gabriel / muse public
feat patch phase7 dev
AI Agent gabriel · 119 days ago · May 21, 2026 · Diff

feat(phase7): enforce msgpack confined to wire-protocol files only

- Remove lazy msgpack import from sign.py response decoder (not a wire file; JSON or raw-text fallback is sufficient for sign request responses) - Add tests/test_phase7_no_msgpack_in_storage.py: 4 lint tests - test_all_allowlist_files_exist: guard against stale allowlist entries - test_no_msgpack_import_in_core_storage: muse/core/ outside allowlist - test_no_msgpack_import_in_plugins: muse/plugins/ clean (no allowlist needed) - test_no_msgpack_import_in_cli_storage: muse/cli/commands/ outside allowlist - Wire-only allowlist: store.py, gc.py, transport.py, migrate.py, mpack.py, bundle.py, pack_objects.py, unpack_objects.py, verify_pack.py

sha256:de8316d5608c7f0200d532a567a6f3c52f7c322dfbedd245b2d3a20711d07b74 sha
sha256:0d0f1e8e12ca5e534d95434172695b0613daa260285c456f0679e254535d2a25 parent
+13 ~1 symbols
sha256:ab6214ebd61142121a1f7a582867d44605f09bc52fc5d6f039c1b5ae539d9dac snapshot
+13
symbols added
~1
symbol modified
0
dead code introduced
Semantic Changes 14 symbols
~ tests/test_phase7_no_msgpack_in_storage.py .py 13 symbols added
+ TestNoMsgpackInCliCommands class class TestNoMsgpackInCliCommands L107–119
+ test_no_msgpack_import_in_cli_storage method method test_no_msgpack_import_in_cli_storage L108–119
+ TestNoMsgpackInCore class class TestNoMsgpackInCore L74–99
+ test_no_msgpack_import_in_core_storage method method test_no_msgpack_import_in_core_storage L75–86
+ test_no_msgpack_import_in_plugins method method test_no_msgpack_import_in_plugins L88–99
+ TestWireAllowlistFilesExist class class TestWireAllowlistFilesExist L59–66
+ test_all_allowlist_files_exist method method test_all_allowlist_files_exist L60–66
+ _REPO_ROOT variable variable _REPO_ROOT L20–20
+ _WIRE_ALLOWLIST variable variable _WIRE_ALLOWLIST L22–32
+ _imports_msgpack function function _imports_msgpack L35–51
+ annotations import import annotations L11–11
+ ast import import ast L13–13
+ pathlib import import pathlib L14–14
~ muse/cli/commands/sign.py .py 1 symbol modified
~ run_request
← Older Oldest on dev
All commits
Newer → Latest on dev

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:de8316d5608c7f0200d532a567a6f3c52f7c322dfbedd245b2d3a20711d07b74 --body "your comment"