wire: validate field number and minimal encoding in decode_tag Three checks added on the multi-byte path: 1. Field number must be > 0 (IllegalZeroFieldNum_Case_0/1/3). 2. Field number must fit in 29 bits per the protobuf spec (BadTag_FieldNumberSlightlyTooHigh, BadTag_FieldNumberTooHigh). 3. Tag varint must be minimally encoded — a trailing 0 byte with more than one byte read is overlong (BadTag_OverlongVarint). The field-number check runs on bit ops over the uint64 cdata returned by decode_varint rather than after tonumber, otherwise field numbers above 2^32 alias into the valid range (e.g., fn=2^31+1 was being recovered as fn=1). The single-byte fast path picks up the field-zero check directly via the b >> 3 == 0 condition. Drops 6 entries from test/conformance/known_failures.txt and adds 4 regression tests pinning each rejection path.
codec: recursively merge repeated singular-message wire entries Per proto3 spec, when the same singular message field (including a oneof branch) appears twice on the wire, the two values must merge: scalar fields last-wins, repeated fields concatenate, sub-messages merge recursively, maps last-wins per key. The previous reader replaced the prev value wholesale for oneof branches and overwrote repeated/nested fields with `prev[k] = v` even outside oneofs, losing data unique to the first occurrence. Adds wire.codec.merge_message(desc, prev, decoded), a descriptor-driven recursive merge, and routes both codec.lua's reader and the inline-mode codegen through it. WKT message fields (custom decode) keep the replace behavior because their decoded value is not a generic Lua table. Exposes pb.codec to the generated inline code so the helper is reachable without a per-call require. Drops 3 entries from test/conformance/known_failures.txt: ValidDataOneof.MESSAGE.Merge, ValidDataOneofBinary.MESSAGE.Merge, RepeatedScalarMessageMerge. Adds 5 regression tests covering scalar last-wins, oneof merge, recursive sub-message merge, repeated-in- submessage concat, and oneof sibling clearing after merge.
test: regression tests for each conformance fix in this branch Pins each fix locally so the bug is caught without the Docker conformance runner. Grouped by fix; multiple tests per fix because each fix touches several code paths (per scalar type, per shape). Fix 1 — varint 32-bit truncation (0c13fd7), 7 tests: int32 high-bits → 0, int32 sign-extend, uint32 low-32, sint32 zigzag after truncation, enum singular, packed-repeated int32 element-wise, repeated-scalar-selects-last after truncation. Fix 2 — wire types 6/7 reject (7442ea2), 5 tests: wt=6 known, wt=7 known, wt=6 unknown, wt=6 mid-stream after a valid field, positive control that wts 0/2/5 still parse. Fix 3 — WKT registry auto-register (50ed9b6), 6 tests: pb.lookup resolves all 11 WKT descriptors plus type-URL form; Any/Timestamp, Any/Duration, Any/Int32Value, Any/Struct, Any/user-type all round-trip via JSON input. Fix 4 — skip_field bounds checks (1712192), 5 tests: truncated I64, truncated I32, truncated LEN fast path, truncated LEN multi-byte length, complete unknown round-trips intact. Fix 5 — drop unknown enum names in JSON (a2f1209), 5 tests: unknown name elided in singular, dropped from repeated, dropped from map value, numeric unknown preserved, numeric-string unknown preserved.
Initial commit: protoc-gen-tarantool plugin + pb runtime A protoc plugin (Go) and a pure-Lua + LuaJIT-FFI runtime that give Tarantool a complete proto3 + gRPC stack. Two codegen modes (full inline / runtime descriptor), 226-test luatest suite, 18-fixture mainline-protoc interop corpus, JSON codec, well-known types, gRPC client/server factories, runtime .proto parser, microbench harness with allocation regression gate. Covers PLAN.md M1-M5. Module is `pb` (not `protobuf`) to avoid colliding with Tarantool's built-in encode-only `protobuf` module.