The Wire · Showcase
BUFFA CLOSES 2 GIB MESSAGE BOMB, PLUGIN ECOSYSTEM ADVANCES
By RepoJournal · Filed · About Anthropic
Buffa now rejects protobuf messages over 2 GiB instead of silently corrupting them, closing a gap where encoders would succeed while every decoder downstream failed.
The buffa library shipped a breaking change that enforces the protobuf 2 GiB message-size limit on both encoding and decoding [1]. Previously, the encoder was infallible and would silently produce unreadable blobs that crossed the 2^31-1 byte threshold, causing arithmetic wraparound past u32::MAX and corrupt output. Decoders always rejected these oversized payloads, creating a failure pattern where writers kept succeeding while readers started failing in production. This fix surfaces the error at the source instead of downstream.
Across the plugin ecosystem, the automated validation pipeline is working at scale [2][3][4][5][6][7][8][9][10][11][12][13][14][15][16]. Carta-cap-table, qodo-skills, base44, wix, signoz, exa, carta-investors, hyperframes, chrome-devtools-mcp, and five community plugins all passed claude plugin validate before their SHAs were bumped. The healthcare plugin ecosystem published its latest sync to the marketplace [17], moving in lockstep across official and community channels.
Action items
- → Review and merge buffa #271 if you ship messages over 1 GiB anthropics/buffa [immediate]
- → Review plugin bump PRs across knowledge-work, official, and community repos before merging anthropics/knowledge-work-plugins [plan]
References
- [1] encode: enforce the protobuf 2 GiB message-size limit ↗ anthropics/buffa
- [2] bump(carta-cap-table): 193e1a48 → 660e3f60 ↗ anthropics/knowledge-work-plugins
- [3] bump(qodo-skills): 1b3af00d → 5c31f327 ↗ anthropics/knowledge-work-plugins
- [4] bump(base44): 8f2e5500 → b7610fe5 ↗ anthropics/knowledge-work-plugins
- [5] bump(wix): b1be4162 → 53576644 ↗ anthropics/knowledge-work-plugins
- [6] bump(signoz): c86f50a8 → 6f3f47ec ↗ anthropics/knowledge-work-plugins
- [7] bump(exa): 9c69a3b4 → 8823cbea ↗ anthropics/claude-plugins-official
- [8] bump(carta-investors): a8b2c4bb → 77458769 ↗ anthropics/claude-plugins-official
- [9] bump(hyperframes): ccf5f20b → c830aa83 ↗ anthropics/claude-plugins-official
- [10] bump(carta-cap-table): 193e1a48 → 660e3f60 ↗ anthropics/claude-plugins-official
- [11] bump(chrome-devtools-mcp): 58ba1742 → 78ccb193 ↗ anthropics/claude-plugins-official
- [12] bump(8-habit-ai-dev): 079294c8 → 823b1c78 ↗ anthropics/claude-plugins-community
- [13] bump(browser-harness): 9c95cea7 → 67e3852d ↗ anthropics/claude-plugins-community
- [14] bump(cassiiopeia): f2664fa1 → 35bbed2a ↗ anthropics/claude-plugins-community
- [15] bump(cc-native): e4d8ab64 → e062ed55 ↗ anthropics/claude-plugins-community
- [16] bump(claude-self-reflect): 2f489f2f → 75ab97d0 ↗ anthropics/claude-plugins-community
- [17] Sync plugins ↗ anthropics/healthcare