Move the Go module to sneak.berlin/go/keyfunc (closes #15)

REPO_POLICIES.md sets the Go module root to sneak.berlin/go/<name>.
go.mod, every import of the old path and the -X path in the Makefile
LDFLAGS now use sneak.berlin/go/keyfunc; make fmt moved those imports
to their new place in the sort order. The old path keeps no alias. The
README gives the go install line next to the build from a clone and
drops this issue from its TODO list, which now names the open 1.0
issues.

Model: opus-5-5

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 sneak
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -3,7 +3,7 @@
 # which needs the version stamped into the binary.
 
 VERSION := $(shell git describe --tags --always --dirty 2>/dev/null || echo dev)
-LDFLAGS := -s -w -X 'git.eeqj.de/sneak/keyfunc/internal/cli.Version=$(VERSION)'
+LDFLAGS := -s -w -X 'sneak.berlin/go/keyfunc/internal/cli.Version=$(VERSION)'
 
 .PHONY: default bootstrap setup build test lint fmt fmt-check check \
 	docker cibuild hooks clean

README.md

@@ -1,11 +1,10 @@
 # keyfunc
 
-`keyfunc` is a Go command-line tool by [@sneak](https://sneak.berlin) — its
+`keyfunc` is an MIT-licensed Go command-line tool by
-license is not yet chosen
+[@sneak](https://sneak.berlin) that turns a BIP-39 mnemonic into SSH keys, age
-([#14](https://git.eeqj.de/sneak/keyfunc/issues/14)) — that turns a BIP-39
+identities and child mnemonics, each of which can be recreated from that
-mnemonic into SSH keys, age identities and child mnemonics, each of which can be
+mnemonic at any time. The same mnemonic, key type and index always give the same
-recreated from that mnemonic at any time. The same mnemonic, key type and index
+key.
-always give the same key.
 
 It uses the BIP-85 entropy deriver from `git.eeqj.de/sneak/secret/pkg/bip85` and
 takes the same steps as that repository's `agehd` package.
@@ -16,7 +15,13 @@ them, and `keyfunc mnemonic ...` for child mnemonics derived from the main one.
 
 ## Getting Started
 
-Build from a clone and run the binary:
+Install with Go:
+
+```
+go install sneak.berlin/go/keyfunc/cmd/keyfunc@latest
+```
+
+Or build from a clone and run the binary:
 
 ```
 git clone git@git.eeqj.de:sneak/keyfunc.git
@@ -306,14 +311,14 @@ standard: most Makefile targets are thin shims over an executable in
 
 The open issues that stand between the tree and a 1.0 release:
 
-- [#14 Choose a license and add LICENSE](https://git.eeqj.de/sneak/keyfunc/issues/14)
+- [#38 Lint and test as phases of the Dockerfile, as the current repo policy requires](https://git.eeqj.de/sneak/keyfunc/issues/38)
-- [#15 Decide the Go module path before 1.0](https://git.eeqj.de/sneak/keyfunc/issues/15)
+- [#39 make fmt and make fmt-check cover Markdown with prettier](https://git.eeqj.de/sneak/keyfunc/issues/39)
+- [#40 The linter config, .gitignore and .dockerignore from the current templates](https://git.eeqj.de/sneak/keyfunc/issues/40)
+- [#42 go-bip39 no longer exists upstream: keep it, or copy it into the repo?](https://git.eeqj.de/sneak/keyfunc/issues/42)
 
 ## License
 
-Not yet chosen. The license is the owner's decision, still open on the tracker
+MIT. The full text is in [`LICENSE`](LICENSE).
-([#14](https://git.eeqj.de/sneak/keyfunc/issues/14)); the `LICENSE` file is added
-when that issue is answered.
 
 ## Author
 

cmd/keyfunc/main.go

@@ -4,7 +4,7 @@ package main
 import (
 	"os"
 
-	"git.eeqj.de/sneak/keyfunc/internal/cli"
+	"sneak.berlin/go/keyfunc/internal/cli"
 )
 
 func main() {

go.mod

@@ -1,4 +1,4 @@
-module git.eeqj.de/sneak/keyfunc
+module sneak.berlin/go/keyfunc
 
 go 1.26.0
 

internal/agekey/agekey_test.go

@@ -5,9 +5,9 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/agekey"
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/keyfunc/internal/agekey"
+	"sneak.berlin/go/keyfunc/internal/derive"
 )
 
 // The recipients the example mnemonic produces at the first two

internal/childmnemonic/childmnemonic.go

@@ -5,10 +5,10 @@ import (
 	"errors"
 	"fmt"
 
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
 	"git.eeqj.de/sneak/secret/pkg/bip85"
 	"github.com/btcsuite/btcd/btcutil/hdkeychain"
 	bip39 "github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/keyfunc/internal/derive"
 )
 
 // english is the number BIP-85 gives the English word list.

internal/childmnemonic/childmnemonic_test.go

@@ -4,11 +4,11 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/childmnemonic"
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
 	"github.com/btcsuite/btcd/btcutil/hdkeychain"
 	"github.com/stretchr/testify/require"
 	bip39 "github.com/tyler-smith/go-bip39"
+	"sneak.berlin/go/keyfunc/internal/childmnemonic"
+	"sneak.berlin/go/keyfunc/internal/derive"
 )
 
 // The lengths the tool offers, and one it does not.

internal/cli/age/age.go

@@ -8,10 +8,10 @@ import (
 	"os"
 	"path/filepath"
 
-	"git.eeqj.de/sneak/keyfunc/internal/agekey"
-	"git.eeqj.de/sneak/keyfunc/internal/cli/options"
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/keyfunc/internal/agekey"
+	"sneak.berlin/go/keyfunc/internal/cli/options"
+	"sneak.berlin/go/keyfunc/internal/derive"
 )
 
 // Command returns the age command and everything under it.

internal/cli/age_test.go

@@ -6,9 +6,9 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/agekey"
-	"git.eeqj.de/sneak/keyfunc/internal/mnemonic"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/keyfunc/internal/agekey"
+	"sneak.berlin/go/keyfunc/internal/mnemonic"
 )
 
 func TestTheAgeCommandsPrintTheKey(t *testing.T) {

internal/cli/cli.go

@@ -10,11 +10,11 @@ import (
 	"runtime/debug"
 	"syscall"
 
-	"git.eeqj.de/sneak/keyfunc/internal/cli/age"
-	"git.eeqj.de/sneak/keyfunc/internal/cli/mnemonic"
-	"git.eeqj.de/sneak/keyfunc/internal/cli/options"
-	"git.eeqj.de/sneak/keyfunc/internal/cli/ssh"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/keyfunc/internal/cli/age"
+	"sneak.berlin/go/keyfunc/internal/cli/mnemonic"
+	"sneak.berlin/go/keyfunc/internal/cli/options"
+	"sneak.berlin/go/keyfunc/internal/cli/ssh"
 )
 
 // devVersion is what Version holds until a build stamps a real one.

internal/cli/cli_test.go

@@ -5,13 +5,13 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/childmnemonic"
-	"git.eeqj.de/sneak/keyfunc/internal/cli"
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
-	"git.eeqj.de/sneak/keyfunc/internal/mnemonic"
 	"github.com/stretchr/testify/require"
 	bip39 "github.com/tyler-smith/go-bip39"
 	"golang.org/x/crypto/ssh"
+	"sneak.berlin/go/keyfunc/internal/childmnemonic"
+	"sneak.berlin/go/keyfunc/internal/cli"
+	"sneak.berlin/go/keyfunc/internal/derive"
+	"sneak.berlin/go/keyfunc/internal/mnemonic"
 )
 
 // The two lines the README says the example mnemonic produces.

internal/cli/mnemonic/mnemonic.go

@@ -4,10 +4,10 @@ package mnemonic
 import (
 	"fmt"
 
-	"git.eeqj.de/sneak/keyfunc/internal/childmnemonic"
-	"git.eeqj.de/sneak/keyfunc/internal/cli/options"
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/keyfunc/internal/childmnemonic"
+	"sneak.berlin/go/keyfunc/internal/cli/options"
+	"sneak.berlin/go/keyfunc/internal/derive"
 )
 
 // Command returns the mnemonic command.

internal/cli/options/options.go

@@ -5,8 +5,8 @@ package options
 import (
 	"fmt"
 
-	"git.eeqj.de/sneak/keyfunc/internal/mnemonic"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/keyfunc/internal/mnemonic"
 )
 
 // Add gives a command the flags that every command has. They are

internal/cli/ssh/ssh.go

@@ -6,11 +6,11 @@ import (
 	"os"
 	"strings"
 
-	"git.eeqj.de/sneak/keyfunc/internal/cli/options"
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
-	"git.eeqj.de/sneak/keyfunc/internal/mnemonic"
-	"git.eeqj.de/sneak/keyfunc/internal/sshkey"
 	"github.com/spf13/cobra"
+	"sneak.berlin/go/keyfunc/internal/cli/options"
+	"sneak.berlin/go/keyfunc/internal/derive"
+	"sneak.berlin/go/keyfunc/internal/mnemonic"
+	"sneak.berlin/go/keyfunc/internal/sshkey"
 )
 
 // Command returns the ssh command and everything under it.

internal/cli/ssh_test.go

@@ -12,10 +12,10 @@ import (
 	"testing"
 	"time"
 
-	"git.eeqj.de/sneak/keyfunc/internal/cli"
-	"git.eeqj.de/sneak/keyfunc/internal/cli/ssh"
-	"git.eeqj.de/sneak/keyfunc/internal/mnemonic"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/keyfunc/internal/cli"
+	"sneak.berlin/go/keyfunc/internal/cli/ssh"
+	"sneak.berlin/go/keyfunc/internal/mnemonic"
 )
 
 // runAsTool, set in the environment of a re-executed test binary, tells

internal/derive/derive_test.go

@@ -5,8 +5,8 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/keyfunc/internal/derive"
 )
 
 // application is the number the SSH key type uses.

internal/mnemonic/mnemonic_test.go

@@ -4,8 +4,8 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/mnemonic"
 	"github.com/stretchr/testify/require"
+	"sneak.berlin/go/keyfunc/internal/mnemonic"
 )
 
 // Two more mnemonics that pass the checksum, so a test can tell which

internal/sshkey/sshkey_test.go

@@ -7,11 +7,11 @@ import (
 	"strings"
 	"testing"
 
-	"git.eeqj.de/sneak/keyfunc/internal/derive"
-	"git.eeqj.de/sneak/keyfunc/internal/sshkey"
 	"github.com/stretchr/testify/require"
 	"golang.org/x/crypto/ssh"
 	"golang.org/x/crypto/ssh/agent"
+	"sneak.berlin/go/keyfunc/internal/derive"
+	"sneak.berlin/go/keyfunc/internal/sshkey"
 )
 
 // agentDirectoryMode is what the directory holding the agent socket