Repository navigation

fix(security): isolate device pairing and tunnel RPC - #698

Merged

senamakel merged 159 commits into

epic/8369-security-migrationfrom

sec-657-device-crypto

Oct 28, 2026

Merged

fix(security): isolate device pairing and tunnel RPC#698
senamakel merged 159 commits into
epic/8369-security-migrationfrom
sec-657-device-crypto

Commits on Oct 27, 2026
- test(runtime): cover explicit controller authority in dispatch context
  
  senamakel
  and
  medullabot
  committed
  8ebcb81
- feat(runtime): track invocation source on dispatch context
  
  senamakel
  and
  medullabot
  committed
  9dc2987
- fix(devices): require authenticated user controller for pairing and revoke
  
  senamakel
  and
  medullabot
  committed
  ba29768
- style: apply rustfmt formatting to device and dispatch tests
  
  senamakel
  and
  medullabot
  committed
  c9ffdd4
- fix(runtime): default dispatch context to untrusted invocation source
  
  senamakel
  and
  medullabot
  committed
  2292fa4
- refactor(devices): extract tunnel rpc parsing and dispatch
  
  senamakel
  and
  medullabot
  committed
  2c57a0c
- feat(runtime): tag socket-event dispatches with their invocation source
  
  senamakel
  and
  medullabot
  committed
  553dbd8
- test(runtime): cover socket event invocation source
  
  senamakel
  and
  medullabot
  committed
  a5c76d3
- test(security): cover socket event in pairing authority check
  
  senamakel
  and
  medullabot
  committed
  5e9cf8d
- refactor(devices): move tunnel envelope into tunnel_rpc module
  
  senamakel
  and
  medullabot
  committed
  af45bc7
- test(security/devices): cover tunnel rpc response envelope shape
  
  senamakel
  and
  medullabot
  committed
  0a10ac6
- test(security): add test module for security client
  
  senamakel
  and
  medullabot
  committed
  1d9abd3
- feat(security): add device pairing and frame client methods
  
  senamakel
  and
  medullabot
  committed
  a9339ce
- fix(security): remove duplicate test module declaration
  
  senamakel
  and
  medullabot
  committed
  ce78322
- style(security): reformat client call and reorder test imports
  
  senamakel
  and
  medullabot
  committed
  5b16130
- feat(security): add device2 evaluate and execute client methods
  
  senamakel
  and
  medullabot
  committed
  a65a120
- fix(security): return approval row from evaluate_device2
  
  senamakel
  and
  medullabot
  committed
  464e973
- test(security): cover pairing callbacks failing closed
  
  senamakel
  and
  medullabot
  committed
  9be6095
- feat(security): add fail-closed device pairing callback host
  
  senamakel
  and
  medullabot
  committed
  8c8891d
- chore(vendor): bump tinybus submodule
  
  senamakel
  and
  medullabot
  committed
  91c2f4c
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  e86f170
- chore(vendor): update tinysecurity subproject commit
  
  senamakel
  and
  medullabot
  committed
  9e7659f
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  1a8efb6
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  6ee031d
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  51c37fd
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  d8ee03a
- fix(security): restrict tunnel rpc to user surface methods
  
  senamakel
  and
  medullabot
  committed
  06892ac
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  6e5f07f
- test(security): derive allowed tunnel rpc methods from user methods
  
  senamakel
  and
  medullabot
  committed
  e6cc333
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  7cc3eb3
- chore(vendor): bump tinysecurity submodule
  
  senamakel
  and
  medullabot
  committed
  96dbfed
- Merge remote-tracking branch 'origin/epic/8369-security-migration' into sec-657-device-crypto
  senamakel
  committed
  98aa691
- chore(vendor): bump tiny* submodule pins
  senamakel
  committed
  1d0301d
- chore(deps): update Cargo.lock with new dependencies
  senamakel
  committed
  4650654
- test(security): cover device pairing event binding and single use
  senamakel
  committed
  1559c9f
- feat(security): resolve device pairing events from host registry
  senamakel
  committed
  98455fd
- style(security): reflow callbacks and tests to rustfmt
  senamakel
  committed
  fa460ea
- feat(security): add device pairing store
  senamakel
  committed
  58a9683
- chore(security): register device pairing store module
  senamakel
  committed
  9e9380e
- feat(security): wire device pairing persistence callbacks
  senamakel
  committed
  c1ba080
- feat(security): add device pairing config to secret scope policy
  senamakel
  committed
  a3f28ec
- feat(security): register device pairing scope with tinysecurity
  senamakel
  committed
  de4151e
- feat(security): add device pairing host callback endpoint
  senamakel
  committed
  f2b0036
- chore(security): reformat device pairing code with rustfmt
  senamakel
  committed
  0d19a21
- fix(security): validate pairing context before issuing events
  senamakel
  committed
  dbf0dab
- feat(security): add device pairing master and controller event helpers
  senamakel
  committed
  203b2a7
- refactor(security): rename pairing session field to pairing_receipt
  senamakel
  committed
  becdcac
- test(security): cover pairing begin identity and receipt requirements
  senamakel
  committed
  0d869d0
- refactor(security): delegate device pairing key generation to TinySecurity
  senamakel
  committed
  90fea72
- style(security): wrap long condition in pairing begin result
  senamakel
  committed
  1a05749
- chore(deps): drop unused socketio and legacy tls dependencies
  senamakel
  committed
  4f6242e
- fix(security): reject agent and automation pairing contexts
  senamakel
  committed
  678a244
- feat(devices): attest tunnel frame callbacks with nonce and expiry
  senamakel
  committed
  496d4ec
- feat(security): mint pairing events only for authenticated socket frames
  senamakel
  committed
  a5bcba4
- feat(security): accept channel and pairing token in device pairing event
  senamakel
  committed
  1dce99a
- fix(security): validate pairing context for authenticated controller
  senamakel
  committed
  544700b
- chore(vendor): bump tinycomputer, tinymemory and tinyskills
  senamakel
  committed
  5069928
- fix(security): bind pairing begin to registered tunnel channel
  senamakel
  committed
  6ddb486
- chore(deps): update lockfile for storage crate split
  senamakel
  committed
  67d2f38
- refactor(security): delegate device pairing crypto to tinysecurity
  senamakel
  committed
  2c7ed75
- test(security): update pending pairing cleanup test
  senamakel
  committed
  0f429d8
- refactor(security): track active device sessions instead of ciphers
  senamakel
  committed
  75f41a0
- test(devices): trim bus tests to frame and session helpers
  senamakel
  committed
  cd19bd2
- test(devices): qualify ActiveDeviceSession path in owner tests
  senamakel
  committed
  e277163
- refactor(security): remove devices crypto host adapter
  senamakel
  committed
  7f52ee4
- docs(security/devices): clarify device identity and key ownership
  senamakel
  committed
  4b0a00e
- feat(security): bind tunnel frames to socket attestations
  senamakel
  committed
  7f0aef2
- feat(security): end device pairing sessions on socket close
  senamakel
  committed
  dd5d201
- feat(devices): refresh pairing session before opening encrypted frames
  senamakel
  committed
  8a772a3
- refactor(devices): track pairing owner and simplify handshake state
  senamakel
  committed
  132048c
- refactor(security): widen pairing cleanup visibility and update test fixtures
  senamakel
  committed
  2d05259
- fix(security): wrap module object in SecurityProxy in test constructor
  senamakel
  committed
  344b944
- test(transport): cover pairing ping before first rpc
  senamakel
  committed
  931be50
- fix(tunnel): await handshake ack before sending ping
  senamakel
  committed
  0f0e094
- feat(security): add pairing id to paired device
  senamakel
  committed
  3cab2d1
- feat(security): persist pairing id on paired devices
  senamakel
  committed
  b7d21a6
- test(security): cover pairing id retention and rpc hiding
  senamakel
  committed
  4990f54
- fix(security): persist pairing id when confirming device pairing
  senamakel
  committed
  4cf1579
- feat(security): serve legacy device import from one-shot grants
  senamakel
  committed
  201f65c
- refactor(security): use recover event helper in legacy device import
  senamakel
  committed
  7194f91
- feat(devices): add legacy import and pairing-aware revoke
  senamakel
  committed
  a6225c6
- test(security): cover import_legacy in device schema tests
  senamakel
  committed
  51d7a1b
- style(security): reformat device pairing code to satisfy rustfmt
  senamakel
  committed
  886b28f
- chore(security): drop redundant argument in device docs call
  senamakel
  committed
  57db471
- fix(security): capture pairing id by value in device store closure
  senamakel
  committed
  b0adff5
- fix(devices): handle legacy identity and already-revoked devices on revoke
  senamakel
  committed
  bdc8619
- test(security): cover pairing channel binding and secret scope bootstrap
  senamakel
  committed
  5af2631
- test(security): cover legacy device import in handler dispatch test
  senamakel
  committed
  cb0877c
- chore(security): use is_empty for frame length check
  senamakel
  committed
  8e46651
- test(security): cover recovery channel binding and host callback serving
  senamakel
  committed
  44d286e
- test(security): update device pairing callback test to new constants
  senamakel
  committed
  93f760e
- test(security): annotate callback path type in pairing test
  senamakel
  committed
  d539f9f
- fix(security): validate pairing context and serve device pairing callback
  senamakel
  committed
  77b311e
- test(security): reuse recovery context helper in callbacks tests
  senamakel
  committed
  7971c7e
- fix(security): stop double-registering the device pairing host
  senamakel
  committed
  47d8f09
- test(security): cover legacy ciphertext migration in device store
  senamakel
  committed
  6586a0d
- test(security): update device store test for optional ciphertext
  senamakel
  committed
  a5cbd9c
- fix(security): drop device-pairing crypto dependency and scrub stored keys
  senamakel
  committed
  590d714
- fix(security): validate pairing unlock response and reuse master setup
  senamakel
  committed
  39cfac9
- feat(security): add connection token to device tunnel frames
  senamakel
  committed
  cd2338e
- feat(devices): support device session renewal on reconnect
  senamakel
  committed
  6b403a7
- fix(devices): persist device renewal without re-inserting
  senamakel
  committed
  c11d7cb
- fix(security): require master registration before legacy pairing import
  senamakel
  committed
  237fb48
- feat(security): cache unlocked pairing scopes
  senamakel
  committed
  1e20500
- fix(security): gate device renewal on unlocked pairing scope
  senamakel
  committed
  712c92b
- refactor(security): extract renewal device match check
  senamakel
  committed
  bc2c14e
- fix(devices): reject frames from stale sockets
  senamakel
  committed
  02474d0
- fix(security): require non-empty pairing token for recovery events
  senamakel
  committed
  2cc6ca8
- refactor(security): extract renewal pairing session construction
  senamakel
  committed
  f2e3043
- refactor(security): extract handshake reply validation into helper
  senamakel
  committed
  3b2afa7
- fix(devices): stop attesting socket close on peer offline
  senamakel
  committed
  ab42106
- refactor(security): route session nonce checks through a helper
  senamakel
  committed
  35b87a4
- docs(devices): update README for TinySecurity-owned pairing
  senamakel
  committed
  2944546
- feat(security): bind pairing sessions to a connection nonce
  senamakel
  committed
  d30176c
- test(security): add connection nonce to pairing session fixtures
  senamakel
  committed
  f3dfa3e
- fix(security): bind device pairing sessions to connection token
  senamakel
  committed
  ef7a859
- fix(security): validate pairing session before confirming
  senamakel
  committed
  9959b9e
- test(security): wire up tunnel client test module
  senamakel
  committed
  06edc0b
- feat(security): add connection token and nonce metadata to device tunnel frames
  senamakel
  committed
  80c64fe
- fix(security): bind first socket frame to pairing channel, token and nonce
  senamakel
  committed
  69b46f1
- style(security): reformat device bus conditionals
  senamakel
  committed
  82fb91a
- test(security): cover stale pending session retirement
  senamakel
  committed
  154b710
- fix(security): discard stale pending pairing sessions on handshake
  senamakel
  committed
  895e3c2
- fix(security): reject pairing tokens in recovery context
  senamakel
  committed
  e1b99dc
- fix(security): stop generating pairing token on device pairing recovery
  senamakel
  committed
  bf86bfa
- test(security): cover pairing logout credential events and state clearing
  senamakel
  committed
  2361867
- feat(security): lock device pairing scope on logout and shutdown
  senamakel
  committed
  8754855
- fix(security): clear pairing unlock cache on logout
  senamakel
  committed
  c07aafa
- chore(deps): drop unused crypto and security crates from lockfile
  senamakel
  committed
  4f655e7
- fix(security): lock device pairing scope before credential teardown
  senamakel
  committed
  6dd0b30
- test(security): cover all host callback endpoints in pairing test
  senamakel
  committed
  ec9f2de
- test(security): reformat keyring consent endpoint assertion
  senamakel
  committed
  a33e3f2
- test(security): cover direct confidential bus call in pairing test
  senamakel
  committed
  5a97487
- test(security): exercise detailed fixture call in pairing test
  senamakel
  committed
  02ed384
- test(security): annotate device pairing call with response type
  senamakel
  committed
  4a7bd01
- test(security): cover raw confidential calls and tunnel subscriber domains
  senamakel
  committed
  a6af55c
- test(security): assert unattested device calls are rejected
  senamakel
  committed
  2649fea
- docs(security/devices): document auth domain and session teardown events
  senamakel
  committed
  8227674
- fix(security): silence unused client binding in legacy import event
  senamakel
  committed
  ba4848b
- refactor(credentials): extract device pairing lock sequencing
  senamakel
  committed
  e43d96a
- chore(credentials): import Future in teardown
  senamakel
  committed
  8be98c6
- test(credentials): add teardown tests for credential ops
  senamakel
  committed
  b0bf3dd
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  eb29368
- refactor(credentials): tidy imports and closure formatting in teardown
  senamakel
  committed
  97b4cad
- refactor(security): extract tunnel RPC handling into its own module
  senamakel
  committed
  282f63c
- chore(security): import tunnel_rpc frame codecs in device bus
  senamakel
  committed
  c372283
- refactor(devices): use absolute paths for tunnel rpc module references
  senamakel
  committed
  48fda13
- refactor(security): simplify tunnel frame decoding and renewal signature
  senamakel
  committed
  c7b589c
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  2fe2005
- feat(security): gate device pairing and tunnel handling behind security-module
  senamakel
  committed
  86071dc
- chore(security): gate device pairing calls behind security-module feature
  senamakel
  committed
  a168898
- fix(security): gate device bus imports behind security-module feature
  senamakel
  committed
  497f225
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  e9db797
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  62a8d7c
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  3304d04
- test(security): gate device revoke test behind security-module feature
  senamakel
  committed
  3365f53
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  012a6d9
- test(security): reject crypto bridge in core manifests
  senamakel
  committed
  902f58d
Commits on Oct 28, 2026
- chore(vendor): bump tinysecurity submodule
  senamakel
  committed
  6d2210b

Commits

Commits on Oct 27, 2026