feat(core): CLI QoS hardening — drain, lockfile, structured errors, redaction (PER-7855)#2199

Merged

Shivanshu-07 merged 27 commits into

masterfrom

feat/per-7855-cli-qos-hardening

May 5, 2026

Commits on Apr 28, 2026

feat(core): structured abort errors, per-instance network timeout, log redaction (PER-7855)

Shivanshu-07
and
claude
committed
feat(core): per-port lockfile with stale-lock reclaim (PER-7855)

Shivanshu-07
and
claude
committed
feat(core): SIGINT/SIGTERM graceful drain + unhandled-rejection redaction (PER-7855)

Shivanshu-07
and
claude
committed
test(cli-command): cover Phase 3 runFailed-throw branch + ignore drain timer

Shivanshu-07
and
claude
committed
chore(cli-command): drop trailing blank line in shutdown.test.js

Shivanshu-07
and
claude
committed
test(cli-build, cli-upload): assert Phase 3 drain announcement on SIGTERM

Shivanshu-07
and
claude
committed
fix(core/test): broaden mockfs bypass to entire ~/.percy/ tree (PER-7855)

Shivanshu-07
and
claude
committed
test(cli-command): istanbul ignores on defensive Phase 3 branches

Shivanshu-07
and
claude
committed
test(core/server): istanbul ignores on legacy and force-timeout drain paths

Shivanshu-07
and
claude
committed
test(cli-command): istanbul ignore on signal-driven exit branch
Shivanshu-07
committed
test(cli-command): istanbul-ignore the entire hard-exit timer block
Shivanshu-07
committed
test(cli-command): istanbul-ignore the uncaughtException handler arrow
Shivanshu-07
committed
test(cli-snapshot): istanbul-ignore the Phase 3 signal-branch ternary
Shivanshu-07
committed
fix(core/lock): never throw out of releaseLockSync (PER-7855)
Shivanshu-07
committed
test(core): cover remaining Phase 2/3 defensive branches
Shivanshu-07
committed
fix(core/lock): sanitize port before path.join + cover non-EEXIST re-throw (PER-7855)

Shivanshu-07
and
claude
committed
fix(core/lock): suppress semgrep path-traversal finding with rationale
Shivanshu-07
committed
fix(core/lock): place nosemgrep directive immediately above the join call
Shivanshu-07
committed
fix(core/lock): inline nosemgrep on same line as join() call
Shivanshu-07
committed
fix(core/lock): rebuild path from literal constants to clear semgrep
Shivanshu-07
committed
fix(core/lock): bare nosemgrep on each construction line
Shivanshu-07
committed
fix(semgrep): file-level ignore for core/src/lock.js path-traversal rule
Shivanshu-07
committed
test(core/lock): collapse livenessCheck's non-ESRCH branches with ignore-else
Shivanshu-07
committed

Commits on Apr 30, 2026

Commits on May 4, 2026

review fixes: signal-exit constants + strip ticket refs from source

Shivanshu-07
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(core): CLI QoS hardening — drain, lockfile, structured errors, redaction (PER-7855)#2199

feat(core): CLI QoS hardening — drain, lockfile, structured errors, redaction (PER-7855)#2199
Shivanshu-07 merged 27 commits into
masterfrom
feat/per-7855-cli-qos-hardening

Commits on Apr 28, 2026

feat(core): structured abort errors, per-instance network timeout, log redaction (PER-7855)

feat(core): per-port lockfile with stale-lock reclaim (PER-7855)

feat(core): SIGINT/SIGTERM graceful drain + unhandled-rejection redaction (PER-7855)

test(cli-command): cover Phase 3 runFailed-throw branch + ignore drain timer

chore(cli-command): drop trailing blank line in shutdown.test.js

test(cli-build, cli-upload): assert Phase 3 drain announcement on SIGTERM

fix(core/test): broaden mockfs bypass to entire ~/.percy/ tree (PER-7855)

test(cli-command): istanbul ignores on defensive Phase 3 branches

test(core/server): istanbul ignores on legacy and force-timeout drain paths

test(cli-command): istanbul ignore on signal-driven exit branch

test(cli-command): istanbul-ignore the entire hard-exit timer block

test(cli-command): istanbul-ignore the uncaughtException handler arrow

test(cli-snapshot): istanbul-ignore the Phase 3 signal-branch ternary

fix(core/lock): never throw out of releaseLockSync (PER-7855)

test(core): cover remaining Phase 2/3 defensive branches

fix(core/lock): sanitize port before path.join + cover non-EEXIST re-throw (PER-7855)

fix(core/lock): suppress semgrep path-traversal finding with rationale

fix(core/lock): place nosemgrep directive immediately above the join call

fix(core/lock): inline nosemgrep on same line as join() call

fix(core/lock): rebuild path from literal constants to clear semgrep

fix(core/lock): bare nosemgrep on each construction line

fix(semgrep): file-level ignore for core/src/lock.js path-traversal rule

test(core/lock): collapse livenessCheck's non-ESRCH branches with ignore-else

Commits on Apr 30, 2026

review fixes: address @amandeepsingh333's PR #2199 findings (PER-7855)

fix(core/lock): allow port 0 by skipping the lockfile entirely (PER-7855)

test(core): tighten istanbul-ignore on TIMEOUT shim + forced-close timer

Commits on May 4, 2026

review fixes: signal-exit constants + strip ticket refs from source