thePR0M3TH3AN/SeedPass

0 Fork 0

mirror of https://github.com/PR0M3TH3AN/SeedPass.git synced 2026-10-28 08:22:03 +00:00

Files

T

History

thePR0M3TH3ANandClaude Fable 5 274bc0e1b8 TS port slice 10: scoped tokens, agent-side enforcement, audit chain

The section-9.3 permission model is now working code, enforced where the
keys live:

- Token model (aligned with the Python agent surface): bearer tokens with
  read/use/reveal scopes, entry-kind and label-regex constraints, TTL and
  use counts. Issued and held by the session agent — hash-stored, plaintext
  shown exactly once at issuance; list/revoke commands.
- Token mode: with SEEDPASS_TOKEN set (and no mnemonic), the CLI reads the
  decrypted index and materializes secrets AGENT-SIDE. The constrained
  process never receives the mnemonic, and resolveMnemonic refuses owner
  fallback in token mode — a token can never silently escalate (the test
  suite caught exactly this hole and it is now closed).
- Denials are precise and audited: wrong scope, wrong kind, unmatched
  label, expired, exhausted, revoked. Reads don't consume uses; secret
  deliveries do.
- Audit chain in Python AuditLogger's scheme: sig = HMAC-SHA256(key_index,
  prev_sig + canonical_payload), genesis 64 zeros, per-profile audit.log;
  agent records unlocks, token lifecycle, index reads, deliveries and
  denials (never secret values). audit-verify/audit-tail commands; a forged
  record breaks the chain in tests.
- 151 core + 41 CLI tests green.

Co-Authored-By: Claude Fable 5 <[email protected]>

2026-08-14 15:06:02 -04:00

..

.github/workflows

update

2025-07-10 19:37:30 -04:00

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

Fix XSS vulnerability in docs search highlighting

2026-02-16 18:06:19 +00:00

Add TUI v2 scaffold, plan docs, and discovery command hints

2026-03-01 16:03:04 -05:00

.gitattributes

update

2025-07-10 19:37:30 -04:00

.gitignore

update

2025-07-10 19:37:30 -04:00

agent_autonomy_security_plan.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

agent_test_format.md

Strengthen determinism gates and add TUI v2 agent testing workflow

2026-03-01 17:35:39 -05:00

agent_testing_roadmap.md

Add robust AI TUI harness, docs roadmap, and lock/unlock fix

2026-02-23 14:35:40 -05:00

ai_agent_tui_testing.md

ci: enforce tui2 and core api coverage thresholds

2026-03-02 09:03:53 -05:00

ARCHITECTURE.md

docs: align development docs with current code behavior

2026-02-25 21:45:14 -05:00

atlas_search_graph_integration_plan_2026-03-05.md

Improve v3 grid navigation and graph browsing

2026-03-06 07:10:36 -05:00

auth_lock_unlock_access_review.md

Close security item 6 with unlock throttling and policy gates

2026-02-25 18:32:06 -05:00

beta_hardening_2026-03-02.md

docs: add beta hardening report and session notes

2026-03-02 08:10:59 -05:00

ci-health-2026-02-19.md

chore(scheduler): Execute ci-health-agent daily run

2026-02-19 21:40:32 +00:00

crypto_key_management_review.md

Complete security item 3 hardening and redaction sweep

2026-02-25 18:23:40 -05:00

dev_control_center.md

docs: update dev control center and v3 plan for 2026-03-10 shipped work

2026-03-10 21:15:54 -04:00

entropy_audit_2026-07-31.md

Offer a 24-word master seed, and put the entropy draw beyond reach of any handler

2026-07-31 17:43:24 -04:00

entry_graph.md

Add document workflows, entry graph links, and discovery/docs updates

2026-03-01 15:43:43 -05:00

entry_types.md

Add document workflows, entry graph links, and discovery/docs updates

2026-03-01 15:43:43 -05:00

index0_atlas_execution_plan_2026-03-05.md

Advance v3 search, atlas, and comms planning

2026-03-05 23:26:05 -05:00

index0_phase0_spec_2026-03-05.md

Advance v3 search, atlas, and comms planning

2026-03-05 23:26:05 -05:00

installer_testing.md

Add agent mode, hardened TUI harness, coverage gates, and cross-platform installer smoke CI

2026-02-23 15:47:59 -05:00

INTERACTIVE_AGENT_TESTING.md

docs(test): centralize test infrastructure and add interactive agent harness

2026-03-02 22:26:35 -05:00

kb_scale_validation.md

Add KB scale stress tests and launch mode docs

2026-03-01 18:33:11 -05:00

nostr_comms_reference_and_future_capability_2026-03-05.md

Advance v3 search, atlas, and comms planning

2026-03-05 23:26:05 -05:00

nostr_namespace_reset.md

Add Nostr sync reset/fresh namespace workflow and docs

2026-03-01 01:24:33 -05:00

nostr_setup.md

Add Nostr sync reset/fresh namespace workflow and docs

2026-03-01 01:24:33 -05:00

operational_runbooks.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

overstory_quick_reference.md

Fix Overstory multi-agent setup and add quick reference docs

2026-03-06 13:12:46 -05:00

packaging.md

Add Briefcase packaging docs and scripts

2025-08-08 09:24:25 -04:00

policy_as_code.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

README.md

docs: add TypeScript web extension port plan

2026-06-05 14:54:17 -04:00

release_protection_policy.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

release_verification_runbook.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

secret_handling_local_exposure_review.md

Complete security item 3 hardening and redaction sweep

2026-02-25 18:23:40 -05:00

secret-scanning.md

ci: add secret scanning

2025-08-03 10:27:13 -04:00

security_readiness_checklist.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

security.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

semantic_vector_index_plan.md

feat: add semantic search modes across cli api and tuis

2026-03-02 12:28:24 -05:00

SPEC.md

Add agent autonomy controls, docs updates, and landing page agent section

2026-03-01 01:02:11 -05:00

staged_rollout_runbook.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

supply_chain_release_integrity.md

docs: add supply-chain verification and operational runbooks

2026-03-02 09:14:00 -05:00

sync_conflict_contract.md

Add document workflows, entry graph links, and discovery/docs updates

2026-03-01 15:43:43 -05:00

TEST_INVENTORY.md

docs(test): centralize test infrastructure and add interactive agent harness

2026-03-02 22:26:35 -05:00

threat_model.md

improved tests

2026-02-25 18:07:22 -05:00

torch_canopy_prompt_fit_quick_notes_2026-03-06.md

update

2026-03-10 21:39:50 -04:00

tui_v2_cutover_decision.md

docs: refresh tui2 cutover memo and hardening blockers

2026-03-02 09:08:15 -05:00

tui_v2_integration_execution_plan_2026-03-02.md

tui2: harden pane-state flow and dense layout parity

2026-03-02 19:03:21 -05:00

tui_v2_large_vault_validation.md

Add CI-like large-vault validation for TUI v2

2026-03-01 16:39:35 -05:00

tui_v2_legacy_parity_matrix.md

docs: sync ui refresh roadmap and remaining phase5 queue

2026-03-02 11:12:09 -05:00

tui_v2_mockup_gap_audit_2026-03-02.md

docs: add integrated TUI v2 execution plan and mockup gap audit

2026-03-02 16:28:07 -05:00

tui_v2_parity_backlog.md

docs: add semantic vector index integration roadmap

2026-03-02 11:28:42 -05:00

tui_v2_parity_checklist.md

tui2: add full in-app palette command reference

2026-03-02 09:20:04 -05:00

tui_v2_plan.md

Update TUI v3 plan and land parity fixes with smoke tests

2026-03-02 23:43:07 -05:00

tui_v2_ui_refresh_plan.md

fix(tui-v2): handle non-existent entries and tree nav focus feedback

2026-03-02 21:26:30 -05:00

tui_v3_plan.md

docs: update dev control center and v3 plan for 2026-03-10 shipped work

2026-03-10 21:15:54 -04:00

typescript_port_compatibility_matrix.md

TS port slice 10: scoped tokens, agent-side enforcement, audit chain

2026-08-14 15:06:02 -04:00

typescript_web_extension_port_plan.md

docs: add agent-blind secret lifecycle (provision/reference/use) to TS port plan

2026-08-13 10:03:19 -04:00

README.md

SeedPass Docs

This directory contains SeedPass project documentation.

Start Here

dev_control_center.md (single source to decide what to do next)

Agent and Autonomy Docs

agent_autonomy_security_plan.md
policy_as_code.md
sync_conflict_contract.md

Core Security Docs

security_readiness_checklist.md
threat_model.md
crypto_key_management_review.md
secret_handling_local_exposure_review.md
auth_lock_unlock_access_review.md
supply_chain_release_integrity.md
release_verification_runbook.md
release_protection_policy.md
operational_runbooks.md
staged_rollout_runbook.md

Architecture and Product Docs

ARCHITECTURE.md
SPEC.md
typescript_web_extension_port_plan.md
entry_types.md
entry_graph.md
tui_v3_plan.md (active roadmap for scratch rebuild)
tui_v2_plan.md (legacy logic reference)
tui_v2_parity_checklist.md
tui_v2_parity_backlog.md
tui_v2_legacy_parity_matrix.md
tui_v2_ui_refresh_plan.md
semantic_vector_index_plan.md
tui_v2_cutover_decision.md
tui_v2_large_vault_validation.md
security.md
nostr_setup.md
nostr_namespace_reset.md
packaging.md

QA and Testing Docs

TEST_INVENTORY.md (central index of all tests and runners)
agent_testing_roadmap.md
ai_agent_tui_testing.md
agent_test_format.md
installer_testing.md
kb_scale_validation.md
ci-health-2026-02-19.md
agent-handoffs/README.md

Discoverability Commands

seedpass --help
seedpass
seedpass tui2
seedpass --legacy-tui
seedpass legacy
seedpass <group> --help
seedpass tui2 --help
seedpass tui2 --check
seedpass capabilities --format json
seedpass agent bootstrap-context