zeroclaw/src/security
Argenis 8a61a283b2
feat(security): add MCSS security operations tool (#3657)
* feat(security): add MCSS security operations tool

Add managed cybersecurity service (MCSS) tool with alert triage,
incident response playbook execution, vulnerability scan parsing,
and security report generation. Includes SecurityOpsConfig, playbook
engine with approval gating, vulnerability scoring, and full test
coverage. Also fixes pre-existing missing approval_manager field in
ChannelRuntimeContext test constructors.

Original work by @rareba. Supersedes #3599.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: add SecurityOpsConfig to re-exports, fix test constructors

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-16 02:28:54 -04:00
..
audit.rs chore: Remove blocking read strings 2026-02-19 14:52:29 +08:00
bubblewrap.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
detect.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
docker.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
domain_matcher.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
estop.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
firejail.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
iam_policy.rs feat(security): add Nevis IAM integration for SSO/MFA authentication (#3651) 2026-03-16 00:34:52 -04:00
landlock.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
leak_detector.rs fix(security): strip URLs before high-entropy token extraction (#3064) (#3321) 2026-03-12 13:53:38 +00:00
mod.rs feat(security): add MCSS security operations tool (#3657) 2026-03-16 02:28:54 -04:00
nevis.rs feat(security): add Nevis IAM integration for SSO/MFA authentication (#3651) 2026-03-16 00:34:52 -04:00
otp.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
pairing.rs feat(gateway): add --new flag to get-paircode for non-disruptive pairing code generation 2026-03-11 04:30:58 -04:00
playbook.rs feat(security): add MCSS security operations tool (#3657) 2026-03-16 02:28:54 -04:00
policy.rs fix(security): let explicit allowed_commands bypass high-risk block 2026-03-15 15:13:32 -04:00
prompt_guard.rs fix(ci): address strict-delta clippy blockers 2026-02-24 16:03:01 +08:00
secrets.rs chore: Remove blocking read strings 2026-02-19 14:52:29 +08:00
traits.rs docs(code): expand doc comments on security, observability, runtime, and peripheral traits 2026-02-19 13:19:46 -08:00
vulnerability.rs feat(security): add MCSS security operations tool (#3657) 2026-03-16 02:28:54 -04:00
workspace_boundary.rs feat(workspace): add multi-client workspace isolation 2026-03-15 22:41:18 -04:00