signal-bot/scripts
Krzysztof kuhy Rudnicki 21ccf8d8eb
Some checks are pending
CI / check (push) Waiting to run
fix: find exiftool the way the service does, and self-test with a photo
Two things the first live run found, neither of which any test could have.

**exiftool was invisible to the unit.** Arch's perl-image-exiftool installs to
/usr/bin/vendor_perl/exiftool. That is on an interactive shell's PATH, because
perl's profile.d puts it there, and it is *not* on a systemd user unit's, whose
default is "/usr/local/bin:/usr/bin". So shutil.which found it in every test
and in every shell, and the first real !add_photo under the unit answered
"exiftool is not installed; refusing to store .jpg" -- with exiftool plainly
installed. media_strip.locate() now tries PATH and then the known install
locations, and install_service.sh verifies the result through the bot's own
resolver under the unit's PATH rather than through `command -v`, which answers
for the wrong shell. Fixing the lookup rather than setting PATH in the unit:
the latter is a note somebody has to remember on the next machine.

The absent-exiftool test had to blind *both* lookups to keep covering its
branch -- on a machine that has the package the fallback finds it, which is
precisely how the gap survived.

**The self-test could not carry a photo.** Signal never delivers an account
its own sends: measured against the live container, a single-device account
gets no sync copy either, and a sent attachment is not added to the container's
attachment store (only inbound ones are). So !add_photo could not be exercised
the way every other command is. selftest.build_frame and POST /_selftest now
take attachment ids that the container's store already holds, so the handler
fetches them back over the real GET /v1/attachments/{id} -- the ingest path
under test is the live one, not a hand-fed buffer. Still fail-closed on
SELFTEST_GROUPS.

Verified live, against real Signal and the real container, in the testbot
group, on a throwaway album scoped to that group so the private one was
neither read nor written:

  - a geotagged JPEG (GPS + Make) went in as "!dodaj alfa wakacjelive"
  - the stored file reports zero non-structural tags, and neither the GPS
    marker nor the Make string survives in its bytes
  - GET /v1/attachments/<id> now 404s and the file is gone from disk, so the
    second copy really is deleted
  - the typed label appears zero times in the journal
  - !losowe wakacjelive, !alfa and an unknown label all answered without error

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JqqE22jp94B1ypwxppdr1o
2026-08-31 11:40:07 +02:00
..
check_coverage.sh feat: rewrite the bot so it runs, and gate it like the other repos 2026-08-29 13:05:42 +02:00
check_dependency_freshness.sh feat: rewrite the bot so it runs, and gate it like the other repos 2026-08-29 13:05:42 +02:00
check_file_length.sh feat: rewrite the bot so it runs, and gate it like the other repos 2026-08-29 13:05:42 +02:00
check_md_naming.sh feat: rewrite the bot so it runs, and gate it like the other repos 2026-08-29 13:05:42 +02:00
check_no_binaries.sh feat: block binaries from a public repo, and write down the real attachment frame 2026-08-30 19:32:41 +02:00
check_personal_data.py feat: refuse to commit personal data, learned from outside the repository 2026-08-30 23:28:29 +02:00
check_personal_data.sh feat: refuse to commit personal data, learned from outside the repository 2026-08-30 23:28:29 +02:00
cold_start.sh fix: a signal-api that is not up yet no longer kills the bot at boot 2026-08-30 15:23:42 +02:00
e2e.sh feat: add a photo to the album from the chat, tagged, stripped and verified 2026-08-31 11:20:00 +02:00
install_service.sh fix: find exiftool the way the service does, and self-test with a photo 2026-08-31 11:40:07 +02:00
lib_signal.sh feat: discover groups from the account, so adding the bot is the whole setup 2026-08-29 15:30:08 +02:00
live_smoke.sh feat: discover groups from the account, so adding the bot is the whole setup 2026-08-29 15:30:08 +02:00
personal_data_sources.py feat: add a photo to the album from the chat, tagged, stripped and verified 2026-08-31 11:20:00 +02:00
prime_profile.sh fix: make prime_profile.sh fail loudly instead of exiting 0 or dying silently 2026-08-29 15:09:21 +02:00
register_bot.sh feat: discover groups from the account, so adding the bot is the whole setup 2026-08-29 15:30:08 +02:00
selftest.sh release: 0.0.7 «Telesfor» — !papież, and the bot can test itself 2026-08-30 17:06:25 +02:00
signal_api_watchdog.sh feat: refuse to look healthy while deaf, and heal the container by itself 2026-08-29 19:01:55 +02:00
signal-api-watchdog.service feat: refuse to look healthy while deaf, and heal the container by itself 2026-08-29 19:01:55 +02:00
signal-api-watchdog.timer feat: refuse to look healthy while deaf, and heal the container by itself 2026-08-29 19:01:55 +02:00
signal-bot.service feat: add a photo to the album from the chat, tagged, stripped and verified 2026-08-31 11:20:00 +02:00
test_watchdog.sh feat: refuse to look healthy while deaf, and heal the container by itself 2026-08-29 19:01:55 +02:00