Skip to content

v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 02 Jul 09:38
· 47 commits to main since this release
v0.2.0
e7a2b7e

What's new

Security layer

  • Encrypted credential store — passwords encrypted with age using SSH public key. sshq credential set/list/delete.
  • Capability policy — command whitelist/blacklist, path whitelist, per-host override/append. sshq policy validate/check/list/grant/revoke.
  • Tunnel forward whitelist — local_forward_whitelist / remote_forward_whitelist restrict tunnel targets. Supports exact match, port wildcard, port range, host wildcard.
  • Temporary grants — sshq policy grant with TTL, requires terminal (agents cannot self-grant), never overrides blacklists.
  • Audit logging — JSONL metadata for all operations. Fail-closed. sshq audit query CLI.

New commands

  • sshq docs --verify — detect drift between command tree and skill reference docs.
  • sshq policy check --local-forward/--remote-forward — test tunnel forward policy decisions.

CLI improvements

  • sshq skill install --codex / --project — simplified from --target/--scope.
  • Connecting status moved to verbose — stderr silent by default.

Documentation

  • README rewritten: problem-driven intro, TTY before/after demo, security model, platform-specific install (no Go required).
  • All 8 bilingual guides updated with policy/audit coverage.
  • SKILL.md restructured: environment checks, safety confirmations, JSON-first error handling.
  • Reference docs enhanced with output fields, exit codes, and agent handling notes.

Install

# Linux amd64
curl -L https://github.com/shayuc137/sshq/releases/download/v0.2.0/sshq_0.2.0_linux_amd64.tar.gz | tar xz
sudo mv sshq /usr/local/bin/

# macOS (Apple Silicon)
curl -L https://github.com/shayuc137/sshq/releases/download/v0.2.0/sshq_0.2.0_darwin_arm64.tar.gz | tar xz
sudo mv sshq /usr/local/bin/

# Or with Go
go install github.com/shayuc137/sshq/cmd/sshq@v0.2.0

Full changelog: https://github.com/shayuc137/sshq/blob/main/CHANGELOG.md

Assets 9
Loading