fix: asking for reprompt

.github/workflows/tests.yaml

@@ -1,4 +1,5 @@
 name: tests
+
 on:
   push:
     branches: [main]

.rustfmt.toml

@@ -1,2 +1,2 @@
 edition = "2021"
-max_width = 78
+newline_style = "Unix"

CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## [Unreleased]
+
+## Added
+
+* Added `confirm_ssh` configuration option. When set to `true`, the agent will
+  ask for pinentry confirmation before every SSH signature request.
+* Added Nix flake support (`flake.nix`, `flake.lock`, `shell.nix`).
+
+## Changed
+
+* The `rbw` client and agent are now fully async internally.
+* The local database is now cached in the agent's state, reducing disk reads.
+* Notifications were refactored to use `tokio::sync::broadcast` instead of a
+  manual vector of senders.
+* The `Field` enum was replaced by `rbw::db::FieldType`, which now supports a
+  `Custom(String)` variant. Unknown field names given to `rbw get --field` are
+  now treated as custom field lookups instead of returning an error.
+* Removed unused dependencies: `arrayvec`, `is-terminal`, `tokio-stream`.
+* `.rustfmt.toml`: removed `max_width = 78`, added `newline_style = "Unix"`.
+* Removed the extensive clippy lint configuration from `Cargo.toml`.
+* `dirs.rs` helpers now return `Result` instead of potentially panicking.
+* `timeout.rs` was removed in favor of a simple Instant based deadline
+  mechanism.
+
+## Fixed
+
+* Fixed broken protocol version calculation where minor and patch components
+  were incorrectly scaled by 1_000_000.
+* Various error types and messages have changed; backwards compatibility of
+  error text is not guaranteed.
+
 ## [1.15.0] - 2025-12-31
 
 ## Added

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "rbw"
-version = "1.15.0"
+version = "1.16.0-rc1"
 authors = ["Jesse Luehrs <doy@tozt.net>"]
 edition = "2021"
 rust-version = "1.82.0"
@@ -17,7 +17,6 @@ include = ["src/**/*", "bin/**/*", "LICENSE", "README.md", "CHANGELOG.md"]
 aes = "0.8.4"
 anyhow = "1.0.100"
 argon2 = "0.5.3"
-arrayvec = "0.7.6"
 axum = "0.8.8"
 base32 = "0.5.1"
 base64 = "0.22.1"
@@ -36,7 +35,6 @@ futures-util = "0.3.31"
 hkdf = "0.12.4"
 hmac = { version = "0.12.1", features = ["std"] }
 humantime = "2.3.0"
-is-terminal = "0.4.17"
 libc = "0.2.178"
 log = "0.4.29"
 open = "5.3.3"
@@ -72,13 +70,12 @@ tempfile = "3.24.0"
 terminal_size = "0.4.3"
 textwrap = "0.16.2"
 thiserror = "2.0.17"
-tokio-stream = { version = "0.1.17", features = ["net"] }
 tokio-tungstenite = { version = "0.28", features = [
     "rustls-tls-native-roots",
     "url",
 ] }
 tokio = { version = "1.48.0", features = ["full"] }
-totp-rs = { version = "5.7.0", features = ["steam"] }
+totp-rs = { version = "5.7.0", features = ["steam", "otpauth"] }
 url = "2.5.7"
 urlencoding = "2.1.3"
 uuid = { version = "1.19.0", features = ["v4"] }
@@ -92,28 +89,6 @@ arboard = { version = "3.6.1", default-features = false, features = [
 default = ["clipboard"]
 clipboard = ["arboard"]
 
-[lints.clippy]
-cargo = { level = "warn", priority = -1 }
-pedantic = { level = "warn", priority = -1 }
-nursery = { level = "warn", priority = -1 }
-as_conversions = "warn"
-get_unwrap = "warn"
-cognitive_complexity = "allow"
-missing_const_for_fn = "allow"
-similar_names = "allow"
-struct_excessive_bools = "allow"
-fn_params_excessive_bools = "allow"
-too_many_arguments = "allow"
-too_many_lines = "allow"
-type_complexity = "allow"
-multiple_crate_versions = "allow"
-large_enum_variant = "allow"
-must_use_candidate = "allow"
-missing_errors_doc = "allow"
-missing_panics_doc = "allow"
-significant_drop_tightening = "allow"
-struct_field_names = "allow"
-
 [package.metadata.deb]
 depends = "pinentry"
 license-file = ["LICENSE"]

README.md

@@ -11,13 +11,49 @@ similar to the way that `ssh-agent` or `gpg-agent` work. This allows the client
 to be used in a much simpler way, with the background agent taking care of
 maintaining the necessary state.
 
+## Fork
+
+Since the original developer of this project has not been active in the last
+months, I took the project and heavily refactored it.
+
+There were all the signs of a project that grew over time without chance to
+receive some maintenance.
+
+Around 20%-30% of program's logic was duplicated. There was no clear separation
+of concerns, etc. Now it's not perfect of course but I will work towards making
+it easily auditable and maintainable.
+
+I don't blame the author as this is all free time and unpaid labor, and on top
+of that, he actually provided the community with a great tool.
+
+NOTE: This fork has not 100% error messages backwards compatibility. Some of
+them have changed.
+
+I couldn't do anything about it, as it was way easier to do things this way.
+However it should not impact any actual tool built on rbw, but beware, the bug
+is behind the corner!
+
+Oh and there also is my confirm ssh feature baked in the code, which is totally
+optional.
+
 ## Maintenance
 
-I consider `rbw` to be essentially feature-complete for me at this point. While
-I still use it on a daily basis, and will continue to fix regressions as they
-occur, I am unlikely to spend time implementing new features on my own. If you
-would like to see new functionality in `rbw`, I am more than happy to review
-and merge pull requests implementing those features.
+I DO NOT consider rbw to be essentially feature-complete, BUT in this first
+phase I will accept PRs that fix bugs or enhance code readability.
+
+The first big elephant in the room to address is the fact that the client
+should read no DB and therefore all search/get/etc. operations must be
+performed by the daemon, while the protocol must provide such "opcodes" to do
+it.
+
+## Before continuing
+
+The rest of this README is untouched from the original's, so if you install rbw
+from repositories, you will not install this version but the older one. Same
+for the listed tools.
+
+I am working to get this new version in the repositories, but it's not
+immediate.
 
 ## Installation
 
@@ -96,6 +132,8 @@ configuration options:
 * `pinentry`: The
   [pinentry](https://www.gnupg.org/related_software/pinentry/index.html)
   executable to use. Defaults to `pinentry`.
+* `confirm_ssh`: If set to `true` will ask for confirmation for SSH signature
+requests. If unset defaults to not asking.
 
 ### Profiles