feat: remote connect onboarding (ADR 0007) — remote.sh + key.sh - #479

Draft

fujibee wants to merge 18 commits into

mainfrom

feat/remote-connect-onboarding

Commits on Jul 21, 2026

feat(key): add scripts/key.sh (generate/show/import/rotate) per ADR 0007
fujibee
committed

Commits on Jul 22, 2026

feat(remote): add scripts/remote.sh (connect/status/disconnect/doctor) per ADR 0007
fujibee
committed
docs(skill): document remote.sh/key.sh commands and slash-command mapping
fujibee
committed
fix(key): address adversarial review findings B2/B4/B7
fujibee
committed
fix(remote): address adversarial review findings B1/B3/B5/B6 (secret-argv leaks, unsafe auto-generate default, force-revoke ordering, resumable pending commit, strict response validation)
fujibee
committed
fix(remote): address delta review findings R1-R5 (pending-file argv leak, URL-parse HTTPS bypasses, post-commit idempotency, force+omitted-team gap, UUIDv7 validation)
fujibee
committed
fix(remote): address D1-D5 delta review findings (force-CAS bypass, orphaned-revoke recovery, credential-file atomicity, duplicate-key/unknown-field rejection, docs)
fujibee
committed
fix(remote): address E1-E3 delta review findings (local-disconnect CAS, strict 200-only revoke, JSON-serializer credential write)
fujibee
committed
fix(remote,key): add EXIT/INT/TERM cleanup traps to remaining secret-bearing temp files (nonblocking follow-up)
fujibee
committed