Repository navigation

Improve file operation safety Part 1 - #233

Merged

5cript merged 123 commits into

mainfrom

fix/file-operation-safety-part1

Oct 16, 2026

Merged

Improve file operation safety Part 1#233
5cript merged 123 commits into
mainfrom
fix/file-operation-safety-part1

Commits on Oct 16, 2026
- Mock SFTP server gets fault injection, extensions and fixture commands
  5cript
  committed
  20d4e21
- Failed transfers no longer replace the destination
  5cript
  committed
  3d1e057
- Scans are folded into the operations that consume them
  5cript
  committed
  9e6282a
- Sync plans nothing for entries it cannot see into
  5cript
  committed
  87bfebb
- Transfers no longer apply unknown or special permissions
  5cript
  committed
  74a5b99
- Overwrites and renames never remove the existing item first
  5cript
  committed
  2926dae
- Resumed downloads take the partial file's size from disk
  5cript
  committed
  2ffa667
- Add the paths target with LocalPath, RemotePath and RelativePath
  5cript
  committed
  9b66227
- Validate names from directory listings
  5cript
  committed
  8f377a6
- Close the mock server's stdin after the exit command
  5cript
  committed
  31d6c85
- Drain the mock server's stderr in tests
  5cript
  committed
  2805128
- Set the result of a full read only after its last callback
  5cript
  committed
  e6d3828
- Move the SftpSession API to RemotePath
  5cript
  committed
  34545c6
- Add a bulk delete request with RemotePath targets
  5cript
  committed
  0bea72d
- Type backend deletes with RemotePath and refuse root and home
  5cript
  committed
  0802faa
- Type remote deletes in the frontend with RemotePath
  5cript
  committed
  b0e3c66
- Type local deletes with LocalPath and refuse root and home
  5cript
  committed
  116baf1
- Type the sync roots as LocalPath and RemotePath
  5cript
  committed
  31689a7
- Make a bulk delete one operation with one card
  5cript
  committed
  71ec960
- Add a queued local delete operation
  5cript
  committed
  ec78cc5
- Execute sync selections in the backend
  5cript
  committed
  3a7f214
- Move the sync dialog to executeSyncSelection
  5cript
  committed
  fdc5289
- Remove the frontend's direct directory creation calls
  5cript
  committed
  546d872
- Add typed bulk upload and download requests
  5cript
  committed
  c85131f
- Type the roots and entries of bulk transfers
  5cript
  committed
  a713465
- Type the queue's transfer entry points and bulk RPCs
  5cript
  committed
  12c2447
- Move the explorer's bulk transfers to typed entries
  5cript
  committed
  cf743df
- Release the instance lock before cleanupNow removes the directory
  5cript
  committed
  cf056a8
- Close the metadata stream before the dead instance cleanup
  5cript
  committed
  074352c
- Resume directory transfers under their own card id
  5cript
  committed
  e33af4e
- Type the paths of single uploads and downloads
  5cript
  committed
  b738dac
- Type the archive paths
  5cript
  committed
  d4ef387
- Type queued renames as remote paths
  5cript
  committed
  e3d5e00
- Type added and completed operations, resumables are a variant per kind
  5cript
  committed
  1ecb422
- Type the frontend's single transfers, renames and archives
  5cript
  committed
  5e32960
- Directory listings carry the directory they were requested for
  5cript
  committed
  9e73bb6
- Type the explorer's current paths and item paths
  5cript
  committed
  c198272
- A transfer stops when the existence check of its destinations fails
  5cript
  committed
  efd37ed
- Existence checks fail instead of reporting absent when unsure
  5cript
  committed
  e415835
- Drop DirectoryEntry::longName, linkTarget is the raw UTF-8 literal
  5cript
  committed
  be49ece
- Directory walkers never see the root path
  5cript
  committed
  3686a54
- Archives carry typed paths
  5cript
  committed
  e705bdc
- The explorer's full path lives on its Item, '..' is a parent link
  5cript
  committed
  afbeebc
- DirectoryEntry carries the listed name as a UTF-8 string
  5cript
  committed
  d7af149
- Remove path_utf.hpp, u8_path.hpp and remote_path_bridge.hpp
  5cript
  committed
  36174c0
- Drop the filesystem include of OperationCompleted
  5cript
  committed
  efeef2b
- Local deletes and scans never follow a Windows junction
  5cript
  committed
  1bd7e61
- The macOS drop handler sends DroppedItems
  5cript
  committed
  4702d4f
- Every test process works in a temporary directory of its own
  5cript
  committed
  e7a27a1
- Docker shell suites run one at a time, everything else in parallel
  5cript
  committed
  31c0f1a
- TemporaryDirectory cleans up without following links or junctions
  5cript
  committed
  43ca8eb
- A directory download never writes through a link in its local tree
  5cript
  committed
  ffcff7a
- Sync deletes remove exactly what the compare listed
  5cript
  committed
  2ef14dc
- A directory upload fails subdirectories it cannot list
  5cript
  committed
  f66a9ee
- A failed or cancelled sync scan reports back
  5cript
  committed
  756c9f4
- The sync dialogs share their provider with the session
  5cript
  committed
  341db5e
- A partial file is only continued when its last 64 KiB match
  5cript
  committed
  8cd7967
- Explorer transfers replace only destinations the user approved
  5cript
  committed
  4ee9bb4
- Delete confirmations focus No and name their side
  5cript
  committed
  ff7a13c
- File tracking paths go through UTF-8 instead of narrow strings
  5cript
  committed
  a7b43cf
- File tracking mirrors a local deletion without recursion
  5cript
  committed
  b765c9e
- Resumes keep the overwrite permission and recursion of the original
  5cript
  committed
  0ddb8b1
- A failed upload reports its error and paths in its completion
  5cript
  committed
  4c35f38
- Local explorer deletes go on past an item that cannot be removed
  5cript
  committed
  6a02651
- Creating a remote file refuses an existing one (O_EXCL)
  5cript
  committed
  79052fa
- Sync keeps transfer temp files as excluded entries
  5cript
  committed
  4ea4f8e
- Dropped text yields only absolute paths and file URLs
  5cript
  committed
  ad99ce5
- Saving all terminals never replaces existing files
  5cript
  committed
  4a77b69
- File tracking no longer drops edits made while an upload is queued
  5cript
  committed
  214110f
- Sync blocks names that differ only in case
  5cript
  committed
  98f6015
- Uploads from Windows no longer inherit execute bits
  5cript
  committed
  0c22ede
- The sync dialog's blocked notice opens a list of entries left alone
  5cript
  committed
  eac26cc
- Opening a file that can run code follows a new setting
  5cript
  committed
  b2353fc
- File tracking checks the server before replacing a file
  5cript
  committed
  8cbdb96
- Sync compares modification times against the last sync of a pair
  5cript
  committed
  7dba82d
- The Windows app is a GUI program
  5cript
  committed
  d098bec
- Local commands on Windows start with backslashes in their path
  5cript
  committed
  ecc8685
- Tests: Mock SFTP server gets fault injection, extensions and fixture commands
  5cript
  committed
  a7abf32
- Tests: Failed transfers no longer replace the destination
  5cript
  committed
  4ccda9c
- Tests: Scans are folded into the operations that consume them
  5cript
  committed
  1013f6c
- Tests: Sync plans nothing for entries it cannot see into
  5cript
  committed
  b24b7bd
- Tests: Transfers no longer apply unknown or special permissions
  5cript
  committed
  d25b73e
- Tests: Overwrites and renames never remove the existing item first
  5cript
  committed
  f2d3a7b
- Tests: Exit the mock SFTP server even when a handle stays open
  5cript
  committed
  deea6a0
- Tests: Add the paths target with LocalPath, RemotePath and RelativePath
  5cript
  committed
  d7111be
- Tests: Validate names from directory listings
  5cript
  committed
  a4f4d05
- Tests: Run the mock server's exit handler once
  5cript
  committed
  3d4f66f
- Tests: Build the walker test's names from UTF-8
  5cript
  committed
  2f8246c
- Tests: Move the SftpSession API to RemotePath
  5cript
  committed
  b4cecab
- Tests: Add a bulk delete request with RemotePath targets
  5cript
  committed
  4647ac9
- Tests: Type local deletes with LocalPath and refuse root and home
  5cript
  committed
  dc16b8c
- Tests: Type the sync roots as LocalPath and RemotePath
  5cript
  committed
  67ff62f
- Tests: Execute sync selections in the backend
  5cript
  committed
  2bd2711
- Tests: Move the sync dialog to executeSyncSelection
  5cript
  committed
  fd36c51
- Tests: Add typed bulk upload and download requests
  5cript
  committed
  da54c77
- Tests: Type the roots and entries of bulk transfers
  5cript
  committed
  dc509ee
- Tests: Type the queue's transfer entry points and bulk RPCs
  5cript
  committed
  851dc82
- Tests: Close the metadata stream in DeadTimestampWrittenOnDestruction
  5cript
  committed
  2bbc7c6
- Tests: Type the paths of single uploads and downloads
  5cript
  committed
  4feb2b1
- Tests: Type the archive paths
  5cript
  committed
  712f26e
- Tests: Type added and completed operations, resumables are a variant per kind
  5cript
  committed
  0e3cee8
- Tests: Existence checks fail instead of reporting absent when unsure
  5cript
  committed
  31ad39b
- Tests: Drop DirectoryEntry::longName, linkTarget is the raw UTF-8 literal
  5cript
  committed
  71ca485
- Tests: Directory walkers never see the root path
  5cript
  committed
  5df264b
- Tests: Archives carry typed paths
  5cript
  committed
  607f50c
- Tests: The explorer's full path lives on its Item, '..' is a parent link
  5cript
  committed
  40c7496
- Tests: DirectoryEntry carries the listed name as a UTF-8 string
  5cript
  committed
  4ede539
- Tests: Remove path_utf.hpp, u8_path.hpp and remote_path_bridge.hpp
  5cript
  committed
  ef3c0b1
- Tests: GNU tar interop tests pass --force-local and forward slashes
  5cript
  committed
  f45fb5c
- Tests: Local deletes and scans never follow a Windows junction
  5cript
  committed
  842930c
- Tests: Every test process works in a temporary directory of its own
  5cript
  committed
  c056478
- Tests: Docker shell suites run one at a time, everything else in parallel
  5cript
  committed
  cbf46e4
- Tests: A directory download never writes through a link in its local tree
  5cript
  committed
  15384bc
- Tests: Sync deletes remove exactly what the compare listed
  5cript
  committed
  efa8065
- Tests: A directory upload fails subdirectories it cannot list
  5cript
  committed
  1f90b52
- Tests: A partial file is only continued when its last 64 KiB match
  5cript
  committed
  280c1f8
- Tests: Explorer transfers replace only destinations the user approved
  5cript
  committed
  7307bc3
- Tests: Creating a remote file refuses an existing one (O_EXCL)
  5cript
  committed
  0bac871
- Tests: Sync keeps transfer temp files as excluded entries
  5cript
  committed
  cd247c6
- Tests: Sync blocks names that differ only in case
  5cript
  committed
  dbbd50d
- Tests: Uploads from Windows no longer inherit execute bits
  5cript
  committed
  52dbe55
- Tests: Short archive entries, failed archive scans, upload directory modes
  5cript
  committed
  17a9b6f
- Tests: Opening a file that can run code follows a new setting
  5cript
  committed
  715288b

Commits

Commits on Oct 16, 2026