Sync config from arch

- hypr/apps.lua - hypr/autostart.lua - hypr/envs.lua - hypr/hyprland.lua - hypr/hyprsunset.conf - hypr/input.lua - hypr/looknfeel.lua - hypr/omasettings.lua - hypr/xdph.conf - omarchy/branding/about.txt - omarchy/branding/screensaver.txt - omarchy/extensions/omarchy-menu.jsonc - omarchy/hooks/battery-low.d/play-warning-sound.sample - omarchy/hooks/font-set.d/show-font-notification.sample - omarchy/hooks/post-boot.d/weather.sample - omarchy/hooks/post-update.d/install-voxtype.hook - omarchy/hooks/post-update.d/setup-agent.hook - omarchy/hooks/post-update.d/setup-fingerprint.hook - omarchy/hooks/post-update.d/show-update-notification.sample - omarchy/hooks/pre-refresh-pacman.d/add-custom-repo.sample - omarchy/hooks/theme-set.d/show-theme-notification.sample - omarchy/shell.json - omarchy/shell.toml - omarchy/theme.name - omarchy/themes/azure-glow/README.md - omarchy/themes/azure-glow/alacritty.toml - omarchy/themes/azure-glow/btop.theme - omarchy/themes/azure-glow/hyprland.conf - omarchy/themes/azure-glow/hyprlock.conf - omarchy/themes/azure-glow/icons.theme - … 269 more
2026-09-23 15:19:12 +07:00
commit 1cdb82a76f
300 changed files with 78143 additions and 0 deletions
@@ -0,0 +1,52 @@
+[package]
+name = "qs-bitwarden-ssh-agent"
+version = "0.1.0"
+edition = "2021"
+rust-version = "1.85"
+license = "MIT"
+publish = false
+description = "Headless SSH-agent companion for the qs-bitwarden-cli Quickshell panel"
+
+# Why each dependency is here, and why its features are cut this far down, is
+# recorded in docs/decisions/0001-ssh-agent-dependencies.md. Anything added
+# here needs the same review: this process holds decrypted private keys.
+[dependencies]
+# Key parsing, public blobs, fingerprints, and the signing primitives. Default
+# features are off so ECDSA, DSA, and OpenSSH key encryption never compile in:
+# v1 signs with Ed25519 and RSA SHA-2 only.
+ssh-key = { version = "0.6.7", default-features = false, features = ["alloc", "ed25519", "rsa"] }
+# Wire primitives for the allowlisted agent frame decoder (Task 5). Same
+# version ssh-key uses, declared directly because this crate encodes and
+# decodes frames itself rather than through an agent framework.
+ssh-encoding = { version = "0.2", default-features = false, features = ["alloc"] }
+# Declared only to turn ed25519-dalek's zeroize-on-drop impl on for the whole
+# graph. ssh-key depends on dalek with default features off and does not ask
+# for `zeroize`, so without this line the transient SigningKey built for each
+# signature leaves its 32 secret bytes in freed memory.
+ed25519-dalek = { version = "2.2", default-features = false, features = ["zeroize"] }
+# Same reasoning in reverse: rsa zeroizes unconditionally, and pinning it here
+# keeps the version that does so under this crate's own review.
+rsa = { version = "0.9.10", default-features = false, features = ["sha2"] }
+# Zeroizing<Vec<u8>> for PEM text and FIFO payloads, from the first byte read.
+zeroize = { version = "1.9", default-features = false, features = ["alloc"] }
+# Current-thread async runtime: independent socket tasks with bounded channels,
+# no thread pool. `net` carries UnixListener and SO_PEERCRED via peer_cred().
+tokio = { version = "1.53", default-features = false, features = ["rt", "net", "io-util", "io-std", "sync", "time", "macros"] }
+# RLIMIT_CORE=0 and PR_SET_DUMPABLE=0 before the first secret is read.
+rustix = { version = "1.1", default-features = false, features = ["std", "fs", "process", "thread"] }
+# The NDJSON control channel the panel speaks on stdin/stdout.
+serde = { version = "1", default-features = false, features = ["derive", "alloc"] }
+serde_json = { version = "1", default-features = false, features = ["alloc"] }
+signature = { version = "2", default-features = false, features = ["alloc"] }
+sha2 = { version = "0.10", default-features = false }
+
+[dev-dependencies]
+# Test-only key generation, so no private key material is committed.
+rand_core = { version = "0.6.4", features = ["getrandom"] }
+
+[profile.release]
+# A key-holding process should not leave a core file or unwind through
+# arbitrary Drop impls on panic; abort keeps secret memory out of a longer
+# unwind path and out of a dumpable child.
+panic = "abort"
+strip = "symbols"