[alanshaw]

• Adds x-cid to GetObject requests.
• Adds <Blake3/> to GetObjectAttributes.

Please read the RFC for details: fil-one/RFC#33

Depends on:

• feat: add Blake3 object attribute extension versitygw#16

resolves #226

[Copilot]

Copilot review overview

🟡 Changes recommended

Attribute reads can mix versions or expose unrequested data, multipart fallback can become quadratic, and unchecked CLI group values can panic.

Review effort: Balanced
Findings: 1 · 4 · 1

Open (6)

• Reject group exponents that produce invalid block sizes · New
• Reuse bodyOpener across multipart rehashing · New
• Suppress x-cid on internal HeadObject calls · New
• Avoid building BLAKE3 outboards for standard attributes · New
• Reuse one manifest to keep metadata and CID consistent · New
• Update multipart_parts schema diagram with tree columns · New

What changed in this PR

Implements the experimental BLAKE3 object-digest RFC, exposing plaintext object CIDs and Bao range-verification data across ingestion, multipart completion, S3 responses, and CLI tooling.

Changes:

• Stores BLAKE3 roots and range-verification trees during object ingestion.
• Assembles multipart trees from persisted per-part material.
• Adds x-cid, the Blake3 object attribute, CLI verification tools, tests, migrations, and documentation.

File	Description
s3frontend/​object.go	Exposes CID and BLAKE3 attributes.
s3frontend/​multiparttree.go	Assembles multipart BLAKE3 trees.
s3frontend/​multiparttree_test.go	Tests multipart tree assembly.
s3frontend/​multipart.go	Records and finalizes part trees.
s3frontend/​cid.go	Builds CID headers and attributes.
s3frontend/​cid_test.go	Tests CID and outboard responses.
registry/​stores.go	Extends multipart part records.
registry/​stores_postgres.go	Persists part-tree fields.
README.md	Documents BLAKE3 CLI usage.
migrations/​sql/​00021_multipart_part_tree.sql	Adds part-tree columns.
itest/​scenarios_test.go	Verifies CIDs through the live stack.
inmem/​stores.go	Clones tree data safely.
go.sum	Updates dependency checksums.
go.mod	Updates versitygw and BLAKE3 dependencies.
docs/​diagrams.md	Updates architecture diagrams.
docs/​architecture.md	Documents digest storage and assembly.
DESIGN_NOTES.md	Describes multipart tree behavior.
cmd/​root.go	Registers CLI and exit semantics.
cmd/​blake3.go	Adds hash, range, and verify commands.
cmd/​blake3_test.go	Tests BLAKE3 CLI workflows.
CLAUDE.md	Updates repository guidance.
bucket/​tree.go	Computes and stores body trees.
bucket/​tree_test.go	Tests persisted tree material.
bucket/​sized.go	Adds tree hashing to sized ingestion.
bucket/​manifest.go	Adds BLAKE3 manifest fields.
bucket/​chunker.go	Integrates tree hashing with splitting.
bucket/​cbor_gen.go	Serializes new manifest fields.
blake3tree/​blake3tree.go	Implements tree assembly and verification.
blake3tree/​blake3tree_test.go	Tests tree boundaries and Bao compatibility.

Files not reviewed (1)

• bucket/cbor_gen.go: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🟡 Changes recommended

Critical and moderate verification edge cases remain unresolved.

Review effort: Lite
Findings: 2 · 2

Open (4)

• Bound ChunkLog calculation to prevent integer overflow · New
• Prevent oversized or negative-offset buffer allocations · New
• Avoid overflow in outboard leaf count calculation · New
• Reject premature EOF for non-empty objects · New

Resolved since last review (6)

• Reject group exponents that produce invalid block sizes
• Reuse one manifest to keep metadata and CID consistent
• Avoid building BLAKE3 outboards for standard attributes
• Suppress x-cid on internal HeadObject calls
• Reuse bodyOpener across multipart rehashing
• Update multipart_parts schema diagram with tree columns

Files not reviewed (1)

• bucket/cbor_gen.go: Generated file

[Copilot]

Copilot review overview

🟡 Changes recommended

The ranged verifier can accept an incorrect CID for an empty body; address this critical validation issue before approval.

Review effort: Lite
Findings: 1

Open (1)

• Empty input verification skips root validation · New

Resolved since last review (4)

• Prevent oversized or negative-offset buffer allocations
• Bound ChunkLog calculation to prevent integer overflow
• Reject premature EOF for non-empty objects
• Avoid overflow in outboard leaf count calculation

Files not reviewed (1)

• bucket/cbor_gen.go: Generated file

[Copilot]

Copilot review overview

🔵 Needs a closer look

Broad digest, storage, multipart, CLI, and protocol changes plus two unresolved documentation corrections warrant human review.

Review effort: Lite
Findings: 1

Open (1)

• Correct the understated Outboard size bound · New

Resolved since last review (1)

• Empty input verification skips root validation

Files not reviewed (1)

• bucket/cbor_gen.go: Generated file