Aegis SSH v0.2.0

Aegis SSH v0.2.0

Aegis SSH v0.2.0 adds encrypted private-key authentication while preserving the password workflow and alias-only Agent interface introduced in v0.1.0.

Highlights

• Add SSH private-key authentication for unencrypted and passphrase-encrypted keys.
• Import private-key contents through /dev/tty into the encrypted local vault without storing the source path.
• Keep existing v0.1.0 password vault entries backward compatible; password and private-key servers can coexist under independent aliases.
• Reject key files that are symbolic links, not regular files, not owned by the current user, accessible by group or other users, empty, or larger than 1 MiB.
• Clear password, private-key, and private-key-passphrase byte buffers during daemon locking, command cleanup, and vault replacement.
• Document complete password and private-key enrollment, multiple-server management, Codex MCP setup, Skill behavior, Agent prompts, and exact approval handling in English and Simplified Chinese.

Upgrade Notes

Existing vaults require no migration. Replace the binary, update the companion Skill, restart the Agent client, and restart aegis-ssh daemon. Use aegis-ssh server edit <alias> to switch an existing alias between password and private-key authentication.

The security boundary is unchanged: Aegis SSH isolates credentials and reduces accidental disclosure, but arbitrary remote Shell execution is not a complete sandbox. Review SECURITY.md before use in a sensitive environment.

---

Aegis SSH v0.2.0 中文说明

Aegis SSH v0.2.0 在保留 v0.1.0 密码登录流程和仅使用公开别名的 Agent 接口基础上，新增了加密私钥认证支持。

主要更新

• 支持未加密私钥和带口令的加密私钥进行 SSH 认证。
• 私钥内容通过 /dev/tty 导入本地加密 vault，不保存私钥源路径。
• 保持对 v0.1.0 密码 vault 记录的向后兼容；密码服务器和私钥服务器可以使用不同别名保存在同一个 vault 中。
• 拒绝符号链接、非普通文件、非当前用户所有、组或其他用户可访问、空文件及超过 1 MiB 的私钥文件。
• daemon 锁定、命令清理和 vault 替换时，会清除密码、私钥和私钥口令的字节缓冲区。
• 中英文文档完整说明密码和私钥添加流程、多服务器管理、Codex MCP 配置、Skill 行为、Agent 提示词及精确批准流程。

升级说明

现有 vault 无需迁移。替换二进制文件并更新配套 Skill，重新启动 Agent 客户端和 aegis-ssh daemon。使用 aegis-ssh server edit <alias> 可以在密码认证和私钥认证之间切换。

安全边界没有变化：Aegis SSH 用于隔离凭据并降低意外泄露风险，但允许执行任意远程 Shell 并不等同于完整沙箱。在敏感环境中使用前，请阅读 SECURITY.zh-CN.md。