Kyle Isom
0f1d58a9b8
- Add Registry.UnsealAll() that rediscovers mounted engines from the barrier on unseal, using stored metadata at engine/_mounts/ with a fallback discovery scan for pre-existing mounts (migration path) - Registry.Mount() now persists mount metadata to the barrier; Registry.Unmount() cleans it up - Call UnsealAll() from both REST and web unseal handlers - Change Unmount() signature to accept context.Context - Default CA key size changed from P-384 to P-521 - Add build-time version stamp via ldflags; display in dashboard status bar - Make metacrypt target .PHONY so make devserver always rebuilds - Redirect /pki to /dashboard when no CA engine is mounted Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
12 lines
186 B
JSON
12 lines
186 B
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(git:*)",
|
|
"Bash(go build:*)",
|
|
"Bash(go test:*)",
|
|
"Bash(go vet:*)",
|
|
"WebFetch(domain:metacircular.net)"
|
|
]
|
|
}
|
|
}
|