clusev

Author	SHA1	Message	Date
boban	a3cc563883	feat(install): resolve prod image from release-images.lock (pull vs build)	2026-07-03 21:01:26 +02:00
boban	54518c1f30	feat(release): string leak-guard in promote.sh + shell test	2026-07-03 19:49:31 +02:00
boban	5967b7b7e5	fix: shell-escape the install dir when generating the clusev CLI (R15 Codex) A checkout path containing shell syntax ($(), quotes) could otherwise inject code into /usr/local/bin/clusev, which runs as root via 'sudo clusev update'. Render the path through printf %q into an unquoted assignment; add a test that a hostile path does not execute injected code.	2026-06-20 13:50:19 +02:00
boban	580c72a59d	feat: clusev host CLI wrapper for short stack commands	2026-06-19 22:56:54 +02:00