iframe-proxy | Sunbelt Computer Software

Repository navigation

# scripts/sync-shared.js compares every generated file against its source byte for byte, so a file

# whose line endings depend on which platform checked it out will fail the drift check on a clean

# runner even though nobody changed it. That is exactly what happened to the plugin's Windows shim:

# the generator writes CRLF because it is a batch file, git stored LF, and CI went red.

# Everything else in the repo is copied from a source file, so the generator and the source agree

# whatever the checkout did. The shim is generated from a string, so it has to be pinned.

agent-guards-plugin/bin/guard.cmd text eol=crlf

# The rules bundle is SIGNED over its exact bytes, so line-ending conversion would break it. Git on

# Windows checks out LF as CRLF by default, which would have meant a fresh clone on Windows holding a

# bundle whose signature no longer verifies, while the same commit verified fine on a Linux runner.

# `-text` turns EOL conversion off in both directions and the bytes survive the round trip.

# packages.tsv is here for the same reason: its SHA-256 is pinned inside the signed bundle, so it is

# covered by the same signature and has to arrive byte for byte. manifest.json carries the signature

# and is compared byte for byte by the drift check against its vendored copy.

rules/bundle.json -text

rules/bundle.json.sig -text

rules/manifest.json -text

rules/packages.tsv -text

agent-firewall/rules/manifest.json -text