fix: reject closed stdout before host access #122

Merged

binjovi-bot merged 1 commit from codex/output-descriptor into trunk

2026-09-13 21:32:48 +00:00

sean commented

2026-09-13 21:23:43 +00:00

Owner

The new offline CLI control requires ClosedStdout before host access. The native check now requires that exact error and, on Linux, WriteFailed from /dev/full. DNS and connection failures cannot satisfy the output assertion. zig build check passes 1,087 tests plus the CLI controls. The exact Linux candidate is checked in the isolated pub400 audit container before release. No terminal wire behavior changes.

The immutable Linux builder check found that a SQL query could return success with stdout closed. Check the POSIX descriptor before network setup for SQL queries and IFS JSON output, so later descriptor reuse cannot stand in for delivery to the caller. The new offline CLI control requires ClosedStdout before host access. The native check now requires that exact error and, on Linux, WriteFailed from /dev/full. DNS and connection failures cannot satisfy the output assertion. zig build check passes 1,087 tests plus the CLI controls. The exact Linux candidate is checked in the isolated pub400 audit container before release. No terminal wire behavior changes.

sean added 1 commit

2026-09-13 21:23:43 +00:00