superconfig/tools/kagi-search/ at 8476fd64554f0fc08648d930aba09d97ca51d5e9 · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / tools / kagi-search

3 files

at 8476fd64554f0fc08648d930aba09d97ca51d5e9

lassulus tools.pinentry-rofi: support Assuan protocol for rbw/gpg-agent 5mo ago

flake-module.nix

kagi-search: move to tools/, drop rofi dep for darwin support Use pinentry-rofi on linux and pinentry_mac on darwin directly, removing the now-unused pinentry-auto wrapper.

6 months ago

tools.pinentry-rofi: support Assuan protocol for rbw/gpg-agent The script was previously SSH_ASKPASS-only (raw PIN on stdout), which broke rbw and gpg-agent: they speak the Assuan protocol over stdin/stdout and could not parse the output ('failed to read password from pinentry'). Dispatch by argv: - no args, or first arg starts with '-' (real pinentry flags like --timeout 0 --ttyname ... --display ... --no-global-grab) -> Assuan mode - bare prompt arg (SSH_ASKPASS convention used by ssh-tpm-agent) -> raw PIN on stdout (existing behaviour) Assuan mode handles SETTITLE/SETPROMPT/SETDESC/SETERROR/SETKEYINFO/OPTION/ RESET/NOP/BYE, percent-decodes incoming descriptions for the rofi -mesg, and percent-encodes the D-line PIN. Kernel-keyring caching is scoped to SSH_ASKPASS mode only; rbw and gpg-agent do their own caching, and sharing one keyring slot across unrelated secrets handed back the wrong PIN to whichever caller asked second. tools.kagi-search: default to 'rbw get kagi.com -f session_link' Matches the actual vault layout (a kagi.com login with a session_link field) instead of expecting a separate 'kagi-session-link' entry.

5 months ago

kagi-search: move to tools/, drop rofi dep for darwin support Use pinentry-rofi on linux and pinentry_mac on darwin directly, removing the now-unused pinentry-auto wrapper.

6 months ago