Keep nix mirror 101 zig langtools#19
Merged
Merged
Conversation
…fs #229)
Oracle-validated Tier-1 port (affinescript main @ #229 canonical map,
docs/RESCRIPT-ELIMINATION.adoc):
- List(T) -> [T] (1 occurrence)
- expression-position record literals { ... } -> #{ ... } (the record
sigil, spec.md:414-421). Match record-PATTERNS and struct/enum/type
decl bodies correctly left as { } (sigil is expression-literal-only,
oracle-confirmed).
- ReScript string `+` -> AffineScript `++` where present (concat is
`++`; `+` is numeric — left a String/Int unify error beneath the
parse wall; numeric `+`/`-` untouched).
Verified: `affinescript main check src/ui/tea/gsa_gui.affine` -> Type checking passed
(was: parse error / DRIFT-SYNTAX pre-port). Self-contained file, no
imports. Refs #229 (estate-wide, sequenced, human-gated — not Closes).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Per the campaign gate, this flake is LOAD-BEARING — guix.scm has real build phases (Zig build + install) but declares empty `(native-inputs (list))` / `(inputs (list))`, with `zig` commented as "uncomment when available in Guix". The flake's devShell is the sole source of the language layer (zig, zls, idris2) and the RSR-template common dev tools (git, just, nickel, curl, bash, coreutils). Top-comment now states the dep gap. Refs standards#101 standards#102. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
🔍 Hypatia Security ScanFindings: 14 issues detected
View findings[
{
"reason": "Issue in quality.yml",
"type": "missing_workflow",
"file": "quality.yml",
"action": "create",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Issue in security-policy.yml",
"type": "missing_workflow",
"file": "security-policy.yml",
"action": "create",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
"type": "unpinned_action",
"file": "governance.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (2 occurrences, CWE-79)",
"type": "js_innerhtml",
"file": "/home/runner/work/game-server-admin/game-server-admin/src/gui/fli/fli-terminal.js",
"action": "flag",
"rule_module": "code_safety",
"severity": "high"
},
{
"reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (4 occurrences, CWE-79)",
"type": "js_innerhtml",
"file": "/home/runner/work/game-server-admin/game-server-admin/src/gui/fli/fli-gauge.js",
"action": "flag",
"rule_module": "code_safety",
"severity": "high"
},
{
"reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (1 occurrences, CWE-79)",
"type": "js_innerhtml",
"file": "/home/runner/work/game-server-admin/game-server-admin/src/gui/fli/fli-tooltip.js",
"action": "flag",
"rule_module": "code_safety",
"severity": "high"
},
{
"reason": "innerHTML assignment -- XSS risk, use textContent or SafeDOM (1 occurrences, CWE-79)",
"type": "js_innerhtml",
"file": "/home/runner/work/game-server-admin/game-server-admin/src/gui/fli/fli-editable.js",
"action": "flag",
"rule_module": "code_safety",
"severity": "high"
},
{
"reason": "Deno -A grants all permissions -- use specific --allow-* flags (4 occurrences, CWE-250)",
"type": "js_deno_all_perms",
"file": "/home/runner/work/game-server-admin/game-server-admin/run.js",
"action": "flag",
"rule_module": "code_safety",
"severity": "high"
},
{
"reason": "HTTP URL in Nickel config -- must use HTTPS (1 occurrences, CWE-319)",
"type": "ncl_http_url",
"file": "/home/runner/work/game-server-admin/game-server-admin/.machine_readable/svc/k9/template-hunt.k9.ncl",
"action": "flag",
"rule_module": "code_safety",
"severity": "high"
},
{
"reason": "Nickel file missing SPDX-License-Identifier header (1 occurrences, CWE-1104)",
"type": "ncl_missing_spdx",
"file": "/home/runner/work/game-server-admin/game-server-admin/configs/config.ncl",
"action": "flag",
"rule_module": "code_safety",
"severity": "medium"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Changes
RSR Quality Checklist
Required
just testor equivalent)just fmtor equivalent)unsafeblocks without// SAFETY:commentsbelieve_me,unsafeCoerce,Obj.magic,Admitted,sorry).envfiles includedAs Applicable
.machine_readable/STATE.a2mlupdated (if project state changed).machine_readable/ECOSYSTEM.a2mlupdated (if integrations changed).machine_readable/META.a2mlupdated (if architectural decisions changed)TOPOLOGY.mdupdated (if architecture changed)CHANGELOGor release notes updatedsrc/interface/abi/andsrc/interface/ffi/consistent)Testing
Screenshots