Joseph Spiker

spikerj commented on issue spikerj/spikersoft-issues#647

2026-07-17 07:29:23 +00:00

[Backend] Remove 12 genuinely dead private parameters (SonarQube S1172) — the residue after the family's triage

Extended PR #352 with the S1144 fully-dead members verified this pass: FindChainAnchor (uncalled method), the Lean handler's PublishUploadReceivedEventAsync (dead since #574 moved publishing to…

spikerj opened issue spikerj/spikersoft-issues#647

2026-07-17 07:25:53 +00:00

[Backend] Remove 12 genuinely dead private parameters (SonarQube S1172) — the residue after the family's triage

spikerj opened issue spikerj/spikersoft-issues#646

2026-07-17 07:21:03 +00:00

[GameServer][Bug] Hierarchical A* never worked: region identity collapsed to (0,0,0) via a placeholder IntToRegion — long-range pathfinding fell back to straight lines through obstacles

spikerj commented on issue spikerj/spikersoft-issues#639

2026-07-17 07:16:55 +00:00

[Backend] Telemetry-fidelity log-call family: S6667 (83) + S2139 (187) need per-site triage with a rubric, not bulk treatment

S6667 half fully resolved: PR #348 merged (16/16 checks green) — the six genuinely-lossy sites now pass the exception (3× artpipe JsonException, 2× Redis-admin broad catches, PingCommandHandler's…

spikerj commented on issue spikerj/spikersoft-issues#645

2026-07-17 07:13:47 +00:00

[GameServer][Bug] Projectile hit checks ignore the previous position (tunneling) and spam Warning-level logs per player per tick — CampZone + DungeonZone

Related combat-system finding from the same S1172 pass: ApplyDamageToShip (:1200) and ApplyDamageToSpacecraft (:1292) receive 'sourceEntityId' (xml-doc: 'Entity that caused the damage') and never…

spikerj opened issue spikerj/spikersoft-issues#645

2026-07-17 07:09:34 +00:00

[GameServer][Bug] Projectile hit checks ignore the previous position (tunneling) and spam Warning-level logs per player per tick — CampZone + DungeonZone

spikerj opened issue spikerj/spikersoft-issues#644

2026-07-17 07:09:34 +00:00

[Security][Chat] CrossOrganization channels are accessible to EVERYONE — CanAccessChannel returns true unconditionally ('Simplified for now')

spikerj closed issue spikerj/spikersoft-issues#640

2026-07-17 06:52:49 +00:00

[GameServer][Bug] Four command types were never ClientTick/Sequence-stamped on deserialization — the per-type stamp switch silently skipped them (found via SonarQube S1871)

spikerj closed issue spikerj/spikersoft-issues#638

2026-07-17 06:52:48 +00:00

[Backend] Detector/rule-engine override parameters renamed to match their base declarations (SonarQube S927 x14) + proposal: drop CA1873/CA1861 imports from sonar (56% of all open issues)

spikerj opened issue spikerj/spikersoft-issues#643

2026-07-17 06:52:48 +00:00

[Decision][SonarQube] Rule-level noise policy: CA1873 (3.5k), CA1861 (1.4k), S101 (663), S1192 (404), S1075 (74) — ~70% of open backend findings

spikerj commented on issue spikerj/spikersoft-issues#638

2026-07-17 06:52:48 +00:00

[Backend] Detector/rule-engine override parameters renamed to match their base declarations (SonarQube S927 x14) + proposal: drop CA1873/CA1861 imports from sonar (56% of all open issues)

The fix half is resolved: spikersoft-backend PR #346 merged with all checks green — all 14 S927 override-parameter renames across the SecurityMonitor detectors and RemediationRuleEngine. The…

spikerj commented on issue spikerj/spikersoft-issues#640

2026-07-17 06:52:48 +00:00

[GameServer][Bug] Four command types were never ClientTick/Sequence-stamped on deserialization — the per-type stamp switch silently skipped them (found via SonarQube S1871)

Resolved in spikersoft-backend PR #347 (merged, 30/30 checks green). IGameCommand.ClientTick/Sequence gained interface setters and the two per-type stamp switches collapsed to single assignments…

spikerj commented on issue spikerj/spikersoft-issues#642

2026-07-17 06:48:34 +00:00

[Infra][SonarQube] CE fails extracting LARGE uploaded reports: PGbytea ArrayIndexOutOfBoundsException reading ce_task_input (root cause of the old #344 crash)

Reproducibility verdict: NOT deterministic. The dispatched CI run 8645 — same container, same scanner 10.4.1, same large coverage-bearing report shape as the 06:05 failure — completed end-to-end…

spikerj commented on issue spikerj/spikersoft-issues#639

2026-07-17 06:35:53 +00:00

[Backend] Telemetry-fidelity log-call family: S6667 (83) + S2139 (187) need per-site triage with a rubric, not bulk treatment

Batch 1 done against the fresh 2026-07-17 baseline: 47 of 81 S6667 findings were the canonical cancellation-quietness idiom (rubric clause b) — every site's actual catch clause was programmaticall…

spikerj closed issue spikerj/spikersoft-issues#632

2026-07-17 06:32:47 +00:00

[CI][Backend] sonar-scan has uploaded nothing since 2026-07-14 — scanner gets a wrong SonarQube host and continue-on-error hides the failure

spikerj commented on issue spikerj/spikersoft-issues#632

2026-07-17 06:32:46 +00:00

[CI][Backend] sonar-scan has uploaded nothing since 2026-07-14 — scanner gets a wrong SonarQube host and continue-on-error hides the failure

RESOLVED — the fresh baseline is live. Proof chain: (1) CI run 8611 completed the fixed client pipeline end-to-end and uploaded; (2) a local-scanner submission processed server-side in ~45s; (3)…

spikerj opened issue spikerj/spikersoft-issues#642

2026-07-17 06:32:46 +00:00

[Infra][SonarQube] CE fails extracting LARGE uploaded reports: PGbytea ArrayIndexOutOfBoundsException reading ce_task_input (root cause of the old #344 crash)

spikerj commented on issue spikerj/spikersoft-issues#633

2026-07-17 06:09:09 +00:00

[Go-Live Checklist][Security] Rotate + Bao-migrate the dev-environment secrets before production

Addition found while mapping the SonarQube stack for the #632 CE investigation: spikersoft-infrastructure/sonarqube/docker-stack.yml carries the Postgres credentials in plaintext (POSTGRES_USER/POS…

spikerj commented on issue spikerj/spikersoft-issues#632

2026-07-17 06:07:57 +00:00

[CI][Backend] sonar-scan has uploaded nothing since 2026-07-14 — scanner gets a wrong SonarQube host and continue-on-error hides the failure

Milestone + a new (final) blocker, fully diagnosed:

The client-side chain is FIXED and proven: master run 8611 went begin → build → tests (LLama class excluded) → upload, end to end, and…

spikerj commented on issue spikerj/spikersoft-issues#639

2026-07-17 05:59:50 +00:00

[Backend] Telemetry-fidelity log-call family: S6667 (83) + S2139 (187) need per-site triage with a rubric, not bulk treatment

Distribution data for planning (still against the stale 07-14 analysis): S2139 = 187 findings across 66 files — a long tail, not a hotspot; densest is GamePersistenceService (13), the Mongo-primar…