mirror of
https://github.com/narrrl/proton-drive-linux.git
synced 2026-11-03 16:41:26 +01:00
nvrl
af869944cf
Split the README into a short front page and task-oriented pages under docs/: installation, user guide, CLI reference, configuration and troubleshooting, with an index in docs/README.md. Rewrite RECOVERY.md around Continue This Backup Here and Restore Folders, and DEVELOPMENT.md around running, debugging and releasing from source. Bring ARCHITECTURE.md up to date with the read path, push events, the thread map, conflict copies and the machine profile, and move the feature design notes there. Collect planned work in ROADMAP.md. Link the threat model from SECURITY.md and the translation rules from CONTRIBUTING.md. Add scripts/publish-wiki.sh, which mirrors the user pages to the GitHub wiki with rewritten links and only pushes with --push.
4.6 KiB
4.6 KiB
Roadmap
Planned work and open verification, as of 2.5.0. Individual defects and their status live in BUGS.md, which is the authoritative ledger; this page groups what is left by theme. Nothing here is a promise of a date.
- Data safety and recovery
- Features
- Performance and correctness
- Verification still owed
- Release assurance
Data safety and recovery
| Item | State | Notes |
|---|---|---|
| Protect queued changes at shutdown | Not started | A systemd inhibitor lock while staging/ holds unsent data, a warning when signing out, and a blocking pdfs sync flush. Today the queue is visible through pdfs sync queue, the tray and Sync → Overview, but nothing stops a shutdown (B66) |
| Restore pins from the machine profile | Not started | profile.json records pins; sync restore does not apply them yet |
| Profile backup health | Not started | A failed profile upload is a WARN in the log and nothing in the UI (B68) |
| Rotated credentials survive a keyring failure | Open | Surface and retry keyring write failures so a rotated single-use refresh token is not lost (B61) |
| Encrypt local state at rest | Not started | SQLCipher for cache.db and an AEAD for the content cache, keyed from the keyring. sdk_cache.db is already encrypted. See ARCHITECTURE.md §8 |
Features
| Item | State | Notes |
|---|---|---|
| File-manager integration | Not started | Context-menu actions (available offline, share link, versions) and sync badges for Nautilus, Dolphin and Thunar |
| Terminal UI | Not started | pdfs tui with transfers, sync state and logs |
| Multiple accounts | Not started | Separate config, state and mountpoint per profile, one daemon each |
| Mount options | Not started | Read-only mount, allow_other |
| Symbolic links | Not started | Proton Drive has no link type; links would need a placeholder format. Until then, creating one fails with EOPNOTSUPP |
| Add someone else's photo to your album | Blocked | Needs copyPhoto in the SDK |
| Photo name search | Not started | Photos search by date and filters only |
| Automatic photo upload from a folder | Not started | |
| Faster Google Photos import | Not started | Uploads run one at a time. Trash folders of locales missing from TRASH_FOLDERS import as photos; motion-photo .MP parts are skipped |
| Content-addressed block cache | Idea | Store blocks by hash to deduplicate identical content |
Performance and correctness
| Item | Notes |
|---|---|
| Saturating stream-ring accounting | self.bytes -= … in crates/pdfs-fuse/src/reads.rs should saturate so an accounting drift cannot wrap in release builds |
| Block geometry learned one read late | The first read of a file plans on 4 MiB blocks; accepted as a bounded cost (B87) |
| Path-based commands under secondary mounts | pin, rename, move, rm and sharing cannot name a path inside an on-demand synced folder yet (B88) |
| Unicode normalization | NFC and NFD names are distinct, deliberately (B36) |
| Pipelined node enumeration | Faster cold listings of large folders |
Verification still owed
Fixes marked unverified in BUGS.md have unit or offline coverage but have not been driven against a live account. The larger outstanding runs:
- Disaster-recovery drill. Register a device, sync a folder, delete all local state, restore
with
pdfs sync restoreand compare the tree byte for byte. See RECOVERY.md. - Second-account sharing. Shared trees on a foreign volume, accepting invitations, changing
roles, the viewer cases of
regression B34, and an editor writing into someone else's share. - Fault injection. Network loss mid-upload, a full disk during staging, and crash points across the write publication path (after each fsync, rename and queue commit).
- CAPTCHA sign-in against a real verification request (B8).
- Managed live mode matrix before each release:
scripts/fuse-acceptance.sh --managed-live <empty-a> <empty-b>. See TESTING.md. - The overnight hang (B91) is not diagnosed yet. The supervisor and
pdfs diagnosticsexist to catch the next occurrence.
Release assurance
| Item | State |
|---|---|
| Tag, workspace and PKGBUILD version agreement | Enforced by the release workflow |
Clean-install test of the .deb and .rpm in a VM |
Pending (B62) |
| Protocol version identity between front ends and daemon | Open (B63) |
| SBOM, provenance and checksums for release artifacts | Open (B65). The RPM is GPG-signed |