⎿  Wrote 46 lines to ../../../../project_aiq_build_machine_one/tools/reactor_control/aiq-mac-recover
       1 #!/usr/bin/env bash
       2 # aiq-mac-recover — BREAK-GLASS full-access SSH to the Mac build machine.
       3 #
       4 # Uses the recovery key that lives ENCRYPTED in the gcloud vault (never on disk in
       5 # plaintext). Works from ANY box with the user's gcloud auth — so it survives deletion
       6 # of the Hetzner reactor box. The build machine's Hetzner key is locked to build-only;
       7 # THIS is the unrestricted way back in.
       8 #
       9 #   aiq-mac-recover                 # open a full-access shell on the Mac
      10 #   aiq-mac-recover <command...>    # run a command with full access
     … +37 lines 

● Install and test the break-glass — it should decrypt the vault, extract the recovery key, and get me full access on the Mac (exercising the whole
  recovery path):

  Running 1 shell command…
  ⎿  $ SRC=/root/local_data/user/3/project_aiq_build_machine_one/tools/reactor_control/aiq-mac-recover
     chmod +x "$SRC"
     bash -n "$SRC" && echo "syntax OK"
     ln -sf "$SRC" /usr/local/bin/aiq-mac-recover
     echo "=== TEST break-glass (decrypt vault → recovery key → full-access SSH) ==="
     aiq-mac-recover 'echo " …

· Misting… (10m 11s · ↓ 37.8k tokens · almost done thinking with max effort)
  ⎿  Tip: Use /btw to ask a quick side question without interrupting Claude's current work

───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── continue-conversation ──
❯ 

  ⏵⏵ bypass permissions on (shift+tab to cycle) · ← for agents · esc to interrupt