milestone 33: contract closure — samples, file-authority enumeration, dead code, bundle ceiling

src/web/static.zig

@@ -77,7 +77,7 @@ fn find(files: []const File, path: []const u8) ?*const File {
 /// parameters fall outside the grammar is unusable and refuses. An empty
 /// header (or one the connection budget dropped) reads as identity-only,
 /// which degrades to the uncompressed entry.
-pub fn acceptsGzip(header: []const u8) bool {
+fn acceptsGzip(header: []const u8) bool {
     var gzip_entry: ?bool = null;
     var wildcard_entry: ?bool = null;
     var tokens = std.mem.splitScalar(u8, header, ',');
@@ -122,7 +122,7 @@ fn qualityAccepts(value: []const u8) bool {
 /// Whether an `if-none-match` header names `etag` (which carries its quotes).
 /// Weak validators compare by content: a `W/` prefix on the wire still matches,
 /// because the bytes behind a content hash are the content.
-pub fn etagMatches(header: []const u8, etag: []const u8) bool {
+fn etagMatches(header: []const u8, etag: []const u8) bool {
     var tokens = std.mem.splitScalar(u8, header, ',');
     while (tokens.next()) |token| {
         var candidate = std.mem.trim(u8, token, " \t");
@@ -179,7 +179,7 @@ fn respondAsset(request: *http_util.Request, selection: Selection) http_util.Han
 /// any segment could escape the root. Segments were split before percent
 /// decoding, so a decoded segment may contain `/` — that and `..` are the two
 /// traversal shapes, and both are refused rather than normalized.
-pub fn diskRelativePath(buf: []u8, segments: []const []const u8) ?[]const u8 {
+fn diskRelativePath(buf: []u8, segments: []const []const u8) ?[]const u8 {
     if (segments.len == 0) return index_path[1..];
     var writer: std.Io.Writer = .fixed(buf);
     for (segments, 0..) |segment, index| {