feat(specgen): decode gzip vendored source specs #254

New issue

Closed

opened 2026-07-24 01:31:10 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-07-24 01:31:10 +00:00

Member

Problem

Specgen can encode generated API locks, but a vendored source named by spec must still be committed as plain JSON. Consumers that deliberately vendor a large API contract therefore retain the raw source even after migrating the generated lock to gzip.

Change

Accept .json.gz, .yaml.gz, and .yml.gz vendored spec paths.
Decode gzip before parsing, pruning, hashing, and lock generation.
Keep plain vendored source specs compatible.
Preserve the existing generated lock name when only the source encoding suffix changes.
Reject invalid or oversized gzip input without silently falling back to the network.

Acceptance

A gzip vendored spec produces the same logical lock as its plain form.
Repeated gzip source reads are deterministic and bounded.
Invalid gzip returns a contextual error.
.json.gz naming derives the same .lock.json.gz artifact as .json.
Tests and repository validation pass.

Downstream consumer: agentic-os aguard source.

## Problem Specgen can encode generated API locks, but a vendored source named by `spec` must still be committed as plain JSON. Consumers that deliberately vendor a large API contract therefore retain the raw source even after migrating the generated lock to gzip. ## Change * Accept `.json.gz`, `.yaml.gz`, and `.yml.gz` vendored spec paths. * Decode gzip before parsing, pruning, hashing, and lock generation. * Keep plain vendored source specs compatible. * Preserve the existing generated lock name when only the source encoding suffix changes. * Reject invalid or oversized gzip input without silently falling back to the network. ## Acceptance * A gzip vendored spec produces the same logical lock as its plain form. * Repeated gzip source reads are deterministic and bounded. * Invalid gzip returns a contextual error. * `.json.gz` naming derives the same `.lock.json.gz` artifact as `.json`. * Tests and repository validation pass. Downstream consumer: agentic-os aguard source.

coilyco-ops referenced this issue from a commit

2026-07-24 01:38:48 +00:00

feat(specgen): accept gzip vendored sources (closes #254)

coilyco-ops referenced this issue from a pull request that will close it,

2026-07-24 01:39:06 +00:00

feat(specgen): accept gzip vendored sources #255