clawbot c07db21b45 Bind the local index only after a backup writes the marker (closes #420) ...

A first backup that failed before writing anything, on a missing bucket, a refused credential or missing recipients, still bound the local index to the configured destination, so correcting a mistyped storage_url was refused afterwards. A backup now records the binding only after it has written the marker file at the destination. prune, snapshot purge, snapshot remove and remote nuke only refuse a different binding and leave an unbound index unbound.

Model: opus-5-5

2026-11-11 04:49:11 +01:00

..

blob_fetch_bound_test.go

Bound download expansion and escape control chars on the terminal (closes #164)

2026-09-22 17:00:35 +02:00

blob_fetch_hash_test.go

Bound download expansion and escape control chars on the terminal (closes #164)

2026-09-22 17:00:35 +02:00

blob_fetch.go

Name each prefix once in restore, verify and purge errors (closes #327)

2026-10-14 04:04:14 +02:00

blobcache_test.go

Finish the lint remediation: script/cibuild exits 0 (closes #61)

2026-08-09 04:25:11 +02:00

blobcache.go

Free a cached blob once no file still to restore needs it (closes #324)

2026-10-14 01:47:48 +02:00

blobhash.go

Validate blob hashes, offsets and lengths from the destination (closes #155)

2026-09-22 16:11:28 +02:00

changed_file_restore_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

deep_verify_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

destination_marker_test.go

Go on with a backup when the destination marker cannot be checked (closes #389)

2026-10-15 02:02:35 +02:00

destination_marker.go

Bind the local index only after a backup writes the marker (closes #420)

2026-11-11 04:49:11 +01:00

destination_validation_test.go

Report blobs shallow verify could not check apart from missing ones (closes #318)

2026-10-13 18:50:48 +02:00

fault_injection_test.go

Do not prune when a backup misses an earlier mount point (closes #395)

2026-10-15 08:32:28 +02:00

helpers_test.go

Reject a retention duration longer than about 292 years (closes #289)

2026-10-13 01:51:24 +02:00

helpers.go

Print snapshot list and purge sizes like every other command (closes #312)

2026-10-13 16:22:03 +02:00

info_quiet_test.go

Route direct-stdout command output through internal/ui (closes #149)

2026-09-22 20:28:50 +02:00

info.go

Print remote info and verify status lines through internal/ui (closes #410)

2026-11-10 22:12:46 +01:00

integration_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

missing_destination_test.go

Shorten internal/vaultik tests under the race detector (closes #416)

2026-11-11 03:25:41 +01:00

new_chunk_size_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

nuke_remote_test.go

Delete metadata directories a backup left without a manifest (closes #390)

2026-10-15 03:49:19 +02:00

prune_cleanup_test.go

Gate prune's local-cleanup output on --json, and make make build build (closes #108)

2026-08-09 19:53:46 +02:00

prune_count_test.go

Label the index cleanup totals as totals (closes #306)

2026-10-14 02:03:51 +02:00

prune_delete_failure_test.go

Make prune and remote nuke fail when a delete fails (closes #290)

2026-10-13 19:29:52 +02:00

prune_grace_period_test.go

Delete metadata directories a backup left without a manifest (closes #390)

2026-10-15 03:49:19 +02:00

prune_json_test.go

Document that --json skips the confirmation prompt (closes #268)

2026-10-08 04:59:30 +02:00

prune_manifest_safety_test.go

Fail closed on unreadable manifests instead of losing blobs (closes #157)

2026-09-22 11:45:30 +02:00

prune_metadata_dir_test.go

Exit 1 when a deletion prompt is not confirmed (closes #423)

2026-11-11 04:09:45 +01:00

prune.go

Bind the local index only after a backup writes the marker (closes #420)

2026-11-11 04:49:11 +01:00

purge_local_remote_consistency_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

purge_per_name_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

remote_info_test.go

Print remote info and verify status lines through internal/ui (closes #410)

2026-11-10 22:12:46 +01:00

remove_quiet_test.go

Exit 1 when a deletion prompt is not confirmed (closes #423)

2026-11-11 04:09:45 +01:00

remove_snapshot_test.go

Exit 1 when a deletion prompt is not confirmed (closes #423)

2026-11-11 04:09:45 +01:00

restore_another_machine_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_containment_test.go

Keep restore writes inside the target directory (closes #154)

2026-09-22 11:01:01 +02:00

restore_identity_test.go

Parse the age identity key once and accept every identity in it (closes #165)

2026-09-22 15:45:27 +02:00

restore_interrupt_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_locality_test.go

Shorten internal/vaultik tests under the race detector (closes #416)

2026-11-11 03:25:41 +01:00

restore_malformed_db_test.go

Restore the other files when a chunk is in no blob under --skip-errors (closes #326)

2026-10-13 16:53:05 +02:00

restore_malformed_key_test.go

Parse the age identity key once and accept every identity in it (closes #165)

2026-09-22 15:45:27 +02:00

restore_metadata_test.go

Apply restored owners, modes and times in an order that keeps them (closes #219)

2026-10-06 18:29:09 +02:00

restore_ownership_warning_test.go

Warn about restored ownership only when an entry's owner or group differs (closes #316)

2026-10-14 05:39:27 +02:00

restore_perms_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_plan_test.go

Free a cached blob once no file still to restore needs it (closes #324)

2026-10-14 01:47:48 +02:00

restore_plan.go

Free a cached blob once no file still to restore needs it (closes #324)

2026-10-14 01:47:48 +02:00

restore_skip_errors_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_snapshot_identity_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_snapshotdb_test.go

Reject a metadata database truncated to the age header and nonce (closes #152)

2026-09-22 18:11:57 +02:00

restore_sweeper_integration_test.go

Shorten internal/vaultik tests under the race detector (closes #416)

2026-11-11 03:25:41 +01:00

restore_sweeper_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_sweeper.go

Free a cached blob once no file still to restore needs it (closes #324)

2026-10-14 01:47:48 +02:00

restore_truncated_db_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore_unmatched_path_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

restore.go

restore and verify report an unknown snapshot ID as not found (closes #426)

2026-11-11 04:40:18 +01:00

reused_blob_verify_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

same_second_rewrite_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

shallow_verify_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

snapshot_deleted_count_test.go

Exit non-zero when snapshot create --skip-errors skips anything it cannot read (closes #310)

2026-10-14 07:13:48 +02:00

snapshot_failed_file_test.go

Exit non-zero when snapshot create --skip-errors skips anything it cannot read (closes #310)

2026-10-14 07:13:48 +02:00

snapshot_identifier.go

restore and verify report an unknown snapshot ID as not found (closes #426)

2026-11-11 04:40:18 +01:00

snapshot_list_quiet_test.go

Route direct-stdout command output through internal/ui (closes #149)

2026-09-22 20:28:50 +02:00

snapshot_list_test.go

Exit 1 when a deletion prompt is not confirmed (closes #423)

2026-11-11 04:09:45 +01:00

snapshot_list.go

Make snapshot list report a changed destination instead of advising prune (closes #317)

2026-10-14 04:29:36 +02:00

snapshot_prune_test.go

Do not prune when a backup misses an earlier mount point (closes #395)

2026-10-15 08:32:28 +02:00

snapshot_skip_errors_test.go

Do not prune after a backup that skipped unreadable files (closes #382)

2026-10-14 07:44:50 +02:00

snapshot_summary_test.go

Stop counting directories and unchanged symlinks as files to back up (closes #305)

2026-10-14 06:46:45 +02:00

snapshot.go

Bind the local index only after a backup writes the marker (closes #420)

2026-11-11 04:49:11 +01:00

storage_bind_test.go

Bind the local index only after a backup writes the marker (closes #420)

2026-11-11 04:49:11 +01:00

storage_bind.go

Bind the local index only after a backup writes the marker (closes #420)

2026-11-11 04:49:11 +01:00

symlinked_destination_test.go

List a file:// destination through a symlinked directory (closes #296)

2026-10-13 21:36:23 +02:00

two_path_snapshot_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

uncompressed_size_test.go

Refuse a backup destination an unplugged volume left empty (closes #239)

2026-10-14 05:46:42 +02:00

unknown_snapshot_test.go

restore and verify report an unknown snapshot ID as not found (closes #426)

2026-11-11 04:40:18 +01:00

vaultik.go

Exit 1 when a deletion prompt is not confirmed (closes #423)

2026-11-11 04:09:45 +01:00

verify_manifest_test.go

Fail closed on unreadable manifests instead of losing blobs (closes #157)

2026-09-22 11:45:30 +02:00

verify_quiet_test.go

Print remote info and verify status lines through internal/ui (closes #410)

2026-11-10 22:12:46 +01:00

verify.go

restore and verify report an unknown snapshot ID as not found (closes #426)

2026-11-11 04:40:18 +01:00