samiandClaude Opus 5
53421d6cb8
Schemas for the whole v1 surface: 38 methods, 9 events, 25 named types and the
JSON-RPC envelope, with x-privileged / x-transports / x-deadlineMs / x-errors
annotations that both generators emit as data rather than prose.
Four generators over one IR (contracts/codegen/schema_ir.py), so the C++ structs,
the TypeScript types and the OpenRPC document cannot disagree about what the
contract says:
gen_cpp.py -> core/generated/velox_proto.{hpp,cpp}
gen_ts.py -> extension/src/shared/protocol/
gen_openrpc.py -> contracts/openrpc.json
gen_cpp_conformance.py -> tests/conformance/cpp/fixture_dispatcher.hpp
Inbound parsing never throws: parse<T>() returns std::expected<T, ParseError> and
nlohmann's throwing ADL from_json is deliberately not emitted. Schema constraints
(minimum, maxLength, pattern, ...) become real runtime checks in both languages —
the daemon does not trust the extension and the extension does not trust the
daemon.
59 golden fixtures: a success case per method, 12 error cases, 9 events. Replayed
by tests/conformance/ against both the generated C++ and a live server over both
transports. tools/mockd serves the same fixtures with unhappy-path flags so the
GUI and EXT lanes never wait for veloxd.
run.sh also proves capture.offer fails open: with a daemon answering slower than
750 ms the client gives up and lets Firefox take the download.
core/generated/ is libveloxproto, a separate target from libveloxcore, which
still never sees JSON — see docs/adr/0009.
Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_012fgjnqFCS5h5L7gZTZo3rV
34 lines
1.0 KiB
JSON
34 lines
1.0 KiB
JSON
{
|
|
"name": "session.pair \u2014 the sixth failed attempt in a minute is locked out",
|
|
"description": "Rate limiting is what stops another local process brute-forcing its way to a token.",
|
|
"transport": "ws",
|
|
"request": {
|
|
"jsonrpc": "2.0",
|
|
"id": 102,
|
|
"method": "session.pair",
|
|
"params": {
|
|
"clientName": "Velox for Firefox",
|
|
"extensionId": "11111111-2222-3333-4444-555555555555",
|
|
"code": "0000"
|
|
}
|
|
},
|
|
"response": {
|
|
"jsonrpc": "2.0",
|
|
"id": 102,
|
|
"error": {
|
|
"code": -32014,
|
|
"message": "too many pairing attempts; try again later",
|
|
"data": {
|
|
"retryAfterSec": 60
|
|
}
|
|
}
|
|
},
|
|
"assertions": [
|
|
"five failures per minute, then a 60 s lockout",
|
|
"the lockout is per-origin and survives a reconnect, or it is not a lockout",
|
|
"no user prompt is shown while locked out \u2014 the prompt itself is the thing being flooded",
|
|
"the runner does not brute-force a live daemon; mockd reproduces it under --lockout"
|
|
],
|
|
"requires": "six failed pairing attempts inside one minute"
|
|
}
|