v1.11.0

Breaking for unattended mirrors: xsync --delete with no terminal on stdin now refuses with exit 2 unless --yes (-y) is given. A cron job or script that mirrors with --delete needs --yes added. --dry-run --delete is unaffected.

Changed in xftp: rm -r <folder> deletes a folder without asking, in a terminal too. A plain rm on a folder still asks in a terminal and refuses with no terminal, and a piped session exits 1 if any command failed.

New: xcp prints the uploaded file's browser URL on stdout. xfind --url prints browser URLs in place of paths. xfind --search 'terms' queries SharePoint's search index, matching contents and metadata as well as names. The index trails uploads by many minutes. The Claude Code skill is rescoped and trimmed; run xcp --install-skill to refresh it.

Faster: a walk with no depth limit now fetches the whole tree in one delta query, so xfind, xtree and xsync's remote scan list a 320-folder tree in about 3 seconds instead of 43. Output is unchanged.

Fixed: on Linux, a token cache sealed while the login keyring was unlocked no longer reads as signed out once the keyring locks (graphauth v0.2.0, atrest v0.3.0).

Changelog

• 31ac496: Add xfind --search over the SharePoint search index (@anderix)
• 11abdd6: Give the search fixture a day to reach the index (@anderix)
• 04797c1: Guard unattended deletes and print browser URLs (@anderix)
• 9c33bd6: List an unlimited walk with one delta query (@anderix)
• 4a0c015: Live-test search against a fixture that outlives the run (@anderix)
• 79939d6: Remove ship.conf; the release apps read ship.toml (@anderix)
• 2793e5a: Rescope and trim the skill (@anderix)
• bbabce7: Retire the release workflows (@anderix)
• 996d3b7: Run CI by hand: workflow_dispatch instead of push and pull request (@anderix)
• 2a636d8: Stop counting and listing the commands in SECURITY and ADMINS (@anderix)
• 8277d39: Take graphauth v0.2.0 in place of spauth (@anderix)
• dd662eb: chore: refresh dependencies (@anderix)