6 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
clawbot	4e04ee39a7	Require secret at the commit that drops go-bip39 (closes #70) ... sneak/secret now carries its own copy of go-bip39 (sneak/secret#130), so requiring it at that commit, ef0ae90, lets go mod tidy drop go-bip39 from go.sum. Earlier, secret renamed its module to sneak.berlin/go/secret (sneak/secret#43), so the requirement, the two imports of its bip85 package and the README sentence naming that package move to the new path. The bip85 functions keyfunc calls are unchanged, and no other requirement moves. Model: opus-5-5	2026-10-07 11:04:46 +00:00
clawbot	ccdc576cd3	Copy go-bip39 into internal/bip39 (closes #42) ... go-bip39's repository no longer exists, so keyfunc now carries the part of v1.1.0 it uses, with the upstream LICENSE beside it, and imports it from internal/bip39. Upstream's tests and test vectors for the kept code come along unchanged; where they called a removed function, crypto/rand stands in for NewEntropy and EntropyFromMnemonic for MnemonicToByteArray. Changes beyond the trimming are what the linter asked for: the package-level variables moved into the functions that use them, three error strings were lower-cased, and the unknown-word error now wraps ErrInvalidMnemonic. go.mod no longer requires go-bip39. go mod tidy keeps its two go.sum lines, because a test in sneak/secret's bip85 package imports it, and drops six lines that only go-bip39's own requirements needed. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-06 03:27:15 +02:00
clawbot	e82c91d27c	package.json carries the license field, as the template does (closes #65) ... package.json now carries "license": "MIT", as the sneak/prompts template does since 2026-10-04, so yarn install in script/bootstrap no longer warns about a missing license field on every image build. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-04 20:59:05 +02:00
clawbot	56e20b66e4	ssh install refuses stray arguments before -- and a symlinked authorized_keys (closes #61) ... ssh install now takes the host alone before --: any other word there, or a second argument without --, is refused before the mnemonic is read or sftp runs, so keyfunc ssh install alice@host frank@host no longer installs the key for frank@host. The first listing of ~/.ssh is now ls -n, which shows the file type, so a symlinked authorized_keys is refused before any upload instead of being replaced by a regular file; the README says so. Judgement calls: install -- host is refused; a symlinked authorized_keys is refused even when its target already holds the key. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-04 18:25:45 +02:00
clawbot	dad29597bd	ssh install ends on a signal while sftp's ssh is still connecting (closes #57) ... A signal during ssh install now sends sftp a SIGTERM instead of killing it, as ssh to already does for ssh, so sftp stops the ssh it started. The sftp command also has a WaitDelay of a quarter second, so a child that still holds sftp's output cannot keep the tool waiting on a host that does not answer: it ends with status 1 and removes its working directory. The test's sftp stand-in now leaves such a child. Judgement call: exec.ErrWaitDelay counts as success, so a run that used ControlPersist does not report a failure for a key it added. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-04 14:25:47 +02:00
clawbot	d4fbcbc83d	README child-mnemonic vector and host-key note; ssh install refuses a ~/.ssh it cannot enter (closes #51) ... The README now gives the child mnemonic keyfunc prints for the abandon ... about test mnemonic at index 0, checked by the README vectors test; the BIP-85 specification vector stays, marked as starting from a master key keyfunc cannot take. It also says ssh install needs the host key in known_hosts already, and how to get round that. ssh install now also lists ~/.ssh/. on its first connection and refuses, before any upload, a ~/.ssh it can read but not enter, which sftp shows as empty; a file where ~/.ssh belongs is refused the same way. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-04 07:25:49 +02:00