Commit Graph
4 Commits
Author SHA1 Message Date
Brett Williams 5f0d2db1a9 Serialize builds and add health endpoint to build agent
- Add a non-blocking build lock so only one job runs at a time;
  concurrent upload/checkout requests get a 409 response
- Add /healthz returning 200 when idle and 503 while a build is running
- Ignore .DS_Store artifacts
2026-08-30 21:32:01 -05:00
Brett Williams 1902d36ae7 Harden build agent against path traversal and add job cleanup
- Validate job IDs on /download and /delete; reject invalid identifiers
- Prevent zip-slip during /upload extraction via safe_extract
- Basename uploaded filenames in /update to block path traversal
- Route git-checkout jobs into pybuild-data so they can be downloaded/deleted
- Clean up job dirs on extract, checkout, and build failures
- Ignore Python bytecode and egg-info artifacts
2026-08-30 21:24:54 -05:00
Brett Williams b511962a1f This works 2025-03-12 00:48:46 -05:00
Brett Williams e07e2bd997 Another attempt #2 2025-03-12 00:40:33 -05:00