Security Configuration: - config/security.toml with shell_exec, file_read, file_write, web_fetch, browser, and mcp settings - Command whitelist/blacklist for shell execution - Path restrictions for file operations - SSRF protection for web fetch Tool Security Implementation: - ShellSecurityConfig with whitelist/blacklist validation - ShellExecTool with actual command execution - Timeout and output size limits - Security checks before command execution Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
38 lines
872 B
TOML
38 lines
872 B
TOML
[package]
|
|
name = "zclaw-runtime"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
rust-version.workspace = true
|
|
description = "ZCLAW runtime with LLM drivers and agent loop"
|
|
|
|
[dependencies]
|
|
zclaw-types = { workspace = true }
|
|
zclaw-memory = { workspace = true }
|
|
|
|
tokio = { workspace = true }
|
|
tokio-stream = { workspace = true }
|
|
futures = { workspace = true }
|
|
async-stream = { workspace = true }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
toml = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
uuid = { workspace = true }
|
|
chrono = { workspace = true }
|
|
tracing = { workspace = true }
|
|
async-trait = { workspace = true }
|
|
|
|
# HTTP client
|
|
reqwest = { workspace = true }
|
|
|
|
# Secrets
|
|
secrecy = { workspace = true }
|
|
|
|
# Random
|
|
rand = { workspace = true }
|
|
|
|
# Crypto for hashing
|
|
sha2 = { workspace = true }
|