chore(deps): update dependencies for enclave module
This commit is contained in:
15
TODO.md
15
TODO.md
@@ -199,6 +199,7 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
> Reference: `main.go`
|
||||
|
||||
### 6.1 Extend `exec` Resource Handlers
|
||||
|
||||
- [ ] Add `key_shares` resource handler
|
||||
- [ ] Add `ucans` resource handler
|
||||
- [ ] Add `delegations` resource handler
|
||||
@@ -207,6 +208,7 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
- [ ] Add `sync_checkpoints` resource handler
|
||||
|
||||
### 6.2 Extend `generate` Function
|
||||
|
||||
- [ ] Parse WebAuthn credential properly (CBOR/COSE format)
|
||||
- [ ] Extract public key from credential
|
||||
- [ ] Create initial verification method
|
||||
@@ -214,6 +216,7 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
- [ ] Generate initial account (if key share provided)
|
||||
|
||||
### 6.3 Signing Function
|
||||
|
||||
- [ ] Implement `sign` wasmexport function
|
||||
- [ ] Support signing with MPC key shares
|
||||
- [ ] Return signature in appropriate format
|
||||
@@ -226,12 +229,14 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
> Reference: MIGRATION.md lines 826-827
|
||||
|
||||
### 7.1 Delegation Chain Management
|
||||
|
||||
- [ ] Enforce maximum delegation depth (prevent infinite chains)
|
||||
- [ ] Validate delegator has capability to delegate
|
||||
- [ ] Ensure proper capability attenuation
|
||||
- [ ] Track parent-child relationships
|
||||
|
||||
### 7.2 Delegation Status
|
||||
|
||||
- [ ] Implement expiration checking
|
||||
- [ ] Handle revocation cascades (revoke chain)
|
||||
- [ ] Update status on expiry
|
||||
@@ -243,6 +248,7 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
> Reference: MIGRATION.md line 827
|
||||
|
||||
### 8.1 Sync Infrastructure
|
||||
|
||||
- [ ] Create `internal/enclave/sync.go` - DID state sync logic
|
||||
- [ ] Implement checkpoint tracking
|
||||
- [ ] Store last synced block height
|
||||
@@ -261,6 +267,7 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
> Reference: README.md, `src/` directory
|
||||
|
||||
### 9.1 Core SDK
|
||||
|
||||
- [ ] Implement `createEnclave(wasmPath)` factory
|
||||
- [ ] Implement `generate(credential)` wrapper
|
||||
- [ ] Implement `load(database)` wrapper
|
||||
@@ -268,11 +275,13 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
- [ ] Implement `query(did?)` wrapper
|
||||
|
||||
### 9.2 Type Definitions
|
||||
|
||||
- [ ] Generate TypeScript types from Go structs
|
||||
- [ ] Export type definitions for consumers
|
||||
- [ ] Add JSDoc documentation
|
||||
|
||||
### 9.3 WebAuthn Integration
|
||||
|
||||
- [ ] Helper for credential creation
|
||||
- [ ] Helper for PRF extension output
|
||||
- [ ] Proper encoding/decoding utilities
|
||||
@@ -282,18 +291,21 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
## 10. Testing
|
||||
|
||||
### 10.1 Unit Tests
|
||||
|
||||
- [ ] Test all ActionManager methods
|
||||
- [ ] Test serialization/deserialization roundtrip
|
||||
- [ ] Test encryption/decryption
|
||||
- [ ] Test UCAN validation logic
|
||||
|
||||
### 10.2 Integration Tests
|
||||
|
||||
- [ ] Test full generate → load → exec flow
|
||||
- [ ] Test credential lifecycle
|
||||
- [ ] Test session management
|
||||
- [ ] Test grant management
|
||||
|
||||
### 10.3 Plugin Tests
|
||||
|
||||
- [ ] Extend `make test-plugin` with all functions
|
||||
- [ ] Add error case testing
|
||||
- [ ] Test with various input formats
|
||||
@@ -303,18 +315,21 @@ Remaining tasks from [MIGRATION.md](./MIGRATION.md) for the Nebula Key Enclave.
|
||||
## 11. Security Hardening
|
||||
|
||||
### 11.1 Input Validation
|
||||
|
||||
- [ ] Validate all JSON inputs against schemas
|
||||
- [ ] Sanitize SQL-sensitive characters in serialization
|
||||
- [ ] Validate DID format on all inputs
|
||||
- [ ] Validate base64 encoding
|
||||
|
||||
### 11.2 Cryptographic Security
|
||||
|
||||
- [ ] Use constant-time comparison for sensitive data
|
||||
- [ ] Clear sensitive data from memory after use
|
||||
- [ ] Validate key sizes and formats
|
||||
- [ ] Implement proper nonce generation
|
||||
|
||||
### 11.3 Access Control
|
||||
|
||||
- [ ] Enforce DID ownership on all mutations
|
||||
- [ ] Validate session before sensitive operations
|
||||
- [ ] Check grant scopes before data access
|
||||
|
||||
Reference in New Issue
Block a user