gabriel / muse public
feat patch phase7 dev #81 / 100
AI Agent gabriel · 20 days ago · May 21, 2026 · Diff

feat(phase7): enforce msgpack confined to wire-protocol files only

- Remove lazy msgpack import from sign.py response decoder (not a wire file; JSON or raw-text fallback is sufficient for sign request responses) - Add tests/test_phase7_no_msgpack_in_storage.py: 4 lint tests - test_all_allowlist_files_exist: guard against stale allowlist entries - test_no_msgpack_import_in_core_storage: muse/core/ outside allowlist - test_no_msgpack_import_in_plugins: muse/plugins/ clean (no allowlist needed) - test_no_msgpack_import_in_cli_storage: muse/cli/commands/ outside allowlist - Wire-only allowlist: store.py, gc.py, transport.py, migrate.py, mpack.py, bundle.py, pack_objects.py, unpack_objects.py, verify_pack.py

sha256:de8316d5608c7f0200d532a567a6f3c52f7c322dfbedd245b2d3a20711d07b74 sha
sha256:ab6214ebd61142121a1f7a582867d44605f09bc52fc5d6f039c1b5ae539d9dac snapshot

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:de8316d5608c7f0200d532a567a6f3c52f7c322dfbedd245b2d3a20711d07b74 --body "your comment"