2 Commits

Author	SHA1	Message	Date
Your Name	5b9dea2118	test: share-client ask_mountpoint — regression for t=type manual mountpoint ... Permanent coverage for the 2026-09-07 share mountpoint UX change (commit 35eb90a): the REAL ask_mountpoint body is brace-extracted from each client file (smb + nfs), exercised through the real common.sh + share-lib.sh helper chain via the deterministic non-TTY stdin path, with a fake sudo shim (records to SUDO_LOG, honors SUDO_FAIL) so no real filesystem is touched. Covers: existing dir used as-is (rc 0, provable NO confirm / NO mkdir via empty SUDO_LOG) added by 35eb90a; new-dir confirm=y creates via sudo mkdir; confirm=n and confirm=EOF both fail closed rc 1; existing non-directory rejected 'not a directory'; relative / trailing-slash / system paths (/etc, /root, /home/*/.ssh*) and empty-EOF all rc 1 with no side effects; mkdir failure rc 1. Stdout purity (path only). Static guards fail if anyone regresses n=new / n|N / ask_new_mountpoint, and verify the existing-dir [-d] branch precedes confirm/mkdir. Byte-symmetry guard keeps smb/nfs bodies identical. 117 checks new (18 files / 416 total). Every case can genuinely fail (negative-control verified by Tester). Hard-skip contract respected: 0 skips — all cases deterministic non-interactively. Verified: make check OK, make lint 0 FAIL/0 WARN, make test 18 files / 416 checks / 0 fail / 0 skip (~46s), bash -n clean, git diff --check clean.	2026-09-07 08:30:38 -04:00
Your Name	d817c37652	fix: stabilization pass — fail-closed auth, ai flag validation, lint/config/security hardening, regression tests ... 17-point code-level audit executed via Explorer->Architect->Builder->Tester->Reviewer; Reviewer accepted (APPROVE_WITH_NOTES; 3 block-list items resolved): - security: telegram sender-owner AND-gate + TELEGRAM_OWNER_ID, matrix MATRIX_ROOM_ID fail-closed, gpg --passphrase-fd 3 (no argv secret), /dev/tcp positional-arg form (checkport/smb-client/share-lib/NET_PROBE), eval deny-by-default + --no-command-execution carried by both chat bridges, tty-gated --trust; config/{telegram,matrix}.env reference templates - ai: all ExecStart flags validated against installed llama.cpp (requested->error, default->omit+warn, CONFIG_REQUESTED_FLAGS); single-file hf download failure rc=1 + no .hf-meta; LLAMACPP_HOST coherent; POS_SUBCMDS + metadata gaps closed - tooling: lint-conventions Bash-native rewrite (~24-30x faster, rules and output byte-identical, :num restored); pos system uninstall covers all 12 libs + scale-tail + flags dir + systemd user units (|| true) + plugin markers; anchored .bash_completion/.bashrc removal replaces sed -i '/pos/d' - config: canonical load_env_file in lib/config-ui.sh (CRLF strip, env-wins, XDG, LOADED_ENV_KEYS); 9 tools migrated; entertainment-lib collapsed to wrappers; docker-compose deliberately unmigrated (source semantics) - tests: first committed regression suite — tests/run-tests.sh zero-dep runner + make test; 12 files / 179 checks / 0 skip / ~52s; hard skip contract; systemd-analyze verify on generated unit PASS Verified: make gen idempotent; make check green; make lint 0 FAIL, 0 WARN; make test green; bash -n clean; git diff --check clean. Audit deliverables + agent reports + AGENT_TODO Done entry included.	2026-09-06 07:25:44 -04:00