d817c37652
gates / consistency-and-conventions (push) Successful in 26s
17-point code-level audit executed via Explorer->Architect->Builder->Tester->Reviewer;
Reviewer accepted (APPROVE_WITH_NOTES; 3 block-list items resolved):
- security: telegram sender-owner AND-gate + TELEGRAM_OWNER_ID, matrix
MATRIX_ROOM_ID fail-closed, gpg --passphrase-fd 3 (no argv secret),
/dev/tcp positional-arg form (checkport/smb-client/share-lib/NET_PROBE),
eval deny-by-default + --no-command-execution carried by both chat bridges,
tty-gated --trust; config/{telegram,matrix}.env reference templates
- ai: all ExecStart flags validated against installed llama.cpp
(requested->error, default->omit+warn, CONFIG_REQUESTED_FLAGS); single-file
hf download failure rc=1 + no .hf-meta; LLAMACPP_HOST coherent;
POS_SUBCMDS + metadata gaps closed
- tooling: lint-conventions Bash-native rewrite (~24-30x faster, rules and
output byte-identical, :num restored); pos system uninstall covers all 12
libs + scale-tail + flags dir + systemd user units (|| true) + plugin
markers; anchored .bash_completion/.bashrc removal replaces sed -i '/pos/d'
- config: canonical load_env_file in lib/config-ui.sh (CRLF strip, env-wins,
XDG, LOADED_ENV_KEYS); 9 tools migrated; entertainment-lib collapsed to
wrappers; docker-compose deliberately unmigrated (source semantics)
- tests: first committed regression suite — tests/run-tests.sh zero-dep
runner + make test; 12 files / 179 checks / 0 skip / ~52s; hard skip
contract; systemd-analyze verify on generated unit PASS
Verified: make gen idempotent; make check green; make lint 0 FAIL, 0 WARN;
make test green; bash -n clean; git diff --check clean. Audit deliverables +
agent reports + AGENT_TODO Done entry included.
13 lines
851 B
Bash
13 lines
851 B
Bash
# ~/.config/linux_post_install/telegram.env — Telegram bot config for 'pos communication telegram'
|
|
# Reference template (not auto-copied by install.sh). The runtime file is
|
|
# created and edited via: pos config telegram (chmod 600).
|
|
#
|
|
# TELEGRAM_BOT_TOKEN=<token> # Bot token from @BotFather (secret)
|
|
# TELEGRAM_CHAT_ID=<id> # Numeric chat id from @userinfobot
|
|
# TELEGRAM_OWNER_ID=<id> # Your numeric Telegram user id (id from @userinfobot)
|
|
# # REQUIRED for the listener: only messages sent to
|
|
# # TELEGRAM_CHAT_ID BY your account are executed.
|
|
# # Leave unset and the listener ignores all commands.
|
|
# TELEGRAM_AI_PREFIX=ai # AI-bridge trigger word in the listener (default ai)
|
|
#
|
|
# Set values with: pos config telegram |