Skip to content

Harden gateway and iOS credential storage - #22

Merged
codepilotios merged 42 commits into
mainfrom
agent/security-scan-2026-07-17
Jul 19, 2026
Merged

Harden gateway and iOS credential storage#22
codepilotios merged 42 commits into
mainfrom
agent/security-scan-2026-07-17

Conversation

@codepilotios

@codepilotios codepilotios commented Jul 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Summary

  • Bound gateway request bodies and constrained localhost capability sessions to their selected loopback origin.
  • Made remote-control routes fail closed until trusted-device lease enforcement is wired through the public gateway.
  • Restricted file previews to configured CodePilot roots, removed wildcard CORS, and enforced owner-only permissions for tokens, uploads, environment files, and generated launch agents.
  • Migrated the iOS gateway bearer token from preferences into a device-only Keychain item, with tested legacy migration.
  • Removed APNs authorization JWTs and device push tokens from process arguments.
  • Kept sensitive repository-history remediation details in the private maintainer escalation.

Verification

  • 127 Python gateway and remote-desktop tests
  • 78 Swift package tests
  • 38 signed iOS simulator tests
  • iOS simulator build
  • Agent guard and scheduler script tests
  • Fastlane syntax check
  • Privacy audit and staged-sensitive-pattern scan
  • Git diff check

Release note

  • OTA/TestFlight distribution and beta gateway-token rotation remain maintainer actions. This draft does not publish a build or mutate non-GitHub systems.

@codepilotios codepilotios changed the title Constrain gateway capability surfaces Harden gateway and iOS credential storage Jul 17, 2026
@codepilotios codepilotios mentioned this pull request Jul 18, 2026
Open
@codepilotios
codepilotios force-pushed the agent/security-scan-2026-07-17 branch 2 times, most recently from 081194c to 6570326 Compare July 19, 2026 02:24
@codepilotios
security: constrain gateway capability surfaces
372d2a1
@codepilotios
security: fail closed on unsafe gateway paths
4f8e051
@codepilotios
security: store gateway token in device keychain
a5f2b7f
@codepilotios
security: prevent gateway output and log leaks
05f2b12
@codepilotios
security: hide APNs credentials from process arguments
1f76a23
@codepilotios
security: keep gateway token out of process arguments
3aab19d
@codepilotios
docs: refresh security history scan totals
61cb083
@codepilotios
security: harden gateway and public data handling
0fc22c2
@codepilotios
security: validate iOS gateway origins
33ae979
@codepilotios
security: protect cached thread messages
ae13fe3
@codepilotios
docs: refresh security history audit counts
a354a6f
@codepilotios
security: constrain Cloudflare tunnel setup
f67676a
@codepilotios
security: require explicit background agent opt-in
8d3dc9c
@codepilotios
security: protect launch service logs
a2ccc04
@codepilotios
docs: refresh security history scan counts
4dc2116
@codepilotios
security: constrain continuous agent public writes
3906c62
@codepilotios
docs: refresh security history coverage
c60a963
@codepilotios
security: disable unsafe native remote host
e026d8c
@codepilotios
security: validate iOS loopback endpoints
f96d0da
@codepilotios
docs: refresh security scan coverage
b1df9d1
@codepilotios
security: redact push notification details
e6255d8
@codepilotios
security: expire private uploads safely
7bf916a
@codepilotios
security: bound remote credential flows
1188c23
@codepilotios
security: broaden public repo credential guards
4c9cd1e
@codepilotios
security: expand public credential leak guards
71f0754
@codepilotios
security: isolate OAuth callback listener
6bf7976
@codepilotios
security: require unique OAuth callback state
1626254
@codepilotios
security: isolate gateway credentials and write guards
65724fe
@codepilotios
security: require explicit agent branch pushes
86b71dc
@codepilotios
security: audit outbound agent writes
2f6ade9
@codepilotios
security: bound gateway request concurrency
db86fc4
@codepilotios
security: pin guarded pushes to public repository
c386305
@codepilotios
security: isolate gateway and public write credentials
f468060
@codepilotios
ci: update checkout action runtime
5c8253a
@codepilotios
security: roll back rejected upload batches
c780eb8
@codepilotios
security: harden desktop sync archive imports
3ebf949
@codepilotios
security: bound desktop sync archive extraction
0277c71
@codepilotios
security: reject weak gateway tokens
9ba2662
@codepilotios
security: update release tooling dependencies
7a75b28
@codepilotios
security: validate desktop sync destinations
de1a68b
@codepilotios
fix: restore current privacy audit script
2f352b2
@codepilotios
test: keep privacy audit fixtures scan-safe
31de5d6
@codepilotios
codepilotios force-pushed the agent/security-scan-2026-07-17 branch from b10dd2b to 31de5d6 Compare July 19, 2026 02:30
@codepilotios
codepilotios marked this pull request as ready for review July 19, 2026 02:35
@codepilotios
codepilotios merged commit 8e401e9 into main Jul 19, 2026
1 check passed
@codepilotios codepilotios mentioned this pull request Jul 19, 2026
Closed
codepilotios added a commit that referenced this pull request Jul 19, 2026
@codepilotios
Harden gateway and iOS credential storage (#22)
053326e 
Merged after owner approval and passing CI.
@codepilotios
codepilotios deleted the agent/security-scan-2026-07-17 branch July 19, 2026 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codepilotios