release(3.1.x): security hardening + full agentic wallet - #35
Merged
Conversation
Layers the post-consolidation work on top of the wallet-core merge (#31): Security hardening - telegram: TOFU /register, signed approvals/unlink, verified vault requests - relay: RFC 8252 loopback redirect_uri, pinned pairing phrase vector - core: fail-closed budget on non-finite/negative, consent binding to amount+dest - vault: owner-token gate on /activity, own-scope sign_message Agentic wallet - full 14-tool parity for cloud-connect agents (transfer/swap/balances/history/status/search) - swap decode fix for v0/ALT transactions (Jupiter routes now validate + sign) - tx-history empty-cursor RPC fix Publishes: wallet-core 3.1.1, core 3.1.1, vault 3.1.3, relay 3.1.1, agent 3.1.0. All package tests green (wallet-core 87, core 228, vault 145).
…high) CodeQL flagged the signed /register, /api/approvals/*, and /api/pair unlink routes as authorization-without-rate-limiting. They verify Ed25519 vault signatures (auth can't be forged), but had no HTTP-level request cap — a DoS surface on the public service. Register @fastify/rate-limit globally (240/min per IP, tunable via DCP_TELEGRAM_RATE_LIMIT), matching the relay's pattern.
…s/missing-rate-limiting) Global @fastify/rate-limit registration wasn't linked to the class-method route handlers by CodeQL's dataflow. Add explicit per-route config.rateLimit to each authenticated route so the limit is visible per handler.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Post-consolidation work on top of #31: telegram/relay/core/vault security hardening, full 14-tool cloud-agent wallet parity, swap v0/ALT decode fix, tx-history cursor fix. Publishes wallet-core 3.1.1, core 3.1.1, vault 3.1.3, relay 3.1.1. Tests green (wallet-core 87, core 228, vault 145).