6 Commits

Include renames

Author	SHA1	Message	Date
sneak	bd00e4bc11	Clean up the agent socket and working files when a signal ends the tool (closes #17) ... Main ran the command tree on a background context, so SIGINT, SIGTERM or SIGHUP killed the process before the deferred cleanup ran: the agent's temporary directory and socket, and the install working directory, were left behind. Main now runs the tree on a signal.NotifyContext for those three signals. A signal cancels the context, which ends the child ssh or sftp started with exec.CommandContext, and the deferred cleanup then runs. The exit status after a signal stays 1 unless ssh reported one of its own. For "ssh to" the child is cancelled with SIGTERM rather than the default kill, so ssh restores the terminal before it goes. Model: opus-4-8	2026-09-21 13:30:25 +00:00
clawbot	64dcc7f42b	Keep the mnemonic out of the ssh and sftp children (closes #16) ... `keyfunc ssh to` and `keyfunc ssh install` started the system `ssh` and `sftp` with the tool's whole environment, so a mnemonic given in `KEYFUNC_MNEMONIC` stayed readable in the child's environment and could be forwarded to the host by a `SendEnv` line. Both children now get the environment with `KEYFUNC_MNEMONIC` and `KEYFUNC_MNEMONIC_COMMAND` removed, through one helper, `childEnv`, in the ssh cli package. The mnemonic command still runs with the full environment. Two tests drive the real commands against the stand-in `ssh` and `sftp` and check that a third variable still arrives. Model: opus-4-8 (implementation, review); fable-5-1 (merge message)	2026-09-21 14:58:26 +02:00
clawbot	3d90ac87f1	ssh install tells a missing .ssh from one it cannot enter (closes #10) ... The first sftp session now lists .ssh before fetching authorized_keys. The file reads as empty only when sftp reports .ssh itself as missing, or the listing succeeded and the file is reported missing. A directory or file that is there but cannot be read fails the run and nothing is written, so no existing authorized_keys is replaced by content that was not built from what was read. An .ssh that already exists keeps its mode; the directory is made and set to 0700 only when none was found. The README describes the rule and states batch mode's limit: a key or an agent must authenticate. Model: opus-4-8 (implementation); fable-5-1 (summary)	2026-09-21 09:49:59 +02:00
clawbot	e6ddf49acc	Report the module version for a go install build (closes #18) ... keyfunc --version printed dev for any binary not built with make build. When no version was stamped at build time, the tool now reports the module version recorded in the binary's build info, which go install fills in. A stamped version still wins, and a local build with neither still prints dev. Model: opus-4-8 (implementation); fable-5-1 (summary)	2026-09-21 09:39:38 +02:00
clawbot	8aeed7b901	ssh install works over sftp and runs nothing on the host (closes #10) ... ssh install no longer runs a command on the host. It reads .ssh/authorized_keys over sftp, takes the empty reading only from sftp's own message about that path, appends the derived key locally when it is not already present, uploads the result beside the file with mode 0600 and renames it over the original. Any other failure prints what sftp said, writes nothing and exits 1. sftp batch mode disables password prompts, so a key or agent is required; a directory the owner cannot enter reads as a host with no file, which README.md states. Model: opus-5 (implementation); fable-5-1 (landing)	2026-09-08 08:20:17 +02:00
clawbot	c3fd26a1de	keyfunc: the specification ... The README is the specification sneak approved on 2026-09-07, moved here from the hacks repository: deterministic SSH keys, age identities with encrypt and decrypt, and child mnemonics, all derived from one BIP-39 mnemonic and stored nowhere. Model: fable-5-1	2026-09-07 14:27:57 +00:00