Feat/ssh certs - #452

Draft

patelspratik wants to merge 27 commits into

mainfrom

Commits on Aug 20, 2026

feat(sshcert): add per-environment SSH certificate store
patelspratik
committed
eb1840a
feat(refresh): retain port_id and cert-eligibility on workspace
patelspratik
committed
2095277
feat(shell): add brev shell --cert-only for Match exec cert minting
patelspratik
committed
4702aa9
feat(ssh): emit Match exec cert block for cert-eligible workspaces
patelspratik
committed
bee7011
refactor: trim over-defensiveness and test duplication
patelspratik
committed
5aaef0d
remove some unncessary comments
patelspratik
committed
47a2a20
feat(shell): wire IssueEnvironmentSSHCertificate gRPC, drop stub
patelspratik
committed
2d334a4
refactor: trim comments to non-obvious gotchas and motivation only
patelspratik
committed
e719698

Commits on Aug 21, 2026

remove more comments
patelspratik
committed
fc9849d
fix(ssh): use absolute brev path in Match exec, not bare 'brev'
patelspratik
committed
62753e1
docs: design SSH certificate Match exec compatibility
patelspratik
committed
96c18b8
docs: plan SSH certificate Match exec compatibility
patelspratik
committed
91ff6b4
fix(ssh): include workspace in certificate hook
patelspratik
committed
a368eed
fix(shell): infer SSH certificate requests from fields
patelspratik
committed
c4184ee
fix(ssh): escape certificate hook arguments
patelspratik
committed
6320bc8
remove docs
patelspratik
committed
1eefd43
clean
patelspratik
committed
172cbc4
refactor: rename certOnly -> mintCert
patelspratik
committed
a12991d
clean
patelspratik
committed
61f618c
cleanup
patelspratik
committed
f2445c1
refactor: extract mint-cert into its own hidden command
patelspratik
committed
28819b0
clean
patelspratik
committed
86cf348
fix(mintcert): use noLoginCmdStore, treat empty token as auth failure
patelspratik
committed
10426dd
docs: drop stale 'brev shell <instance> argument contract' comment
patelspratik
committed
b544ab0
test: remove 4 low-value/duplicative cert tests
patelspratik
committed
e93eb6a
clean
patelspratik
committed
71e9818
docs: cut redundant comments that restate the code
patelspratik
committed
844f4cf