5 Commits

Include renames

Author	SHA1	Message	Date
swaitsandClaude Fable 5.1	932c05177f	test(cli): the terminal tests speak BSD script on macOS; a noted root is compared as the system spells it ... The portable macOS job, now past the server start: `script -qefc` is util-linux's spelling; macOS's BSD `script` has no -f and no -c, so the three pseudo-terminal helpers choose the spelling for the OS. And the root noted "for next time" is the canonical path (macOS writes /tmp as /private/tmp); the test compares it canonically. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HS8WZziDnyxunC23MUxrLp	2026-10-29 18:36:34 -06:00
swaitsandClaude Fable 5.1	62d42b9458	test(cli): every test asks the platform where the data root is ... The four other test files that spelled out `.local/share/wanderbooks` (setup, books_home, format_upgrade, backups) use `default_root` and `platform_data_dir`, so they hold on macOS as on Linux. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HS8WZziDnyxunC23MUxrLp	2026-10-29 17:22:37 -06:00
swaitsandClaude Opus 5.5	d1f3ad891a	P2 slice 4: access ... Agent tokens (wb_ and 64 hex digits), one book and one name each, kept only as SHA-256 in a chain log and in the OS keyring; made, listed and revoked only through the admin socket (`wanderbooks token ...`). The door checks them, scopes cover every tool, every call is in the access log (fail closed), and the owner passphrase is an Argon2id hash. Setup's terminal test waits for its prompts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj	2026-10-20 11:14:20 -06:00
swaitsandClaude Opus 5.5	a298d154b6	P2 slice 3: opening and closing the books (plan 3.9, D-21, D-23) ... One wanderbooks executable. The books are open while the viewer, an agent session or a terminal holds them: a host process takes leases on a socket, starts the server (the hidden mode `wanderbooks server`) with a pipe on its input, and closes it 10 s after the last lease ends. No background service. One host even in a race (run/host.lock). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj	2026-10-20 11:14:19 -06:00
swaitsandClaude Opus 5.5	b47331e9d5	P2 slice 2: the data root (plan 3.4, 5.5) ... ledger_store::root: one private folder for every book, found without the environment (--root, else the root setup recorded in a file only this account can write, else the platform default under the home from the password database). Every folder made 0700, files 0600; a root that is a link, another user's, open to others, unmarked, or under a folder another user could swap is refused; no error names it. Setup keeps a recorded root, never makes a second root or moves books while one holds any, and leaves a folder holding other things untouched. Books are created and adopted one at a time; adoption reads the source under its writer lock (changing nothing in it), copies into staging, re-hashes every stored file against its name, checks every named file is there, opens and verifies the copy with the source's head, imports settings for books that keep none, syncs, and only then renames it into place. wanderbooks setup makes the root and never prints where it is. Three review rounds; mutation on the diff (docs/testing.md). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj	2026-10-18 14:42:32 -06:00