feat: add privacy-aware security manager onboarding

2026-07-05 21:39:55 +02:00
parent d13652a70b
commit 0c7ddc53b4
14 changed files with 767 additions and 8 deletions
--- a/.env.example
+++ b/.env.example
@@ -15,6 +15,12 @@ TERMINAL_ACTION_RATE_LIMIT_WINDOW_MS=60000
 TERMINAL_ACTION_RATE_LIMIT_MAX=10
 BRIEF_VERBOSITY=standard

+# Security Manager profile
+# Required for onboarding. Generate a unique random value of at least 32 characters.
+# The profile is AES-256-GCM encrypted in the persistent runs volume.
+SECURITY_ONBOARDING_ENABLED=true
+SECURITY_PROFILE_ENCRYPTION_KEY=
+
 # LLM layer
 # Providers: litellm | openrouter | openai-compatible | lmstudio | ollama | openai | anthropic | gemini | mistral | minimax | grok | codex
 LLM_PROVIDER=openrouter