๐ ACFS v0.3.0 - TUI Wizard & Security Release
This release introduces a complete interactive TUI wizard for project creation, comprehensive test infrastructure, and includes a critical security fix.
๐ Security
Critical Fix: Command Injection Vulnerability
- Fixed command injection in
validate_directory()- The previous implementation usedeval echo "$dir"for tilde expansion, which could allow arbitrary command execution if a malicious path was entered - New safe implementation uses pattern matching for
~and~/pathexpansion withouteval - Commit:
6c6e899
โจ Features
Complete TUI Wizard for Project Creation
The newproj command now supports a full interactive TUI mode with 9 screens:
| Screen | Description |
|---|---|
| Welcome | Introduction with keyboard navigation hints |
| Project Name | Input with real-time validation |
| Directory | Path selection with tilde expansion |
| Tech Stack | Auto-detection + manual selection |
| Features | Toggle AGENTS.md, beads, Claude settings |
| AGENTS.md Preview | Live preview with syntax highlighting |
| Confirmation | Review all settings before creation |
| Progress | Real-time creation progress |
| Success | Summary with next steps |
Usage:
newproj --interactive # or -i
newproj myproject ./path # CLI mode (non-interactive)Smart AGENTS.md Generation
- Tech stack detection for Python, Node.js, Rust, Go, Ruby, PHP, Java
- Context-aware sections based on detected technologies
- Best practices tailored to each stack
Testing Infrastructure
- 284 unit tests using bats-core framework
- 53 E2E tests covering happy paths, navigation, and error recovery
- Expect-based TUI testing for full interactive workflow verification
- Test helpers:
verify_project_created,verify_feature_enabled, screen matchers
๐ Bug Fixes
TUI Wizard Fixes
- Fixed ASCII box alignment in welcome screen
- Fixed file tree rendering for nested paths
- Fixed tech stack display name in confirmation screen
- Added missing
.gitignoreto success screen - Fixed safe arithmetic increment to avoid
set -eissues - Handle unconfigured git user gracefully
Test Suite Fixes
- Fixed strict mode violations
- Resolved flaky navigation test timing
- Fixed test helper quoting issues
Other Fixes
- Corrected SSH keepalive check in doctor
- Fixed Claude auth and PostgreSQL role checks
- Corrected
bdinstall message in newproj
๐ Documentation
- TUI Wizard Design Document with ASCII mockups
- Research findings for terminal UI best practices
- Comprehensive test README with usage examples
๐ฆ Installation
Fresh Install (Recommended)
curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/main/install.sh?$(date +%s)" | bash -s -- --yes --mode vibePin to v0.3.0
ACFS_REF=v0.3.0 curl -fsSL "https://raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/v0.3.0/install.sh" | bash -s -- --yes --mode vibeUpdate Existing Installation
acfs update --all๐ Commits Since v0.2.0
| Type | Count |
|---|---|
| Security | 1 |
| Features | 11 |
| Bug Fixes | 13 |
| Documentation | 2 |
| Chores | 1 |
| Total | 28 |
๐งช Test Coverage
Unit Tests: 284 passing
E2E Tests: 53 passing (16 with expect, 37 CLI-only)
Full Changelog: v0.2.0...v0.3.0