zeroclaw/src/security
argenis de la rosa 4e31d1dd3a
fix(pairing): add SQLite persistence, fix config defaults, align with plan
- Add SQLite persistence to DeviceRegistry (backed by rusqlite)
- Rename config fields: ttl_secs -> code_ttl_secs, max_pending -> max_pending_codes, max_attempts -> max_failed_attempts
- Update defaults: code_length 6 -> 8, ttl_secs 300 -> 3600, max_pending 10 -> 3
- Add attempts tracking to PendingPairing struct
- Add token_hash() and authenticate_and_hash() to PairingGuard
- Fix route paths: /api/pairing/submit -> /api/pair, /api/devices/{id}/rotate -> /api/devices/{id}/token/rotate
- Add QR code placeholder to Pairing.tsx
- Pass workspace_dir to DeviceRegistry constructor

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-24 15:17:29 +03:00
..
audit.rs feat(security): add Merkle hash-chain audit trail (#3601) 2026-03-24 15:17:21 +03:00
bubblewrap.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
detect.rs fix(channels): execute tool calls in channel runtime (#302) 2026-02-16 05:07:01 -05:00
docker.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
domain_matcher.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
estop.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
firejail.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
iam_policy.rs feat(security): add Nevis IAM integration for SSO/MFA authentication (#3651) 2026-03-24 15:17:11 +03:00
landlock.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
leak_detector.rs fix(security): strip URLs before high-entropy token extraction (#3064) (#3321) 2026-03-12 13:53:38 +00:00
mod.rs feat(security): add MCSS security operations tool (#3657) 2026-03-24 15:17:12 +03:00
nevis.rs feat(security): add Nevis IAM integration for SSO/MFA authentication (#3651) 2026-03-24 15:17:11 +03:00
otp.rs feat(security): add otp and estop phase-1 foundation 2026-02-21 23:19:36 +08:00
pairing.rs fix(pairing): add SQLite persistence, fix config defaults, align with plan 2026-03-24 15:17:29 +03:00
playbook.rs feat(security): add MCSS security operations tool (#3657) 2026-03-24 15:17:12 +03:00
policy.rs fix(security): let explicit allowed_commands bypass high-risk block 2026-03-24 15:16:04 +03:00
prompt_guard.rs fix(ci): address strict-delta clippy blockers 2026-02-24 16:03:01 +08:00
secrets.rs chore: Remove blocking read strings 2026-02-19 14:52:29 +08:00
traits.rs docs(code): expand doc comments on security, observability, runtime, and peripheral traits 2026-02-19 13:19:46 -08:00
vulnerability.rs feat(security): add MCSS security operations tool (#3657) 2026-03-24 15:17:12 +03:00
workspace_boundary.rs feat(workspace): add multi-client workspace isolation 2026-03-24 15:17:10 +03:00