feat(vc): implement SSH commit signing (ENG-2002)#435

Open

hieuntg81 wants to merge 53 commits intomainfrom

Commits on Apr 17, 2026

Merge branch 'main' into feat/ENG-2002
hieuntg81
authored
feat: add support for SSH-agent signing, improved key parsing, and secure passphrase handling for git commits
hieuntg81
committed

Commits on Apr 20, 2026

Merge branch 'main' into feat/ENG-2002
hieuntg81
authored
fix(ssh): use 6-byte SSHSIG preamble for signed data per PROTOCOL.sshsig

hieuntg81
and
claude
committed
fix(ssh): drop 'unsupported' from passphrase-error regex (ENG-2002 B6)

hieuntg81
and
claude
committed
test(ssh): add regression test confirming B6 closes ENG-2002 B7

hieuntg81
and
claude
committed
fix(oclif): remove interactive passphrase prompt from vc commit (ENG-2002 B1)

hieuntg81
and
claude
committed
docs(ssh): rewrite SSH signing guide in English with full coverage (ENG-2002 B2)

hieuntg81
and
claude
committed
fix(ssh): narrow ERR_OSSL whitelist to passphrase-only codes (ENG-2002 C2)

hieuntg81
and
claude
committed
refactor(ssh): consolidate SSHSIG_MAGIC + drop stale 7-byte comments (ENG-2002 C1+M1)

hieuntg81
and
claude
committed
test(ssh): plug tempdir leaks + tighten B7 assertion (ENG-2002 M2+M3+M5)

hieuntg81
and
claude
committed
style(ssh): minor cleanups from code review (ENG-2002 m1+m2+m3+m4+m6)

hieuntg81
and
claude
committed
Merge remote-tracking branch 'origin/feat/ENG-2002' into feat/ENG-2002
hieuntg81
committed
docs(ssh): correct misleading comment for ERR_OSSL_CRYPTO_INTERRUPTED_OR_CANCELLED

hieuntg81
and
claude
committed
refactor(ssh): extract SSHSIG_MAGIC into dedicated sshsig-constants module

hieuntg81
and
claude
committed
test(ssh): replace `as Error`, justify before-pattern, drop B0 reference (review-2)

hieuntg81
and
claude
committed
docs(ssh): align troubleshooting symptoms with actual error strings (review-2)

hieuntg81
and
claude
committed
test(ssh): proper narrowing instead of dead-guard `as Error` (review-3)

hieuntg81
and
claude
committed
refactor(ssh): export SSHSIG preamble as immutable string, not shared Buffer (review-3)

hieuntg81
and
claude
committed
chore(ssh): correct constants comment + consolidate dynamic import (review-4)

hieuntg81
and
claude
committed
fix(ssh): user-grade errors for wrong format and wrong passphrase (ENG-2002 AC9-b/c)

hieuntg81
and
claude
committed
feat(tui): Ink passphrase prompt for encrypted SSH signing keys (ENG-2002 §Signing Flow step 2)

hieuntg81
and
claude
committed
refactor(vc): drop camel-case `user.signingKey` from exported union (ENG-2002 M4)

hieuntg81
and
claude
committed
feat(signing-key): require --yes to confirm destructive remove (ENG-2002 M5)

hieuntg81
and
claude
committed
refactor(ssh): scope SigningKeyCache entries by (projectPath, keyPath) (ENG-2002 M2)

hieuntg81
and
claude
committed
feat(ssh): add scrubPassphrase helper for safe payload logging (ENG-2002 M3)

hieuntg81
and
claude
committed
refactor(ssh): consolidate SSHSIG_HASH_ALGORITHM constant + document rationale (ENG-2002 M6)

hieuntg81
and
claude
committed

Commits on Apr 21, 2026

Commits on Apr 22, 2026