vcom/internal
vrubelroman 135f5e0d19
All checks were successful
CI / test (push) Successful in 10m0s
fix: harden copy/move/delete transfers, add CI, dead code cleanup
Audited every copy/move/delete path (local, remote same-host, cross-host)
and fixed:

- Shell command injection in same-host remote cp/mv (unescaped paths
  interpolated into exec strings); added remote.ShellQuote.
- Missing guard against copying/moving a directory into its own
  subdirectory, locally and on same-host remote transfers (unbounded
  recursion / disk fill). New regression tests in ops_test.go.
- Remote-to-remote same-path file copy silently truncating the source
  file via Create() before it finished being read.
- Overwrite warning ("N existing target(s)") never shown for remote
  destinations, only local ones.
- Remote same-host server-side cp never advancing the file-done counter
  (waited on -v output that was never requested).
- Removed a dead "plan-then-confirm" subsystem (5 functions, 2 message
  types, 2 unreachable Update() cases) superseded by the current design.
- Remote delete (SFTP) now runs as a cancellable job with the same
  progress modal as local delete, instead of a single blocking call.

Also add a CI workflow that runs build/vet/test on every push and PR,
since previously they only ran on release tags.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-03 20:36:00 +00:00
..
config fix: verify SSH host keys, support ssh-agent, fix remote dir walk bugs 2026-07-03 15:31:32 +00:00
fs fix: harden copy/move/delete transfers, add CI, dead code cleanup 2026-07-03 20:36:00 +00:00
homedir fix: verify SSH host keys, support ssh-agent, fix remote dir walk bugs 2026-07-03 15:31:32 +00:00
theme remove duplicate theme aliases (gruvbox, nord-frost); add 4 new themes: one-dark, everforest, github-dark, catppuccin-macchiato 2026-04-27 20:19:43 +03:00
ui fix: harden copy/move/delete transfers, add CI, dead code cleanup 2026-07-03 20:36:00 +00:00