Repository navigation
Conversation
ml0renz0
changed the title
…elete and backup semantics
…nd timeout contracts
…ault through TLS proxy
…s CSI 3~ Keep unsent drafts out of the persisted command history, restore them with Down, and stop treating ordinary tilde text as forward-delete. Allow a realistic 200ms window for multi-byte terminal CSI sequences. Cover the behavior with Linux PTY integration regression tests.
Rename the original Bash CLI without changing its bytes; use vcli.sh as the only modernization candidate and retarget all CI, integration tests, packaging and documentation. Document direct diff against the baseline. Also repair the REPL CSI switch and duplicated tail introduced by the previous editor change so that Bash syntax validation can run again.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
VCLI Revival — Bash real, test-first y Vault HTTPS
El ejecutable probado es
vcli-revival.sh;vclihistórico ymastersiguen intactos. Sin patcher Python. CI ejecuta Bash/ShellCheck y E2E en Vault 1.20.4, 1.21.4, 2.0.4 y 2.1.1, todos con TLS.PKI/Kerberos, segunda pasada
Se añaden 11 tests nuevos en
tests/integration/test_pki_kerberos.pypara:getcertygetkrbsobrescriban ficheros existentes o sigan symlinks de destino.getcertlist,getcertexpiration,krbinfoygetkrblistsin mostrar claves ni ejecutar datos de Vault como shell.getallcertlist,getallkrblist,getallcertexpiration) con secretos anidados, incluso en árboles que mezclan tipos de secretos.El Bash se ha corregido directamente: preflight de destinos para exportación; listados/caducidad que reutilizan validación real de PEM, key y keytab; sustitución de los listados históricos basados en
eval, y recorrido de árbol de KV con errores propagados. Los tests con certificados OpenSSL y keytab MIT v2 siguen pasando en todas las versiones.Evidencia
GitHub Actions #40215062481 — VERDE, cuatro Vault, estáticos y Required CI gate. 129 tests Python distintos: 6 CLI + 123 integración, 498 ejecuciones (6 + 123×4), además de los smoke tests de Vault sellado por versión.
Límites abiertos
El preflight de ficheros evita sobrescrituras existentes en ese instante, pero no cierra una carrera TOCTOU entre comprobación y apertura; para una garantía estricta falta usar creación exclusiva/atómica (noclobber o equivalente), y tratar exportación parcial en errores de disco. No hay transacciones Vault multisecreto. Próximos bloques: REPL avanzado, portabilidad/rendimiento y auditoría/release candidate. PR abierta, sin merge.