Your Name
|
d817c37652
|
fix: stabilization pass — fail-closed auth, ai flag validation, lint/config/security hardening, regression tests
gates / consistency-and-conventions (push) Successful in 26s
17-point code-level audit executed via Explorer->Architect->Builder->Tester->Reviewer;
Reviewer accepted (APPROVE_WITH_NOTES; 3 block-list items resolved):
- security: telegram sender-owner AND-gate + TELEGRAM_OWNER_ID, matrix
MATRIX_ROOM_ID fail-closed, gpg --passphrase-fd 3 (no argv secret),
/dev/tcp positional-arg form (checkport/smb-client/share-lib/NET_PROBE),
eval deny-by-default + --no-command-execution carried by both chat bridges,
tty-gated --trust; config/{telegram,matrix}.env reference templates
- ai: all ExecStart flags validated against installed llama.cpp
(requested->error, default->omit+warn, CONFIG_REQUESTED_FLAGS); single-file
hf download failure rc=1 + no .hf-meta; LLAMACPP_HOST coherent;
POS_SUBCMDS + metadata gaps closed
- tooling: lint-conventions Bash-native rewrite (~24-30x faster, rules and
output byte-identical, :num restored); pos system uninstall covers all 12
libs + scale-tail + flags dir + systemd user units (|| true) + plugin
markers; anchored .bash_completion/.bashrc removal replaces sed -i '/pos/d'
- config: canonical load_env_file in lib/config-ui.sh (CRLF strip, env-wins,
XDG, LOADED_ENV_KEYS); 9 tools migrated; entertainment-lib collapsed to
wrappers; docker-compose deliberately unmigrated (source semantics)
- tests: first committed regression suite — tests/run-tests.sh zero-dep
runner + make test; 12 files / 179 checks / 0 skip / ~52s; hard skip
contract; systemd-analyze verify on generated unit PASS
Verified: make gen idempotent; make check green; make lint 0 FAIL, 0 WARN;
make test green; bash -n clean; git diff --check clean. Audit deliverables +
agent reports + AGENT_TODO Done entry included.
|
2026-09-06 07:25:44 -04:00 |
|
Your Name
|
e969234ca5
|
feat: command registry, alias wrapper scripts, config-ui readability
gates / consistency-and-conventions (push) Successful in 1m28s
- lib/registry.sh: shared query API over POS_* headers (reg_scan, reg_list,
reg_lookup, reg_tools_in, reg_each, reg_config_scopes/keys). Replaces
per-consumer sed/grep header parsing.
- bin/pos-tree + bin/pos _pos_category_help(): migrated to registry API.
Category help now shows [deps: ...] annotations. Tree output preserved.
- New optional headers # POS_DEPS: and # POS_EXAMPLES: in tool metadata.
Added to pos-network-download (aria2c jq curl), pos-media-sync (lsblk jq),
pos-system-backup (tar), pos-docker-ps (docker) as initial adopters.
- scripts/gen-docs.sh: extended tools array with deps/examples fields;
conditional column rendering in gen_dispatch; deps annotation in gen_tree.
Fixed URL-unsafe // joiner (→ middle dot ·) and \x1f caption delimiter
collision in config-ui.
- bin/pos-ai-alias: rewrote activation from bash aliases (source-time-frozen)
to executable wrapper scripts at ~/.local/bin. Staleness eliminated:
edits apply on next invocation with no shell reload. _alias_sync()
reconciliation on every subcommand, marker-guarded lifecycle, collision
refusal, legacy .sh retirement. Fixed dup-table bug (option 4 no-op).
- lib/config-ui.sh: @caption/@[KEY=alt] conditional captions, *providers=<tag>
tagged wildcards, uniform typography tier (bold/cyan/dim), honest prompt.
Active provider keys bold, inactive dimmed with reason. Backward-compatible.
- bin/pos-system-uninstall: marker-scan for wrapper script cleanup.
- Docs synced: AGENTS.md (new headers + registry), DOC/SCRIPTS.md (registry
section + lib list), DOC/POS.md (alias wrapper activation), MAINTENANCE.md
(M-024). Lint fixed: pos-ai-alias registered in INTERACTIVE_CMDS.
Gates: make gen && make check && make lint = 0 FAIL, 0 WARN
|
2026-08-27 02:30:27 -04:00 |
|
Your Name
|
7e2ecba219
|
chore: add doc/code sync gate (make gen + make check + pre-commit hook)
- bin/pos: usage() CATEGORIES now auto-derived from pos-* filenames
(kill the stale cheat-sheet bug class); only EXAMPLES stays hand-written
- # POS: / # POS_FLAGS: headers on all 15 tools = single source of truth
for generated docs; template updated
- scripts/gen-docs.sh: regenerates GEN-marker sections (bin tree, dispatch
table, no-common.sh list, line-count table, completion flags)
- scripts/check-sync.sh: bash -n + exec bits + doc/code drift + smoke
- Makefile: make gen / make check; scripts/install-hooks.sh: opt-in hook
- DEV.md + AGENT_Context: add-a-tool flow is now header + make check
|
2026-08-05 14:11:14 +00:00 |
|