IJHack / QtPass / 35462077017

93%

Build Type

push

github

Committed by web-flow

Commit Message

Re-encryption: honest rollback, recovery of what an earlier run left (#1845)

* Re-encryption: honest rollback, recovery of what an earlier run left

The rollback after a failed replacement did not check whether the backup
could be put back, and a backup that could not be removed after success
was ignored. Both are reported now, the former naming the backup path as
the only copy of the entry. Before a run, recoverReencryptLeftovers()
walks the directory: a stale X.gpg.XXXXXX.tmp is removed (never a source
of truth), an X.gpg.reencrypt.bak without its X.gpg is renamed back (a
crash between the two renames), and a backup next to a present original is
reported and left alone, since both are valid ciphertexts and the choice
is the user's. The PROCESS enum says what adding a value entails for the
process output allow list.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JuQsrHonihp1nARE7bzstc

* Review: clean the recovery root, assert the run finished

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JuQsrHonihp1nARE7bzstc

* Recover leftovers before the backup commit, not after

A restored entry belongs in the backup commit; a stale temporary does not.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JuQsrHonihp1nARE7bzstc

---------

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

Coverage Stats

24 of 39 new or added lines in 1 file covered. (61.54%)

2 existing lines in 1 file now uncovered.

6782 of 8701 relevant lines covered (77.95%)

74.53 hits per line