Files
LumaWeb/planning/stages/S00.md
T
wt e2b4dbdb76 S00-018: Bound standalone XML ingress before Stanza parsing and import
Changes: Add an isolated public transport integration with finite byte, depth, element and attribute budgets; validate complete text XML with pinned saxes before real JXT parsing/import. Add adversarial and boundary fixtures, terminal cleanup tests, dependency notices and a proposed parser ADR.
Validation: Fresh-cache npm ci and npm test passed all 55 tests with Node 24.21.0/npm 11.19.0. Reproduced three stock parser failures, checked ten exact dependency licenses/integrities and 340 unchanged Stanza files; make check passed 72 tooling tests. Scope and whitespace inspected. Browser runtime, live WSS and interoperability were not tested.

Task: S00-018
Agent: auto-protocol-89fe6563092c
Role: protocol
Action: claim
Status: review

Task title: Validate bounded standalone XML ingress for the XMPP candidate
2026-10-15 02:31:33 +07:00

2.6 KiB

S00: Профиль и проверка стека

Зафиксировать Web scope, browser targets и проверенные кандидаты, не устанавливая непроверенный framework по догадке.

Входной gate: нет. Выходной gate: S00-010.

Задачи

  • S00-001: Утвердить Web-профиль — orchestrator; done.
  • S00-002: Выбрать framework и build runtime — orchestrator; done.
  • S00-003: Проверить XMPP WSS/auth библиотеку — protocol; blocked.
  • S00-004: Проверить browser OMEMO backend — crypto; todo.
  • S00-005: Выбрать IndexedDB wrapper и migration policy — storage; todo.
  • S00-006: Зафиксировать browser/reference matrix — orchestrator; todo.
  • S00-007: Утвердить password и crypto unlock модель — security; todo.
  • S00-008: Описать WSS/upload/TURN/push topology — ci-cd; todo.
  • S00-009: Согласовать результаты spikes — orchestrator; todo.
  • S00-011: Restore verified npm registry access for the stack spike — ci-cd; done.
  • S00-012: Fix runner prompt delivery after partial stdin timeout — ci-cd; done.
  • S00-013: Bound oversized S21-006 runner context without truncating requirements — ci-cd; done.
  • S00-014: Fix repeated runner cleanup after a submitted parent is reaped — ci-cd; done.
  • S00-015: Устранить прерывание: Fix runner prompt delivery after partial stdin timeout — ci-cd; done.
  • S00-016: Restore reviewer model availability after provider capacity failure — ci-cd; done.
  • S00-017: Establish fail-closed SCRAM server-final validation — protocol; done.
  • S00-018: Validate bounded standalone XML ingress for the XMPP candidate — protocol; review.
  • S00-010: Gate: Профиль и проверка стека — qa; todo.

Граница этапа

Выходной gate проверяет evidence/готовые проверки, не реализует функции за остальные задачи. Если отдельная карточка требует слишком большой контекст — split с сохранением requirements coverage.