fix(server): wrap the shared client-name alternation like claudewatcher does (#209)

Conversation 1 Commits 2 Files Changed 5

+132 -4

2 Commits

Author	SHA1	Message	Date
mathiasandClaude Sonnet 5.5	80f3fd3c5e	fix(wing,server): client names are matched as whole Unicode words; unsafe lists are a startup error (review of #214 ) CI / Lint / Test / Vet (pull_request) Successful in 1m3s Details CI / Mirror to GitHub (pull_request) Skipped Details - WrapNames bounds the bare name list with Unicode-aware edges instead of \b (Go's \b is ASCII-only, so a name with a non-ASCII edge letter such as Åke, Société, Ørsted would never have matched), and validates the list on its own: it must compile, must not match the empty string, and cannot break out of its group ('x)\|.*(' compiles alone only if balanced) - NewRouter refuses any pattern that matches text naming no client - docs state the whole-word semantics and what is not matched Mutation-checked. Open decision for Mathias: whole-word versus substring recall for a confidentiality filter (plurals, CamelCase and digits glued on do not match). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-20 21:44:23 +02:00
mathiasandClaude Sonnet 5.5	0582dfdf6b	fix(server): wrap the shared client-name alternation like claudewatcher does (#209 ) CI / Lint / Test / Vet (pull_request) Successful in 1m6s Details CI / Mirror to GitHub (pull_request) Skipped Details The deployment injects CLAUDE_INGEST_CLIENT_BLOCK as a bare alternation of client names; claudewatcher compiles it as (?i)\b(...)\b. The raw/ router used it raw, so a short client name would match inside ordinary words and park clips that have nothing to do with the client. INGEST_CLIENT_BLOCK stays a full regexp, used as is. Mutation-checked. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-20 21:39:37 +02:00

Author

SHA1

Message

Date

mathiasandClaude Sonnet 5.5

80f3fd3c5e

fix(wing,server): client names are matched as whole Unicode words; unsafe lists are a startup error (review of #214 )

CI / Lint / Test / Vet (pull_request) Successful in 1m3s

Details

CI / Mirror to GitHub (pull_request) Skipped

Details

- WrapNames bounds the bare name list with Unicode-aware edges instead of \b
  (Go's \b is ASCII-only, so a name with a non-ASCII edge letter such as Åke,
  Société, Ørsted would never have matched), and validates the list on its own:
  it must compile, must not match the empty string, and cannot break out of its
  group ('x)|.*(' compiles alone only if balanced)
- NewRouter refuses any pattern that matches text naming no client
- docs state the whole-word semantics and what is not matched
Mutation-checked. Open decision for Mathias: whole-word versus substring recall
for a confidentiality filter (plurals, CamelCase and digits glued on do not match).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-20 21:44:23 +02:00

mathiasandClaude Sonnet 5.5

0582dfdf6b

fix(server): wrap the shared client-name alternation like claudewatcher does (#209 )

CI / Lint / Test / Vet (pull_request) Successful in 1m6s

Details

CI / Mirror to GitHub (pull_request) Skipped

Details

The deployment injects CLAUDE_INGEST_CLIENT_BLOCK as a bare alternation of client
names; claudewatcher compiles it as (?i)\b(...)\b. The raw/ router used it raw, so
a short client name would match inside ordinary words and park clips that have
nothing to do with the client. INGEST_CLIENT_BLOCK stays a full regexp, used as
is. Mutation-checked.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-20 21:39:37 +02:00

fix(server): wrap the shared client-name alternation like claudewatcher does (#209) #214