Skip to content

T8 - #1928

Merged
nmaguiar merged 13 commits into
masterfrom
t8
Oct 27, 2026
Merged

T8#1928
nmaguiar merged 13 commits into
masterfrom
t8

Conversation

@nmaguiar

Copy link
Copy Markdown
Collaborator

This pull request includes a variety of documentation improvements, security clarifications, and internal refactoring for safer streaming and package handling. The most significant changes clarify script integrity and signature enforcement, update documentation for new and changed features, and harden opack package extraction and verification logic.

Security and Integrity Policy Updates:

  • Clarified that script signature enforcement (OAF_SIGNATURE_STRICT) is currently fail-closed, as no signature format is defined; OAF_SIGNATURE_KEY is reserved for future use, and OAF_VALIDATION_STRICT also fails closed until combined validation is available. Documentation now makes clear the separation of integrity and signature mechanisms and their current enforcement status. [1] [2] [3]

Documentation Improvements:

  • Added a new section on native Java and alternative implementations for certain core functions, with a table of flags to control them, and expanded the OpenAF main documentation to include a new section on data formats and streaming conversions (including TOON and streaming base64/gzip). [1] [2]
  • Updated plugin documentation:
    • FTP: Now notes that FTPS validates server certificates and hostnames.
    • Email: Clarified that useTLS requires STARTTLS when secure mode is enabled.
    • HTTP: Clarified login method's urlPartial parameter for credential scoping.
  • Updated CLI and opack documentation to clarify that generated completion scripts and the -useunzip flag now use safe streaming and internal logic, not external unzip utilities. [1] [2]

Streaming and Resource Handling Refactoring:

  • Refactored js/odoc.js to use streaming gzip and gunzip operations for reading/writing documentation files and keys, improving memory efficiency and robustness. [1] [2]
  • Hardened ojob remote file loading to use a dedicated authorized remote bytes reader, and improved resource cleanup in completion and integrity checks. [1] [2]

Opack Package Handling Hardening:

  • Added resolvePackagePath and localPackageRelativePath helpers to ensure safe extraction paths and prevent directory traversal or unsafe file writes during package installation.
  • Updated hash verification logic to support local path overrides and improved path resolution. [1] [2]

AI/LLM and Console Updates:

  • Documented the OpenAI Responses API usage, prompt caching, and image preprocessing options in the GPT types system, and clarified Windows terminal handling with JLine 4.x migration. [1] [2] [3]

These changes improve clarity, security, and reliability across both documentation and internal code paths.

nmaguiar and others added 13 commits October 23, 2026 02:13
Extend js/owrap.ai.js with image memory handling and add a new
tests/imageMemory.js suite covering the new behaviour, ensuring
image-based conversation memory is exercised by the test suite.
Strengthen security handling across the HTTP, FTP, SSH, Email,
HTTPServer and WebSockets plugins, and update the oJob, oPack and
openaf JS core accordingly.

Add new test suites for SSH, security cookies, HTTP security,
signatures, transport security and oPack; extend existing IO,
Server, OAuth and oJob tests. Update plugin docs to match.
Refresh js/oafp.js and regenerate the oafp completion files
(complete/completion_oafp.sh, complete/completion_oafp.yaml) so the
bash/zsh completions stay in sync with the current oafp option set.
Add a new StreamConversions core class and extend IO and AFBase to
expose stream conversion helpers for converting data between stream
representations.

Update the JS layer (oafp, odoc, openaf, owrap.ai, owrap.template)
to use the new conversions, and add autoTestAll suites for
StreamConversions and StreamConsumers plus a memory-based stream
conversion test to cover the new behaviour.
Add 9 lines and modify 1 line in the core OpenAF JavaScript script (js/openaf.js) to extend existing core behavior.
Add 88 lines of new functionality to the main openaf.js script and adjust 10 lines of existing code to support the additions.
Apply changes across the main openaf.js script and the owrap.ai, owrap.format, and owrap.obj wrapper modules (106 insertions, 63 deletions total) to keep the core JS utilities current.
Replace lib/gson-2.14.0.jar with lib/gson-2.15.0.jar and bump the
gson version in pom.xml and pom.json so build metadata stays in
sync with the bundled jar.
Expand the owrap.format module with additional formatting
capabilities. Update the Format test suite (JS and YAML) to
cover the new behavior and register the added test cases in
the autoTestAll orchestrator.
Enhance the AI wrapper module with additional capabilities and refinements. Update autoTestAll.AI.js and autoTestAll.AI.yaml with new test coverage for the changed behavior.
Add reference documentation for new command-line options and AI GPT type support across the cli, console, openaf-flags, openaf, and ow-ai-gpttypes guides (58 insertions across 5 files).
Replace the bundled dnsjava 3.6.5 jar with the 3.7.0 release and update the version references in pom.xml and pom.json so the build metadata stays in sync with the packaged library.
@nmaguiar nmaguiar self-assigned this Oct 27, 2026
@nmaguiar nmaguiar added bug enhancement dependencies Pull requests that update a dependency file labels Oct 27, 2026
@nmaguiar
nmaguiar merged commit ad9dd4f into master Oct 27, 2026
4 of 5 checks passed
@github-project-automation github-project-automation Bot moved this from Backlog to Done in Continuous Enhancement Oct 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug dependencies Pull requests that update a dependency file enhancement

Projects

Development

Successfully merging this pull request may close these issues.

1 participant