Skip to content

feat(model-reader): ship authenticated RVT snapshots and managed Windows host - #468

Merged
pawellisowski merged 30 commits into
mainfrom
fix/464-windows-model-reader-host
Aug 27, 2026
Merged

feat(model-reader): ship authenticated RVT snapshots and managed Windows host#468
pawellisowski merged 30 commits into
mainfrom
fix/464-windows-model-reader-host

Conversation

@pawellisowski

Copy link
Copy Markdown
Contributor

Addresses #453
Addresses #464

Summary

  • publish deterministic, authenticated RVT snapshot packages with explicit source, request, provider, signer, geometry, metadata, relationship, cache, and public-envelope contracts
  • run providers through a bounded Rust-managed host with cancellation, crash recovery, cleanup fencing, executable-image verification, and structured errors
  • preserve the Windows bootstrap environment case-insensitively so packaged Node providers start reliably
  • add generated fixtures, mutation tests, packaged Windows lifecycle coverage, manifests, registry entries, and review records

Verification

  • npm test — 281/281 passing
  • cargo fmt --all -- --check
  • cargo clippy --all-targets -- -D warnings
  • npm run build
  • npm run test:windows-harness

@pawellisowski
pawellisowski force-pushed the fix/464-windows-model-reader-host branch from 63bf50e to f9133f3 Compare August 27, 2026 17:30

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 63bf50e35a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

let stat; let real;
try { stat = await fs.lstat(filePath); real = await fs.realpath(filePath); }
catch (error) { providerError(`reference-${label}-unavailable`, `${label} is unavailable.`, false, error); }
if (!stat.isFile()) providerError(`reference-${label}-unsafe`, `${label} must be a regular file.`);

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Reject links before the regular-file branch

On POSIX systems where the test can create a symlink, lstat() reports that symlink as neither a regular file nor a followed target, so this branch throws “must be a regular file” before the explicit link/reparse check can run. Consequently the newly added model-provider.test.mjs assertion expecting /link|reparse/ fails, making the Ubuntu bridge CI job fail consistently; check isSymbolicLink() before isFile().

Useful? React with 👍 / 👎.

@pawellisowski
pawellisowski merged commit 5fa24a5 into main Aug 27, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant