BoltClam 1.0.0: ClamAV desktop protection with Bolt sign-in

Adds the PyQt6 Windows client (Homepage, Scan & results, About & updates, Settings), ClamAV scanning and quarantine, browser-download watch with an exclusive scan gate, Bolt loopback/PKCE sign-in with DPAPI key storage, Gitea release feed with checksum verification, opt-in diagnostics, and Windows/portable build tooling. Co-Authored-By: Claude Code <noreply@anthropic.com>
2026-10-25 16:21:14 -06:00
commit addd00364d
76 changed files with 12503 additions and 0 deletions
@@ -0,0 +1,70 @@
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+from boltclam import realtime
+from boltclam.realtime import browser_download_roots, snapshot
+from boltclam.winlock import copy_for_scan
+
+
+def test_snapshot_finds_final_files_and_skips_partials(tmp_path):
+    root = tmp_path / "Downloads"
+    root.mkdir()
+    (root / "old.exe").write_bytes(b"abc")
+    (root / "new.crdownload").write_bytes(b"partial")
+    (root / ".hidden").write_bytes(b"hidden")
+    sub = root / "Sub"
+    sub.mkdir()
+    (sub / "inside.zip").write_bytes(b"zip")
+
+    found = snapshot([root])
+    names = {Path(value[2]).name for value in found.values()}
+    assert names == {"old.exe", "inside.zip"}
+
+
+def test_chromium_download_preference_is_watched(tmp_path, monkeypatch):
+    local = tmp_path / "Local"
+    roaming = tmp_path / "Roaming"
+    monkeypatch.setenv("LOCALAPPDATA", str(local))
+    monkeypatch.setenv("APPDATA", str(roaming))
+    download = tmp_path / "Custom Downloads"
+    download.mkdir()
+    profile = local / "Google" / "Chrome" / "User Data" / "Default"
+    profile.mkdir(parents=True)
+    (profile / "Preferences").write_text(json.dumps({
+        "download": {"default_directory": str(download)}}), encoding="utf-8")
+    monkeypatch.setattr(realtime.paths, "browser_download_roots", lambda: [])
+
+    roots = browser_download_roots()
+    assert download.resolve() in [path.resolve() for path in roots]
+
+
+def test_firefox_download_preference_is_watched(tmp_path, monkeypatch):
+    local = tmp_path / "Local"
+    roaming = tmp_path / "Roaming"
+    monkeypatch.setenv("LOCALAPPDATA", str(local))
+    monkeypatch.setenv("APPDATA", str(roaming))
+    download = tmp_path / "Firefox Downloads"
+    download.mkdir()
+    profile = roaming / "Mozilla" / "Firefox" / "Profiles" / "abc.default"
+    profile.mkdir(parents=True)
+    escaped = str(download).replace("\\", "\\\\")
+    (profile / "prefs.js").write_text(
+        f'user_pref("browser.download.dir", "{escaped}");\n', encoding="utf-8")
+    monkeypatch.setattr(realtime.paths, "browser_download_roots", lambda: [])
+
+    roots = browser_download_roots()
+    assert download.resolve() in [path.resolve() for path in roots]
+
+
+def test_copy_for_scan_preserves_bytes(tmp_path):
+    source = tmp_path / "download.exe"
+    source.write_bytes(b"sample bytes")
+    destination = tmp_path / "copy.bin"
+    locker, exclusive = copy_for_scan(source, destination, attempts=1, delay=0)
+    try:
+        assert destination.read_bytes() == b"sample bytes"
+        assert isinstance(exclusive, bool)
+    finally:
+        locker.close()