4 Commits

Include renames

Author	SHA1	Message	Date
sneak	55fe7193d6	age -o follows a symlink and writes a pipe or device directly (closes #59) ... age encrypt -o and age decrypt -o always renamed a new file over the named path, which replaced a symlink, a named pipe or a device such as /dev/null with a regular file and made -o /dev/stdout fail. The path is now looked at without following a final symlink: a missing path or a regular file is replaced by rename as before, a symlink gets the same treatment for what it points at, and anything else is written to directly, without catching signals. A symlink that points at nothing is refused. -o /dev/stdout and -o /dev/stderr write to the tool's own streams, so a file they are redirected to is never replaced. The README says so, and that a replaced file has mode 0600. Model: opus-5-5	2026-10-04 13:46:26 +00:00
clawbot	c96b77dd67	Every command ends on SIGINT, SIGTERM or SIGHUP; an interrupted age -o leaves no file (closes #48) ... SIGINT, SIGTERM and SIGHUP are no longer caught for the whole run, so they end any command at once, the mnemonic prompt included. One package, internal/cli/signals, catches them only where cleanup is needed, and only those not ignored at start, so nohup still works: ssh to and ssh install while their child runs, and age encrypt -o and age decrypt -o while they write. A signal received by the time the input ends leaves no new file and exits 1; otherwise the whole file is put in place, never an unfinished one. Judgement call: the guarantee is stated for a signal keyfunc has received, as Go cannot promise more; the main goroutine stays on the main thread so a Ctrl-C on a pipeline is seen first on Linux. Unverified on macOS. Model: opus-5-5 (implementation); fable-5-1 (design)	2026-10-04 13:42:49 +02:00
clawbot	8d1c873bb7	Move the Go module to sneak.berlin/go/keyfunc (closes #15) ... The module path becomes sneak.berlin/go/keyfunc, as the repo policy sets for Go modules: go.mod, every import and the -X path in the Makefile. The old path gets no alias. The README gives a go install line for the new path, which resolves with @latest only once main carries the move, and its TODO list now names the open 1.0 issues. Model: opus-5-5	2026-10-04 01:42:43 +02:00
clawbot	5bbeec86d6	The age commands: pub, priv, encrypt and decrypt (closes #3) ... keyfunc age derives an age identity at the generic path the way secret's agehd does, prints the recipient or the identity, and encrypts to or decrypts with it, the derived recipient always among encrypt's recipients. Two review rounds; the second passed with no findings, the clamping step now pinned by a fixed identity test. Model: opus-5 (implementation and review); fable-5-1 (landing)	2026-09-07 18:35:11 +02:00