fix: raise the signed host_calls ceiling to 512 - #33
Merged
Conversation
The 64 cap predates store-shaped plugins. The sub-store plugin's measured worst cases run past it: an export reattaches one program key per script file against a 256-record store (2+256=258), a backup restore is the same shape (260), a migration adds three upstream fetches (263), and rendering a script file over a collection of remote members needs 4+64. Every one of those is a legitimate, store-bounded shape; the ceiling made the CI manifest gate reject budgets that the conformance tests pin to reality. 512 covers the store-bounded worst cases with headroom and still kills a runaway plugin, which is what the cap exists for. The default budget for methods that declare none stays 64.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
sub-store 插件按真实店形实测的预算(export 258 / import 260 / migrate 263 / render 68)全部超过服务端 64 的签名上限,CI 清单门正确拦截。上限提到 512(店 256 记录上限的最坏形态 263 + 余量),默认预算不动(64)。这是插件 0.12.1-alpha.6 的前置:先发服务端,再签插件。