7 Commits

Include renames

Author	SHA1	Message	Date
TapTap	abad1664ba	security(shared): fix -K TOCTOU, ssh old-args quoting, TLS opts, secret-file perms, sparse dedup ... - file: open -K dirlink referents via a race-safe relative O_NOFOLLOW walk from the authorized-root fd instead of re-opening an absolute realpath() result (removes the intermediate-symlink swap TOCTOU). - transport_ssh: always single-quote the server path, including --old-args, so no mode can inject shell metacharacters. - transport_tls: set SSL_OP_NO_COMPRESSION and (guarded) SSL_OP_NO_RENEGOTIATION. - credentials: reject --password-file/--early-input with any group/other permission bit; chmod 0600 the affected test fixtures. - file_store: export file_store_write_sparse() and remove the verbatim file.c duplicate.	2026-09-12 15:01:48 +02:00
TapTap	47de05d215	feat(p7-output-fs): sparse hole preservation (-S), partial retention (-P), fake-super replay; block-size verified; crtimes/stderr -> Impossible/Divergence (Wave B) ... - write_all_sparse: skips all-zero runs >= 4096 bytes via lseek(SEEK_CUR) and ftruncates the final size, wired into the atomic temp+rename and --inplace paths with no wire change (full image already in memory). - --partial retention: on a save failure after the temp held data, rename the already-written temp to the destination path (best-effort; falls through to unlink; never retains when --partial is off) so --append/--append-verify can resume; tested by forcing futimens EINVAL with an out-of-range nsec. - --block-size aliases --delta-block; verified config->delta_block_size is honored by the delta engine end-to-end (unit + integration tests). - fake_super_restore_fd: parses and re-applies user.fastsync.stat fd-relative (fchown best-effort/non-root skipped, fchmod, futimens); a save under --fake-super now both records and re-applies. - -N/--crtimes and --stderr=client promoted to a new 'Impossible/Divergence' status bucket (Summary: 136/2/4/3/2 = 147). - cppcheck/clang-format clean; unit 37/37; integration 407 passed.	2026-09-11 15:58:20 +02:00
TapTap	36a373ff5d	Add executability preservation option	2026-09-03 17:39:50 +02:00
TapTap	6c4d0246bc	merge: resolve origin dev refactor conflicts	2026-08-16 09:56:15 +02:00
TapTap	7cffff0b8b	fix: fail closed on authorization setup failure	2026-08-15 20:02:09 +02:00
TapTap	09454413d4	fix: address PR 212 review issues	2026-08-15 12:48:31 +02:00
TapTap	8cca891b9a	refactor: split transfer and protocol responsibilities	2026-08-15 12:27:18 +02:00