[bfrancojr]

A caller of a generated lite <Message>SbeCodec can now set MaxMessageSize and MaxRepeatedCount. The lite security harness now decodes through that codec, so the gate tests what a caller actually uses.

Fixes #148

What changes

• protoc-gen-pxf-java-meta (plugin: give a generated SbeCodec overloads that take limits protowire#541) gives the generated codec unmarshal overloads that take the two limits. gradle.properties pins that branch commit (3561bdd) for now.
• check-decode-android calls SbeWithGroupSbeCodec.unmarshal(data, maxMessageSize, maxRepeatedCount) instead of SbeWireCodec directly.
• New SbeCodecLimitsTest lowers each limit through the generated overload.

Classification: reversible by a revert. It adds methods to generated code, and nothing is removed. Measured.

Evidence

Run at bf8df62 (the head before a CHANGELOG-only amend to 692839c) with -PpxfJavaMeta.repo=/nonexistent, so the plugin is fetched at the pin, as in CI:

• ./gradlew build: 657 tests, 0 failures, 5 skipped. The skips are pb: null and zero big numbers in Pb.marshal differ from protowire-go, and a null list element throws #159's, which pb: write null and zero big numbers as protowire-go does, and a BigFloat normalised #170 enables.
• SbeCodecLimitsTest (2 tests) passes. It compiles against the new overload, which confirms the pinned plugin was used.
• Security gate, go/java/java-lite: "Ran 211 (port, corpus) pairs across 3 ports. ✓ All ports conform".
• Run directly: sbe/group-count-16 with --limit MaxRepeatedCount=8 gives reject: sbe: group entries declares 16 entries, MaxRepeatedCount=8, exit 1.

Merge order and conflicts

• plugin: give a generated SbeCodec overloads that take limits protowire#541 merges first. Then the pin moves to a spec commit that holds it.
• sbe: validate UTF-8 in string fields, and cut overlong strings on a character boundary #171 and pxf: write protowire-go's bytes from PXF text, and run the write gate in CI #172 also pin unmerged plugin commits (#528 and #532). Once all three spec PRs are in, one pin to spec main covers them all.
• sbe: validate UTF-8 in string fields, and cut overlong strings on a character boundary #171 also edits the sbe case of check-decode-android. Whichever merges second needs a small rebase. I'll do it.

[bfrancojr]

CI passed on 692839c, the PR head read back from the remote: Build + Test, Conformance (Go reference), Analyze and CodeQL.

[bfrancojr]

I rebased onto main 1323944, after #170 and #171 merged. The new head is bfce30e, read back from the remote.

• The harness conflict with sbe: validate UTF-8 in string fields, and cut overlong strings on a character boundary #171 is resolved: both SBE templates, SbeWithGroup and SbeText, now decode through their generated codecs with the row's limits.
• pxfJavaMeta.ref points to af37ec4, which is spec #541 rebased onto #528 (#528 is what main pins now).

Run locally with -PpxfJavaMeta.repo=/nonexistent, so the plugin is fetched at the pin:

• ./gradlew build: 684 tests, 0 failures.
• Security gate: 211 pairs ✓.
• Through the codec, sbe/utf8-invalid-string and sbe/utf8-split-char-string exit 1 with invalid UTF-8 in string field text.

Merge order: spec #528, then spec #541, then re-pin here, then this PR.

[bfrancojr]

I rebased onto main 35d1341, after #172 and #174 merged. The new head is 1d8043b, read back from the remote.

main pins ee27eba (spec #528 plus #532). I stacked spec #541 on that commit (now 474e8ec) and pinned this PR there. The CHANGELOG conflict kept both entries.

Run locally with -PpxfJavaMeta.repo=/nonexistent, so the plugin is fetched at the pin:

• ./gradlew build: 719 tests, 0 failures, 0 skipped.
• Write gate ✓, text gate ✓, security gate ✓.

Merge order: spec #528, spec #532, spec #541, then re-pin to spec main.