jpetree331
f97d4845af
Complete RedFlag codebase with two major security audit implementations.
== A-1: Ed25519 Key Rotation Support ==
Server:
- SignCommand sets SignedAt timestamp and KeyID on every signature
- signing_keys database table (migration 020) for multi-key rotation
- InitializePrimaryKey registers active key at startup
- /api/v1/public-keys endpoint for rotation-aware agents
- SigningKeyQueries for key lifecycle management
Agent:
- Key-ID-aware verification via CheckKeyRotation
- FetchAndCacheAllActiveKeys for rotation pre-caching
- Cache metadata with TTL and staleness fallback
- SecurityLogger events for key rotation and command signing
== A-2: Replay Attack Fixes (F-1 through F-7) ==
F-5 CRITICAL - RetryCommand now signs via signAndCreateCommand
F-1 HIGH - v3 format: "{agent_id}:{cmd_id}:{type}:{hash}:{ts}"
F-7 HIGH - Migration 026: expires_at column with partial index
F-6 HIGH - GetPendingCommands/GetStuckCommands filter by expires_at
F-2 HIGH - Agent-side executedIDs dedup map with cleanup
F-4 HIGH - commandMaxAge reduced from 24h to 4h
F-3 CRITICAL - Old-format commands rejected after 48h via CreatedAt
Verification fixes: migration idempotency (ETHOS #4), log format
compliance (ETHOS #1), stale comments updated.
All 24 tests passing. Docker --no-cache build verified.
See docs/ for full audit reports and deviation log (DEV-001 to DEV-019).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
46 lines
1.1 KiB
TypeScript
46 lines
1.1 KiB
TypeScript
import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
|
|
import api from '../lib/api'
|
|
|
|
export interface TimezoneOption {
|
|
value: string
|
|
label: string
|
|
}
|
|
|
|
export interface TimezoneSettings {
|
|
timezone: string
|
|
label: string
|
|
}
|
|
|
|
export function useTimezones() {
|
|
return useQuery({
|
|
queryKey: ['timezones'],
|
|
queryFn: async (): Promise<TimezoneOption[]> => {
|
|
const { data } = await api.get('/settings/timezones')
|
|
return data.timezones
|
|
},
|
|
})
|
|
}
|
|
|
|
export function useTimezone() {
|
|
return useQuery({
|
|
queryKey: ['timezone'],
|
|
queryFn: async (): Promise<TimezoneSettings> => {
|
|
const { data } = await api.get('/settings/timezone')
|
|
return data
|
|
},
|
|
})
|
|
}
|
|
|
|
export function useUpdateTimezone() {
|
|
const queryClient = useQueryClient()
|
|
|
|
return useMutation({
|
|
mutationFn: async (timezone: string): Promise<TimezoneSettings> => {
|
|
const { data } = await api.put('/settings/timezone', { timezone })
|
|
return data
|
|
},
|
|
onSuccess: () => {
|
|
queryClient.invalidateQueries({ queryKey: ['timezone'] })
|
|
},
|
|
})
|
|
} |