dangernoodle-io / TaipanMiner / 28689389966

90%

push

github

fix: hard-scope fleet ota --hosts to prevent full-fleet fan-out (#614)

- register --hosts with default=SUPPRESS so a value given before a nested
  op token (e.g. `ota --hosts X push`) is not reset to None by the op
  subparser's own default, which silently collapsed an explicit host scope
  into full mDNS discovery
- thread an explicit scoped-hosts frozenset from the ota push/pull command
  handlers down into fleetlib.ota.push()/pull()
- add a defense-in-depth ScopeViolation guard at the push()/pull() boundary
  that raises (non-zero exit) if a resolved device falls outside the explicit
  --hosts set, so a future resolution regression can never fan an
  --hosts-scoped op out to the whole fleet
- let ScopeViolation propagate in cmd_ota_push rather than downgrade it to a
  per-device skip
- add regression tests: --hosts scopes push/pull to the named host only
  (discovery stubbed to 5 devices, never called), the argparse before-token
  case survives, and the guard raises for an out-of-scope device

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

2876 of 3613 branches covered (79.6%)

Branch coverage included in aggregate %.

5387 of 5543 relevant lines covered (97.19%)

149015.13 hits per line