v1.4.0

feat: add shell completions and unit tests

- Add completions command for bash, zsh, fish and powershell
- Dynamic snippet name TAB completion via list-names
- Unit tests for var, storage, encryption and parse_key_val

Author: opmr0

CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to sinbo will be documented here.
 
 ---
 
+## 1.4.0 - 2026-04-12
+
+### Added
+- Shell completions for bash, zsh, fish, and powershell (`sinbo completions <shell>`)
+- Dynamic snippet name completion on TAB for `get`, `remove`, `edit`, `encrypt`, `decrypt`, `export`
+- Hidden `list-names` command for shell completion scripts
+- Unit tests for `var.rs`, `storage.rs`, `encryption.rs`, and `main.rs`
+
 ## 1.3.0 - 2026-04-12
 
 ### Added

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "sinbo"
-version = "1.3.0"
+version = "1.4.0"
 edition = "2024"
 description = "A CLI snippet manager. Store code once, retrieve it anywhere."
 license = "MIT"
@@ -24,4 +24,7 @@ rand = "0.8"
 rpassword = "7"
 zeroize = "1.8.2"
 clearscreen = "4.0.6"
-dialoguer = "0.12.0"
+dialoguer = "0.12.0"
+
+[dev-dependencies]
+tempfile = "3"

Cargo.toml

@@ -0,0 +1,27 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, **do not open a public issue**.
+
+Email: your@email.com
+
+Include a description, steps to reproduce, and potential impact. I'll respond as soon as possible.
+
+## Supported Versions
+
+Only the latest version of sinbo receives security fixes.
+
+## Install Script
+
+The install script at `install.sh` and `install.ps1` should always be reviewed before piping to a shell. You can inspect them directly:
+
+```bash
+curl -sSf https://raw.githubusercontent.com/opmr0/sinbo/main/install.sh | less
+```
+
+## Scope
+
+- Vulnerabilities in sinbo's encryption implementation
+- Supply chain or install script tampering
+- Sensitive data exposure via metadata or plaintext leaks

SECURITY.md

@@ -270,6 +270,30 @@ sinbo get docker-run --args port=8080 | sh   # substitute then run
 
 ---
 
+## Shell Completions
+
+**bash**
+```bash
+echo 'eval "$(sinbo completions bash)"' >> ~/.bashrc && source ~/.bashrc
+```
+
+**zsh**
+```bash
+echo 'eval "$(sinbo completions zsh)"' >> ~/.zshrc && source ~/.zshrc
+```
+
+**fish**
+```bash
+sinbo completions fish > ~/.config/fish/completions/sinbo.fish
+```
+
+**powershell**
+```powershell
+Add-Content $PROFILE "`nsinbo completions powershell | Invoke-Expression"
+```
+
+---
+
 ## How It Works
 
 Snippets are stored as plain files in your system config directory:

readme.md

@@ -0,0 +1,25 @@
+_sinbo() {
+    local cur prev
+    cur="${COMP_WORDS[COMP_CWORD]}"
+    prev="${COMP_WORDS[COMP_CWORD-1]}"
+
+    local subcommands="get g add a list l remove r edit e search s encrypt decrypt export import completions"
+
+    if [[ $COMP_CWORD -eq 1 ]]; then
+        COMPREPLY=($(compgen -W "$subcommands" -- "$cur"))
+        return
+    fi
+
+    if [[ $COMP_CWORD -eq 2 ]]; then
+        case "$prev" in
+            get|g|remove|r|edit|e|encrypt|decrypt|export)
+                local snippets=$(sinbo list-names 2>/dev/null)
+                COMPREPLY=($(compgen -W "$snippets" -- "$cur"))
+                return ;;
+        esac
+    fi
+
+    COMPREPLY=()
+}
+
+complete -F _sinbo sinbo

src/completions/sinbo.bash

@@ -0,0 +1,11 @@
+function __sinbo_snippets
+    sinbo list-names 2>/dev/null
+end
+
+set -l subcommands get g add a list l remove r edit e search s encrypt decrypt export import completions
+
+complete -c sinbo -f -n "not __fish_seen_subcommand_from $subcommands" -a "$subcommands"
+
+for cmd in get g remove r edit e encrypt decrypt export
+    complete -c sinbo -f -n "__fish_seen_subcommand_from $cmd" -a "(__sinbo_snippets)"
+end

src/completions/sinbo.fish

@@ -0,0 +1,20 @@
+Register-ArgumentCompleter -Native -CommandName sinbo -ScriptBlock {
+    param($wordToComplete, $commandAst, $cursorPosition)
+
+    $words = $commandAst.CommandElements
+    $count = $words.Count
+
+    $subcommands = @('get','g','add','a','list','l','remove','r','edit','e','search','s','encrypt','decrypt','export','import','completions')
+
+    $snippetCommands = @('get','g','remove','r','edit','e','encrypt','decrypt','export')
+
+    if ($count -eq 1 -or ($count -eq 2 -and $wordToComplete -ne '')) {
+        $subcommands | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object {
+            [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_)
+        }
+    } elseif ($count -ge 2 -and $snippetCommands -contains $words[1].Value) {
+        sinbo list-names 2>$null | Where-Object { $_ -like "$wordToComplete*" } | ForEach-Object {
+            [System.Management.Automation.CompletionResult]::new($_, $_, 'ParameterValue', $_)
+        }
+    }
+}

src/completions/sinbo.ps1

@@ -0,0 +1,41 @@
+#compdef sinbo
+
+_sinbo() {
+    local state
+
+    _arguments \
+        '1: :->subcommand' \
+        '*: :->args'
+
+    case $state in
+        subcommand)
+            local subcommands=(
+                'get:Print or copy a snippet'
+                'g:Print or copy a snippet'
+                'add:Add a new snippet'
+                'a:Add a new snippet'
+                'list:List all snippets'
+                'l:List all snippets'
+                'remove:Remove a snippet'
+                'r:Remove a snippet'
+                'edit:Edit an existing snippet'
+                'e:Edit an existing snippet'
+                'search:Search snippets'
+                's:Search snippets'
+                'encrypt:Encrypt a snippet'
+                'decrypt:Decrypt a snippet'
+                'export:Export a snippet'
+                'import:Import a snippet'
+                'completions:Generate shell completions'
+            )
+            _describe 'subcommand' subcommands ;;
+        args)
+            case $words[2] in
+                get|g|remove|r|edit|e|encrypt|decrypt|export)
+                    local snippets=(${(f)"$(sinbo list-names 2>/dev/null)"})
+                    _describe 'snippet' snippets ;;
+            esac ;;
+    esac
+}
+
+_sinbo

src/completions/sinbo.zsh

@@ -133,3 +133,63 @@ pub fn secure_delete(path: &Path) -> io::Result<()> {
     }
     Ok(())
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_encrypt_decrypt_roundtrip() {
+        let plaintext = b"hello secret world";
+        let password = b"strongpassword";
+        let encrypted = encrypt(plaintext, password);
+        let decrypted = decrypt(&encrypted, password).unwrap();
+        assert_eq!(decrypted, plaintext);
+    }
+
+    #[test]
+    fn test_wrong_password_fails() {
+        let plaintext = b"hello secret world";
+        let encrypted = encrypt(plaintext, b"correctpassword");
+        let result = decrypt(&encrypted, b"wrongpassword");
+        assert!(result.is_err());
+        assert!(matches!(
+            result.unwrap_err(),
+            EncryptionError::DecryptFailed
+        ));
+    }
+
+    #[test]
+    fn test_corrupted_data_fails() {
+        let result = decrypt(b"tooshort", b"password");
+        assert!(matches!(
+            result.unwrap_err(),
+            EncryptionError::CorruptedFile
+        ));
+    }
+
+    #[test]
+    fn test_empty_plaintext() {
+        let encrypted = encrypt(b"", b"password");
+        let decrypted = decrypt(&encrypted, b"password").unwrap();
+        assert_eq!(decrypted, b"");
+    }
+
+    #[test]
+    fn test_encrypt_produces_different_ciphertext_each_time() {
+        let plaintext = b"same content";
+        let password = b"password";
+        let enc1 = encrypt(plaintext, password);
+        let enc2 = encrypt(plaintext, password);
+        assert_ne!(enc1, enc2);
+    }
+
+    #[test]
+    fn test_secure_delete_removes_file() {
+        let dir = tempfile::tempdir().unwrap();
+        let path = dir.path().join("test.tmp");
+        std::fs::write(&path, b"sensitive data").unwrap();
+        secure_delete(&path).unwrap();
+        assert!(!path.exists());
+    }
+}