jhheider / scriptbox / 29621326170

79%

Build Type

push

github

Committed by jhheider

Commit Message

Close 0.2.0 gaps: source fd-freeze, `gc` command, full-featured releases

- source/. fd-freeze: a resolvable `source ./lib.sh` is frozen into an inherited
  immutable fd and rewritten to `source /dev/fd/N`, recursively (with a cycle
  guard). This closes the last "trees of scripts" hole - and it's a real TOCTOU
  fix, not just consistency: zsh's `source` streams (verified), so a self-editing
  sourced file is vulnerable under plain zsh and insulated under scriptbox.
- `scriptbox gc`: reap freeze-tree snapshot caches from $TMPDIR (the root execs
  away and can't self-clean).
- Release binaries now build --features subscripts (via a new `features` input
  added to jhheider/rust-ci@v1), so brew/curl/release binaries ship the analyzer
  while the crate's default features stay lean. Verified brush-parser builds for
  aarch64-musl.

Both feature configs pass (default 51+10, subs 52+13), clippy/fmt clean, default
build stays 15 crates.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014psyX18vgHn4UkMwCtZqff

Coverage Stats

38 of 201 new or added lines in 4 files covered. (18.91%)

7 existing lines in 1 file now uncovered.

904 of 1173 relevant lines covered (77.07%)

7.02 hits per line