l0ng-ai 58974e889d test(shell-quote): cover cmd, and write down the one thing it cannot do ...

`quote_for_shell` decides how a path is typed into the user's own shell,
so a name that argues with the quoting is a path that names the wrong
file. Posix and PowerShell had tests; cmd had none for quoting at all —
only `unquote_word` and `quoting_for` — so what it does with an awkward
name was written down nowhere.

The `"` case is genuinely closed and the doc already said why: a Windows
path cannot hold one. `%` is the open one. It is legal in a Windows
filename and cmd expands `%NAME%` inside double quotes, before it parses
them, so a file actually called `%USERPROFILE%.txt` pastes as a line
naming somewhere else. There is no escape for it on an interactive line —
`%%` is a batch-file rule and `^` is not read inside quotes — so this is
pinned and documented rather than fixed, and the doc now says what it
costs: the wrong path, never a command, because `%` substitutes an
environment variable and can do nothing else.

The rest is the coverage cmd was missing, plus a check that `is_bare`
never lets a metacharacter through unquoted — which is the actual
boundary, since anything bare is typed with no quoting whatsoever.

2026-08-23 18:51:19 +08:00

..

bin

docs(privacy): update.log is a file tty7 writes, so list it

2026-08-23 02:27:09 +08:00

core

test(shell-quote): cover cmd, and write down the one thing it cannot do

2026-08-23 18:51:19 +08:00

terminal

fix(clipboard): stage a pasted image only in a directory we own

2026-08-23 17:41:33 +08:00

ui

test(i18n): hold the awaiting-a-caller list to its own instruction

2026-08-23 18:45:28 +08:00

daemon.rs

chore: strip every comment from the Rust sources (#268)

2026-07-30 21:36:15 +08:00

main.rs

fix(config): close the config directory to other users

2026-08-23 17:31:37 +08:00

testutil.rs

test: finish the fixture cleanup, down to the ones a scope cannot own

2026-08-16 01:38:24 +08:00