3 Commits

Include renames

Author	SHA1	Message	Date
jochen	df821c8a4a	only-office: stop declaring the old lib directory, emptied on the operator's word (issue 1854) ... Issue 1843 kept the old /var/lib/only-office/lib declared only to close it to 0700 while it held data. Its contents are deleted now, so the declaration has no job left; mesh-host removes the empty directory once it is no longer declared.	2026-10-22 17:49:08 +02:00
jochen	29b4c02709	only-office: keep its working directories under a root-only box (issue 1843) ... The image opens everything below each mount to every account on every start, so with the module root and lib at 0711 any account on the machine could read the document cache. The mounts now sit under a root-owned 0700 box the container never sees; the root stays 0711 for the converter. The old lib keeps its id so mesh-host closes it to 0700 (a new id there would be used as found, issue 339).	2026-10-22 17:24:05 +02:00
mesh-tools	652b00b25b	Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422) ... Every directory and archive resource carries `unknown`: move-out for a home folder whose program writes nothing there (the node-engine, delivered in mesh-host #117, moves the rest to ~/.local/state/mesh-moved/<module>/ with a list), module for ~/.ssh and ~/.claude, program elsewhere; `knows` keeps what a program or the operator relies on (powerlevel10k's compiled files, i3's scripts and the asus/g14 drop-ins, dunst's slack rule, betterbird's records, node-env's forge credential, issue 1033). Two shared folders are no longer declared. Each module's README says it. checks/owned holds every manifest to it; checks/sshdir stays while main's merge check runs it (issue 1035). Tests that pin a manifest follow the new key only. Reviewed in three rounds.	2026-10-17 16:23:03 +00:00