Heimdall/src
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Heimdall d4f7dce098 Check the shown text before any code exchange; pin link expiry with a clock
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-08 13:31:43 +00:00
..
store Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
access-plugin.ts Add Eve access plugin and private auth plane 2026-08-22 00:44:57 +02:00
app-caller.ts Close the three one-line holes Soul left as follow-ups 2026-09-08 15:08:38 +02:00
app-profiles.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
app.ts Check the shown text before any code exchange; pin link expiry with a clock 2026-11-08 13:31:43 +00:00
backend-handoff.ts Joystick consent: the ask, typed refusal, receipts, and a signed-in grants page 2026-11-08 13:22:36 +00:00
browser-handoff.ts Joystick consent: the ask, typed refusal, receipts, and a signed-in grants page 2026-11-08 13:22:36 +00:00
capability-rules.ts Make app capability rules data instead of code 2026-09-06 23:58:58 +02:00
claims.ts Claims: facts are the one owner of a capability-free claim 2026-10-19 13:34:41 +02:00
config.ts Signing key path: absolute only, and no error carries the path 2026-09-30 14:40:07 +02:00
consent.ts Consent review fixes: ask-only cookie, fixed-expiry grants links, wording carried to the receipt, one revocation per grant 2026-11-08 13:30:39 +00:00
contracts.ts Merge heimdall-binds-completion (r2 state binding) into main's link and Google work; gate connect starts that carry a connection 2026-11-05 12:46:05 +00:00
custody.ts readSecretInput: never print the path, refuse relative paths and blank secrets 2026-09-30 13:50:53 +02:00
export-provider-advertisement.ts Add read-only Heimdall Eve witness advertisement 2026-06-03 03:21:31 +01:00
export-provider-health-public-key.ts Expose provider health public identity 2026-08-22 02:35:20 +02:00
facts.ts Normalize Heimdall claim fact vocabulary 2026-04-26 14:58:58 +01:00
google-oidc.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
idunn-rudp-health.ts Publish runtime presence in the contract Odin admits 2026-09-07 22:19:51 +02:00
idunn-store.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
index.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
managed-credential.ts Code exchange: a rotating provider's grant without a refresh token fails the callback 2026-10-19 14:35:11 +02:00
oauth.ts Google OIDC provider: link-only, sub-keyed, PKCE and nonce 2026-11-04 16:10:23 +00:00
odin-publication.ts Follow CultLib's package rename and select workspaces by path 2026-09-07 22:26:24 +02:00
private-command-plane.ts OAuth states complete once, only in the browser that launched them: a launch hop sets a signed binding cookie, launch and callback each consume the state, and the callback checks expiry 2026-10-22 20:13:17 +02:00
private-command-security.ts Add Eve access plugin and private auth plane 2026-08-22 00:44:57 +02:00
process-write-lease.ts Retract the CultLib divergence claim; read each .cc with the right client 2026-09-06 19:11:19 +02:00
provider-health-identity.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
providers.ts Joystick consent: the ask, typed refusal, receipts, and a signed-in grants page 2026-11-08 13:22:36 +00:00
runtime-presence.ts Heimdall opens its Idunn presence authority once, before it listens 2026-10-23 17:48:08 +02:00
signing.ts Signing key path: absolute only, and no error carries the path 2026-09-30 14:40:07 +02:00
verifier.ts Register apps at runtime instead of at build time 2026-09-07 00:11:41 +02:00
verse-state.ts Honour the Idunn process write lease, and stop claiming active while warming 2026-09-06 02:25:38 +02:00
verse-witness.ts Register apps at runtime instead of at build time 2026-09-07 00:11:41 +02:00