110), bearer_token, basic_credentials (first-colon split, RFC 7617), pure-.wo base64_decode (RFC 4648, strict padding), ct_eq constant-time compare (no early exit, both Basic fields always compared) - req.principal: the blessed "who is this" slot, "" until authenticated; Middleware.before now takes mut req so auth can write it - BearerAuth { token, principal } and BasicAuth { user, pass, realm } middlewares; BasicAuth answers the WWW-Authenticate challenge; policy (routes/users/secrets) stays app-side on the exposed fns - web-app dogfoods BearerAuth; its hand-rolled Auth class deleted - probe matrix 26/26 (RFC 4648 vectors, rfc7617 pair, pass-with-colon, bad padding/chars/length, deny paths, challenge header) release+ASan - gate grows 16 -> 17: wrong bearer token answers 401 over the wire - README: auth bullet + the core CHECKLIST (done / candidate / parked behind 8-11 by design); story 16 + board record the landing - all gates green: web-app 17/0, oop-e2e 89/0, deps-accept 8/0, log-watcher 7/0, employee 8/0, woc-test green Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-20 03:15:16 +02:00
shoney.arickathil	d41be51bda	feat(framework): HTTP/1.1 parse + serialize + serve loop (iter 16 Task 2) - http/parse.wo: bounded-read buffering to the header terminator, then exactly Content-Length body bytes; %XX decoding ('+' = space in query strings only, malformed escapes pass through — parsing stays total); path/query split with decoded pairs; header names lowercased; the three-state Parsed record (closed / malformed / request) with keep-alive carry-over — bytes past this request belong to the next one on the connection. - http/serve.wo: Dispatcher interface (the router's seam), status/reason serialization with computed Content-Length, and the blocking loop: malformed -> 400 + close; a trapping handler -> 500 AND the loop lives; fds closed on every path; env.stopping() honored. - Connection policy discovered by probing, not assumed: a parked keep-alive connection BLOCKS accept on a single-threaded server (probe: client 1 idles open, client 2 starves). Policy: serve PIPELINED requests on one connection (carry non-empty), close when the client would idle; a proxy reconnects. README states it. Verified against a throwaway echo app (not committed): %20 query decode; two pipelined requests -> two responses on one connection; DIV0 handler -> 500 and the NEXT connection served; GARBAGE -> 400; SIGTERM stops clean. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-19 19:50:55 +02:00

Author

SHA1

Message

Date

shoney.arickathil

b5d862dcc5

feat(framework): form-encoded body parsing — media_type + form_values

- media_type(req): content-type lowercased, "; charset=..." stripped,
  "" when absent — the content-negotiation hook
- form_values(req): application/x-www-form-urlencoded body -> decoded
  pairs through the existing query decoder ('+' as space, %XX); nil on
  any other content-type so a JSON body is never misread as a form key
- web-app CreateProduct accepts form OR JSON; shared create_product
  insert path; field/number validation answers 400
- probe 7/7 (plus/pct decode, empty value, case + charset param, json
  and missing content-type nil, empty body, media_type strip) + ASan
- gate grows 17 -> 19: form create 201 with decoded name, non-numeric
  price 400; hit() gains a content-type argument
- README: checklist row form ✅ (multipart stays candidate), limits
  paragraph updated; story 16 + board record the landing
- gates: web-app 19/0, oop-e2e 89/0, deps-accept 8/0, log-watcher 7/0,
  employee 8/0, woc-test green

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-20 03:21:48 +02:00

shoney.arickathil

c17a8a2558

feat(framework): auth in core — Bearer/Basic mechanism + principal slot

- http/auth.wo: auth_header (scheme split, case-insensitive, RFC 9110),
  bearer_token, basic_credentials (first-colon split, RFC 7617),
  pure-.wo base64_decode (RFC 4648, strict padding), ct_eq constant-time
  compare (no early exit, both Basic fields always compared)
- req.principal: the blessed "who is this" slot, "" until authenticated;
  Middleware.before now takes mut req so auth can write it
- BearerAuth { token, principal } and BasicAuth { user, pass, realm }
  middlewares; BasicAuth answers the WWW-Authenticate challenge; policy
  (routes/users/secrets) stays app-side on the exposed fns
- web-app dogfoods BearerAuth; its hand-rolled Auth class deleted
- probe matrix 26/26 (RFC 4648 vectors, rfc7617 pair, pass-with-colon,
  bad padding/chars/length, deny paths, challenge header) release+ASan
- gate grows 16 -> 17: wrong bearer token answers 401 over the wire
- README: auth bullet + the core CHECKLIST (done / candidate / parked
  behind 8-11 by design); story 16 + board record the landing
- all gates green: web-app 17/0, oop-e2e 89/0, deps-accept 8/0,
  log-watcher 7/0, employee 8/0, woc-test green

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-20 03:15:16 +02:00

shoney.arickathil

d41be51bda

feat(framework): HTTP/1.1 parse + serialize + serve loop (iter 16 Task 2)

- http/parse.wo: bounded-read buffering to the header terminator, then
  exactly Content-Length body bytes; %XX decoding ('+' = space in query
  strings only, malformed escapes pass through — parsing stays total);
  path/query split with decoded pairs; header names lowercased; the
  three-state Parsed record (closed / malformed / request) with keep-alive
  carry-over — bytes past this request belong to the next one on the
  connection.
- http/serve.wo: Dispatcher interface (the router's seam), status/reason
  serialization with computed Content-Length, and the blocking loop:
  malformed -> 400 + close; a trapping handler -> 500 AND the loop lives;
  fds closed on every path; env.stopping() honored.
- Connection policy discovered by probing, not assumed: a parked keep-alive
  connection BLOCKS accept on a single-threaded server (probe: client 1
  idles open, client 2 starves). Policy: serve PIPELINED requests on one
  connection (carry non-empty), close when the client would idle; a proxy
  reconnects. README states it.

Verified against a throwaway echo app (not committed): %20 query decode;
two pipelined requests -> two responses on one connection; DIV0 handler ->
500 and the NEXT connection served; GARBAGE -> 400; SIGTERM stops clean.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-19 19:50:55 +02:00

3 commits