v1.1.0 — remotecmd sidecar

What's new

Remotecmd sidecar (v1.1.0)

New tinystats sidecar subcommand — provisions remotecmd connections without SSH access.

tinystats sidecar --port 9096

Exposes POST /__rcmd/pair endpoint that:

1. Downloads the rcmd binary from GitHub releases (cached in $TMPDIR/.rcmd-cache/)
2. Runs rcmd pair accept --code <code> --activation-key <key>
3. Spawns rcmd daemon start -daemon detached (survives the HTTP request)

Security

• Relay URL allowlist (RCMD_ALLOWED_RELAYS env, default *.intrane.fr) — sidecar validates relay URL before doing anything
• Activation key — enforced by the relay
• Pair code — single-use, 300s TTL
• Rate limiting — 1 valid request per minute

Binary size

79 KB stripped (was 71 KB in v1.0.1 — +8 KB for the sidecar logic).

Files

• tinystats-linux-amd64 — 79 KB stripped binary
• SHA256SUMS.txt — checksums

Generated with Devin