Keyhole 0.1.0
Initial release.
Added
- Redis broker support: keyspace browser with an inline server-statistics
band, value inspector, read-only command console, and realtime tails
(pub/sub, pattern pub/sub, streams, keyspace notifications, andMONITOR). - AMQP 1.0 support (ActiveMQ / Amazon MQ / RabbitMQ 4.x): non-destructive
topic and queue tailing, withamqps://TLS. Optionalamqpfeature. - RabbitMQ (AMQP 0.9.1) support: non-destructive exchange taps via a
temporary, auto-deleting bound queue; virtual hosts andamqps://TLS.
Optionalrabbitmqfeature. - Recording: record any live tail to a lossless JSONL file, toggleable
while it runs; export a finished recording to CSV. - Headless mode:
keyhole recordandkeyhole exportreuse the broker and
recording stack without a terminal. - Connection profiles stored in TOML with comment-preserving in-app edits;
secrets are resolved at connect time via env var, OS keyring, or interactive
prompt (never stored in plaintext). - Help overlay, sidebar connection/keyspace tree, mouse support,
dark/light
theming with per-style overrides (honoursNO_COLOR), and file-only logging. - Community packaging definitions (see
packaging/): a Nix flake —
nix run github:AlexKasapis/Keyholeworks off any tagged commit immediately —
plus AUR PKGBUILDs (keyholefrom source andkeyhole-binprebuilt) and a
Homebrew formula. Each release also publishes the version-stamped,
checksum-filled PKGBUILDs/.SRCINFO and the Homebrew formula as release assets. - Distro-native packages: each release attaches a Debian/Ubuntu
.deb
and an openSUSE/Fedora.rpm(full glibc feature set, x86_64), so users can
apt/zypper/dnf install ./keyhole…from a file without adding a repository.
Both bundle the man page, completions, and licenses, auto-detect their glibc
dependency floor, and recommendgnome-keyringfor the OS-keyring backend; they
are signed, checksummed, and provenance-attested alongside the tarballs. Defined
in[package.metadata.deb]/[package.metadata.generate-rpm]inCargo.toml.
Security
- Release artifacts are signed (sigstore/cosign keyless), carry SLSA
build-provenance attestations, and ship a CycloneDX SBOM plus an aggregate
SHA256SUMS. The install script additionally verifies the cosign signature
whencosignis available. See the README "Verifying a download" section.