udo/uce
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
uce/docs/wasm-baselines/site-static-audit-2026-06-12.md
udo c84fc86e6c W6
2026-06-13 16:19:52 +00:00

11 KiB
Raw Blame History

Phase 5 site static-state audit

Findings: 50 code, 0 documentation prose.

file line severity kind code note
site/demo/index.uce 76 code background task <? if(allow_server_demos) { render_card("task_repeat.uce", "Task Repeat", "Recurring task scheduling"); } ?> Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/once-init.uce 1 code static local/global static s64 demo_worker_init_count = 0; Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/demo/once-init.uce 2 code static local/global static s64 demo_component_hits = 0; Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/demo/once-init.uce 4 code init hook INIT(Request& context) Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/demo/once-init.uce 10 code once hook ONCE(Request& context) Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/demo/once-init.uce 44 code once hook ONCE() and INIT() Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/demo/once-init.uce 44 code init hook ONCE() and INIT() Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/demo/once-init.uce 47 code once hook This page calls the same named component twice. ONCE()should only run once for the request, whileINIT() should stay stable for the currently loaded worker copy. Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/demo/once-init.uce 47 code init hook This page calls the same named component twice. ONCE()should only run once for the request, whileINIT() should stay stable for the currently loaded worker copy. Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/demo/task-status.uce 11 code background task String task_name = first(context.get["task-name"], "example-task"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task-status.uce 13 code background task print("Task Name: ", task_name, "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task-status.uce 14 code background task print("Task ID: ", task_pid(task_name), "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task-status.uce 15 code background task print("Task Running: ", task_pid(task_name) == 0 ? "no" : "yes", "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 13 code background task String task_name = first(context.get["task-name"], "example-task"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 37 code background task <input type="text" name="task-name" value="<?= task_name ?>"/> Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 46 code background task load(document.getElementById('task-status'), 'task-status.uce?task-name=<?= uri_encode(task_name) ?>'); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 56 code background task print("Task Name: ", task_name, "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 57 code background task print("Task ID: ", task_pid(task_name), "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 58 code background task print("Task Running: ", task_pid(task_name) == 0 ? "no" : "yes", "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task.uce 71 code background task print("New Task ID: ", task(task_name, []() { Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 13 code background task String task_name = first(context.get["task-name"], "example-task"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 37 code background task <input type="text" name="task-name" value="<?= task_name ?>"/> Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 46 code background task load(document.getElementById('task-status'), 'task-status.uce?task-name=<?= uri_encode(task_name) ?>'); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 56 code background task print("Task Name: ", task_name, "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 57 code background task print("Task ID: ", task_pid(task_name), "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 58 code background task print("Task Running: ", task_pid(task_name) == 0 ? "no" : "yes", "\n"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/demo/task_repeat.uce 71 code background task print("New Task ID: ", task_repeat(task_name, 5, []() { Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/examples/uce-starter/components/data/widgets.uce 3 code once hook ONCE(Request& context) Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/examples/uce-starter/components/workspace/primitives.uce 3 code once hook ONCE(Request& context) Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/examples/uce-starter/lib/user.class.h 13 code static local/global static String session_key() Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/examples/uce-starter/lib/user.class.h 18 code static local/global static String normalize_email(String email) Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/examples/uce-starter/lib/user.class.h 23 code static local/global static String hash_id(String raw) Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/examples/uce-starter/lib/user.class.h 45 code static local/global static String password_hash(String password, String salt) Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/examples/uce-starter/lib/user.class.h 53 code static local/global static DValue read_json_file(String file_name) Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/examples/uce-starter/lib/user.class.h 64 code static local/global static bool write_json_file(String file_name, DValue data) Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/examples/uce-starter/views/dashboard.uce 3 code once hook ONCE(Request& context) Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/info/index.uce 269 code static local/global <li>nginx serves static files directly from site/</li> Check whether state is request-local, immutable, or intentionally persistent; unit statics reset per wasm workspace.
site/tests/preprocessor.uce 3 code once hook ONCE(Request& context) Audit behavior under per-request wasm workspaces; ONCE/INIT may need host-side cache semantics if used for cross-request state.
site/tests/tasks.uce 25 code background task pid_t repeat_existing = task_pid("site-tests-repeat"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 27 code background task task_kill(repeat_existing, 15); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 37 code background task repeat_pid = task_repeat("site-tests-repeat", 1.0, []() { Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 55 code background task pid_t seen_short_pid = task_pid("site-tests-short"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 56 code background task pid_t seen_repeat_pid = task_pid("site-tests-repeat"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 57 code background task pid_t seen_timeout_pid = task_pid("site-tests-timeout"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 58 code background task pid_t seen_unsafe_key_pid = task_pid("site-tests/../unsafe key"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 59 code background task int short_alive = seen_short_pid == 0 ? -1 : task_kill(seen_short_pid, 0); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 60 code background task int repeat_alive = seen_repeat_pid == 0 ? -1 : task_kill(seen_repeat_pid, 0); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 72 code background task check("task_pid() + task_kill(pid, 0)", short_alive == 0, "kill(0) result=" + std::to_string(short_alive)); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 73 code background task check("task_repeat()", repeat_pid != 0 && seen_repeat_pid != 0, "started=" + std::to_string(repeat_pid) + " seen=" + std::to_string(seen_repeat_pid)); Task APIs cross request lifetimes; verify they are host handles, not guest statics.
site/tests/tasks.uce 77 code background task check("task_kill() rejects negative pid", task_kill(-1, 0) == -1, "kill(-1, 0) rejected"); Task APIs cross request lifetimes; verify they are host handles, not guest statics.