dannystocker/mcp-multiagent-bridge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
17 commits 1 branch 1 tag 123 KiB
Commit graph

3 commits

Author SHA1 Message Date
dannystocker
9cb6fc4a7b Fix import references after renaming to agent_bridge_secure
Some checks failed
CI / Security Components Test (push) Has been cancelled
Details
CI / Secret Scanning (push) Has been cancelled
Details
CI / Code Quality (push) Has been cancelled
Details
CI / All Checks Passed (push) Has been cancelled
Details 
- Updated test_bridge.py: import from agent_bridge_secure
- Updated test_security.py: import from agent_bridge_secure
- Updated bridge_cli.py: default DB path to /tmp/agent_bridge_secure.db
- Updated PRODUCTION.md: all references to agent_bridge_secure.py
- Updated RELEASE_NOTES.md: all references to agent_bridge_secure.py

Fixes ModuleNotFoundError when running tests after the rename.

🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
 2025-11-14 01:28:57 +01:00
ggq-admin
9ab9c1a9cc fix: Fix rate limiter initialization bug and add CI/CD 
Critical fixes before public release:

1. Rate Limiter Bug Fix:
   - Fixed bucket reset_at initialization
   - Was: datetime.now() (immediately in past)
   - Now: datetime.now() + timedelta (future time)
   - Bug caused bucket to reset on 2nd request
   - Tests now pass: 3/4 passed, 1 skipped, 0 failed

2. Test Suite Improvements:
   - Added proper skip handling for MCP integration test
   - Clear messaging for expected skips in test environments
   - Tests exit with success when no failures (skips are OK)

3. CI/CD Pipeline:
   - .github/workflows/ci.yml - GitHub Actions workflow
   - Security tests, secret scanning, code quality checks
   - Fails fast on security test failures

4. Pre-commit Hooks:
   - .pre-commit-config.yaml for local development
   - Secret detection (detect-secrets)
   - Code quality (ruff, bandit)
   - Prevents token file commits

All security tests now passing. Ready for public release.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
 2025-10-27 01:15:11 +01:00
ggq-admin
4c75bf5713 security: Implement critical safeguards before public release 
- Add .gitignore to prevent secret leakage
- Implement YOLO guard with double-confirmation flow
  * Environment variable gate (YOLO_MODE=1)
  * Typed confirmation phrase + one-time code
  * Time-limited approval tokens (5 min TTL)
  * Single-use tokens with audit logging
- Add rate limiting (10/min, 100/hour, 500/day)
  * Token bucket implementation
  * Per-session tracking
  * Automatic bucket reset
- Integrate safeguards into existing code
  * Rate limiter in SecureBridge.send_message()
  * YOLO guard in YOLOMode.execute_command()
  * Dry-run mode by default
- Add security test suite
  * .gitignore validation
  * YOLO guard functional tests
  * Rate limiter verification
  * Integration checks

All security measures tested and verified.
No secrets found in git history.
 2025-10-27 00:50:18 +01:00