fix(backends): verify full Herdr payload before submit - #171

Merged

dnth merged 21 commits into

mainfrom

fm/port-upstream-5336-omp-v2

Sep 27, 2026

Commits on Sep 26, 2026

fix(bin): refuse a Herdr submit whose composer holds only a message tail
dnth
committed
f0f001e
no-mistakes(document): Document Herdr payload-proof submit behavior
dnth
committed
67b3c06
no-mistakes(ci): Updated the OMP Herdr test fixtures to model the new payload-proof contract: executable pane reads now expose verified empty/full composer states, and the Bun width stub returns me…
dnth
committed
282295a
no-mistakes(ci): Fixed the CI-causing fixture/lint issues. The remote Herdr fixture now tracks composer text separately from the launch command, so pre-submit reads are genuinely empty and post-sub…
dnth
committed
6161247
no-mistakes(ci): Fixed the probe-aware Herdr CI fixtures and behavior: identity now occupies call 1, literal-send stderr is replayed, the regression test is added, OMP composer fixtures model verif…
dnth
committed
5ded89e
no-mistakes(test): Bounded wake-lock persistence handling added
dnth
committed
1037187
no-mistakes(test): Guard queue inspection against malformed lock hangs
dnth
committed
cfaaeaf
no-mistakes(review): Guarded all lock acquisitions against invalid lock shapes
dnth
committed
242cdfe
no-mistakes(review): Made malformed locks permanently fail-closed for all callers
dnth
committed
b0f7ccd
no-mistakes(review): Guarded every lock acquisition before protected operations
dnth
committed
7cef23b
no-mistakes(review): Bound bare composer parsing at known footer boundaries
dnth
committed
509a6f1
no-mistakes(review): Hardened footer parsing and malformed-lock propagation
dnth
committed
720edc4
no-mistakes(review): Preserved multiline payloads and hardened footer boundaries
dnth
committed
0b31d60
no-mistakes(test): Default omitted idle case and add nounset regression coverage
dnth
committed
b59e53b
no-mistakes(document): Corrected Herdr payload-proof configuration documentation
dnth
committed
068ec4b

Navigation Menu

fix(backends): verify full Herdr payload before submit - #171

fix(backends): verify full Herdr payload before submit#171
dnth merged 21 commits into
mainfrom
fm/port-upstream-5336-omp-v2

Commits on Sep 26, 2026

fix(bin): refuse a Herdr submit whose composer holds only a message tail

no-mistakes(document): Document Herdr payload-proof submit behavior

no-mistakes(ci): Updated the OMP Herdr test fixtures to model the new payload-proof contract: executable pane reads now expose verified empty/full composer states, and the Bun width stub returns me…

no-mistakes(ci): Fixed the CI-causing fixture/lint issues. The remote Herdr fixture now tracks composer text separately from the launch command, so pre-submit reads are genuinely empty and post-sub…

no-mistakes(ci): Fixed the probe-aware Herdr CI fixtures and behavior: identity now occupies call 1, literal-send stderr is replayed, the regression test is added, OMP composer fixtures model verif…

no-mistakes(test): Bounded wake-lock persistence handling added

no-mistakes(test): Guard queue inspection against malformed lock hangs

no-mistakes(review): Guarded all lock acquisitions against invalid lock shapes

no-mistakes(review): Made malformed locks permanently fail-closed for all callers

no-mistakes(review): Guarded every lock acquisition before protected operations

no-mistakes(review): Bound bare composer parsing at known footer boundaries

no-mistakes(review): Hardened footer parsing and malformed-lock propagation

no-mistakes(review): Preserved multiline payloads and hardened footer boundaries

no-mistakes(test): Default omitted idle case and add nounset regression coverage

no-mistakes(document): Corrected Herdr payload-proof configuration documentation

Commits on Sep 27, 2026

no-mistakes(ci): Fixed both CI failures. The shared terminal-width helper now uses the Node width path for canonical Node runtimes even when the OMP entrypoint is separate, restoring valid remote O…

no-mistakes(ci): Fixed the shared OMP terminal-width boundary in bin/fm-composer-lib.sh. Runtime detection now behaviorally identifies Node-compatible canonical runtimes instead of relying only on …

no-mistakes(ci): Fixed the CI-1 root cause in bin/fm-composer-lib.sh: standalone compiled OMP entrypoints are now routed to the Node width path before any `-e` probe, so they cannot receive unsuppo…

no-mistakes(ci): Fixed tests/remote-herdr-fixture.sh to calculate OMP box and composer widths with the shared terminal-width helper, avoiding locale-sensitive Bash character counts that produced ma…

no-mistakes(ci): Fixed CI-1 by preserving canonical `omp_bun`/`omp_bin` through remote control output into parent route metadata, and requiring complete OMP runtime metadata. Removed the incomplete…

no-mistakes(ci): Fixed tests/remote-herdr-fixture.sh: OMP frame borders now dynamically match composer display width while preserving the parser-required `──╮` structure, and Ctrl+U clears the comp…