Module: Aidp::Security

Defined in:
lib/aidp/errors.rb,
lib/aidp/security.rb,
lib/aidp/security/secrets_proxy.rb,
lib/aidp/security/trifecta_state.rb,
lib/aidp/security/mcp_risk_profile.rb,
lib/aidp/security/secrets_registry.rb,
lib/aidp/security/work_loop_adapter.rb,
lib/aidp/security/watch_mode_handler.rb,
lib/aidp/security/rule_of_two_enforcer.rb,
lib/aidp/security/mcp_tool_risk_classifier.rb

Overview

Convenience aliases in Security module for backward compatibility

Defined Under Namespace

Classes: FrozenStateError, McpRiskProfile, McpToolRiskClassifier, RuleOfTwoEnforcer, SecretsProxy, SecretsRegistry, TrifectaState, WatchModeHandler, WorkLoopAdapter

Constant Summary collapse

PolicyViolation = 
Aidp::Errors::PolicyViolation
SecretsProxyError = 
Aidp::Errors::SecretsProxyError
UnregisteredSecretError = 
Aidp::Errors::UnregisteredSecretError
TokenExpiredError = 
Aidp::Errors::TokenExpiredError

Class Method Summary collapse

Class Method Details

.enabled?(project_dir = Dir.pwd) ⇒ Boolean

Check if security features are enabled

Returns:

  • (Boolean) 


50
51
52
53
54
55
 
# File 'lib/aidp/security.rb', line 50

def enabled?(project_dir = Dir.pwd)
  config = Aidp::Config.load(project_dir)
  security_config = config[:security] || config["security"] || {}
  rule_of_two_config = security_config[:rule_of_two] || security_config["rule_of_two"] || {}
  rule_of_two_config[:enabled] != false # Default to enabled
end

.enforcer ⇒ Object

Get the global enforcer instance



28
29
30
 
# File 'lib/aidp/security.rb', line 28

def enforcer
  @enforcer ||= RuleOfTwoEnforcer.new
end

.reset! ⇒ Object

Reset all security state (primarily for testing)



43
44
45
46
47
 
# File 'lib/aidp/security.rb', line 43

def reset!
  @enforcer = nil
  @secrets_registry = nil
  @secrets_proxy = nil
end

.secrets_proxy ⇒ Object

Get the global secrets proxy



38
39
40
 
# File 'lib/aidp/security.rb', line 38

def secrets_proxy
  @secrets_proxy ||= SecretsProxy.new(registry: secrets_registry)
end

.secrets_registry ⇒ Object

Get the global secrets registry



33
34
35
 
# File 'lib/aidp/security.rb', line 33

def secrets_registry
  @secrets_registry ||= SecretsRegistry.new
end