]> quire.kejadlen.dev Git - quire.git/commit
Implement quire exec dispatch with git command allowlist
authorAlpha Chen <alpha@kejadlen.dev>
Fri, 24 Apr 2026 04:05:42 +0000 (04:05 +0000)
committerAlpha Chen <alpha@kejadlen.dev>
Fri, 24 Apr 2026 14:30:43 +0000 (07:30 -0700)
commit51af71f43a0bffdb988e6afc2e9c6462917847b5
treeb6635aa74605c382cfdd133233cc673c1b75c88c
parentb33250f651afc1ea9959bb88c870baa9b3027d58
Implement quire exec dispatch with git command allowlist

Parses SSH_ORIGINAL_COMMAND, validates git commands against an
allowlist (receive-pack, upload-pack, upload-archive), sanitizes
repo paths, and execs the git subprocess. Removes the separate
quire-dispatch shell script — the binary handles dispatch directly.
Updates host reference configs to use quire exec in ForceCommand.

Assisted-by: GLM-5.1 via pi
Cargo.lock
Cargo.toml
docs/host/README.md
docs/host/quire-dispatch [deleted file]
docs/host/sshd_config
src/bin/quire/commands/exec.rs
src/bin/quire/main.rs