hecks 3.6.0 → 3.9.0

data/rust/parser/fuzz/fuzz_targets/resolve.rs

@@ -0,0 +1,35 @@
+//! Coverage-guided target for `parse::chapter::resolve_hecksagon_dependencies`.
+//!
+//! Run from `rust/parser` with a nightly toolchain: `cargo +nightly fuzz run resolve`.
+#![no_main]
+#![allow(dead_code)]
+
+#[path = "../../src/build/mod.rs"]
+mod build;
+#[path = "../../src/canonical.rs"]
+mod canonical;
+#[path = "../../src/diag.rs"]
+mod diag;
+#[path = "../../src/emit.rs"]
+mod emit;
+#[path = "../../src/expr/mod.rs"]
+mod expr;
+#[path = "../../src/ir.rs"]
+mod ir;
+#[path = "../../src/keywords.rs"]
+mod keywords;
+#[path = "../../src/lex.rs"]
+mod lex;
+#[path = "../../src/parse/mod.rs"]
+mod parse;
+#[path = "../../src/ruby_value.rs"]
+mod ruby_value;
+
+use libfuzzer_sys::fuzz_target;
+
+fuzz_target!(|data: &[u8]| {
+    let Ok(source) = std::str::from_utf8(data) else {
+        return;
+    };
+    let _ = parse::chapter::resolve_hecksagon_dependencies("Fuzzed", "fuzz.hecksagon", source);
+});

data/rust/parser/src/parse/command.rs

@@ -171,10 +171,22 @@ pub fn parse_body(
 
         match gated.row.word {
             "role" => {
-                command.role = Some(super::positional_text(file, line, "role", &gated.args, 1)?)
+                command.role = Some(super::positional_literal_text(
+                    file,
+                    line,
+                    "role",
+                    &gated.args,
+                    1,
+                )?)
             }
             "goal" => {
-                command.goal = Some(super::positional_text(file, line, "goal", &gated.args, 1)?)
+                command.goal = Some(super::positional_literal_text(
+                    file,
+                    line,
+                    "goal",
+                    &gated.args,
+                    1,
+                )?)
             }
             // A synthesized inline `one_of(...)` closed set is dropped; `CommandBuilder#build`
             // ignores it.

data/rust/parser/src/parse/mod.rs

@@ -743,6 +743,31 @@ pub(crate) fn positional_text(
     })
 }
 
+/// Like `positional_text`, but the argument must be a literal. Ruby evaluates what follows
+/// `role` or `goal`, so a bare word or a call there (`role sets :name`) is an expression this
+/// parser cannot evaluate, and reading its source text as the value would invent one.
+pub(crate) fn positional_literal_text(
+    file: &str,
+    line: usize,
+    word: &str,
+    args: &ArgumentGateResult,
+    at: usize,
+) -> ParseResult<String> {
+    let raw = positional_raw(file, line, word, args, at)?;
+    match ruby_value::read(raw) {
+        ruby_value::Value::Bare(_) => Err(Diagnostic::new(
+            file,
+            line,
+            format!(
+                "'{word}'s positional argument {at} ('{}') is not a literal",
+                raw.trim()
+            ),
+        )),
+        ruby_value::Value::Str(s) => Ok(s),
+        literal => Ok(ruby_value::to_s(&literal)),
+    }
+}
+
 /// A required symbol positional without its colon (`attribute :name`), bare or quoted (`:"a.b"`).
 /// The quoted form spells dotted paths, e.g. `correlates_by :"reference.value"`.
 pub(crate) fn positional_symbol(

data/rust/parser/src/ruby_value.rs

@@ -192,21 +192,97 @@ fn unquote(raw: &str) -> String {
     unescape_double_quoted_inner(&raw[1..raw.len() - 1])
 }
 
+/// Unescapes a Ruby double-quoted body: `\n`, `\t`, `\e` and the other single-letter escapes,
+/// octal `\NNN`, `\xHH`, `\uHHHH` and `\u{H H ...}`, and `\<newline>` as nothing. Any other
+/// escaped character stands for itself, as in Ruby. `\c`, `\C-` and `\M-` control and meta
+/// escapes are left as the bare letter, since no bluebook spells them.
 fn unescape_double_quoted_inner(inner: &str) -> String {
     let mut out = String::with_capacity(inner.len());
-    let mut chars = inner.chars();
+    let mut chars = inner.chars().peekable();
     while let Some(ch) = chars.next() {
-        if ch == '\\' {
-            if let Some(next) = chars.next() {
-                out.push(next);
-            }
-        } else {
+        if ch != '\\' {
             out.push(ch);
+            continue;
+        }
+        let Some(next) = chars.next() else {
+            continue;
+        };
+        match next {
+            'a' => out.push('\u{7}'),
+            'b' => out.push('\u{8}'),
+            'e' => out.push('\u{1b}'),
+            'f' => out.push('\u{c}'),
+            'n' => out.push('\n'),
+            'r' => out.push('\r'),
+            's' => out.push(' '),
+            't' => out.push('\t'),
+            'v' => out.push('\u{b}'),
+            '\n' => {}
+            '0'..='7' => out.push(read_octal_escape(next, &mut chars)),
+            'x' => match read_hex_digits(&mut chars, 2) {
+                Some(code) => out.push(char::from_u32(code).unwrap_or('\u{fffd}')),
+                None => out.push('x'),
+            },
+            'u' => read_unicode_escape(&mut chars, &mut out),
+            other => out.push(other),
         }
     }
     out
 }
 
+/// Up to three octal digits starting with `first`, as one character.
+fn read_octal_escape(first: char, chars: &mut std::iter::Peekable<std::str::Chars>) -> char {
+    let mut code = first.to_digit(8).unwrap_or(0);
+    for _ in 0..2 {
+        match chars.peek().and_then(|c| c.to_digit(8)) {
+            Some(digit) => {
+                code = code * 8 + digit;
+                chars.next();
+            }
+            None => break,
+        }
+    }
+    char::from_u32(code & 0xff).unwrap_or('\u{fffd}')
+}
+
+/// Between one and `max` hex digits, or `None` when the next character is not one.
+fn read_hex_digits(chars: &mut std::iter::Peekable<std::str::Chars>, max: usize) -> Option<u32> {
+    let mut code: Option<u32> = None;
+    for _ in 0..max {
+        match chars.peek().and_then(|c| c.to_digit(16)) {
+            Some(digit) => {
+                code = Some(code.unwrap_or(0) * 16 + digit);
+                chars.next();
+            }
+            None => break,
+        }
+    }
+    code
+}
+
+/// `\uHHHH` (exactly four digits) or `\u{H H ...}` (one or more codepoints), after the `u`.
+fn read_unicode_escape(chars: &mut std::iter::Peekable<std::str::Chars>, out: &mut String) {
+    if chars.peek() == Some(&'{') {
+        chars.next();
+        loop {
+            while chars.peek().is_some_and(|c| *c == ' ') {
+                chars.next();
+            }
+            match read_hex_digits(chars, 6) {
+                Some(code) => out.push(char::from_u32(code).unwrap_or('\u{fffd}')),
+                None => break,
+            }
+        }
+        if chars.peek() == Some(&'}') {
+            chars.next();
+        }
+    } else if let Some(code) = read_hex_digits(chars, 4) {
+        out.push(char::from_u32(code).unwrap_or('\u{fffd}'));
+    } else {
+        out.push('u');
+    }
+}
+
 /// Scans adjacent quoted literals (either quote style, whitespace-separated) from index 0.
 /// Returns their unescaped concatenation and the chars consumed, or `None` if `raw` does not
 /// start with a closed literal. Callers compare `consumed` to the full length to tell a whole
@@ -408,6 +484,19 @@ mod tests {
         );
     }
 
+    #[test]
+    fn double_quoted_escapes_read_as_ruby_reads_them() {
+        assert_eq!(read(r#""a\tb\nc""#), Value::Str("a\tb\nc".to_string()));
+        assert_eq!(read(r#""\e\s\a\0""#), Value::Str("\u{1b} \u{7}\0".to_string()));
+        assert_eq!(
+            read(r#""\x41\101é\u{1F4A5 41}""#),
+            Value::Str("AA\u{e9}\u{1F4A5}A".to_string())
+        );
+        assert_eq!(read(r#""q\q\"\\""#), Value::Str("qq\"\\".to_string()));
+        assert_eq!(read("\"a\\\nb\""), Value::Str("ab".to_string()));
+        assert_eq!(read(r#""\xZ""#), Value::Str("xZ".to_string()));
+    }
+
     #[test]
     fn concatenates_three_adjacent_literals_mixing_quote_styles() {
         assert_eq!(read("\"a\" 'b' \"c\""), Value::Str("abc".to_string()));

data/rust/src/kernel/json.rs

@@ -346,7 +346,7 @@ impl Json {
     }
 
     pub fn parse(input: &str) -> Result<Json, String> {
-        let mut parser = Parser { chars: input.chars().peekable() };
+        let mut parser = Parser { chars: input.chars().peekable(), depth: 0 };
         let value = parser.parse_value()?;
         parser.skip_ws();
         Ok(value)
@@ -611,8 +611,14 @@ fn write_escaped_string(s: &str, out: &mut String) {
 // Recursive descent over chars; the input is a valid `&str`, so no UTF-8 byte handling is needed.
 struct Parser<'a> {
     chars: std::iter::Peekable<std::str::Chars<'a>>,
+    depth: usize,
 }
 
+/// How deeply arrays and objects may nest before `parse` refuses. Each level is a recursive call,
+/// so an unbounded document (`[[[[...`) overflows the stack, which aborts the process rather than
+/// refusing. 128 is `serde_json`'s own recursion limit, so the host and this parser refuse alike.
+const MAX_DEPTH: usize = 128;
+
 impl<'a> Parser<'a> {
     fn skip_ws(&mut self) {
         while matches!(self.chars.peek(), Some(c) if c.is_whitespace()) {
@@ -651,7 +657,26 @@ impl<'a> Parser<'a> {
         }
     }
 
+    // Counts one level of nesting for the duration of `body`; refuses past `MAX_DEPTH`.
+    fn nested(&mut self, body: impl FnOnce(&mut Self) -> Result<Json, String>) -> Result<Json, String> {
+        if self.depth >= MAX_DEPTH {
+            return Err(format!("JSON nests deeper than {MAX_DEPTH} levels"));
+        }
+        self.depth += 1;
+        let result = body(self);
+        self.depth -= 1;
+        result
+    }
+
     fn parse_object(&mut self) -> Result<Json, String> {
+        self.nested(Self::parse_object_body)
+    }
+
+    fn parse_array(&mut self) -> Result<Json, String> {
+        self.nested(Self::parse_array_body)
+    }
+
+    fn parse_object_body(&mut self) -> Result<Json, String> {
         self.expect('{')?;
         let mut fields = Vec::new();
         self.skip_ws();
@@ -676,7 +701,7 @@ impl<'a> Parser<'a> {
         Ok(Json::Object(fields))
     }
 
-    fn parse_array(&mut self) -> Result<Json, String> {
+    fn parse_array_body(&mut self) -> Result<Json, String> {
         self.expect('[')?;
         let mut items = Vec::new();
         self.skip_ws();
@@ -773,7 +798,13 @@ impl<'a> Parser<'a> {
         // A literal with a `.`/exponent is a genuine `Float`, and Ruby's `Float` is the same
         // `f64` Rust's is, so there is nothing to preserve there.
         let is_plain_integer = !s.contains('.') && !s.contains(['e', 'E']);
-        let raw = if is_plain_integer && canonical_integer_digits(value) != s { Some(s) } else { None };
+        let keeps_source = is_plain_integer && canonical_integer_digits(value) != s;
+        // `1e999` parses to infinity with no source text kept, and `write` would print it as `inf`:
+        // not JSON, so refuse it. A plain integer keeps its digits, which `write` re-emits as-is.
+        if !value.is_finite() && !keeps_source {
+            return Err(format!("number {s:?} is out of range"));
+        }
+        let raw = keeps_source.then_some(s);
         Ok(Json::Num(value, raw))
     }
 }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hecks
 version: !ruby/object:Gem::Version
-  version: 3.6.0
+  version: 3.9.0
 platform: ruby
 authors:
 - Chris Young
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-10-06 00:00:00.000000000 Z
+date: 2026-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: prism
@@ -271,6 +271,7 @@ files:
 - lib/hecks/bluebook/meta_validator/translation_judge.rb
 - lib/hecks/bluebook/meta_validator/translation_judge/rules.rb
 - lib/hecks/bluebook/meta_validator/verdict_cache.rb
+- lib/hecks/bluebook/meta_validator/verdict_cache/prebuilt.rb
 - lib/hecks/bluebook/meta_validator/verdict_cache/tagging.rb
 - lib/hecks/bluebook/meta_validator/world_judge.rb
 - lib/hecks/bluebook/model_check.rb
@@ -473,13 +474,28 @@ files:
 - lib/hecks/fuzzing/domain_generator/rendering.rb
 - lib/hecks/fuzzing/domain_generator/tokens.rb
 - lib/hecks/fuzzing/era_boundary.rb
+- lib/hecks/fuzzing/failure_triage.rb
 - lib/hecks/fuzzing/form_census.rb
+- lib/hecks/fuzzing/form_census/chapter_forms.rb
+- lib/hecks/fuzzing/form_census/reference_forms.rb
 - lib/hecks/fuzzing/generated_domain_check.rb
 - lib/hecks/fuzzing/invalid_value_generator.rb
 - lib/hecks/fuzzing/isolated_boot.rb
 - lib/hecks/fuzzing/isolated_boot/copying.rb
 - lib/hecks/fuzzing/isolated_boot/postgres_scratch.rb
+- lib/hecks/fuzzing/isolated_boot/scratch_schema.rb
 - lib/hecks/fuzzing/isolated_boot/worlds.rb
+- lib/hecks/fuzzing/mutation.rb
+- lib/hecks/fuzzing/mutation/checks.rb
+- lib/hecks/fuzzing/mutation/finders.rb
+- lib/hecks/fuzzing/mutation/judge.rb
+- lib/hecks/fuzzing/mutation/observation.rb
+- lib/hecks/fuzzing/mutation/operators.rb
+- lib/hecks/fuzzing/mutation/report.rb
+- lib/hecks/fuzzing/mutation/run.rb
+- lib/hecks/fuzzing/mutation/selection.rb
+- lib/hecks/fuzzing/mutation/site.rb
+- lib/hecks/fuzzing/mutation/source_map.rb
 - lib/hecks/fuzzing/nondeterministic.rb
 - lib/hecks/fuzzing/outside_world.rb
 - lib/hecks/fuzzing/persistence_parity.rb
@@ -489,6 +505,7 @@ files:
 - lib/hecks/fuzzing/properties/corrections.rb
 - lib/hecks/fuzzing/properties/dispatch_and_mutations.rb
 - lib/hecks/fuzzing/properties/group_by_recompute.rb
+- lib/hecks/fuzzing/properties/guaranteed_by_construction.rb
 - lib/hecks/fuzzing/properties/guards.rb
 - lib/hecks/fuzzing/properties/invariants_and_aggregation.rb
 - lib/hecks/fuzzing/properties/lifecycle_and_replay.rb
@@ -498,7 +515,10 @@ files:
 - lib/hecks/fuzzing/properties/policy_wiring.rb
 - lib/hecks/fuzzing/properties/query_rows.rb
 - lib/hecks/fuzzing/properties/querying.rb
+- lib/hecks/fuzzing/properties/read_model_names.rb
+- lib/hecks/fuzzing/properties/read_models.rb
 - lib/hecks/fuzzing/properties/references.rb
+- lib/hecks/fuzzing/properties/role_checks.rb
 - lib/hecks/fuzzing/properties/tenant_scope.rb
 - lib/hecks/fuzzing/qa_settings.rb
 - lib/hecks/fuzzing/replay.rb
@@ -508,8 +528,10 @@ files:
 - lib/hecks/fuzzing/replay/mutation_trace.rb
 - lib/hecks/fuzzing/replay/observation.rb
 - lib/hecks/fuzzing/replay/read_only_steps.rb
+- lib/hecks/fuzzing/replay/role_check.rb
 - lib/hecks/fuzzing/replay/session.rb
 - lib/hecks/fuzzing/rotation_priority.rb
+- lib/hecks/fuzzing/runtime_coverage.rb
 - lib/hecks/fuzzing/rust_gap_manifest.rb
 - lib/hecks/fuzzing/self_consistency.rb
 - lib/hecks/fuzzing/self_consistency/saga_redelivery.rb
@@ -530,6 +552,7 @@ files:
 - lib/hecks/fuzzing/sequence_generator/query_binding.rb
 - lib/hecks/fuzzing/sequence_generator/step_builder.rb
 - lib/hecks/fuzzing/shrinker.rb
+- lib/hecks/fuzzing/shrinker/value_simplification.rb
 - lib/hecks/fuzzing/structural_skips.rb
 - lib/hecks/fuzzing/sweep_depth.rb
 - lib/hecks/fuzzing/target_capabilities.rb
@@ -621,6 +644,7 @@ files:
 - lib/hecks/hecks/adapters/shell.rb
 - lib/hecks/hecks/adapters/site_toolchain.adapter
 - lib/hecks/hecks/adapters/site_toolchain.rb
+- lib/hecks/hecks/adapters/site_toolchain/prober.rb
 - lib/hecks/hecks/adapters/terminal.adapter
 - lib/hecks/hecks/adapters/terminal.rb
 - lib/hecks/hecks/codebase.behaviors
@@ -793,6 +817,7 @@ files:
 - lib/hecks/projections/deploy/box/settings/origin.rb
 - lib/hecks/projections/deploy/box/settings/patterns.rb
 - lib/hecks/projections/deploy/box/settings/types.rb
+- lib/hecks/projections/deploy/box/shared_database.rb
 - lib/hecks/projections/deploy/box/stack_yaml.rb
 - lib/hecks/projections/deploy/box/templates/MIGRATION.md.tmpl
 - lib/hecks/projections/deploy/box/templates/Makefile.tmpl
@@ -809,6 +834,7 @@ files:
 - lib/hecks/projections/deploy/box/templates/hosting.mk.tmpl
 - lib/hecks/projections/deploy/box/templates/mode-summary-services.tmpl
 - lib/hecks/projections/deploy/box/templates/mode-summary-taskdef.tmpl
+- lib/hecks/projections/deploy/box/templates/provision-database.sh.tmpl
 - lib/hecks/projections/deploy/box/templates/rds.yaml.tmpl
 - lib/hecks/projections/deploy/box/templates/render-compose-taskdef.sh.tmpl
 - lib/hecks/projections/deploy/box/templates/render-compose.sh.tmpl
@@ -879,6 +905,10 @@ files:
 - lib/hecks/projections/deploy/scripts/smoke-after-deploy.sh.tmpl
 - lib/hecks/projections/deploy/shared.rb
 - lib/hecks/projections/deploy/shared/rows.rb
+- lib/hecks/projections/deploy/shared_database_instance.rb
+- lib/hecks/projections/deploy/shared_database_instance/templates/Makefile.tmpl
+- lib/hecks/projections/deploy/shared_database_instance/templates/README.md.tmpl
+- lib/hecks/projections/deploy/shared_database_instance/templates/rds.yaml.tmpl
 - lib/hecks/projections/deploy/smoke.rb
 - lib/hecks/projections/deploy/smoke/harness.js
 - lib/hecks/projections/deploy/smoke/workflow.yml.tmpl
@@ -971,6 +1001,8 @@ files:
 - lib/hecks/projections/deploy/templates/shared/plain_db.tmpl
 - lib/hecks/projections/deploy/templates/shared/vpc_and_database.tmpl
 - lib/hecks/projections/deploy/text_template.rb
+- lib/hecks/projections/deploy/vercel.rb
+- lib/hecks/projections/deploy/vercel/settings.rb
 - lib/hecks/projections/diagrams.rb
 - lib/hecks/projections/diagrams/dispatch.rb
 - lib/hecks/projections/diagrams/statecharts.rb
@@ -1030,6 +1062,7 @@ files:
 - lib/hecks/projections/site/payload/specs.rb
 - lib/hecks/projections/site/payload/specs/wire.rb
 - lib/hecks/projections/site/payload_driver.rb
+- lib/hecks/projections/site/probe.rb
 - lib/hecks/projections/site/regions.rb
 - lib/hecks/projections/site/root_rows.rb
 - lib/hecks/projections/site/routes_ts.rb
@@ -1375,6 +1408,7 @@ files:
 - lib/hecks/tools/comment_style/walker.rb
 - lib/hecks/tools/corpus_report.rb
 - lib/hecks/tools/deploy_recipe.rb
+- lib/hecks/tools/deploy_recipe/generation.rb
 - lib/hecks/tools/deploy_recipe/targets.rb
 - lib/hecks/tools/deploy_recipe/worlds.rb
 - lib/hecks/tools/deploy_recipe_lint.rb
@@ -1405,6 +1439,7 @@ files:
 - lib/hecks/tools/lanes/ruleset.rb
 - lib/hecks/tools/lanes/watch_workflow.rb
 - lib/hecks/tools/lanes/workflow.rb
+- lib/hecks/tools/mutation_run.rb
 - lib/hecks/tools/oidc_manifests.rb
 - lib/hecks/tools/query_ir_run.rb
 - lib/hecks/tools/regeneration_run.rb
@@ -1439,6 +1474,9 @@ files:
 - lib/rubocop/cop/hecks/fallback_hash_lookup.rb
 - lib/rubocop/cop/hecks/sequential_hash_rename_in_loop.rb
 - lib/rubocop/cop/hecks/thread_shared_ivar_mutation.rb
+- prebuilt/4e6c3cd1f578a38732ea5454dae52562d03d8e9886216077a5c34cbf589f3463.marshal
+- prebuilt/911cdcc56b5a094ed26583a4c76401dba6455b1f434722ed22b850bc1b1bdd28.marshal
+- prebuilt/verdicts-3230a251570aa03666708d16f92e646feab6a3f8cc2a3540c017d748e41d41a1.json
 - qa/settings.yml
 - rust/.cargo/config.toml
 - rust/.cargo/mutants.toml
@@ -1505,13 +1543,23 @@ files:
 - rust/host/src/bin/expr_harness.rs
 - rust/host/src/bin/lineage_harness.rs
 - rust/host/src/bin/mint_harness.rs
+- rust/host/src/boundary_fuzz/api.rs
+- rust/host/src/boundary_fuzz/auth.rs
+- rust/host/src/boundary_fuzz/expr_json.rs
+- rust/host/src/boundary_fuzz/ir.rs
+- rust/host/src/boundary_fuzz/server.rs
+- rust/host/src/boundary_fuzz/web.rs
 - rust/host/src/checkout.rs
+- rust/host/src/commerce_ir.rs
 - rust/host/src/dispatch.rs
 - rust/host/src/expr_json.rs
+- rust/host/src/extension.rs
 - rust/host/src/field_hints.rs
+- rust/host/src/fuzz_support.rs
 - rust/host/src/ir.rs
 - rust/host/src/journal.rs
 - rust/host/src/lambda_client.rs
+- rust/host/src/lib.rs
 - rust/host/src/log.rs
 - rust/host/src/main.rs
 - rust/host/src/mint.rs
@@ -1533,6 +1581,7 @@ files:
 - rust/host/src/ui_schema.rs
 - rust/host/src/wasm_runner.rs
 - rust/host/src/web.rs
+- rust/host/src/web/commerce.rs
 - rust/host/src/web/newsletter.rs
 - rust/host/src/web/newsletter/cooldown.rs
 - rust/host/src/web/newsletter/template.rs
@@ -1541,6 +1590,7 @@ files:
 - rust/host/src/web/registration_receipt.rs
 - rust/host/src/web/registration_receipt/tests.rs
 - rust/host/src/web/registrations.rs
+- rust/host/src/web/resend_webhook.rs
 - rust/lsp/.gitignore
 - rust/lsp/Cargo.lock
 - rust/lsp/Cargo.toml
@@ -1554,6 +1604,12 @@ files:
 - rust/parser/.gitignore
 - rust/parser/Cargo.lock
 - rust/parser/Cargo.toml
+- rust/parser/fuzz/.gitignore
+- rust/parser/fuzz/Cargo.lock
+- rust/parser/fuzz/Cargo.toml
+- rust/parser/fuzz/README.md
+- rust/parser/fuzz/fuzz_targets/chapter.rs
+- rust/parser/fuzz/fuzz_targets/resolve.rs
 - rust/parser/src/build/closed_sets.rs
 - rust/parser/src/build/identity.rs
 - rust/parser/src/build/mod.rs