Summary

Follow-up hardening for the already-merged PRs #221, #222, #224, #225, #226, and #227 after reading each PR body and the linked original issue bodies. This PR fixes the remaining gaps found during that review and was rebased after #230 so record-path documentation and tests now match the platform-aware cache-directory behavior from #229/#230.

Target PRs Reviewed

• docs: gate unreleased subcommands with v0.21.0+ availability notes #221 docs: gate unreleased subcommands with v0.21.0+ availability notes
• fix(view): drop non-Press key events to fix Windows TUI double-dispatch #222 fix(view): drop non-Press key events to fix Windows TUI double-dispatch
• feat: surface active TOML config path in --help (issue #213) #224 feat: surface active TOML config path in --help and add config path subcommand
• feat(lib): targeted device refresh and stable correlation IDs for AllSmi #225 feat(lib): targeted device refresh and stable correlation IDs for AllSmi
• feat: display system swap usage in the TUI memory section #226 feat: display system swap usage in the TUI memory section
• fix: resolve record default output path consistently (#223) #227 fix: resolve record default output path consistently

Linked Original Issues Reviewed

• docs: README documents unreleased subcommands (config/doctor/snapshot/record) absent from v0.20.1 release — not Windows-specific #214 README documents unreleased subcommands absent from v0.20.1
• [bug] Windows: keys fire on both press and release, making the TUI unusable #212 Windows key press/release double-dispatch in the TUI
• Surface the active TOML config file location in --help (and add a side-effect-free config path lookup) #213 Surface active TOML config file location in help and add read-only config path
• feat(lib): targeted device refresh and stable correlation IDs for the AllSmi API #211 Targeted device refresh and stable correlation IDs for the AllSmi API
• Display system swap usage in the TUI memory section (view mode) #220 Display system swap usage in the TUI memory section
• record: default output path is inconsistently documented and resolved (and not platform-aware) #223 Record default output path inconsistently documented/resolved

Review Findings

• Correctness: feat: surface active TOML config path in --help (issue #213) #224 used default_config_path() for help and config path active output, while the loader uses the first existing implicit candidate before falling back to the canonical default. On macOS this could show the Apple-canonical path as “not found” even when the loader would actually read ~/.config/all-smi/config.toml.
• Correctness/docs: fix: resolve record default output path consistently (#223) #227 fixed the explicit-output sentinel bug, and feat: unify cache paths via platform-aware dirs::cache_dir() (#229) #230 later moved implicit record output to paths::cache_dir(). The follow-up risk was drift between record --help, RecorderOptions docs, compiled Settings::default().record, and resolver tests. This PR keeps those surfaces aligned with the platform-aware cache helper and final CWD fallback only when no home-like cache directory is resolvable.
• Test reliability: feat: display system swap usage in the TUI memory section #226’s active-swap color test assumed specific Red escape sequences. After update: bump dependencies to latest versions #228 updated dependencies, full cargo test exposed that the test was brittle even though the renderer still uses Color::Red.
• No additional correctness gaps were found in docs: gate unreleased subcommands with v0.21.0+ availability notes #221 availability gating, fix(view): drop non-Press key events to fix Windows TUI double-dispatch #222 key-kind filtering, or feat(lib): targeted device refresh and stable correlation IDs for AllSmi #225 targeted refresh/index APIs after comparing against the linked issue acceptance criteria.

Fixes

• Added paths::active_config_path() and reused it in top-level help plus all-smi config path text/JSON output so the displayed active path matches implicit loader semantics.
• Added regression coverage that the help block contains the loader-active path.
• Added RecorderOptions documentation and regression coverage proving the real CLI default, represented by compiled Settings::default().record, delegates to paths::cache_dir().join("records") and falls back to DEFAULT_BASENAME only when cache-dir discovery returns None.
• Updated the swap-color regression test to derive crossterm’s current Color::Red SGR sequence rather than hard-coding specific terminal encodings.

Security Review

No authentication, authorization, SQL, shell execution, deserialization, SSRF, or network surface was changed by this follow-up. The config path change remains read-only and only calls bounded path discovery plus Path::exists(). The record-path change is documentation/test alignment around existing resolver behavior; it does not relax writer symlink refusal or file-mode hardening. No sensitive config values are printed or newly exposed.

Performance And Reliability Review

The new active-path helper performs the same bounded candidate path scan the config loader already performs and is only used in help/config-path discovery surfaces. There is no hot-path TUI, API, parser, or hardware reader overhead. The swap test update improves CI reliability across crossterm versions without changing rendering behavior.

Validation

• rustup update stable to Rust 1.95.0 so local validation matches the post-update: bump dependencies to latest versions #228 dependency MSRV.
• Local system lacked libdrm-dev; because sudo was unavailable, validation used target/local-lib symlinks to the installed runtime libdrm.so.2 and libdrm_amdgpu.so.1 via LIBRARY_PATH for linking only.
• cargo fmt --check
• git diff --check
• LIBRARY_PATH=/home/inureyes/Development/backend.ai/all-smi/target/local-lib cargo test --bin all-smi record::tests::resolve_output
• LIBRARY_PATH=/home/inureyes/Development/backend.ai/all-smi/target/local-lib cargo test --test config_path_help_test
• LIBRARY_PATH=/home/inureyes/Development/backend.ai/all-smi/target/local-lib cargo test --lib ui::renderers::memory_renderer::tests::test_swap_row_active_uses_red_color
• LIBRARY_PATH=/home/inureyes/Development/backend.ai/all-smi/target/local-lib cargo clippy -- -D warnings
• LIBRARY_PATH=/home/inureyes/Development/backend.ai/all-smi/target/local-lib cargo test

Refs #221, #222, #224, #225, #226, #227, #211, #212, #213, #214, #220, #223.