idx-cli/scripts
hermes fea1a0e906 fix(ownership): bound snapshot download by manifest size; clean refused builds
Addresses review on #31:
- the snapshot download limit is the manifest's size_bytes (+1, since
  ureq fails once a body reaches its limit), capped at 1 GiB; a body
  larger than advertised fails during download. New CLI test; the
  >10 MiB test also caught the off-by-one.
- a refused (oversized) standalone build removes its sqlite and
  manifest from --output-dir.
- docs: downloads are buffered, not streamed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017a5Cv5Z1NzdYKgKnTiAF4E
2026-09-25 22:31:40 +00:00
..
audit-msn-fundamentals.sh fix: handle non-finite msn key ratios 2026-04-13 23:34:36 +07:00
build-latest-ownership-snapshot.sh fix(ownership): bound snapshot download by manifest size; clean refused builds 2026-09-25 22:31:40 +00:00
build-ownership-snapshot.sh fix(ownership): verify snapshot assets before publishing manifests 2026-09-25 10:37:32 +00:00
check-ownership-snapshot-freshness.sh fix(ownership): make publisher RESULT contract hold on every path 2026-09-24 21:50:51 +00:00
idx.js fix: harden npm distribution release and installer 2026-09-24 18:57:53 +00:00
install-sh-test.sh fix: expand quoted ~ in install dir and trim trailing slashes on mirror URLs 2026-09-24 19:34:18 +00:00
install.js fix: harden npm distribution release and installer 2026-09-24 18:57:53 +00:00
live-smoke.sh feat: support explicit MSN chart history 2026-04-15 13:48:27 +07:00
npm-smoke.sh fix: harden npm distribution release and installer 2026-09-24 18:57:53 +00:00
publish-ownership-snapshot-test.sh fix(ownership): sync snapshots over 10 MiB; refuse oversized publishes 2026-09-25 22:22:48 +00:00
publish-ownership-snapshot.sh fix(ownership): sync snapshots over 10 MiB; refuse oversized publishes 2026-09-25 22:22:48 +00:00