0 Fork 0

mirror of https://github.com/narrrl/proton-drive-linux.git synced 2026-11-03 16:41:26 +01:00

Files

T

nvrl af869944cf docs: restructure and update documentation for 2.5.0

Split the README into a short front page and task-oriented pages under
docs/: installation, user guide, CLI reference, configuration and
troubleshooting, with an index in docs/README.md. Rewrite RECOVERY.md
around Continue This Backup Here and Restore Folders, and DEVELOPMENT.md
around running, debugging and releasing from source.

Bring ARCHITECTURE.md up to date with the read path, push events, the
thread map, conflict copies and the machine profile, and move the feature
design notes there. Collect planned work in ROADMAP.md. Link the threat
model from SECURITY.md and the translation rules from CONTRIBUTING.md.

Add scripts/publish-wiki.sh, which mirrors the user pages to the GitHub
wiki with rewritten links and only pushes with --push.

2026-09-28 20:04:22 +02:00

4.6 KiB

Raw Permalink Blame History

Roadmap

Planned work and open verification, as of 2.5.0. Individual defects and their status live in BUGS.md, which is the authoritative ledger; this page groups what is left by theme. Nothing here is a promise of a date.

Data safety and recovery
Features
Performance and correctness
Verification still owed
Release assurance

Data safety and recovery

Item	State	Notes
Protect queued changes at shutdown	Not started	A systemd inhibitor lock while `staging/` holds unsent data, a warning when signing out, and a blocking `pdfs sync flush`. Today the queue is visible through `pdfs sync queue`, the tray and Sync → Overview, but nothing stops a shutdown (B66)
Restore pins from the machine profile	Not started	`profile.json` records pins; `sync restore` does not apply them yet
Profile backup health	Not started	A failed profile upload is a `WARN` in the log and nothing in the UI (B68)
Rotated credentials survive a keyring failure	Open	Surface and retry keyring write failures so a rotated single-use refresh token is not lost (B61)
Encrypt local state at rest	Not started	SQLCipher for `cache.db` and an AEAD for the content cache, keyed from the keyring. `sdk_cache.db` is already encrypted. See ARCHITECTURE.md §8

Features

Item	State	Notes
File-manager integration	Not started	Context-menu actions (available offline, share link, versions) and sync badges for Nautilus, Dolphin and Thunar
Terminal UI	Not started	`pdfs tui` with transfers, sync state and logs
Multiple accounts	Not started	Separate config, state and mountpoint per profile, one daemon each
Mount options	Not started	Read-only mount, `allow_other`
Symbolic links	Not started	Proton Drive has no link type; links would need a placeholder format. Until then, creating one fails with `EOPNOTSUPP`
Add someone else's photo to your album	Blocked	Needs `copyPhoto` in the SDK
Photo name search	Not started	Photos search by date and filters only
Automatic photo upload from a folder	Not started
Faster Google Photos import	Not started	Uploads run one at a time. Trash folders of locales missing from `TRASH_FOLDERS` import as photos; motion-photo `.MP` parts are skipped
Content-addressed block cache	Idea	Store blocks by hash to deduplicate identical content

Performance and correctness

Item	Notes
Saturating stream-ring accounting	`self.bytes -= …` in `crates/pdfs-fuse/src/reads.rs` should saturate so an accounting drift cannot wrap in release builds
Block geometry learned one read late	The first read of a file plans on 4 MiB blocks; accepted as a bounded cost (B87)
Path-based commands under secondary mounts	`pin`, `rename`, `move`, `rm` and sharing cannot name a path inside an on-demand synced folder yet (B88)
Unicode normalization	NFC and NFD names are distinct, deliberately (B36)
Pipelined node enumeration	Faster cold listings of large folders

Verification still owed

Fixes marked unverified in BUGS.md have unit or offline coverage but have not been driven against a live account. The larger outstanding runs:

Disaster-recovery drill. Register a device, sync a folder, delete all local state, restore with pdfs sync restore and compare the tree byte for byte. See RECOVERY.md.
Second-account sharing. Shared trees on a foreign volume, accepting invitations, changing roles, the viewer cases of regression B34, and an editor writing into someone else's share.
Fault injection. Network loss mid-upload, a full disk during staging, and crash points across the write publication path (after each fsync, rename and queue commit).
CAPTCHA sign-in against a real verification request (B8).
Managed live mode matrix before each release: scripts/fuse-acceptance.sh --managed-live <empty-a> <empty-b>. See TESTING.md.
The overnight hang (B91) is not diagnosed yet. The supervisor and pdfs diagnostics exist to catch the next occurrence.

Release assurance

Item	State
Tag, workspace and PKGBUILD version agreement	Enforced by the release workflow
Clean-install test of the `.deb` and `.rpm` in a VM	Pending (B62)
Protocol version identity between front ends and daemon	Open (B63)
SBOM, provenance and checksums for release artifacts	Open (B65). The RPM is GPG-signed

4.6 KiB Raw Permalink Blame History