net/http's mux answers a literal ../ in the path with a redirect whose
exact code differs between Go 1.25 (301) and 1.26 (307), so pinning the
code failed CI while passing locally. Assert what the test is actually
about: the request is redirected rather than handled, and no kids-tree
entry is created.
Single Go binary serving the API and an embedded keyboard-first UI for
promoting fafflix titles into the cheeztv kids tree via hardlinks.
- internal/library: hardlink sync, idempotent re-runs, drift reporting,
strict single-path-element name validation as the traversal guard
- internal/arr: minimal sonarr/radarr v3 client with a 60s list cache and
a key-brokered poster proxy
- internal/auth: server-side Authentik group enforcement on every route
- internal/server: library JSON API, art proxy, health probes, SPA
- ui: two-tile landing page, fuzzy-filtered title list, detail panel
- Makefile, Dockerfile, .woodpecker pipelines, pre-commit config
unkin-agent
gitadmin