chore: import upstream snapshot with attribution

2026-07-13 12:30:36 +08:00
commit f99010fae1
1834 changed files with 662985 additions and 0 deletions
@@ -0,0 +1,61 @@
+name: Fuzz
+
+# Long-running fuzz exploration of the Antigravity wire-walk
+# (GitHub #648). Every CI run already executes the committed seed
+# corpus via plain `go test`; this workflow spends real fuzz time
+# searching for new invariant violations on a schedule. A found
+# failure is written to testdata/fuzz/ by the fuzz engine and
+# uploaded as an artifact so it can be committed as a regression
+# case.
+
+on:
+  schedule:
+    - cron: "17 5 * * 1" # weekly, Monday 05:17 UTC
+  workflow_dispatch:
+    inputs:
+      fuzztime:
+        description: "Fuzz time per target (Go duration)"
+        required: false
+        default: "10m"
+
+jobs:
+  fuzz:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - FuzzAgProtoParse
+          - FuzzAgProtoLooksLikePrefix
+          - FuzzDecodeAntigravityStep
+          - FuzzExtractModelName
+          - FuzzExtractTokenUsage
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16  # v6.5.0
+        with:
+          go-version-file: go.mod
+
+      # The dispatch input goes through an env var, never directly
+      # into the run script, so it cannot inject shell commands.
+      - name: Fuzz ${{ matrix.target }}
+        run: >
+          go test -tags "fts5"
+          -fuzz "^${TARGET}$"
+          -fuzztime "$FUZZTIME"
+          ./internal/parser/
+        env:
+          CGO_ENABLED: "1"
+          TARGET: ${{ matrix.target }}
+          FUZZTIME: ${{ github.event.inputs.fuzztime || '10m' }}
+
+      - name: Upload failing inputs
+        if: failure()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
+        with:
+          name: fuzz-failures-${{ matrix.target }}
+          path: internal/parser/testdata/fuzz/
+          if-no-files-found: ignore