ceo-api/src/security
valentinbvro 261bd0dba1 feat: add AI tool capability permissions and secret masking to CASL layer
Extends AbilityFactory with a risk-stratified capability model for Hermes
MCP tools (economic-data/capability-reasoning/legislation-search), ported
from Open.Jarvis's plugin permission system: non-owner/admin roles only
get low/medium risk tools by default, high/critical stay reserved. Adds
maskSensitiveValue as a reusable secret/PII redaction utility for future
outbox/audit logging, reinforcing the existing ai_requests hash-only
storage principle.
2026-07-23 23:36:20 +02:00
..
mask-sensitive.ts feat: add AI tool capability permissions and secret masking to CASL layer 2026-07-23 23:36:20 +02:00