fetch: destination directory, skip files already present, save the manifest, require a signer (closes #101) #150

Merged

clawbot merged 1 commits from issue-101-fetch-destination into next

2026-10-04 18:31:52 +02:00

Author	SHA1	Message	Date
sneak	df985e44dc	fetch: destination directory, skip files already present, save the manifest, require a signer (closes #101 ) check / check (push) Failing after 3s Details fetch takes --dest (default .) and writes every file there through the existing symlink and hard-link guards, which now work relative to that directory. A file already there with the listed size and hash is skipped; a leftover temp file is still replaced. Once every file verifies, the manifest is saved as index.mf through the same temp file and rename, so check runs on the result; a manifest that lists index.mf or its temp name at the top of the tree is refused, since saving would replace that file. --require-signature is shared with check and enforced through verifyRequiredSigner. Both refusals come before any file is downloaded or anything is written. Model: opus-5-5	2026-10-04 16:05:22 +00:00

Author

SHA1

Message

Date

sneak

df985e44dc

fetch: destination directory, skip files already present, save the manifest, require a signer (closes #101 )

check / check (push) Failing after 3s

Details

fetch takes --dest (default .) and writes every file there through the
existing symlink and hard-link guards, which now work relative to that
directory. A file already there with the listed size and hash is
skipped; a leftover temp file is still replaced. Once every file
verifies, the manifest is saved as index.mf through the same temp file
and rename, so check runs on the result; a manifest that lists index.mf
or its temp name at the top of the tree is refused, since saving would
replace that file. --require-signature is shared with check and
enforced through verifyRequiredSigner. Both refusals come before any
file is downloaded or anything is written.

Model: opus-5-5

2026-10-04 16:05:22 +00:00