Comprehensive remediation: fix ssh-agent control + UX cohesion + security (P0–P2) - #7

Merged

Hureru merged 13 commits into

mainfrom

fix/comprehensive-remediation

Jun 4, 2026

Commits on Jun 4, 2026

fix(agent,config): harden input parsing, IPC, and on-disk loading (P0-0)
Hureru
committed
2cae653
fix(agent): surface SSH-agent endpoint failure, enforce single instance (P0-1)
Hureru
committed
b8eb7be
fix: make reported state match what the agent can actually sign (P0-2)
Hureru
committed
402eca0
security: authenticate control channel and harden PIN unlock (P0-3)
Hureru
committed
61ae144
fix(cli): route command results to stdout instead of stderr (P1-1)
Hureru
committed
f7982e4
fix(cli): route login through the daemon; make bindings actually take effect (P1-2)
Hureru
committed
847060e
docs: reconcile storage model and IPC command set with the code (P1-3)
Hureru
committed
e19b5b8
fix(doctor): cross-platform status + ownership-aware endpoint checks (P2-1)
Hureru
committed
bf77a44
fix(daemon): bound the bind dialog, soften broadcast lag, defer auto-lock during prompts (P2-2, partial)
Hureru
committed
e5b84c8
fix: zeroize tokens, honest forget, conservative native unlock (P2-3)
Hureru
committed
2b72a3f
fix: cross-platform build + address 8 review findings
Hureru
committed
9f0e82c
fix(doctor): avoid cmp_owned in SSH_AUTH_SOCK check
Hureru
committed
184437b
fix: refine token handling, login prompts, v3 PIN dialog, PID identity
Hureru
committed
273ac6a