pkg/

Package agent talks to the running ssh-agent.

Package appconfig persists sshush's own settings (distinct from the user's SSH config) at $XDG_CONFIG_HOME/sshush/config.toml, falling back to ~/.config/sshush/config.toml.

Package clip copies text to the system clipboard.

Package keys scans the filesystem for SSH key pairs and reports them as config.Identity values.

Package knownhosts reads ~/.ssh/known_hosts and removes entries.

Package perms audits and fixes filesystem permissions that SSH cares about.

Package service orchestrates key scanning, config parsing, and agent state into a single SshConfigModel and mediates all mutations.

Package shellinit provides the shell-startup snippet that loads the default SSH identities, and detects whether it is already installed in a shell rc file so callers can avoid duplicate stubs and nudge users who haven't set it up.

astpoke.go is the single place that reaches into kevinburke/ssh_config's unexported fields via reflect/unsafe — the adapter between this package's domain logic and the library's private AST shape.

Package watch reports filesystem changes under a set of directories, coalesced into a single signal so a burst of editor writes triggers one reload.