krino.git/internal/apply/swap_test.go, branch v0.0.12rule-based file sorter in Go, shows the plan before touching anything, applies only the files you choose, and can undo any run, with s-expression rules and a GTK 4 windowhttps://git.labunix.xyz/krino.git/atom?h=v0.0.122026-09-17T12:02:24Za symlink in the sorted directory no longer redirects a step2026-09-17T12:02:24ZLukasz Kasprzaklukas@labunix.xyz2026-09-17T12:02:24Zurn:sha1:a65e8a0587d3e5c971bef3062dd0d8a3b5cb53b7
Placeholders were already stopped from sending a file out of the
directory a rule named. A symlink is a name too, and the directory
krino sorts is by the threat model's own premise a place the internet
writes into: a link named after a rule's destination sent moves and
copies anywhere, and under (on-conflict overwrite) trashed a file
OUTSIDE the sorted directory - while the plan showed the in-tree text
and the run reported success.
A step whose destination passes through a symlink at or below the
directory being sorted now fails. A destination the configuration names
outside it - ~/docs on another disk - is the user's own arrangement and
is followed as before; both cases have a test.
End to end, the review's scenario (Out -> ~/secret, overwrite):
before: 1 applied, the user's file replaced and trashed
after: 0 applied 1 failed, the file untouched, nothing trashed
Two bookkeeping bugs in MkdirAllTracked went with it: a dangling
symlink read as a missing directory and was then recorded as one krino
had created - undo would have unlinked a link krino never made - and a
directory created by someone else between the check and the mkdir was
recorded the same way.
a file trashed to make room is logged the moment it is trashed2026-09-17T11:53:01ZLukasz Kasprzaklukas@labunix.xyz2026-09-17T11:53:01Zurn:sha1:a80d470cbad7335fd5e534f32d935e5a49aadb24
The displace was carried out first and logged only when the whole step
finished - for a copy or a cross-device move, the entire data transfer
later. A process killed in that window left the user's file in the
Trash with nothing recording it: krino log said "nothing applied" and
undo offered nothing.
It is its own action with its own line (spec ยง9), so it is now written
the moment trash.Put returns, through a hook ChainLogged calls before
the step that needed the name begins. A displace that cannot be logged
fails the step rather than compounding an unrecorded destructive act
with a second one.
Verified by killing krino -9 mid-copy with 600 MB in flight:
before: krino log "nothing applied", 0 displace lines
after: krino log "1 displaced", 1 displace line
the module path is git.labunix.xyz/krino2026-09-17T10:54:06ZLukasz Kasprzaklukas@labunix.xyz2026-09-17T10:54:06Zurn:sha1:1884d56b0d399e9cdb80016a9c166b0120989933
So that go install can find it. cgit serves no go-import meta tag, so
nginx answers a ?go-get=1 request for /NAME with one pointing at
https://git.labunix.xyz/NAME.git; the alternative was carrying a .git
suffix through every import line forever.
One sed over the imports, both go.mod files, and the dependency gate's
whitelist. Nothing else depends on the path. go install works from the
next tag, the first release whose go.mod carries it.
plan 10: an interrupt stops between steps; nohup keeps ignoring hangups2026-09-14T20:29:06ZLukasz Kasprzaklukas@labunix.xyz2026-09-14T20:29:06Zurn:sha1:c03a72f1d7b598c1fe8fd01bb1f5bbfbd0256313plan 9: apply logs each step as it completes and stops a chain that landed elsewhere2026-09-14T19:26:12ZLukasz Kasprzaklukas@labunix.xyz2026-09-14T19:26:12Zurn:sha1:3bfafbc8664a2a1ba8efc3f64376ff63c3dc11b9plan 8: apply refuses a source swapped for a symlink or another file2026-09-14T18:12:35ZLukasz Kasprzaklukas@labunix.xyz2026-09-14T18:12:35Zurn:sha1:792e6e5416a51fb05f7171aa7ef4f9a284a8cf68