Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .coveragerc
Original file line number Diff line number Diff line change
@@ -1,6 +1,5 @@
[run]
source =
audio_library
chapters
diarize
job_store
Expand Down
25 changes: 0 additions & 25 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -43,28 +43,3 @@ jobs:

- name: Verify console entry point
run: codec-carver --help

rust:
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, macos-latest]
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false

- name: Install Rust 1.88.0 with rustfmt
run: rustup toolchain install 1.88.0 --profile minimal --component rustfmt

- name: Report Rust toolchain
run: |
rustup run 1.88.0 rustc --version --verbose
rustup run 1.88.0 cargo --version --verbose

- name: Check Rust formatting
run: rustup run 1.88.0 cargo fmt --manifest-path rust-core/Cargo.toml -- --check

- name: Test Rust backend
run: rustup run 1.88.0 cargo test --locked --all-targets --manifest-path rust-core/Cargo.toml
3 changes: 0 additions & 3 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,3 @@ leak-*

# Generated conversion outputs / reports
under_2gb/

# Rust build outputs
rust-core/target/
4 changes: 4 additions & 0 deletions .jules/bolt.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,3 +67,7 @@
## 2025-02-12 - [Fast Path Execution in Directory Traversal and Log Parsing]
**Learning:** Checking for string existence (`if "silence_" not in stderr`) before invoking regex matchers provides significant speed improvements when parsing large blocks of text. Similarly, moving expensive I/O operations like `os.path.realpath` inside conditional blocks prevents redundant disk access when configuration (like path exclusions) isn't utilized.
**Action:** When working on large text processing or disk operations, verify if early exit conditions or conditional execution can bypass the expensive system or library calls.

## 2024-06-25 - [Optimize set initialization in loops]
**학습:** 파이썬에서 `set` 교집합(`&`) 연산은 항상 새로운 `set` 객체를 반환합니다. 누적 교집합을 구할 때 첫 번째 루프에서 원본 `set`을 방어적으로 복사(`set(postings)`)하는 것은 불필요하며 상당한 성능 저하를 일으킵니다. 첫 할당에서는 원본 참조를 그대로 사용하고 다음 반복부터 `&` 연산이 새 객체를 생성하게 하는 것이 안전하고 빠릅니다.
**실행:** 루프 내에서 불변 교집합(`&`) 연산을 통해 값을 누적할 때, 초기값을 설정하기 위해 방어적 복사본을 생성하지 마십시오.
5 changes: 0 additions & 5 deletions .jules/sentinel.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,3 @@
## 2026-07-25 - [Cross-platform upload basename normalization]
**Behavior:** Upload metadata now interprets both forward slashes and backslashes as path separators before extracting a basename.
**Learning:** On POSIX systems, `pathlib.Path(filename).name` retains backslashes because they are ordinary characters there. That caused inconsistent manifest and converter filenames for Windows-style client paths. The upload itself is still written inside a trusted temporary workspace, and batch archive entry names are generated outputs; this change does not establish a filesystem traversal or archive-entry escape.
**Prevention:** Normalize client path separators before extracting a basename, retain the existing empty/`.`/`..` fallback, and test the persisted source name and manifest metadata. Treat the normalization as cross-platform consistency and defense in depth, not as evidence of a demonstrated Zip Slip exploit.

## 2026-05-28 - [Sentinel Fixes: Temp Files & Injection]
**Vulnerability:** Predictable Temp Files (CWE-377) and Insecure Default Permissions (CWE-276), plus Command Injection via FFmpeg Filtergraph (CWE-20).
**Learning:** Python's `Path.with_name` plus a suffix string to make a temp file opens a race condition because it's predictable and the permissions default to system `umask` which might expose secret `0600` data. Additionally, interpolating variables directly into FFmpeg filtergraph strings allows arbitrary filter injection.
Expand Down
1 change: 0 additions & 1 deletion CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,4 +11,3 @@

### Fixed
- 단일·일괄 대상 크기 입력을 비웠을 때 이전 custom validity와 `aria-invalid` 상태를 즉시 초기화해 현재 필수 입력 상태를 정확히 전달합니다.
- 업로드 파일명의 경로 구분자를 정규화하여 POSIX에서도 Windows 형식의 클라이언트 경로가 일관된 basename으로 기록되도록 수정했습니다.
390 changes: 0 additions & 390 deletions README.md

Large diffs are not rendered by default.

Loading
Loading