zeroclaw/src/security
Argenis 07ca270f03
fix(security): restore tokens.is_empty() guard, add re-pairing hint (#3738)
Revert "always generate pairing code" to tighter security posture:
codes are only generated on first startup when no tokens exist. Add
a CLI hint to the gateway banner so operators know how to re-pair
on demand. Fix install.sh to not use --new on fresh install (avoids
invalidating the auto-generated code). Fix onboard to show an
informational message instead of a throwaway PairingGuard.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 13:40:02 -04:00
..
audit.rs feat(security): add Merkle hash-chain audit trail (#3601) 2026-03-16 18:38:59 -04:00
bubblewrap.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
detect.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
docker.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
domain_matcher.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
estop.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
firejail.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
iam_policy.rs feat(security): add Nevis IAM integration for SSO/MFA authentication (#3651) 2026-03-16 00:34:52 -04:00
landlock.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
leak_detector.rs fix(security): strip URLs before high-entropy token extraction (#3064) (#3321) 2026-03-12 13:53:38 +00:00
mod.rs feat(security): add MCSS security operations tool (#3657) 2026-03-16 02:28:54 -04:00
nevis.rs feat(security): add Nevis IAM integration for SSO/MFA authentication (#3651) 2026-03-16 00:34:52 -04:00
otp.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
pairing.rs fix(security): restore tokens.is_empty() guard, add re-pairing hint (#3738) 2026-03-17 13:40:02 -04:00
playbook.rs feat(security): add MCSS security operations tool (#3657) 2026-03-16 02:28:54 -04:00
policy.rs fix(security): let explicit allowed_commands bypass high-risk block 2026-03-15 15:13:32 -04:00
prompt_guard.rs fix(ci): address strict-delta clippy blockers 2026-02-24 16:03:01 +08:00
secrets.rs chore: Remove blocking read strings 2026-02-19 14:52:29 +08:00
traits.rs docs(code): expand doc comments on security, observability, runtime, and peripheral traits 2026-02-19 13:19:46 -08:00
vulnerability.rs feat(security): add MCSS security operations tool (#3657) 2026-03-16 02:28:54 -04:00
workspace_boundary.rs feat(workspace): add multi-client workspace isolation 2026-03-15 22:41:18 -04:00