ZacharyZhang-NY
021b82443d
Replace the xAI OAuth stack with the Kimi device authorization grant:
- kimi_oauth.rs wire layer (device_authorization + token poll + refresh
against kigi_env::oauth_host(); client_id per PRD; retryable statuses
429/5xx with backoff; expired_token restarts authorization)
- X-Msh-Device-{Name,Model,Id} headers; device_id minted uuid4-hex at
~/.kigi/device_id (0600)
- Storage: system keyring service `kigi`, entry `oauth/kimi-code`
(macOS/Windows native backends), atomic-file fallback under ~/.kigi;
official client's keyring/~/.kimi never touched
- Refresh manager: 60s tick, threshold max(300, expires_in*0.5),
401-tombstone keyed by rejected refresh token with 300s cooldown and
rotation auto-clear, cross-process lock with sibling-adoption
triple-check, sleep/wake forced refresh
- Deleted xAI machinery: enterprise OIDC (PKCE/JWKS/teams), devbox login,
external auth provider, JWT tier gating + subscription paywall stack,
X-XAI-Token-Auth marker headers, ZDR gates, /user enrichment
- kigi login / TUI /login both drive the device flow; login-host display
now derives from kigi_env::oauth_host()
- 264 auth unit/wiremock tests; live contract probe of
auth.kimi.com/api/oauth/device_authorization matches the wire shapes
Gates: check/clippy --all-targets clean, fmt, deny ok, kigi-shell lib
5131 tests green.
56 lines
2.3 KiB
TOML
56 lines
2.3 KiB
TOML
# cargo-deny configuration. CI gate: `cargo deny check advisories` must be
|
|
# error-free (PRD §7-2).
|
|
|
|
[advisories]
|
|
version = 2
|
|
yanked = "deny"
|
|
ignore = [
|
|
# rsa: Marvin timing sidechannel. Reached only through jsonwebtoken's
|
|
# RS256 *signature verification* in the enterprise-OIDC login path
|
|
# (public-key operation; Marvin concerns private-key decryption). The
|
|
# entire OIDC stack is replaced by the Kimi device flow in M1.
|
|
{ id = "RUSTSEC-2023-0071", reason = "verification-only use; auth stack replaced in M1" },
|
|
# quick-xml 0.39 (two advisories): pinned by wayland-scanner 0.31.10
|
|
# (latest), a build-time proc-macro parsing vendored Wayland protocol
|
|
# XML — no attacker-controlled input reaches it.
|
|
{ id = "RUSTSEC-2026-0194", reason = "build-time parse of vendored XML via wayland-scanner" },
|
|
{ id = "RUSTSEC-2026-0206", reason = "build-time parse of vendored XML via wayland-scanner" },
|
|
# Unmaintained transitive dependencies with no upstream fix available.
|
|
{ id = "RUSTSEC-2025-0052", reason = "async-std via dark-light 2 (latest); theme detection" },
|
|
{ id = "RUSTSEC-2025-0012", reason = "backoff via async-openai (latest)" },
|
|
{ id = "RUSTSEC-2024-0384", reason = "instant via backoff via async-openai (latest)" },
|
|
{ id = "RUSTSEC-2025-0141", reason = "bincode 1 via syntect (latest); local cache format" },
|
|
{ id = "RUSTSEC-2024-0436", reason = "paste via ratatui 0.29 (workspace-pinned TUI stack)" },
|
|
{ id = "RUSTSEC-2025-0057", reason = "fxhash via bm25 (latest); local search scoring" },
|
|
{ id = "RUSTSEC-2026-0192", reason = "rustybuzz via pdf_oxide/resvg (latest); local rendering" },
|
|
{ id = "RUSTSEC-2026-0195", reason = "ttf-parser via fontdb/resvg (latest); local font parsing" },
|
|
{ id = "RUSTSEC-2024-0320", reason = "yaml-rust via syntect (latest); parses bundled syntax defs" },
|
|
]
|
|
|
|
[licenses]
|
|
version = 2
|
|
allow = [
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"BSL-1.0",
|
|
"CC0-1.0",
|
|
"CDLA-Permissive-2.0",
|
|
"ISC",
|
|
"MIT",
|
|
"MIT-0",
|
|
"MPL-2.0",
|
|
"OpenSSL",
|
|
"Unicode-3.0",
|
|
"Zlib",
|
|
]
|
|
|
|
[bans]
|
|
multiple-versions = "allow"
|
|
|
|
[sources]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
allow-git = ["https://github.com/helix-editor/nucleo"]
|