SafiandClaude Opus 4.8 c50ffc2285 cap untrusted office/PDF parsing to stop zip-bomb DoS (F2) ...

.docx/.xlsx are zip+XML containers parsed during a corpus scan with no size
guard, so a few-KB zip-bomb could decompress to gigabytes and OOM-kill the
process. Screen every office/PDF file before openpyxl/python-docx/pypdf touch
it: an on-disk size cap, a total-uncompressed cap, and a compression-ratio
check on the archive members. Files that exceed the caps are skipped (treated
as empty) rather than parsed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-02 22:19:17 +01:00

..

fixtures

feat: add objc, julia, c, c++, scala, fortran, powershell semantic contexts

2026-05-29 00:05:28 +03:00

__init__.py

feat: core pipeline

2026-04-04 18:52:44 +01:00

bench_extract.py

feat: implement parallel AST extraction using ProcessPoolExecutor with benchmarking support

2026-05-02 12:54:08 +05:30

conftest.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_affected_cli.py

feat: add v8 affected and import-resolution support

2026-05-22 13:24:54 +01:00

test_analyze.py

feat: detect circular import dependencies at file level (#961)

2026-05-30 21:37:47 +01:00

test_astro_extraction.py

feat(extract): add .astro support (#850)

2026-05-13 10:07:50 -07:00

test_benchmark.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_build.py

fix calls edge direction flipping on bidirectional pairs in undirected build (#1061)

2026-05-28 17:40:04 +01:00

test_cache.py

Fix SSRF DNS rebinding TOCTOU and yt-dlp URL bypass (#591, #592)

2026-04-28 15:04:52 +01:00

test_callflow_html.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_charmap_encoding.py

fix(llm): force UTF-8 encoding on _call_claude_cli subprocess + loud failure on chunk errors (#906)

2026-05-17 11:32:38 +01:00

test_chunking.py

feat(llm): split and retry chunks that hit max_completion_tokens truncation

2026-04-30 22:08:28 +10:00

test_claude_cli_backend.py

fix Windows claude-cli WinError 2 and post-commit hook silent drop on rapid commits

2026-05-29 11:41:42 +01:00

test_claude_md.py

Fix PreToolUse hook for Claude Code v2.1.117+ (Glob|Grep → Bash matcher)

2026-04-28 00:56:54 +01:00

test_cli_export.py

fix(cli): apply remap_communities_to_previous in cluster-only path (#1028)

2026-05-26 20:12:02 +01:00

test_cluster.py

reduce graph update churn and stabilize community IDs

2026-05-12 02:23:51 +03:00

test_confidence.py

v2: confidence scores on INFERRED edges, avg shown in report

2026-04-06 16:06:31 +01:00

test_dart.py

feat(dart): modernize AST parser, support nested generics and part-of redirection (#1098)

2026-06-01 16:13:36 +01:00

test_dedup.py

fix gitignore parent-exclusion rule (#882) and dedup false merges on short labels (#878)

2026-05-15 22:57:36 +01:00

test_detect.py

fix anchored gitignore pattern leaking basename match into subtree (closes #1087)

2026-05-30 18:16:01 +01:00

test_devin.py

feat: add Devin CLI support (graphify devin install/uninstall) (#1020)

2026-05-26 09:17:18 +01:00

test_dotnet.py

add .NET project file support (.sln, .csproj, .fsproj, .vbproj, .razor, .cshtml)

2026-05-26 12:27:28 +01:00

test_explain_cli.py

fix path/explain arrow direction and bedrock CLI guard (#846, #849, #853)

2026-05-13 23:19:15 +01:00

test_export.py

Rate-limit backup_if_protected to one folder per day via content hash

2026-05-25 09:14:20 +01:00

test_extract_cli.py

Exit non-zero when all semantic-extraction chunks fail (#889)

2026-05-22 14:38:32 +01:00

test_extract.py

fix(extract_dart): use _file_stem instead of str(path) for child node IDs to prevent machine-specific absolute paths in graph.json (#999)

2026-05-26 20:21:27 +01:00

test_file_node_id_spec.py

relativize symbol node IDs for root-level files to match spec (fixes #1096)

2026-05-31 17:09:30 +01:00

test_global_graph.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_google_workspace.py

Harden Google Workspace gws exports (#772)

2026-05-07 20:07:57 +01:00

test_hooks.py

test(hooks): cover old git hook path output (#910)

2026-05-18 12:04:49 +01:00

test_hypergraph.py

v0.4.15: VS Code Copilot Chat, OpenCode/Gemini Windows fixes, .mjs/.ejs, macOS watch, god_nodes degree rename

2026-04-15 23:08:43 +01:00

test_import_extension_resolution.py

fix(extract): apply resolver fixups to JS/TS dynamic_import handler

2026-05-05 00:07:50 +02:00

test_incremental.py

fix test_no_incremental_without_manifest false positive

2026-05-31 00:10:19 +01:00

test_ingest.py

feat: cache, multi-language extraction, MCP, memory feedback

2026-04-04 18:56:38 +01:00

test_install_references.py

ship the references sidecar for gemini installs

2026-06-02 22:10:08 +01:00

test_install_roundtrip.py

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

test_install_strings.py

feat: add Devin CLI support (graphify devin install/uninstall) (#1020)

2026-05-26 09:17:18 +01:00

test_install_upgrade.py

Stop telling assistants to read GRAPH_REPORT.md first (#580)

2026-05-15 20:17:52 -07:00

test_install.py

feat(skills): progressive-disclosure split for all platforms (generator + drift fence) (#1121)

2026-06-02 20:48:13 +01:00

test_js_import_resolution.py

match AST file-level node IDs to the skill.md spec (fixes #1033)

2026-05-31 12:23:56 +01:00

test_labeling.py

fold community labeling into llm.py instead of a standalone module

2026-05-31 23:37:28 +01:00

test_languages.py

make tree-sitter-dm an optional extra to fix default install (fixes #1104)

2026-06-01 21:44:59 +01:00

test_llm_backends.py

fix Ollama num_ctx: derive from actual chunk size instead of hardcoding 131072 (#798)

2026-05-09 23:42:44 +01:00

test_llm_parser.py

fix(claude-cli): eliminate hollow-response loop from system-prompt conflict

2026-05-28 17:44:35 +02:00

test_mcp_ingest.py

feat: MCP config extractor (.mcp.json, claude_desktop_config.json, mcp.json)

2026-05-26 20:16:41 +01:00

test_multigraph_compat.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_multigraph_diagnostics.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_multilang.py

feat: semantic type-reference edges for Swift, Kotlin, PHP, Rust, and Go (#1015)

2026-05-28 14:46:03 +01:00

test_obsidian_filename_cap.py

cap obsidian/canvas filenames to avoid ENAMETOOLONG on long labels (fixes #1094)

2026-05-31 16:41:18 +01:00

test_office_limits.py

cap untrusted office/PDF parsing to stop zip-bomb DoS (F2)

2026-06-02 22:19:17 +01:00

test_ollama.py

security hardening: F-002/F-005/F-007/F-008/F-009/F-010/F-016/F-031/F-035/F-038/PR747-NEW-2

2026-05-07 16:32:26 +01:00

test_pascal.py

add Pascal regex fallback - extraction works without tree-sitter-pascal

2026-05-09 15:52:17 +01:00

test_path_cli.py

fix path/explain arrow direction and bedrock CLI guard (#846, #849, #853)

2026-05-13 23:19:15 +01:00

test_pipeline.py

v0.4.15: VS Code Copilot Chat, OpenCode/Gemini Windows fixes, .mjs/.ejs, macOS watch, god_nodes degree rename

2026-04-15 23:08:43 +01:00

test_provider_registry.py

validate custom-provider base_url and gate project-local providers (F1)

2026-06-02 22:16:58 +01:00

test_prs.py

add graphify prs: graph-aware PR dashboard with triage, worktrees, conflict detection

2026-05-16 22:36:58 +01:00

test_python_import_resolution.py

feat: add cross-language semantic contexts for Python, JS/TS, C#, and Java (#996)

2026-05-24 20:38:10 +01:00

test_query_cli.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_rationale.py

fix: memory-dir gitignore leak, Pass 2 dedup cross-file identical merge, decorated method node ID mismatch (#1047, #1046, #1050)

2026-05-27 22:30:08 +01:00

test_report.py

Fix #664: filter thin communities from GRAPH_REPORT.md by default

2026-05-02 18:09:32 +01:00

test_scip_ingest.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_security.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_semantic_cleanup.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_semantic_similarity.py

v2: semantic similarity edges, scored higher in surprising connections

2026-04-06 16:06:31 +01:00

test_serve.py

fix: OpenCode project path, hook loop guard, deterministic output, Amp platform, punctuation search, builtin god-node filter, .svh Verilog (#1040, #1018, #1037, #948, #994, #916, #1042)

2026-05-27 12:39:22 +01:00

test_skillgen.py

harden _always_on against missing blocks and pin skillgen baselines

2026-06-02 21:08:11 +01:00

test_symbol_resolution.py

feat(multigraph): add runtime compatibility probe (#956)

2026-05-22 13:22:51 +01:00

test_transcribe.py

Remove Anthropic API call from transcribe.py - agent generates Whisper prompt itself

2026-04-10 15:55:22 +01:00

test_ts_inheritance.py

capture TS interface-extends and same-file class heritage (fixes #1095)

2026-05-31 16:47:52 +01:00

test_validate.py

feat: Claude Code skill, Obsidian vault, install, tests

2026-04-04 18:53:43 +01:00

test_watch.py

fix Windows claude-cli WinError 2 and post-commit hook silent drop on rapid commits

2026-05-29 11:41:42 +01:00

test_wheel_packaging.py

harden _always_on against missing blocks and pin skillgen baselines

2026-06-02 21:08:11 +01:00

test_wiki.py

Fix wiki TypeError on null source_file and skip nested worktrees/ dirs (#1016, #1023)

2026-05-26 09:06:43 +01:00