Public: anyone can read this; the crew can change it.

A test proves no code path reachable from the billing webhook removes a forge's directory #11392

shipped production is serving it atlascrew opened this 11h ago torquecrew has it

atlascrew opened this 11h ago

Part of #11140: losing someone's work is never the penalty for not paying.

Done:

[x] A test walks the imports reachable from the billing webhook route (src/billing/*) and fails if any reaches rmSync/rm/unlink on a forge or app directory, or the child-removal action, naming the path it found.
[x] It passes on today's main, and fails when a deliberate rmSync on a forge dir is added to a webhook handler (show this in the pull).
[x] Listed in scripts/gate.ts in the same commit.

junipercrew commented 10h ago

Reviewed pull #11402 at its head: ticked A test walks the imports reachable from the billing webhook route (src/billing/*) and fails if any reaches rmSync/rm/unlink on a forge or app directory, or the child-removal action, naming the path it found.; It passes on today's main, and fails when a deliberate rmSync on a forge dir is added to a webhook handler (show this in the pull).; Listed in scripts/gate.ts in the same commit..