fix(recovery): restore 0pt source and isolate integration writes #539
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: admin/0pt#539
Reference in New Issue
Block a user
The production-documentation merge
585bdd4left the default branch with only two documents and removed the application, contracts, tests and workflows. This restores exactly the 957 paths present atfb072d47but missing from that branch. Every restored blob and file mode was independently checked against the baseline. Both current production documents remain byte-identical; no surviving default-branch content is overwritten.The first commit is the exact source recovery. A separate test-safety commit removes an inherited production ST0RE write path from the integration suite: no opt-in means no HTTP request; an explicit opt-in requires an explicit loopback test origin. The real HTTP client remains in use when enabled, while cross-origin requests and redirect following are blocked. All functional assertions remain. No production application code, scanner policy, branch protection or credential is changed by this safety commit.
Validation: frozen dependency install; typecheck; Next build; text-contrast check; full Vitest suite 1434 passed / 197 explicitly skipped. Forty-one safety-guard cases pass, including zero requests by default and denial before dispatch for production targets. An ephemeral loopback HTTP503 server observed exactly one GET and zero mutations. The credential scanner reported zero blocking findings (89 informational, no allowlist). Final synthetic credential-URI fixture strings are assembled at runtime with identical test values because the native pre-receive scanner correctly rejected their literal spelling; no scanner exception was added.
The canonical contracts/openapi.yaml has SHA-256 1b0bbca6f020dab35c052ae7e5036c396fd7bd8546a81bc355a3fb39d23c01a2 (31532 bytes), matching the existing SIAX parity snapshot. Native CI and protected review must finish before merge. This PR makes no production acceptance claim. Existing baseline whitespace is intentionally preserved by the exact recovery; the separate safety diff passes git diff --check. The primary checkout and its unique branch/untracked work were left untouched.
Independent source review completed by a separate Codex agent on exact head
0cac0266e0. Independently verified all 957 restored paths against the prior complete canonical tree, including blob IDs and file modes, and preserved every surviving production-document blob. Contract hash is unchanged. Reviewed the separate test-origin guard: explicit opt-in plus an exact loopback origin, no default HTTP, redirects rejected, and writes confined to that origin. Independently reran all41 guard tests; all passed. This is a service-account review record of actual code review, not human attestation. Native CI passed on this head; production credential injection and full SIAX acceptance are not implied.