Drew Newberry 6b70e7dda8 fix(core): harden file permissions for user config directory ...

Sensitive files in the OpenShell config directory (~/.config/openshell/)
were created with default umask permissions, making them world-readable.
This is a security concern for mTLS private keys (tls.key) and auth
tokens.

- Add centralized paths module to openshell-core with permission helpers
  (create_dir_restricted 0o700, set_file_owner_only 0o600)
- Set 0o600 on tls.key in mtls.rs (was inheriting umask, typically 0o644)
- Set 0o700 on all config directories (mtls/, gateways/, forwards/, etc.)
- Migrate legacy cf_token files to new edge_token path with proper perms
- Deduplicate xdg_config_dir() from 6 locations into openshell-core

2026-03-15 14:11:40 -07:00

..

openshell-bootstrap

fix(core): harden file permissions for user config directory

2026-03-15 14:11:40 -07:00

openshell-cli

fix(core): harden file permissions for user config directory

2026-03-15 14:11:40 -07:00

openshell-core

fix(core): harden file permissions for user config directory

2026-03-15 14:11:40 -07:00

openshell-policy

refactor: rename navigator- crate prefix to openshell- (#277)

2026-03-13 02:02:18 -07:00

openshell-providers

refactor: rename navigator- crate prefix to openshell- (#277)

2026-03-13 02:02:18 -07:00

openshell-router

fix(router): stop dropping client-sent default headers like anthropic-version (#320)

2026-03-14 23:53:36 -07:00

openshell-sandbox

chore: remove remaining navigator and nemoclaw references (#279)

2026-03-15 12:44:08 -07:00

openshell-server

feat(sandbox): inject host gateway hostAliases into sandbox pods (#306)

2026-03-14 16:54:03 -07:00

openshell-tui

fix(core): harden file permissions for user config directory

2026-03-15 14:11:40 -07:00