Skip to content

test: preserve nested JSON in snapshot privacy checks - #271

Merged
steipete merged 1 commit into
mainfrom
fix/sqlite-json-subquery
Oct 23, 2026
Merged

steipete merged 1 commit into
mainfrom
fix/sqlite-json-subquery

Conversation

@steipete

Copy link
Copy Markdown
Contributor

The cloud snapshot privacy check relied on SQLite preserving a JSON subtype through a scalar subquery. SQLite 3.54.1 quotes that nested array, so the check failed despite unchanged sanitization. Explicitly mark the subquery result with json(...) and preserve the exact expected array, including nulls and cleared private strings.

This unblocks the SQLite lock-cancellation update in openclaw/crawlkit#169 without weakening its pinned downstream compatibility gate. No production query or sanitizer behavior changes.

Validation: reproduced the existing failure with modernc.org/sqlite v1.61.0 (SQLite 3.54.1); all TestCloudSQLiteSnapshot* tests pass with both v1.60.1 (SQLite 3.53.4) and v1.61.0 using isolated module files. Independent Codex autoreview is clean through P3. CI runs the full repository gates.

@clawsweeper

clawsweeper Bot commented Oct 23, 2026

Copy link
Copy Markdown

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-23T20:57:59.894026Z b71da05 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@steipete
steipete merged commit 440c46c into main Oct 23, 2026
13 checks passed
@steipete
steipete deleted the fix/sqlite-json-subquery branch October 23, 2026 21:06
steipete added a commit to openclaw/crawlkit that referenced this pull request Oct 23, 2026
Upgrade modernc.org/sqlite to v1.61.0 and its required libc v1.79.0 so writes waiting on locks respect context cancellation and deadlines. Keep Go 1.27.0 as the minimum and Go 1.27.3 as the build toolchain.

Cover the deadline error, bounded wait, absence of an unintended insert, and retry after unlocking. Document explicit JSON conversion across scalar subqueries. Advance the Gitcrawl compatibility pin to the merged openclaw/gitcrawl#271 migration while retaining the published baseline, both full CLI suites, isolation, and integrity checks.

Validation: full make check, govulncheck, race tests, 48 release/downstream script tests, both SQLite versions on synthetic queries, independent Codex review through P3, and exact-head CI including the downstream comparison.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant