[alsd4git]

Why

• Add an explicit, optional way to authorize incoming SSH access using public GitHub or GitLab keys (related to feat(ssh): optional cross-platform import of SSH authorized keys from GitHub/GitLab #5).

How

• Validate keys, show fingerprints and destination, request confirmation, preserve existing entries, and make a backup before replacing them.
• Handle Windows administrator shared keys and ACLs without changing sshd; run the installer lifecycle test only on explicitly disposable Windows environments.
• Document limitations and manual revocation.

Tests

• bash tests/test-ssh-key-import.sh: passed in WSL.
• ShellCheck and shfmt on changed shell scripts: passed.
• tests/windows-smoke.ps1: passed on PowerShell 5.1 and 7 with installer lifecycle skipped locally.
• Windows Sandbox: real GitHub key import, dry-run and idempotence for the user and shared administrator destinations passed.
• GitLab endpoint could not be verified live from this network (HTTP 403); HTTP/error handling is covered by isolated tests. Custom sshd configurations and address-specific Match rules still require manual confirmation.

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-09T19:22:48.690967Z	b08a426	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.