mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-08-28 08:35:57 +00:00
feat: add pure ssh2 remote operations
This commit is contained in:
@@ -0,0 +1,16 @@
|
||||
# Changelog
|
||||
|
||||
## 0.8.0 - 2026-08-20
|
||||
|
||||
- Replace the OpenSSH subprocess, ControlMaster, and persistent PTY implementation with a pure `ssh2` transport.
|
||||
- Add password, keyboard-interactive, private-key, and encrypted-private-key authentication.
|
||||
- Add selective `ssh -G` host import through the root `ssh_config.sh` helper.
|
||||
- Add an AES-256-GCM host vault with an adjacent owner-only random key.
|
||||
- Pin and verify SHA256 SSH host-key fingerprints.
|
||||
- Move remote file operations to SFTP and keep dedicated collision-free `ssh_*` tools.
|
||||
- Restrict runtime connections to explicitly imported host IDs and reject ProxyJump/ProxyCommand in this release.
|
||||
- Remove automatic remote project instruction discovery and preserve the existing permission-system/auto-review integration.
|
||||
- Add reviewed `ssh_find` and `ssh_grep` tools with bounded `fd`/Git/POSIX fallback pipelines and no remote installation.
|
||||
- Route `ssh_bash` output through RTK's Bash compaction alias while leaving remote command rewriting and structured search/read output disabled.
|
||||
- Preserve adaptive-search backend exit status through bounded pipelines, treating genuine no-match results as success while surfacing invalid regexes, missing roots, and backend failures.
|
||||
- Add regression coverage for private-key/passphrase and keyboard-interactive authentication, pinned-key probing, SFTP reads/access/writes/rename fallback, image detection, aborts, timeouts, and disconnect fail-closed behavior.
|
||||
Reference in New Issue
Block a user