Directory search v2

.gitattributes

@@ -1,6 +1,7 @@
 # Git LFS configuration for website media assets.
 # Strict donor parity: source images, generated WebP derivatives, and
 # Hugo's cached processed images are committed and fetched via Git LFS.
+companion/src/** text eol=lf
 archive_testdata/*.zip -text
 website/assets/images/** filter=lfs diff=lfs merge=lfs -text
 website/resources/_gen/images/** filter=lfs diff=lfs merge=lfs -text

.github/workflows/devcontainer-validate.yml

@@ -68,8 +68,9 @@ jobs:
     - name: Report devcontainer runtime contract
       shell: bash
       run: |
-        docker run --rm --entrypoint sh sambee:devcontainer-validation -c '
+        docker run --rm --entrypoint sh -v "$PWD:/workspace:ro" -e PYTHONPATH=/workspace/backend sambee:devcontainer-validation -c '
           python --version
           python -c "import sqlite3; print(\"sqlite3 module: \" + sqlite3.sqlite_version)"
+          python -c "from app.services.directory_index import validate_sqlite_runtime; validate_sqlite_runtime(); print(\"Directory-index SQLite features verified\")"
           dpkg-query -W -f="\${Package} \${Version}\\n" libsqlite3-0
         '

.github/workflows/docker-image-validate.yml

@@ -246,6 +246,7 @@ jobs:
         docker exec sambee-smoke-${{ matrix.platform_id }} sh -c '
           python --version
           python -c "import sqlite3; print(\"sqlite3 module: \" + sqlite3.sqlite_version)"
+          python -c "from app.services.directory_index import validate_sqlite_runtime; validate_sqlite_runtime(); print(\"Directory-index SQLite features verified\")"
           dpkg-query -W -f="\${Package} \${Version}\\n" libsqlite3-0
         '
 

.github/workflows/verify-companion-build.yml

@@ -43,6 +43,7 @@ jobs:
     needs: change-scope
     if: needs.change-scope.outputs.requires-build == 'true'
     runs-on: windows-latest
+    timeout-minutes: 45
     env:
       CARGO_REGISTRIES_CRATES_IO_PROTOCOL: sparse
     steps:
@@ -66,11 +67,20 @@ jobs:
       - name: Run Companion checks
         shell: pwsh
         run: |
+          New-Item -ItemType Directory -Force companion/recovery-report | Out-Null
+          @{ source_sha = '${{ github.sha }}'; run_id = '${{ github.run_id }}'; target = 'windows-x64' } |
+            ConvertTo-Json | Set-Content companion/recovery-report/source.json
           cd companion
           npx tsc --noEmit
+          if ($LASTEXITCODE -ne 0) { throw 'Companion TypeScript check failed.' }
           npm run lint
+          if ($LASTEXITCODE -ne 0) { throw 'Companion lint failed.' }
           cd src-tauri
           cargo test
+          if ($LASTEXITCODE -ne 0) { throw 'Native Rust tests failed.' }
+          cargo test --features recovery-verification server::directory_manager::tests -- --test-threads=2 2>&1 |
+            Tee-Object -FilePath ../recovery-report/native-tests.log
+          if ($LASTEXITCODE -ne 0) { throw 'Native recovery tests failed.' }
 
       - name: Assert verification-only secret boundary
         shell: pwsh
@@ -102,7 +112,20 @@ jobs:
 
       - name: Build Windows x64 package
         shell: pwsh
-        run: cd companion; npm run tauri -- build --config $env:TAURI_CI_CONFIG --target x86_64-pc-windows-msvc --bundles nsis -v
+        run: |
+          cd companion
+          npm run tauri -- build --config $env:TAURI_CI_CONFIG --target x86_64-pc-windows-msvc --features recovery-verification --bundles nsis -v
+          if ($LASTEXITCODE -ne 0) { throw 'Verification package build failed.' }
+
+      - name: Run packaged-process recovery smoke test
+        timeout-minutes: 5
+        shell: pwsh
+        run: |
+          python companion/scripts/recovery-smoke.py `
+            --executable companion/src-tauri/target/x86_64-pc-windows-msvc/release/sambee-companion.exe `
+            --report-dir companion/recovery-report `
+            --source-sha '${{ github.sha }}' --run-id '${{ github.run_id }}'
+          if ($LASTEXITCODE -ne 0) { throw 'Packaged recovery smoke test failed. Inspect recovery-report.' }
 
       - name: Assert updater artifacts are absent
         shell: pwsh
@@ -113,9 +136,13 @@ jobs:
           }
 
       - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        if: ${{ always() }}
         with:
-          name: companion-verification-windows-x64-${{ github.run_id }}
-          path: companion/src-tauri/target/x86_64-pc-windows-msvc/release/bundle/
+          name: companion-verification-windows-x64-${{ github.sha }}-${{ github.run_id }}
+          path: |
+            companion/src-tauri/target/x86_64-pc-windows-msvc/release/bundle/
+            companion/src-tauri/target/x86_64-pc-windows-msvc/release/sambee-companion.exe
+            companion/recovery-report/
           if-no-files-found: error
           retention-days: 7
 

Dockerfile

@@ -103,6 +103,7 @@ COPY frontend/package*.json ./
 COPY frontend/scripts ./scripts
 RUN npm ci
 COPY frontend/ ./
+COPY shared/ /shared/
 COPY VERSION /VERSION
 COPY GIT_COMMIT /GIT_COMMIT
 RUN npm run build

VERSION

@@ -1 +1 @@
-2.0.26
+2.0.27

backend/app/api/_smb_helpers.py

@@ -8,6 +8,7 @@
 from app.core.security import decrypt_password
 from app.models.connection import Connection
 from app.storage.smb import SMBBackend
+from app.storage.smb_errors import SMBConnectionCapacityError, SMBConnectionRetired, SMBMutationUncertain
 
 BACKEND_DISCONNECT_TIMEOUT_SECONDS = 5.0
 ITEM_NOT_FOUND_CODE = "item_not_found"
@@ -20,6 +21,26 @@
 
 def file_target_http_error(error: Exception, *, requires_file: bool = True) -> HTTPException:
     """Map physical item failures without exposing storage or operating-system details."""
+    if isinstance(error, SMBMutationUncertain):
+        return HTTPException(
+            status_code=status.HTTP_409_CONFLICT,
+            detail={"code": "smb_mutation_uncertain", "message": str(error), "recoverable": False, "mutation_uncertain": True},
+        )
+    if isinstance(error, SMBConnectionRetired):
+        return HTTPException(
+            status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
+            detail={
+                "code": "smb_recovery_busy",
+                "message": (
+                    "SMB recovery capacity is occupied. Wait and retry. If workers remain blocked, restart the service."
+                    if isinstance(error, SMBConnectionCapacityError)
+                    else "SMB recovery is busy. Wait briefly, then retry the request."
+                ),
+                "recoverable": True,
+                "retry_after_ms": error.retry_after_seconds * 1000,
+            },
+            headers={"Retry-After": str(error.retry_after_seconds)},
+        )
     if isinstance(error, FileNotFoundError):
         status_code, code, message = (
             status.HTTP_404_NOT_FOUND,